last executing test programs:

24.167366024s ago: executing program 0 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x204)
r4 = socket$inet(0x2, 0x1, 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2})
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44)
r6 = socket$inet(0x2, 0x1, 0x6)
connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)

23.02524684s ago: executing program 0 (id=6):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

22.940532769s ago: executing program 3 (id=4):
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xc0c)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd2b)
pwrite64(0xffffffffffffffff, &(0x7f0000000280)='PR', 0x2, 0x1e8000)
syz_open_dev$loop(0x0, 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8)
statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0)
pipe(0x0)
r4 = fsopen(&(0x7f0000019640)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

20.720476395s ago: executing program 3 (id=7):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6)
io_uring_setup(0x386b, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000a40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0)
close(r3)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f0000000500)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000580)="ee64", 0x2}], 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)

20.661488881s ago: executing program 2 (id=8):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfffffe01}, {0x5, 0x21, 0x7, 0xfffffff8}]}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@quota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)

20.473947881s ago: executing program 0 (id=9):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(0x0, 0xa99, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r3, &(0x7f00000000c0)='/', 0x1, 0x0)
lseek(r3, 0x0, 0x4)
sendfile(r3, r3, &(0x7f0000000100), 0x7fa)

18.282650344s ago: executing program 1 (id=10):
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001240), 0x10106, 0x2, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001280)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000012c0)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]})
sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6)
mount$tmpfs(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x400, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001500)={0x0, 0xfffffffffffffe26, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0)
r7 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
ioctl$ADD_NEW_DISK(r7, 0x40140921, 0x0)

18.22844527s ago: executing program 2 (id=11):
syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000d80)='./file1\x00', 0x0, &(0x7f0000000dc0)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000e40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x103042, 0x8a)
r1 = creat(&(0x7f0000001340)='./file1\x00', 0x106)
pwritev2(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="ff", 0x1}], 0x1, 0x807, 0x0, 0x0)
fallocate(r1, 0x0, 0x1, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0/file0\x00', 0x103042, 0x41)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001480)={0x0, r2, 0x4, 0x0, 0x4, 0x1000000000000})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000040)={{0xf5, 0x5}, {0x0, 0x9}, 0x2, 0x1, 0xb})
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x200009, &(0x7f00000001c0)=ANY=[], 0x11, 0x364, &(0x7f0000000200)="$eJzs3c9rI2UYB/Cn2f6y2k0PIiiIL3pRD6GtNw+yRXZBLCh1K6sHYdamGjqblExYySLqzat/x+LRm7D4D/Ti3Zu3XjzuYTGSJrVJN9aiNmPZzwfaeTvzftv3ZZjyXCZPJb67s7db1HazZ6JyrTcUsRKVGDMTM4PB/Njpb+K16q1fXvzgo4/f3djcvL6V0o2Nm2+sp5SuvvTgiy+/f/mnztMf/nD1x4U4WPnk8Lf1Xw+eO3j+8PebnzeK1ChSs9VJWbrdanWy23k97TSKvVpK7+f1rKinRrOot8eu7+at/f1uypo7y0v77XpRpKzZTXv1buq0UqfdTdlnWaOZarVaWl4Kxi0+dmb7/tZWtlHKYpiadnsj6z+8C6cvPLV9v5wVAQBlOrx1XP93onItHVX9lYfj9f+w8D86MzNW/8/+g/q/nz9//f+m+v8Cqf+fBP36f374/I5T/wMAAAAAAAAAAAAAwGXwsNer9nq96vHx9NeEyFwJy+SCnPf+j7w7cqWkpXIBRl7cW4zIv727fXd7cBxc39iNRuRRj9WoxqOIXu/kM0L632+8s3l9NR1ZieU7Xw/y/eOV8fxaVGNlcn5tkE/j+blYGs2vRzWenZxfn5ifj1dfGcnXoho/fxqtyGMn+tmT/FdrKb393uap/MLRvDPMT+H2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAltWHv/NeHP5/u3187nvBYf//B/D/7669GNR5N7s+/OrE//2y8MFvevgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgVNG9t5fleb39vx/8m6U+eOsy7dTgogfzEXGeyVEZPCXn+M1zEVH6vv7LQdn/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD6Tpp+l70SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAylR07+1leV5vnzlYjIi/m/PXgzP+/OIUtwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAp/BEAAP//SXgh1Q==")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./mnt\x00', 0x0, &(0x7f0000000180), 0x0, 0x246, &(0x7f0000000840)="$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")
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000014c0)={0x8, 0x6, 0x2, 0x1}, 0x10)
write(r6, &(0x7f0000001500)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000001540), 0x0, 0x40004102, &(0x7f0000001580)={0x77359400})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

18.064821137s ago: executing program 0 (id=12):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@xdp, &(0x7f0000000480)=0x80, 0x80800)
setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}, 0x0)
timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000780)={0x0, 0xffffffffffffffff}, 0x0)
mlockall(0x7)
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/34, 0x22)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000540)=0x2, 0x4)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000002740)=ANY=[], 0x1, 0x616a, &(0x7f0000009780)="$eJzs3c1vHGcdB/Dfvnj9UppEFapCxCFNobSU5j2B8taWAwdAAgnlColctwqkgJKAaBURVzkgDrz8CXApBw7lDyk3uCL+ACIlnCpBGTT28yTjyTrr4Hhn18/nIzkzv3127N/k6/Huemf8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3/j6d0/1IuLiz9INhyI+FoOIfsRyXR+NeuXVfP9hRByOjeF4OiIGixH19hv/HIw4GxEfHIi4c/fGan3z6R32ce7k9asfffNrf//lb28d/sHr33+vPf6dj595/1c3Iw59++X3P7r5ePYdAAAASlFVVdVLL/OPpNf3/a6bAgCmIj/+V0m+Xa1Wq9WPtf5Nf7b6URdaN1Xj3WwWEbHe3KZ+zuDteACYM+vxYdct0CH5F20YEU903QQw03pdN8CeuHP3xmov5dtrPh4c3RzPv6fckv967971HdstJ2mfYzKt769bMYintulneUo9zJKcf7+d/8XN8VG6317nPy3b5T/avPSpODn/QTv/li35/y4i5jb//tj8S5XzHz5K/uuDOT7+5Q8AAAAAwP6Xf/9/qOP3fxd3vys78rD3f49OqQcAAAAAAAAAeNx2O//fPeb/AwAAgJlVv1av/f7A/dt6EX89OOa+9Uv8C72IJ1v3BwqTLpZZ6boPAAAAAAAAAAAAACjJcPMc3gu9iIWIeHJlpaqq+qOpXT+q3W4/70rffyhZ1z/kAQBg0wcHWtfy9yKWIuJC+lt/CysrK1W1tLxSrVTLi/n57GhxqVpuvK7Ny/q2xdEOnhAPR1X9yZYa2zVNer08abz9+eqvNaoGO2hsOjoMHAAiYvPR6I5HpH2mqg5G189ymA+O//3H8c9OdP19CgAAAOy9qqqqXvpz3kfSe/79rpsCAKZhKT/+t98XUKvVM18vzlg/5dR//tts9aNWP0LdVI13s1lExHpzm/o5g+n4AWDOrMeHXbdAh+RftGFEHO66CWCm9bpugD1x5+6N1V7Kt9d8PEjzu+dzQbbkv97b2C5vP245Sfsck2l9f92KQTy1TT9PT6mHWZLz77fzv7g5Pkr32+v8p2W7/Ov9PNRBP13L+Q/a+bfsn/z7Y/MvVc5/uKP803fB+kD+AAAAAAAww/Lv/w95/zfvMgAAAAAAAADMnTt3b6zm617z+/+fHHO/XnPN9Z/7Rs6/t+P8Xf+7n+T8++38WyfkDBrrt1+7n/+/7t5Yfe/6Pz+RlzOf/8JgVH/thV5/MEzn/FQLb8TluBJrcfKB+w+3jJ96YHxhy/jpCeNnHhgf1ePLefx4rMaP40q8fm98ccKJUUsTxqsJ4zn/geO/SDn/YeOjqdda1m6/23/guG8ux32dV//0n+cePLqm71YMYmXM7fX+Heugn43/kydG8dNra1eP//zS9etXT0VabLn1dKTFY5bzX0gf+fh//tnN8fxzv3m83n539Mj5z4pbMdw2/2cb6/X+vjDl3rqQ8x+lj5x/fgQaf/zPc/7bH/8vdtAPAAAAAAAAAAAAAAAAPExVVVWv/vfmZj3s8NpMAGCqfv2ttFIlsYt6FLvbXq1Wq9XqfVYPZ6yfLarxXmkWsbR1m/MR8YtxnwwAmGX/jYh/dN0EnZF/wfLf+6uXn+q6GWCqrr39zg8vXbmydvVa150AAAAAAAAAAP+vPP/n0cb8zxvnAbXmjd4y/+trcXRu5//sjwYbc52nHXomHj7/97F4+Pzf7fmS2xYmjI8mjC9OGF+aMD72Qo+GnP8zKeOc/5G0YyXN//r89pv9cbCXTXUo538szfWc8/9M637N/Ks/zHP+/S35n7j+1k9OXHv7nZcuv3XpzbU313506uT5s2fOnT1z7tyJNy5fWTu5+W+HHe+tnH+e+9p5oGXJ+efM5V+WnP+nUy3/suT8n0u1/MuS88/P9+Rflpx/fu0j/7Lk/F9ItfzLkvP/bKrlX5ac/4upln9Zcv6fS7X8y5LzfynV8i9Lzv94quVflpz/iVS38/9eR30xHTn//A6X478sOf98ZoP8y5LzP51q+Zcl538m1fIvS87/bKrlX5ac/7lUy78sOf/zqZZ/WXL+n0+1/MuS8/9CquVflpz/y6mWf1ly/l9MtfzLkvP/UqrlX5ac/5dTLf+y5Py/kmr5lyXn/9VUy78sOf9XUi3/stz/+/9Wprzy779EzEAbe7FSVVU1A21Y2cVK1z+ZAAAAAAAAAAAAAIC2aZxO3PU+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZHrrO8H/uzNXieB+E9CCCGQjXPBkE1217fEBIO5/tPQ0jQQWlpoEux1YvBNXhsShJqloW0QkRqpfUErlZsoQmqrRAipVKIoUpHad+UVKG9QK/EiUqEyEVSiItnqzHmeZ2dmZ2d27d34zDmfT5T84p0zM8+cOTO737W+cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2179r/s9GQgjFv63/bA/hsuL/t4WDxR8X913sFQIAAAAX6sXWf//+8vyFg2u4Uts2//qGf//20tLSUvjYC8+/9BdLS/mCqRDGtobQuiz5t1/9cql9m+jxMDky2vbn0QF3Pzbg8vEBl08MuHzLgMu3Drh8csDlK3bACtvK38e0buzG1v9uL3dpuDJMtC67sce1Hh/ZOjqafpfTMtK6ztLEkXA0HAvzYXbFdUZa/4Tw3euL+7orpPsabbuva0MI537+mUNpDSNxH98YOu6spf25+9k7wtQLP//MoW+c+elre82Bu2HFSkPYuaNY5+dCWP51VRgJW/M+SescbVvntT3WOdaxzpHW9Yr/717nuTWuMz3uybjOH/RZ57Xxa4/cEEJYDKtu0+3xMBou6brXvL8nyyOiuI3iqXxVGF/XcXL9Go6T4jo/uaHzOOk+JtP+vz7uk/FV1tD+dPzss1tW7PfzPU6KR12FY7W47XuKO52cbP/VasexWmzzmZtWPwZ6Pnc9joF8LLcdAzsGHQOjW8Zax8Do8pp3dBwDcyuuMxpGWvf1/E39j4GZM8dPzSw8+ulbjx5/8KH5h+ZPzM3u27N7757de/fOHDl6bH62/O/6dukQuSSM5mNwR3yvScfgG7u2bT8kl766ca+DyYq8DorH/sGbiwVdNhpWOcaLbT6388JfB/n7ftvrYLztddDzPbXH62B8Da+DYptzO9f2PXO87d9ea9is98LtbcfAxfx+WNznR960+nvhtXFdT7x5vd8Px1YcA+lhjcTXXvGV/PPe5B1xv6w8Lq4pLrh0Szi7MH/6tkcePHPm9FyI42VxRdtz1X28XNL2mMKK42V03cfLwb/79c3X9Pj69rivJm/p/1wV2+yZ7v9ctd7dO/fnllDuz46v7gpxbLCXe3/2+m5W7M+cJfrsz2Kbz9164T8L5lzS9v43Mej9b2xivHz/G8t7Y6Lj/W/lUzPWWlkI525d2/vfRPz35X7/u7Ii73/FvvrIbf2PgWKbJ2bWewyM933/uyHOkbieN8XEMNmW+19qXb5YHqZtz+XA42Z8fCIeN+PpHjuPm90rrlPcWnHfO2fP77jZeUPnc9Xxc0sNj5tiX/3lbP/jptjm2bkLf+/Ylv637b1jy6BjYGJsS7HeiXwQlO93S9vSMXBbOBROhmPhcL5O8SwX9zW9a23HwJb478v93nF1RY6BYl99cVf/Y6DY5vu7N/Znp53xK3mbtp+dun+/sFrmv2Z8+fa6d9ug52rQ7/Dajcd1vvuH789f65Uhim1+ume9OaP/frolfuXSHvup+/Wz2jF9OJz/flrHbmod08U6j+3t/7upYpsr963xeDoYQnhu7rnW77vi73e/dfaH3+74vW+v3yk/N/fc3TP3/mg96wcA4Py91Prv4pbyZ822v7Fey9//AwAAAEMh5f7RODP5HwAAAKrtw2vfNOX+sTgz+R8AAABqI+X+8TizhuT/h+/Y//SLj4X8aYBLUbo87YZ73lZulzrei/HPU0vLiq+/8+sTT3/+sbXd92gI4dd3v67n9g+/La2rdCqt8y2dX1/h6uvWdP8P3Le8XfvnJ5zbX95+ejxrPQxSV/m7M7tatzv16FxrPnt3aM17F594vLz98s9p++d3l9v/TfzQkoNHRjquvzOu58Y4p+JnytxzcHk/FDNd7+lr3/AvV3xo+f7S9UZ2vLL1ML/4R+Xtpl75U1eU26fHvdr6//kL33y62P6Rm3qv/7HR3ut/Pt7uT+L81YFy+/Z9/vm29f9JXH+6v3S92772vZ7rf+Y15fbPxOPiK3F2r/8df/76F3s9X+l+Dt5ZXi/d/+z/7GldL91euv3u9U8+NtexP7pv/9kXyts58MlfjLVvn76e7id54M7O43skPr8dPfIQwjf/NHTs5/DW8nr/1LX+dHun7uy9/lu61nlq5LrW9Zcfz/aOx/Wlv93V8/Gm9Rz8h+0dj+ep98T998LM94vbff7eeDzGy//3B+XtdX+W6TPv6Xy/Sdt/ZXv5uk23N9O1/qe61r94XbHvBq//rhfK9T/z9q0d6z/43ng83VXOQet/6MuXd1z/q98on4/Tn5o+cXLh7NHDbXu1/XW8dXLbJZde9opXXh7fS7v/fP/JMw/Pn56anZoNYWoIPzJws9f/tTj/uxyLG38PpR/9ojzunnxf+X3rjb8s//xU/PoD8flM3x+/9FcTHcdr9/O++PZyXuj63xzXsVav+cJ/XremDZ//6HfP/uMf/7T754L0eE69erL1+L54/VWty0aeLS/vfr8a5D9e3fm6/vH4bGt+J+7XpfjJzDuuKu+v+/bTZ5M8+YHy9Zt+kkvXD12fJ7J9rPNxXOj6fxx/jvne1Z3vf+n4+M5jXZ/mvD2MFEtYjO8PYbG8PG21tLX8UezJc1f1/AiY9Dk8YfG161nmqhYeXZg5dvTE2UdmzswvnJlZePTT9x8/efbEmftbn116/8cHXX/59X1J6/V9eH7fntB6tZ8sxya72Os/dd+hw7fP3nx4/siDZ4+cue/U/OmHDi0sHJo/vHDzg0eOzH9q0PWPHj4wt2v/7tt3TT909PCBO/bv371/+uiJk8UyykUNsG/2E9MnTt/fusrCgT375/bu3TM7ffzk4fkDt8/OTp8ddP3W96bp4tqfnD49f+zBM0ePz08vHP30/IG5/fv27Rr46Y/HTx1ZmJo5ffbEzNmF+dMz5WOZOtP6cvG9b9D1aYaFk/H9rstI/On8w7fsy5+PW/j6Z1e9qXKTzh9Pw8/iZ0Gl72+D/pxy/0ScWUPyPwAAADRByv3xg/+XL5D/AQAAoDZS7t8aZyb/AwAAQG2k3F8m/8l8+vem5P+N6v9/Vv+/Rf9f/z/o/2f6/xfa/w/6/2ug/6//H+rU/4+ePHdVz/vT/6/W+vX/9f8ZrGr9/5j7w7YQ/P0/AAAA1FTK/ZfEmcn/AAAAUBsp918aZyb/AwAAQG2k3H9ZnFlD8r/z/+v/6//36/+nbfX/g/5/Fc7/f+N/6f+voP+v/x/0/8/bxe7PD/v6K9j/36b/T9VUrf+fcv8r4swakv8BAACgCVLuf2WcmfwPAAAAtZFy/+VxZvI/AAAA1EbK/dvjzBqS//X/9f/1/53/X/9/aPr/zv/fg/6//n/Q/z9vF7s/P+zrr2D/3/n/qZyq9f9T7v9/cWYNyf8AAADQBCn3vyrOTP4HAACA2ki5/4o4M/kfAAAAaiPl/ivjzBqS/5vZ//9JCEH/P+j/6/93rbPa/f+x/LrV/x8u+v/6//3o/+v/D/P69f/1/xmsav3/lPtfHWfWkPwPAAAATZBy/1VxZvI/AAAA1EbK/a+JM5P/AQAAoDZS7r86zqwh+b+Z/X/n/9f/L+n/d66z2v1/5//X/+9N/1//P+j/n7eL3Z8f9vXr/+v/M1jV+v8p9782zqwh+R8AAACaIOX+a+LM5H8AAACojZT7XxdnJv8DAABAbaTcf22cWUPyv/6//r/+v/6//r/+/2Yarv7/6KqXDHv/f0uc+v+dj6M6/f/F5QWsvf/f/fa5bhe7Pz/s69f/1/9nsKr1/1Puf32cWUPyPwAAADRByv1viDOT/wEAAKA2Uu6/Ls5M/gcAAIDaSLl/Ks6sIflf/1//X/9f/1//X/9/Mw1X/391w97/T/T/Ox9Hdfr/y/fv/P/Ds379f/1/Bqta/z/l/uvjzBqS/wEAAKAJUu7fEWcm/wMAAEBtpNx/Q5yZ/A8AAADD5onVLki5/8Y4s4bkf/1//X/9/9X6/6P6//r/+v8bQP9f/78f/X/9/2Fev/6//j+DVa3/n3L/TXFmDcn/AAAA0AQp998cZyb/AwAAQG2k3P/GODP5HwAAAGoj5f6dcWYNyf/6//r/+v9DfP7/Mf3/oP9fefr/+v/96P9Xq/8/rv+v/6//zwarWv8/5f43xZk1JP8DAABAE6Tc/+Y4o+6/HgIAAACGWMr9t8SZ+ft/AAAAqI2U+6fjzBqS/zej/79tjfet/6//H/T/nf+/Wv3/ifav6/9vDP1//f9+9P+r1f93/n/9f/1/NlrV+v8p998aZ9aQ/A8AAABNkHL/bXFm8j8AAADURsr9M3Fm8j8AAADURsr9s3FmDcn/zv+v/6//r/+v/+/8/5tJ/1//vx/9f/3/YV6//r/+P4NVrf+fcv9cnFlD8j8AAAA0Qcr9u+LM5H8AAACojZT7d8eZyf8AAABQGyn374kza0j+H5L+/225AKX/r/+v/6//r/8/VPT/9f/70f/X/x/m9ev/6//TabTH16rW/0+5f2+cWUPyPwAAADRByv374szkfwAAAKiNlPtvjzOT/wEAAKA2Uu6/I86sIfl/SPr/zv+v/6//30b/X/9/mOj/6//3o/+v/z/M69f/1/9nsKr1/1Pu3x9n1pD8DwAAAE2Qcv9b4szkfwAAAKiNlPvvjDOT/wEAAGCo9DoPYZJy/1vjzBqS//X/697/X9qq/6//r//ff/2t/n86qPT/N5z+v/5/P/r/+v/DvH79f/1/Bqta/z/l/gNxZg3J/wAAANAEKfe/Lc5M/gcAAIDaSLn/7XFm8j8AAADURsr9B+PMGpL/9f/r3v93/n/9f/3/Qet3/v/Npf+v/9+P/v9w9v/jjy36/xXq/xfHUHv//8v6/1RE1fr/Kfe/I86sIfkfAAAAmiDl/nfGmcn/AAAAUBsp978rzkz+BwAAgNpIuf/dcWYNyf/6//r/+v/6//r/+v+bSf9/0/r/rbdC/f+S/v/5We7PX+78/0Pe/3f+f6qqav3/lPvfE2fWkPwPAAAATZBy/3vjzOR/AAAAqI2U+/9/nJn8DwAAALWRcv9dcWYNyf/6//r/+v/6//r/+v+bSf/f+f/70f+vSv//4vTnh339+v/6/wxWtf5/yv2/EWfWkPwPAAAATZBy/91xZvI/AAAA1EbK/e+LM5P/AQAAYMhsWfWSlPt/M86sIfl/+Pr/U0PZ/x/Nt6//r/+v/6//r/+/kfT/9f/DRvT/R89v/fr/+v/6//r/9Fe1/n/K/b8VZ9aQ/A8AAABNkHL/++PM5H8AAACojZT7fzvOTP4HAACA2ki5/544s4bk/43u/3dfvx/n/9f/D/r/+v/6//r/F2iY+v8T+v8rVKb/7/z/+v/6//r/bIqq9f9T7v+dOLOG5H8AAABogpT7740zk/8BAACgoh5e9zVS7v9AnJn8DwAAALWRcv8H48wakv+H7/z/w9f/L25f/1//P+j/6/+37VX9/40zTP1/5/9fSf9f/3+Y16//r//PYFXr/6fcf1+cWUPyPwAAADRByv0fijOT/wEAAKA2Uu7/3Tgz+R8AAABqI+X+34sza0j+X3f//1flhfr/nZz/v/f69f/1//X/9f/1/1f2/4v3MP3/kv6//v8wr1//X/+fwarW/0+5/8NxZg3J/wAAANAEKff/fpyZ/A8AAAC1kXL/H8SZyf8AAABQGyn3fyTOrCH53/n/9f/1//X/9f/1/zfTy9X/37rxN93B+f9L+v+d9P/1/y+k///6bSHo/1N3Vev/p9z/0TizhuR/AAAAaIKU+/8wzkz+BwAAgNpIuf/+ODP5HwAAAGoj5f4H4swakv/1/4e5///X+f71//X/9f/1/6uqQuf/n7yQ+9H/L+n/d1pj/3/5bU7/f0Nd7PU7/7/+P4NVrf+fcv+DcWYHO+8GAAAAGF4p938szqwhf/8PAAAATZBy/6E4M/kfAAAAaiPl/sNxZg3J//r/w9z/L6/j/P/6//r/+v9VVqH+/wXR/y/p/3dy/n/9f/1//X/6q1r/P+X++TizhuR/AAAAaIKU+4/Emcn/AAAAUBsp9z8UZyb/AwAAQG2k3P9wnFlD8r/+f1uXW/9f/79Z/f8ffKtrnfr/+v+bQf9f/78f/f919v/Thvr/lVi//r/+P4NVrf+fcv/ROLOG5H8AAABogpT7Px5nJv8DAABAbaTc/4k4M/kfAAAAaiPl/mNxZjXO/22PUv/f+f/1/5vb/1/b+f+3Ld/vGvr/29q/rv+v/x/0//X/B9D/d/7/YV6//r/+P4NVrf+fcv/xOLMa538AAABompT7T8SZyf8AAABQGyn3n4wzk/8BAACgNlLuPxVn1pD8r/+/vv7/yCrdQP3/3uvX/69B/7+N8//r/58P/X/9/35ehv7/S+1X0f/vdLH788O+fv3//2PvvposK6s/jh8m0YNFee0db8FXoJdWeeFrsMryXlHMOpgxomBGjBgwYkQx54w5izmLomJArRqL7rVWT/dM73Nmus/0s5/n87lg/XuYntnUzH/wV823tv6f5Zro/49vf5y7/xFxyyD7HwAAAEaQu/+RcYv9DwAAAN3I3X9l3GL/AwAAQDdy9z8qbhli/x9ZLBbr7v83Jn/2ufX/e9H/n/v59f/6f/2//l//r/+f4v3/+v85P7/+/+FXXpEf6P/ZQxP9/xkf5+5/dNwyxP4HAACAEWzv/qviFvsfAAAAupG7/zFxi/0PAAAA3cjd/9i4ZZD97/3/A/X/+Q+l/9f/x4+j/9+i/18v/b/+fy/5Z9GS/v/6+Fek/l//39zz6/+9/5/lWuv/c/c/Lm4ZZP8DAADACHL3Pz5usf8BAACgG7n7nxC32P8AAADQjdz9T4xbBtn/+v+B+n/v/z/r12uk/v+o/l//f0j0/232/w9e9h29/38l+n/9v/7/XP3/sWWfykBa6/9z9z8pbhlk/wMAAMAIcvc/OW6x/wEAAKAbufufErfY/wAAANCN3P2n4pYh9v8x/b/+X/8/x/7/mPf/6//nQ//fZv+/lP5/Jfp//b/+3/v/mdZa/5+7/+q4ZYj9DwAAAGPI3f/UuMX+BwAAgG7k7n9a3GL/AwAAQDdy9z89bhlk/+v/9f/6/xn2/xfw/n/9v/7/sOj/9f9T9P/6/8N6/lP6f/0/F0Vr/X/u/mfELYPsfwAAABhB7v5nxi32PwAAAHQjd/+z4hb7HwAAALqRu//Zccsg+1//r//X/+v/O+7/79b/Hz79v/5/iv5f/z/n59f/6/9Zbu39/0Ou2byr9v+5+6+JWwbZ/wAAADCC3P3PiVvsfwAAAOhG7v7nxi32PwAAAHQjd//z4pZB9r/+X/+/3f+fvkT/r//vrP/3/v8G6P/1/1P0//r/OT+//l//z3Jr7/+X9P67P87d//y4ZZD9DwAAACPI3f+CuMX+BwAAgG7k7n9h3GL/AwAAQDdy918btwyy//X/+n/v/9f/6//1/+uk/2+2/9/9/3o76f9XMlL/v/vPzoX+f7L/f8AKz6//ZwSt9f+5+18Utwyy/wEAAGAEuftfHLfY/wAAANCN3P3XxS32PwAAAHQjd//1ccsg+1//r//X/+v/d/b/R4bs/+/9Nv3/euj/m+3/p+n/V9JN/3/S+/+9/1//z3q01v/n7n9J3DLI/gcAAIAR5O5/adxi/wMAAEA3cve/LG6x/wEAAKAbuftfHrcMsv/1//p//b/+f1/v/z/aR//v/f/ro//X/0/R/zfS/x9SPz/359f/6/9ZrrX+P3f/K+KWQfY/AAAAdO/Ionb/K+MW+x8AAAC6kbv/VXGL/Q8AAADdyN1/Q9wyyP7X/+v/9f/6/331/528/1//vz76f/3/lFX7/0VT/f8l9euk/9f/6//1/0xrrf/P3f/quGWQ/Q8AAAAjyN1/Y9xi/wMAAEA3cve/Jm6x/wEAAKAbuftfG7cMsv/1//p//b/+X/+/WJzS/6+N/l//P8X7//X/c35+/b/+n+Va6/9z978ubhlk/wMAAMAIcve/Pm6x/wEAAKAbufvfELfY/wAAANCN3P1vjFt27/8jF/OpLh79v/5/zf3/5rfr//X/jff/3v+/Rvp//f8U/f+5+/+NPX4+/X9bz6//1/+zXGv9f+7+m+IWX/8HAACAbuTuf1PcYv8DAABAN3L3vzlusf8BAACgG7n73xK3DLL/9+r/77rP1t/X/69G/3/u5/f+f/3/qv3/PXfkZ53W/+v/z8v++vkTK39P/f8W/f9Oe/X/ly28/1//r/9f9vmMobX+P3f/W+OWQfY/AAAAjCB3/81xi/0PAAAA3cjd/7a4xf4HAACAbuTuf3vcMsj+P/j3/1+h/9f/6//j6v/P4/3/R7c/T/+/8+P76v8nef+//n/RYP+/3/f/6//n8fz6f/0/y11A/398jx/qQPr/3P3viFsG2f8AAAAwgtz974xb7H8AAADoRu7+d8Ut9j8AAAB0I3f/u+OWQfb/wff/3v+/hv7/9kXP/f8R/X8auv8/g/7f+//Ph/5f/7/Q/1+ww+7n5/78+n/9P8u19v7/3P23bE698fY/AAAAjOCWzb9uLN4Tt9j/AAAA0I3c/e+NW+x/AAAA6Ebu/vfFLYPsf/3/LPp/7//vv/8/EZ+i/9f/6//PU2/9/8Z5Ppf+f4v+/8Icdj8/9+ef7P8vX+j/ocH+P3f/++OWQfY/AAAAjCB3/wfiFvsfAAAAuhG7f+s/frf/AQAAoEsf3PzrxuLWze0/3v4fuP+/Yr/9/8kz/m/9/7mfX/9/IO//v2X37z39v/5/TvT/3v8/Rf+v/5/z87fz/v/4hlP6f9rTWv9/6+ZnbSw+FLcMsv8BAABgBLn7Pxy32P8AAADQjdz9t8Ut9j8AAAB0I3f/R+KWQfb/wP1/J+//f+id8QSt9v8bC/3/fvt/7/+PO6v+/y79f9L/6/+n6P/1/3N+/nb6f+//p12t9f+5+z8atwyy/wEAAGAEufs/FrfY/wAAANCN3P0fj1vsfwAAAOhG7v5PxC2D7H/9/9z7f+//1//r/5vs/73/v+j/9f9T9P9HNv+XiP5/ns+v/9f/s9yO/v9BN9e3H1b/n7v/k3HLIPsfAAAARpC7/1Nxi/0PAAAA3cjd/+m4xf4HAACAbuTu/0zcMsj+1//r/9fV/9/7k+j/B+n/r55r/7/1Z77+f730//r/Kfp/7/+f8/Pr//X/LLej/z/DYfX/ufs/G7c8sCYxAAAAMHO5+z8Xtwzy9X8AAAAYQe7+z8ct9j8AAAB0I3f/F+KG+19+eI90sPZqGKI31//r/73/X//v/f/6/3XS/+v/p+j/9f9zfn79v/6f5Vrr/3P3fzFu8fV/AAAAmLFrd3yUu/9LcYv9DwAAAN3I3f/luMX+BwAAgG7k7v9K3DLI/tf/6//1/7Pt/0/q/3c+fxP9/43bP7r+f4v+fy79/+lLd3yo/1+J/l//r//X/zOttf4/d/9X45ZB9j8AAACMIHf/1+KWlff/2r7UAAAAAByQ3P23xy2+/g8AAADdyN3/9bhlkP2v/9f/6/9n2/97//+u52+i//f+/7Po/+fS/++i/1+J/l//P1j/f9WZH+j/WUVr/X/u/m/ELYPsfwAAABhB7v5vxi32PwAAAHQjd/+34hb7HwAAALqRu//bccsg+1//r//X/+v/9f/6/3XS/+v/p+j/9f9zfv4B+/8d9P+sorX+P3f/d+KWQfY/AAAAjCB3/3fjFvsfAAAAWrf7P+/cU+7+78Ut9j8AAAB0I3f/9+OWQfZ/z/3/1Hc7rP7/RPTu+v9t+v/tz9P/x6+r/l//fx70//r/hf7/gh12Pz/359f/6/9ZrrX+P3f/D+KWQfY/AAAAjCB3/w/jFvsfAAAAupG7/0dxi/0PAAAA3cjd/+O4ZZD933P/P8X7/7fo//X/C/2//n/N9P/6/yn6f/3/nJ9f/6//Z7lD6v+PL/bo/3P3/yRuGWT/AwAAwAhy998Rt9j/AAAA0I3c/T+NW+x/AAAA6Ebu/p/FLf3s/4fdNvE39f8H3v9v/iZaW/9/euuh9f9b9P/6/4X+v3n6f/3/FP2//n/Oz99V/3/DscVC/88atPb+/9z9P49b+tn/AAAAMLzc/b+IW+x/AAAA6Ebu/l/GLfY/AAAAdCN3/6/ilkH2v/6/jff/5zN4/7/+f839/9HFAfb/97ts5/PMoP8/qf+/+PT/u/r/4/r/M+n/9f9zfv6u+n/v/2dNWuv/c/f/Om4ZZP8DAADACHL3/yZusf8BAACgG7n7fxu32P8AAADQjdz9v4tbBtn/+v82+v+V3/9/zv5/u56+4P7/3l9+/f8I/b/3/+v/Lzr9v/f/T9H/6//n/PzZ/+fvO/2//p+ztdb/5+7/fdwyyP4HAACAEeTu/0PcYv8DAABAN3L3/zFusf8BAACgG7n7/xS3DLL/9f899P/e/6//1//r/9ul/9f/T9H/6//n/Pze/6//Z7nW+v/c/XfGLYPsfwAAABhB7v4/xy32PwAAAHQjd/9f4hb7HwAAALqRu/+uuGWQ/a//1/932f9fumL/v6H/X+j/9f9rpv/X/0/R/+v/5/z8+n/9P8u11v/n7v9r3LJ0+J1Y9h0AAACARuTu/1vcMsjX/wEAAGAEufv/HrfY/wAAANCN3P13xy2D7P+D7f8v1f8P0f8fr3/uZvt/7//X/+v/m9Fv/39C/z9q/7/9r8F99//X3bT1zfr/eT6//l//z3Kt9f+5+/8Rtwyy/wEAAGAEufv/GbfY/wAAANCN3P3/ilvsfwAAAOhG7v5/xy2D7H/v/9f/d/n+f/3/2vr/kwv9v/7//PTb/3v//7D9/xm8/1//r//X/zOttf4/d/89ccsg+x8AAABGkLv/P3GL/Q8AAADdyN3/37jF/gcAAIBu5O7/X9wyyP7X/+v/9f9n9//5fPp/7//X/++f/l//P0X/r/+f8/Pr//X/LNda/5+7//8BAAD//yYTHzc=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000008c0)={'syz0\x00', {0x2, 0x4, 0x1a3, 0x9}, 0x19, [0x5, 0x6, 0xb5959e01, 0x3, 0x0, 0x52, 0x1, 0x5, 0x4, 0x7ff, 0x4, 0x9, 0x5, 0x9, 0x9513, 0x3, 0x400, 0x1, 0x59, 0x3, 0x26c, 0x80000001, 0x8, 0x2, 0x7bd, 0x4, 0x0, 0x3, 0x5, 0x7f, 0xbc0, 0x7ff, 0x9a4, 0xfff, 0x7, 0x3, 0x5, 0xb, 0x5, 0x1, 0x1, 0x6, 0x6, 0x5, 0x4e, 0x101, 0x7fffffff, 0x7, 0x7, 0x3a, 0x6, 0x7, 0xfffffff1, 0x3, 0x6, 0xe39c, 0x31, 0x7, 0x0, 0x9, 0x7, 0x4, 0x6, 0x7], [0x2aa6, 0x8001, 0x2, 0x2, 0x4, 0x7, 0xc3, 0x7ff, 0x4a05, 0x5, 0xd, 0x3, 0x6, 0x2, 0x7, 0x8000000, 0xffff0000, 0x10001, 0x1c, 0x1, 0x9, 0x2, 0x9, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x3, 0x6, 0x5, 0x10000, 0x6, 0x19f, 0x8, 0x3, 0x8, 0x2, 0x7fff, 0x20000000, 0x4, 0x5a, 0x4, 0x2, 0x8, 0x5, 0xd, 0x9, 0xffffffff, 0x2, 0xffffffff, 0x6, 0x4, 0xe8e, 0xc07, 0x9, 0x182, 0xff, 0x7, 0x93, 0xea, 0x4, 0xfffffff8, 0x7ff], [0xfffffff8, 0x6, 0x400, 0x7, 0x100, 0x2, 0x0, 0xf8f8, 0x9, 0x7, 0x200000, 0x6, 0x5, 0x6, 0x3ff, 0x6f, 0x9, 0x9, 0x2, 0x7, 0xc, 0x3, 0x4, 0x0, 0x7, 0x736, 0x7fff, 0xffffffff, 0x62c, 0x100003, 0xc4, 0x9, 0xfffff45d, 0x7, 0xdd63, 0x3, 0x6, 0x188, 0x9, 0x2, 0x7f, 0xffffffff, 0x9, 0x723, 0x5, 0x401, 0x800, 0x3, 0x75c, 0x5, 0x2, 0x9, 0xfffffff9, 0xda4d2d2, 0x4, 0x4, 0x6, 0x47fd, 0x3, 0x3, 0x8, 0x407, 0x80000000, 0x82e], [0x6, 0x8, 0x0, 0x1, 0xfffffffd, 0x153, 0x6, 0x0, 0x10000, 0xfffffff8, 0x9, 0x5, 0x500, 0x9, 0x0, 0x1ff, 0x7, 0x3, 0x7fff, 0xfffffff9, 0x400, 0x100, 0xe, 0x7, 0x2, 0x209, 0x10001, 0x1, 0x6, 0x2, 0x5, 0x5, 0x4, 0x10001, 0x2, 0x7f, 0x8cc2, 0x5, 0xaca, 0x6, 0x80, 0x0, 0xe0e, 0x9bf, 0x10000, 0x4, 0x3, 0xd4f, 0x200, 0x2, 0x8, 0x0, 0x200, 0x6, 0xf, 0x4, 0x6, 0x7, 0x3, 0x200, 0x81, 0x4, 0x6, 0x7]}, 0x45c)

16.221964374s ago: executing program 1 (id=13):
socket$inet6(0xa, 0x805, 0x0)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0)
r0 = gettid()
getpgid(r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001300)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f000001a300)=0x80000000000003)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f000001a380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0)
sendto$inet6(r5, &(0x7f000001a3c0)='l', 0x1, 0x20000010, &(0x7f000001a400)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c)

15.096885829s ago: executing program 0 (id=14):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
ptrace(0x10, r0)
r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r3, &(0x7f0000001540)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0)
add_key$keyring(&(0x7f000001a640), &(0x7f000001a680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
epoll_create(0x5)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'})
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0)

13.295888123s ago: executing program 1 (id=15):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4)
r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000019840)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f00000198c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000019940), 0x307017fdb7a66cb, 0x0)
ppoll(&(0x7f0000019980)=[{r3, 0x2220}], 0x1, 0x0, 0x0, 0x0)
close(r2)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000140)='./mytrace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)

13.004448903s ago: executing program 2 (id=16):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, r0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002580)={0x73622a85, 0xeed7e89f6334d838})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000026c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000002700)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}]})

11.185458048s ago: executing program 0 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xa8, 0x0, 0x1})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x20, 0x424, 0x832})

9.79638724s ago: executing program 3 (id=18):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0x200, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x46, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x9b, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
get_robust_list(0x0, 0x0, &(0x7f0000000440))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x20000010)
add_key$fscrypt_provisioning(&(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffe4e, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9.529134647s ago: executing program 2 (id=19):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18800020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x0, 0x5, 0x80000001}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x17}})
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
pipe2$watch_queue(&(0x7f0000000780), 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000a80), 0xa, 0x28102)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000b00)=0x200)
write$dsp(r3, &(0x7f0000000b40)="5cba91a4", 0xffffffd9)

6.650641181s ago: executing program 3 (id=20):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"})
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}})
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
truncate(0x0, 0xfffffffffffffff3)
socket$inet_sctp(0x2, 0x5, 0x84)

5.947596493s ago: executing program 2 (id=21):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000080))
r0 = socket(0x28, 0x5, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000780)='cubic', 0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000880)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0)
read$msr(r6, &(0x7f000000a180)=""/102392, 0x18ff8)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000440)={[{@orlov}], [{@fsuuid={'fsuuid', 0x3d, {[0x57, 0x33, 0x35, 0x32, 0x63, 0x66, 0x38, 0x31], 0x2d, [0x32, 0x64, 0x32, 0x9], 0x2d, [0x62, 0x63, 0x62, 0x35], 0x2d, [0x62, 0x33, 0x30, 0x33], 0x2d, [0x30, 0x36, 0x34, 0x37, 0x3b, 0x61, 0x66, 0x35]}}}]}, 0x1, 0x242, &(0x7f0000000180)="$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")

3.555512257s ago: executing program 3 (id=22):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$packet(0x11, 0x3, 0x300)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000280)='./dev\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0xae6, &(0x7f0000000bc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f00000016c0)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001700))
open$dir(&(0x7f0000001880)='./dev\x00', 0x44040, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbc03, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0xb, [@ptr={0x7, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10}}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0xf622}, {0x10, 0x2}]}, @volatile={0xc}, @fwd={0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x2}}]}, {0x0, [0x4f, 0x0, 0x5f, 0x30, 0x5f, 0x2e, 0x2e, 0x61, 0x30]}}, &(0x7f0000000600)=""/190, 0xbf, 0xbe, 0x0, 0xffff5ea1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x7, 0x4, 0x9, 0x1, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x4}, 0x50)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r5, 0x9, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x82)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x4, 0x4)
close(r3)

2.846573679s ago: executing program 2 (id=23):
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6)
semctl$IPC_RMID(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./mysys\x00', &(0x7f0000001a40)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x4000)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$FUSE_POLL(r4, &(0x7f0000000880)={0x18, 0x0, 0x0, {0x7}}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0)

2.701815334s ago: executing program 1 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"])
keyctl$chown(0x4, r3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48050)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x14, &(0x7f0000000140)})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))

1.46068419s ago: executing program 1 (id=25):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000040)={[{@orlov}, {@errors_remount}]}, 0x2, 0x53b, &(0x7f00000007c0)="$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")
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0)
timer_create(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
ioctl$DM_LIST_DEVICES(0xffffffffffffffff, 0xc138fd02, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f00000006c0)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000700))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4)

1.083286989s ago: executing program 3 (id=26):
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
userfaultfd(0x801)
socket$packet(0x11, 0x3, 0x300)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x80091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10000004, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0)
read$msr(r3, &(0x7f0000002f40)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, &(0x7f000001bf40)='./debug/lru_gen\x00', 0x2, 0x0)
preadv(r4, 0x0, 0x0, 0x6, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001cfc0)={0x0, 0x0, &(0x7f000001d000)={&(0x7f000001d040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d100)={&(0x7f000001d140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000000ec0)={0x2020}, 0x2020)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, r7, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0xc40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts.
[   79.144460][ T5775] cgroup: Unknown subsys name 'net'
[   79.289154][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.955322][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.267851][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.276678][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.285409][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.287846][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.301127][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.305021][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.312098][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.323326][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.331534][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.332746][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.345888][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.347130][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.356377][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.367731][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.373098][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.383170][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.390782][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.398256][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.398819][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.413215][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.421050][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.421479][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.435487][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.443225][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.563746][ T5788] (null): rxe_set_mtu: Set mtu to 1024
[   83.565546][ T5787] (null): rxe_set_mtu: Set mtu to 1024
[   83.575009][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   83.583182][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   83.583667][ T5789] (null): rxe_set_mtu: Set mtu to 1024
[   83.596272][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   83.606512][ T5790] (null): rxe_set_mtu: Set mtu to 1024
[   83.619302][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   83.628084][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   83.635599][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   83.898381][ T5788] infiniband rxe0: set active
[   83.905568][ T5777] rxe_eth0 speed is unknown, defaulting to 1000
[   83.920272][ T5788] infiniband rxe0: added rxe_eth0
[   84.002966][ T5788] RDS/IB: rxe0: added
[   84.007734][ T5788] smc: adding ib device rxe0 with port count 1
[   84.014741][ T5788] smc:    ib device rxe0 port 1 has pnetid 
[   84.037829][ T5777] rxe_eth0 speed is unknown, defaulting to 1000
[   84.046030][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   84.317389][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   84.413265][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   84.481314][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   84.564209][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   84.688248][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.712552][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.732464][ T5789] bridge_slave_0: entered allmulticast mode
[   84.751198][ T5789] bridge_slave_0: entered promiscuous mode
[   84.771632][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.778830][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.800226][ T5789] bridge_slave_1: entered allmulticast mode
[   84.807720][ T5789] bridge_slave_1: entered promiscuous mode
[   84.849076][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   84.938338][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.984926][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.996932][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.010241][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.017629][ T5790] bridge_slave_0: entered allmulticast mode
[   85.029247][ T5790] bridge_slave_0: entered promiscuous mode
[   85.038500][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.050210][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.057516][ T5790] bridge_slave_1: entered allmulticast mode
[   85.065280][ T5790] bridge_slave_1: entered promiscuous mode
[   85.163361][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.170699][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.177935][ T5787] bridge_slave_0: entered allmulticast mode
[   85.187924][ T5787] bridge_slave_0: entered promiscuous mode
[   85.197574][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.205293][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.212671][ T5787] bridge_slave_1: entered allmulticast mode
[   85.219855][ T5787] bridge_slave_1: entered promiscuous mode
[   85.243085][ T5789] team0: Port device team_slave_0 added
[   85.252263][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.283886][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.294876][ T5789] team0: Port device team_slave_1 added
[   85.315022][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.345013][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   85.354678][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.395533][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.402666][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.429060][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.449210][ T5790] team0: Port device team_slave_0 added
[   85.474144][ T5790] team0: Port device team_slave_1 added
[   85.509508][ T5787] team0: Port device team_slave_0 added
[   85.512954][ T5100] Bluetooth: hci3: command tx timeout
[   85.521253][ T5796] Bluetooth: hci1: command tx timeout
[   85.526953][ T5796] Bluetooth: hci2: command tx timeout
[   85.532965][ T5795] Bluetooth: hci0: command tx timeout
[   85.545370][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.553053][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.579222][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.621814][ T5787] team0: Port device team_slave_1 added
[   85.702872][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.721060][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.758157][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.775531][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.782772][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.812892][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.864510][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.876115][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.906032][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.918770][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.929706][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.959791][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.987577][ T5789] hsr_slave_0: entered promiscuous mode
[   85.998509][ T5789] hsr_slave_1: entered promiscuous mode
[   86.152843][ T5790] hsr_slave_0: entered promiscuous mode
[   86.159735][ T5790] hsr_slave_1: entered promiscuous mode
[   86.170368][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.178386][ T5790] Cannot create hsr debugfs directory
[   86.194747][ T5787] hsr_slave_0: entered promiscuous mode
[   86.205502][ T5787] hsr_slave_1: entered promiscuous mode
[   86.212409][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.224287][ T5787] Cannot create hsr debugfs directory
[   86.272958][  T790] rxe_eth0 speed is unknown, defaulting to 1000
[   86.871546][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   86.889562][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.915505][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.940369][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.963906][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.004352][ T5449] infiniband rxe0: set active
[   87.056768][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   87.243484][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.260589][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.300854][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.308067][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.326712][ T5788] bridge_slave_0: entered allmulticast mode
[   87.334769][ T5788] bridge_slave_0: entered promiscuous mode
[   87.365718][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.396759][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.406797][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.414486][ T5788] bridge_slave_1: entered allmulticast mode
[   87.422260][ T5788] bridge_slave_1: entered promiscuous mode
[   87.450678][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.507907][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.534183][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.548214][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.570575][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.590274][ T5796] Bluetooth: hci2: command tx timeout
[   87.595754][ T5796] Bluetooth: hci1: command tx timeout
[   87.602579][ T5100] Bluetooth: hci3: command tx timeout
[   87.608043][ T5100] Bluetooth: hci0: command tx timeout
[   87.650159][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.676774][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.692881][ T5788] team0: Port device team_slave_0 added
[   87.723120][ T5788] team0: Port device team_slave_1 added
[   87.783892][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.793805][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.820815][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.834128][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.841344][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.870453][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.946673][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.987567][ T5788] hsr_slave_0: entered promiscuous mode
[   87.997132][ T5788] hsr_slave_1: entered promiscuous mode
[   88.006294][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.014870][ T5788] Cannot create hsr debugfs directory
[   88.095425][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   88.155325][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.162802][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.227972][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.235188][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.321354][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.389811][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.411184][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   88.430871][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.442110][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.468633][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.483421][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.490672][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.513651][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.555704][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.562950][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.582471][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   88.613149][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.620385][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.673199][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.680439][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.945297][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.029570][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.055620][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   89.083744][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.090987][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.127598][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.134884][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.318316][ T5787] veth0_vlan: entered promiscuous mode
[   89.365843][ T5787] veth1_vlan: entered promiscuous mode
[   89.393574][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.442971][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.552632][ T5787] veth0_macvtap: entered promiscuous mode
[   89.572194][ T5787] veth1_macvtap: entered promiscuous mode
[   89.632716][ T5790] veth0_vlan: entered promiscuous mode
[   89.645406][ T5789] veth0_vlan: entered promiscuous mode
[   89.671712][ T5796] Bluetooth: hci1: command tx timeout
[   89.677170][ T5796] Bluetooth: hci0: command tx timeout
[   89.683181][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.684199][ T5100] Bluetooth: hci2: command tx timeout
[   89.691362][ T5803] Bluetooth: hci3: command tx timeout
[   89.716933][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.728149][ T5790] veth1_vlan: entered promiscuous mode
[   89.743670][ T5789] veth1_vlan: entered promiscuous mode
[   89.765051][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.786680][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.801152][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.812425][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.821729][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.935550][ T5790] veth0_macvtap: entered promiscuous mode
[   89.951406][ T5788] veth0_vlan: entered promiscuous mode
[   89.973085][ T5790] veth1_macvtap: entered promiscuous mode
[   90.030802][ T5788] veth1_vlan: entered promiscuous mode
[   90.059083][ T5789] veth0_macvtap: entered promiscuous mode
[   90.077073][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.090857][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.106093][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.118309][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.132835][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.143759][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.156658][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.169189][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.187265][ T5789] veth1_macvtap: entered promiscuous mode
[   90.209108][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.218043][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.227669][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.237750][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.267187][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.290487][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.326536][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.343755][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.357383][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.373933][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.385781][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.423959][ T5788] veth0_macvtap: entered promiscuous mode
[   90.446176][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.455262][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.479021][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.489994][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.501216][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.513113][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.538924][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.548018][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.563971][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.574277][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.601764][ T5788] veth1_macvtap: entered promiscuous mode
[   90.754354][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.772215][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.786363][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.808313][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.824951][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.835886][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.855036][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.899579][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.940085][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.958177][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.970180][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.982861][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.063870][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.134133][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.226667][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.318047][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.563228][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.588964][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.602490][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.614156][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.735521][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.751211][ T5796] Bluetooth: hci2: command tx timeout
[   91.756698][ T5796] Bluetooth: hci1: command tx timeout
[   91.762939][ T5803] Bluetooth: hci0: command tx timeout
[   91.766131][ T5100] Bluetooth: hci3: command tx timeout
[   91.778799][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.871568][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.914107][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.070526][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.078616][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.140055][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.470938][ T5881] IPVS: starting estimator thread 0...
[   92.582954][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.771539][ T5919] IPVS: using max 16 ests per chain, 38400 per kthread
[   92.926789][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.962202][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.560059][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.969939][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.809101][ T5943] syz.1.2[5943]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   96.244785][ T5943] loop1: detected capacity change from 0 to 256
[   96.272165][ T5944] loop2: detected capacity change from 0 to 33792
[   96.284964][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.362493][ T5943] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[   96.375930][ T5943] exFAT-fs (loop1): failed to load alloc-bitmap
[   96.382456][ T5943] exFAT-fs (loop1): failed to recognize exfat type
[   96.527603][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.599345][ T5942] ip_tables: iptables: counters copy to user failed while replacing table
[   96.621781][ T5941] syz.1.2 (5941) used greatest stack depth: 20872 bytes left
[   97.619865][    C1] sched: RT throttling activated
[   97.621616][   T57] cfg80211: failed to load regulatory.db
[   98.031366][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.507149][ T5958] block device autoloading is deprecated and will be removed.
[   99.801264][ T5962] loop2: detected capacity change from 0 to 33280
[   99.988788][ T5953] loop0: detected capacity change from 0 to 32768
[  100.054604][ T5962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.424957][ T5953] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong
[  100.424957][ T5953] 
[  100.460066][ T5953] ERROR: (device loop0): remounting filesystem as read-only
[  100.467711][ T5953] ialloc: diAlloc returned -5!
[  102.240385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.638962][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.680106][ T5962] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.901301][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.331713][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  110.607287][ T6010] binder: 6004:6010 ioctl c00c620f 200000000000 returned -22
[  110.823334][   T57] rxe_eth0 speed is unknown, defaulting to 1000
[  111.310082][ T6014] loop2: detected capacity change from 0 to 32896
[  111.322996][ T6014] =======================================================
[  111.322996][ T6014] WARNING: The mand mount option has been deprecated and
[  111.322996][ T6014]          and is ignored by this kernel. Remove the mand
[  111.322996][ T6014]          option from the mount to silence this warning.
[  111.322996][ T6014] =======================================================
[  111.360923][ T6014] EXT4-fs: Ignoring removed orlov option
[  111.366873][ T6014] ext4: Unknown parameter 'fsuuid'
[  112.399534][ T6016] loop3: detected capacity change from 0 to 2048
[  112.935521][ T5791] I/O error, dev loop2, sector 32768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  113.130793][ T6021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.427008][   T28] audit: type=1800 audit(1794455333.086:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22" name="dev" dev="loop3" ino=19 res=0 errno=0
[  114.654096][ T6034] loop1: detected capacity change from 0 to 33280
[  114.681205][ T6034] EXT4-fs: Ignoring removed orlov option
[  114.782824][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.831241][ T6021] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  114.845474][ T6034] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.872490][ T6021] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  114.914240][ T6021] Remounting filesystem read-only
[  114.929141][ T2963] NILFS (loop3): discard dirty page: offset=65536, ino=3
[  114.971079][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.010103][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.019131][ T2963] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  115.118387][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.157046][ T2963] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  115.240461][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.384614][ T6049] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz.1.25: invalid size
[  115.595271][ T6049] EXT4-fs (loop1): Remounting filesystem read-only
[  115.647864][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.740507][ T2963] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  115.800008][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.854568][ T2963] NILFS (loop3): discard dirty page: offset=0, ino=6
[  115.889201][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.899991][ T2963] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  115.907046][ T2963] NILFS (loop3): discard dirty page: offset=0, ino=18
[  115.940826][ T3003] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  115.950727][ T2963] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  115.959002][ T2963] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.970379][  T146] ------------[ cut here ]------------
[  115.976253][  T146] WARNING: CPU: 0 PID: 146 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  115.982047][   T61] ------------[ cut here ]------------
[  115.987386][  T146] Modules linked in:
[  115.992869][   T61] WARNING: CPU: 1 PID: 61 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  115.992919][   T61] Modules linked in:
[  115.992956][   T61] CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted syzkaller #0
[  115.992979][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  115.992994][   T61] Workqueue: phy9 ieee80211_csa_finalize_work
[  115.993036][   T61] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  115.993072][   T61] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74
[  115.996988][  T146] 
[  115.996999][  T146] CPU: 0 PID: 146 Comm: kworker/u4:5 Not tainted syzkaller #0
[  116.007936][   T61] RSP: 0018:ffffc900015c79b8 EFLAGS: 00010293
[  116.007963][   T61] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888020eb0000
[  116.007980][   T61] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  116.011907][  T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  116.011923][  T146] Workqueue: phy10 ieee80211_csa_finalize_work
[  116.011951][  T146] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.019349][   T61] RBP: dffffc0000000000 R08: ffff888029ec160f R09: 1ffff110053d82c1
[  116.019367][   T61] R10: dffffc0000000000 R11: ffffed10053d82c2 R12: 0000000000000001
[  116.019384][   T61] R13: ffff88801f792cd0 R14: ffff88801f792d48 R15: ffff888025eb2130
[  116.029796][  T146] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74
[  116.035680][   T61] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  116.042928][  T146] RSP: 0000:ffffc90002dbf9b8 EFLAGS: 00010293
[  116.042953][  T146] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801c3b1e00
[  116.042970][  T146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  116.062617][   T61] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.062638][   T61] CR2: 00007f0197c00020 CR3: 000000006145f000 CR4: 00000000003506e0
[  116.062658][   T61] Call Trace:
[  116.062668][   T61]  <TASK>
[  116.062695][   T61]  ieee80211_link_use_reserved_context+0x37b/0x5c0
[  116.062743][   T61]  ieee80211_csa_finalize+0x571/0xeb0
[  116.062767][   T61]  ? mutex_lock_nested+0x20/0x20
[  116.062792][   T61]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  116.062821][   T61]  ? ieee80211_csa_finalize_work+0x140/0x140
[  116.066307][    C0] ------------[ cut here ]------------
[  116.076912][   T61]  ? read_lock_is_recursive+0x20/0x20
[  116.079726][    C0] WARNING: CPU: 0 PID: 146 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520
[  116.087908][   T61]  ieee80211_csa_finalize_work+0xf6/0x140
[  116.095794][    C0] Modules linked in:
[  116.105998][   T61]  ? process_scheduled_works+0x975/0x1600
[  116.112224][    C0] 
[  116.112235][    C0] CPU: 0 PID: 146 Comm: kworker/u4:5 Not tainted syzkaller #0
[  116.112257][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  116.119571][   T61]  process_scheduled_works+0xa60/0x1600
[  116.119740][   T61]  ? worker_attach_to_pool+0x370/0x370
[  116.127617][    C0] Workqueue: phy10 ieee80211_csa_finalize_work
[  116.135681][   T61]  ? assign_work+0x3cc/0x5d0
[  116.143719][    C0] 
[  116.143729][    C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520
[  116.143758][    C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6
[  116.163420][   T61]  worker_thread+0xa5e/0xfe0
[  116.172426][    C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246
[  116.172449][    C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801c3b1e00
[  116.172465][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  116.172478][    C0] RBP: 0000000000000000 R08: ffff88801c3b1e00 R09: 0000000000000003
[  116.172493][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b86e420
[  116.172514][    C0] R13: ffff888030a8e424 R14: ffff88805b86e910 R15: ffff888030a8e400
[  116.172531][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  116.172550][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.172565][    C0] CR2: 00007f330ff97300 CR3: 000000000df32000 CR4: 00000000003506f0
[  116.172583][    C0] Call Trace:
[  116.172592][    C0]  <IRQ>
[  116.172602][    C0]  ? __ieee80211_beacon_get+0x36/0x1520
[  116.172639][    C0]  ieee80211_beacon_get_tim+0xbf/0x580
[  116.172667][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  116.172702][    C0]  mac80211_hwsim_beacon_tx+0x3bd/0x770
[  116.172738][    C0]  __iterate_interfaces+0x225/0x4c0
[  116.172767][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  116.172794][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  116.172824][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  116.172851][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  116.172884][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  116.172908][    C0]  ? hw_scan_work+0xf10/0xf10
[  116.172932][    C0]  __hrtimer_run_queues+0x525/0xc10
[  116.172980][    C0]  ? hrtimer_interrupt+0x980/0x980
[  116.173003][    C0]  ? read_tsc+0x9/0x20
[  116.173039][    C0]  hrtimer_run_softirq+0x177/0x290
[  116.173071][    C0]  handle_softirqs+0x27d/0x820
[  116.173095][    C0]  ? read_tsc+0x9/0x20
[  116.173118][    C0]  ? ktime_get+0x24b/0x280
[  116.173148][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  116.179317][   T61]  kthread+0x2fa/0x390
[  116.187293][    C0]  ? do_softirq+0x1a0/0x1a0
[  116.187324][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  116.187359][    C0]  __irq_exit_rcu+0xd3/0x190
[  116.187384][    C0]  ? irq_exit_rcu+0x20/0x20
[  116.187436][    C0]  irq_exit_rcu+0x9/0x20
[  116.195434][   T61]  ? pr_cont_work+0x550/0x550
[  116.202131][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  116.210079][   T61]  ? kthread_blkcg+0xd0/0xd0
[  116.213389][    C0]  </IRQ>
[  116.216332][   T61]  ret_from_fork+0x48/0x80
[  116.216363][   T61]  ? kthread_blkcg+0xd0/0xd0
[  116.222893][    C0]  <TASK>
[  116.228268][   T61]  ret_from_fork_asm+0x11/0x20
[  116.233259][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.233293][    C0] RIP: 0010:console_flush_all+0x883/0xcf0
[  116.233322][    C0] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f
[  116.233339][    C0] RSP: 0000:ffffc90002dbf360 EFLAGS: 00000293
[  116.233360][    C0] RAX: ffffffff816c4df8 RBX: ffffc90002dbf4df RCX: ffff88801c3b1e00
[  116.233375][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  116.233388][    C0] RBP: ffffc90002dbf4b0 R08: ffffffff922235c7 R09: 1ffffffff24446b8
[  116.233405][    C0] R10: dffffc0000000000 R11: fffffbfff24446b9 R12: ffffffff8e8c2440
[  116.233421][    C0] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000
[  116.233445][    C0]  ? console_flush_all+0x878/0xcf0
[  116.233505][    C0]  ? console_flush_all+0x10b/0xcf0
[  116.239486][   T61]  </TASK>
[  116.245537][    C0]  ? is_console_locked+0x20/0x20
[  116.245567][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  116.245612][    C0]  console_unlock+0xad/0x350
[  116.251120][   T61] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  116.251132][   T61] CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted syzkaller #0
[  116.251153][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  116.251200][   T61] Workqueue: phy9 ieee80211_csa_finalize_work
[  116.251300][   T61] Call Trace:
[  116.251336][   T61]  <TASK>
[  116.251365][   T61]  dump_stack_lvl+0x18c/0x250
[  116.251460][   T61]  ? show_regs_print_info+0x20/0x20
[  116.251522][   T61]  ? load_image+0x420/0x420
[  116.251628][   T61]  panic+0x2ca/0x720
[  116.251701][   T61]  ? bpf_jit_dump+0xd0/0xd0
[  116.251778][   T61]  ? ret_from_fork_asm+0x11/0x20
[  116.251868][   T61]  __warn+0x2e0/0x470
[  116.251920][   T61]  ? ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.252014][   T61]  ? ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.252097][   T61]  report_bug+0x2be/0x4f0
[  116.252171][   T61]  ? ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.252255][   T61]  ? ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.252342][   T61]  ? ieee80211_vif_use_reserved_switch+0x1133/0x2950
[  116.252424][   T61]  handle_bug+0xcf/0x120
[  116.252505][   T61]  exc_invalid_op+0x1a/0x50
[  116.252570][   T61]  asm_exc_invalid_op+0x1a/0x20
[  116.252662][   T61] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950
[  116.252763][   T61] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74
[  116.252806][   T61] RSP: 0018:ffffc900015c79b8 EFLAGS: 00010293
[  116.252854][   T61] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888020eb0000
[  116.252894][   T61] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  116.252924][   T61] RBP: dffffc0000000000 R08: ffff888029ec160f R09: 1ffff110053d82c1
[  116.252961][   T61] R10: dffffc0000000000 R11: ffffed10053d82c2 R12: 0000000000000001
[  116.253000][   T61] R13: ffff88801f792cd0 R14: ffff88801f792d48 R15: ffff888025eb2130
[  116.253060][   T61]  ? ieee80211_vif_use_reserved_switch+0xd35/0x2950
[  116.253159][   T61]  ? ieee80211_vif_use_reserved_switch+0xd35/0x2950
[  116.253271][   T61]  ieee80211_link_use_reserved_context+0x37b/0x5c0
[  116.253365][   T61]  ieee80211_csa_finalize+0x571/0xeb0
[  116.253440][   T61]  ? mutex_lock_nested+0x20/0x20
[  116.253494][   T61]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  116.253550][   T61]  ? ieee80211_csa_finalize_work+0x140/0x140
[  116.253609][   T61]  ? read_lock_is_recursive+0x20/0x20
[  116.253690][   T61]  ieee80211_csa_finalize_work+0xf6/0x140
[  116.253746][   T61]  ? process_scheduled_works+0x975/0x1600
[  116.253825][   T61]  process_scheduled_works+0xa60/0x1600
[  116.253985][   T61]  ? worker_attach_to_pool+0x370/0x370
[  116.254105][   T61]  ? assign_work+0x3cc/0x5d0
[  116.254199][   T61]  worker_thread+0xa5e/0xfe0
[  116.254349][   T61]  kthread+0x2fa/0x390
[  116.254394][   T61]  ? pr_cont_work+0x550/0x550
[  116.254466][   T61]  ? kthread_blkcg+0xd0/0xd0
[  116.254514][   T61]  ret_from_fork+0x48/0x80
[  116.254577][   T61]  ? kthread_blkcg+0xd0/0xd0
[  116.254637][   T61]  ret_from_fork_asm+0x11/0x20
[  116.254739][   T61]  </TASK>
[  116.257099][   T61] Kernel Offset: disabled