last executing test programs: 7.764833089s ago: executing program 2 (id=347): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setresgid(0x0, r2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf1d, &(0x7f0000001e80)="$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") r3 = gettid() madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x200, 0xa, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) write$binfmt_script(r5, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) ptrace(0x10, r0) ptrace(0x8, r0) 6.568192178s ago: executing program 4 (id=356): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$eJzs3M9vG1UeAPDvOE7TbJtNtvuzP3br3e5qo11t06Q/D3toK5B6ASGBUDmGJK1K0xY1QWqriKYItRIHUP+CAjckThw5wQUB4gDqlYorQqpQLg09oEFjj10njvOrdkKaz0dy/Gbmjd/7zsyL35tnO4BNq5T9SSK2R8S3EdFbWZyboVR5mp2ZGvlpZmokiTR9/seknO/BzNRINWt1v235Qn8hovBmErsbi+2auHrt/PD4+NjlfMXAZCFPXRg+O3Z27OLQsWOHDnYfPTJ0uCVxZnV6sOv1S3t2nnrp9jMjp2+//MWHWX3TfHt9HBV95b9bll1Cx6PkR8XyUylKc49lnX+tsP6/dj116aQcfmH9KsOyZVdtdro6y+2/NzqiWNvWG0+/sa6VA9oqTdO0q2Ft7b1sOq2XJJUd0vRGCjwBklgqx7z/AsATovpG/2AmG6lOjTSOg59s909EeQSUxT2bPypbiuURbKmvMjbqbFP5f4iI09MP71T7YJvt+AMAa++TExG3Tlb6HdVHZUsh/lSX77f53FBfRPwuInZExO/z/ssfI8p5/xwRf6nbp2cZswClecuN/Z9vuvNEfXe1ZbL+3//zua25/b9azfs68qWecvydyZlz42MH8mPSH51d2fJg40vXbqt9+tTdd5qVX8r7f9VHVn72/ChH4YfivBt0o8OTw48bd9X9G+UDe70x/iSKSTUVsTMidq3i9bNjdu4/H+xptn1O/FmcDfG/3fzFi6uo0DzpexH/rpz/6ZgXf+Tzf0l5fvLCqwMTV6/971z9/OTg0SNDhwe2xvjYgYHqVdHoy69vPpcnG4YRi5z/atNo60Radv5/s+D1X5u57MtStfnaiZWXcfPeraZjmtVe/1uSF8rp6vzsleHJycuDEVuS6cb1Q4/2vTLcPSd/Fn//voXb/46In9/N99sdEdlF/NeI+FtE7M3r/veI+EdE7Fsk/s9P/vOVZkPIpeNvryz+0RWd/2aJ419FLLyp4/xnHzcU/FapIf7OeHhntmHCPDv/h8qp/nzN6PDk1qXiWqym9YnHOHQAAACwYeyNiO2RFPbnN5q2R6Gwf3/EttodlInJ/5659NrF0cp3BPqis1C909Vbdz90ML83nC1new3VLWfbD5bvG6dpmnZny9n4fbxnfUOHTW9bk/af+b5jvWsHtN2K5tGafaMN2JDmt/97y96z9R/IANZWCz5HA2xQ2j9sXstu/+36FhywbhZq/9cjZtehKsAaW6j9v9iw5via1AVYW8b/sHmtvv37MABsdN7/YVNa1pfkV5HYcWqRPEmxPYU2TxRi8V8B6Iuorqn2aRZ/we8KEa2pYUdLI+2ec04LC+bZGq0oKwpL5imu4IcYmia6W3Sc5yQKK9rr2bttvUS7ImKJq7d2sV2vJq61u8mUG8H76/vfCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PH9EgAA//8ANMvz") write$qrtrtun(r0, &(0x7f0000000180)="3471ba8288d9ed47d43cda23c7da1a2d62c94ae6dd096388ac37a6da8731f42de91962056d526b9be387111a02663ef36e9676cac3a248fc4986ad769a29", 0x3e) 6.203921369s ago: executing program 4 (id=361): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000fe"], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 4.937877072s ago: executing program 4 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000fffffffe000000000089120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.815098375s ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffff2fad0a4883cdbba10a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) r2 = syz_io_uring_setup(0xd79, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000001500)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0xb, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x2}, 0x0, 0x44}) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) io_uring_enter(r2, 0x64f7, 0x32aa, 0xc, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000280)="3a796231ed8abda10c7191a1f66986128df41b9293e9765dbdbfa2df806bb44363fff46e92025f44fc8f885a8fd99c286fe8707259622da36498ba2610b826f839d5168245521c56691bdc5e89329dfe1e96b41375c9aa38cea776b840646f9fbac7354ce51e69d7f90015dfdb822358b04c3ed1a230fed3e1894a2c5de147b8e4c1392e5689294210b88b5c938e4bd19f5b4cb8ea7063243e2de968ba9a12a93f5db36731093ee53f7dbf6483fddef26540256a0f782de68de2c1144325e866417ef8f8aa59922723c07e051081b324d8702bcb9451c60bd2bf2b03b4f1be5a12314b37b01fa7c77f422a5fdb785bd923ff61c469533097ba2724ffb4b986ed") ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000180)=0xa, 0x0, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4.741665494s ago: executing program 3 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0xa, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x8004b709, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000280)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000240001002bbd7000fedadf25030000000600040000fc0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000"], 0x110}}, 0x800) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001090102000000000000000003000004080005400000000d9096377d091b48267559733d80ba1d0542d220cb9be27ffe599bb818a8dad088e242f9637e1063958939ef238b1f1ef6a0a41448775e3391a486b11b93a5071e5efb0f4890654e6ee4b71052843e91a8e1ee5a4ef9a56fb54a9af4d80c71409bc2006e93865be7a23f8bdd63"], 0x1c}, 0x1, 0x0, 0x0, 0x400c084}, 0x400) 4.723937406s ago: executing program 1 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00000201180000000000000084000000070000000a01010200000000180000000000"], 0x48}], 0x1, 0x0) 4.708851727s ago: executing program 4 (id=369): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x61) 4.550726008s ago: executing program 4 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 3.82157798s ago: executing program 1 (id=372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000000780)=""/193, 0xc1}], 0x2}}], 0x1, 0x20, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) (fail_nth: 67) 3.668643252s ago: executing program 2 (id=373): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098c4}, 0x48810) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10842, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163c41, 0x98) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000100000002009100", @ANYRES32=r5, @ANYBLOB="08000200ad"], 0x20}}, 0x0) 3.62170162s ago: executing program 0 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fc69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30001020000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 3.621346883s ago: executing program 1 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000ff000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x28, 0x5, 0x0) 2.824483805s ago: executing program 4 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xf, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000005d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005cc0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xfffffffffffffe28, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}]}, &(0x7f00000002c0)=0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) recvfrom(r1, &(0x7f00000004c0)=""/246, 0xf6, 0x1, &(0x7f0000000400)=@isdn={0x22, 0x0, 0x7, 0x8, 0xf}, 0x80) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005c40)={0x24, r7, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c19000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x595f, &(0x7f0000000100)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi8UsJGYSATjCYhlQSBgBJccKEACy0tRf0DLaQWjRZVsEqkRH5swipKsbrUFlIru+gfbiFLSiBLWazzaqbv6Zm503duT3dPSMLnU8ncPqdPf8+5556+fc/pnukAAADA28K+m7cfuOC4f/rZZ0dev+Gff7T5xtBbHs+vxgL96faat6qFHEzdlaXj2+y4+KvrvvO7wcv/4af393z7jb3rT9zw63886vKHP3Hunru+/thrfQ/++cWiuHE8nTqRTl5OQqj+eP+XP7f3qWPH8pIQQjnp3xXC4mTJY4uTTIihP4UQ1qeJpZk7H3j9jA1j2xtv656SvyhTznh/e6um42zngatPC7/5+7U3/WLZ97/XtfulXRNFkuqk8RTCwksnP74r/T8/TcfRFsdjHLRrQgg9kx53TkG7Tmqy/Stz0sen23nptrcgTrx/eSZdypTLpqOuzLanoL525bWj1XJFFmTS2ZNRu/LaGfMXp9sfpttTZxm/HP8noZSESr35m5KJMRImHbckJOPHslpPl+rHNqT7n0knmXQpky53ZfZrvN50oJWTZGp+LJfJj6fjSpp/4uRzdQMX5uS/I91W0yfqGzEdsjdqeqfdqO/XuNiu/TO05WAoTToHNcqvH/j0YPSmeb3JkmmPGW0g3rd37e0ryuse39ef047k/iSNn7QUf+fPFy/42HdvvSr7ul6Pf2kpjV+aVfx4WF847+lXLr71W1/LjX9njF9uqf2nP9Lz8nlP3Lw8t3/2x/6ptBR/+MUn71h29GW7c9t/d4xfbSn+6j1Pd/cdeOTR3PYPxf6Z31L859/3gd/e9+xDL+XGDzF+T0vx1+3Z+vnugQOn5MZ/NPZPb0vxX3h199nPDQz8fjAv/jMxfl9L8e/dddd771l027m5x3dN7J/+luKff/LDNy048NAJeefO5O5OvXICvD0dlV5j3ZKmW51ntmvSfOGrg5XaNd+C9H9fJyvKXHyO1bOwk/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwzGn/9YP/+8P9L1fSdHd64/lSbRvz54WQzA8hbN8xvG3Hxi1XDH7iyqu2bRneNDi8Y3Bky45t1w6e+TeD20a2bhq+duzeoXedUXvckpDUtskJ0+ruHh0dLfVPzYv1/buTd/9mxTn/5w8hDB3zq4FKbvtX3rX5nqMb/MxIVo++f/NVF/zqrG+m+9Wftqu/QbtGR0dHQ067/u9Fb97zxf2/OyWEob+YqV1PPv93P5nSoPGMiTipUneoNag76WnYjnqr0/bE/qps2LhpZGjm/h17fDlnP/79dS/9acM1X3iz1r/V3P1osn/nrx7dVPrK2vP//1eur2UUteutOu5F/R33IrYv9l817e+F6X4tzNmvSs5+3fyLR5/98XG3vrYrDFVeXTa97qL96koHQFfyjqbqjTX0JIun5FfT8vGIx8et3LF568rt1+5818bNw1eMXDGy5T2rzlx19tBZZ5+1cnzPV9b3P3Rk/2P9f9nk/h+c8bToU7t+GH+O5czPFps2noraVdQfY+0q7o+JFuU//3ou/NyX3nPXExfUMorGeSxdP5+k256x47wqTBpv0/uq0X4V9UMIYbBRP7zy2rnh2P+x8aai89DkIzP5Z0ayevSp5X/85jnfWPq3tYyDcp6f3KAWz/P1Vk+0Z7y/qunxGD1E+7c7lNP96m3YrlVPPdF1+74/fLrevnnzwjXDO3ZsW1X7uSBt6YLk+IbtyubG/Vo2/rMc0m4J9WHaYLyO6Qq19mXPn7F4tld70/t6kyUN9ysr3rd37e0ryuse35fX08n9tRrnh77aNnlnTslNmQeW6w1uVP+h+vwrGh8DH/zGgx9+8AdnThsfp9d+Fu1XkrNf33/23i99+wv/8Qed268P/t3T/X/8nx9fUcs4XM4r9Van7Ukmn1dOD6Ho+bcsNN6P3OdfqfH+FD3/svVMlG8cbzCT7g3llp6vpz/S8/J5T9y8PPf5ur/Z5+v1U1LlgufroTJ+ss+vpDK1HXP3/JoyUJLVoz+95ahdj92w5rhaRtG4rpduNK7PaGL+kbNfP7n4uYErB//Df+/ceeM7f/PAJb8eXv2ZWkbrxz22pTPHvZr2bzWnf+utjvPOyf377suv3LS+ln/oXv+m24L5TzyVbL925yeHN20a2ba9uf1q9vU01pPt5VZfT+PZbUnBfpWm7dfc3Wimv5p9vsX2r2+5v6Y+33pD0tLrws6fL17wse/eelX/tEelFV1aSuOXWor/wnlPv3Lxrd/6Wm78O2P8Skvxh1988o5lR1+2Ozf+3Ukav9pS/NV7nu7uO/DIo7nxh2L757cU//n3feC39z370Eu58UOM39ta/7+6++znBgZ+nxv/mSStZ+waKYQHXj9jQy2dhK70+Rbb0TWlXSGbTjLpUiZdnpwu1dZa6xWUk2RqfiyX5p84qS2NfCQnP16FVZfWtm/EdMjeiMnuhvmHmtKkc3+j/KLrVACAI118/z9eg8b3/0fSC6X8lQaY0O48bGlO3DgPm1jPmTfl/qVp/Pj4uA448O4wNLa9cbB2oT/b9xHi8yG7zhnrOeWkqTFaXecsWn9fnknHdtXWyyuT5qGp6fOaSmhi/X16PTOvv2d2v3h9fPCWac0anLRulT1+XemKWaPPO2TaWxmLkDc+suti8fMcAwvDmvH6mhwf2c/RxOOQ/RxNrOe4zImz1c/RtDs+YrNnGB/jTS5+f2P68Qsz9O/E8WscLXv8ZnG8q2Pl5/r92Q6sGzY8pR28dcO5fT/MumRO/PQJdqivG8b8uB+VJtcTP5yTP/v1xMb58XQR27V/hrYcDNYTgSNVnP/H14ix+f/YBfj/y5Qrug7NXjXGeLmfEyo3bk/RvGP65/R6WnodX7dn6+e7Bw6cknud82izn/vZOiXVU/C5n6J+XJFJF/ZjzgJN0XwvW09Rv2c/l9Eb+lrq93t33fXeexbddm5uv6+pvZAW9/uXpqT6Cvr9MJgvNI5vvvC2mC/M9frZWzYfST/4NFfzkX/NyZ/tfKRn2o36fo2baT7yZuaYpObN0OyWNT0f6ZqL2gGAI0Gc/9ffP0vn//8rFkivI4rmradm0jFe7rw15/okb976L+n2mkz53vQ3KmZ73Xz+yQ/ftODAQyfkzlvubnYe+p+mpPoL56HtzZtz5xFrOvN58dx5RH2e1eo8cebL4Yl5Ynvz9Nz+qc/T25tH5/ZPfR7d3jpAbvz6OsDhPs8tWK/LVBaTza7XHbHz6PTXZ+dqHn1hTv5s59G9027U92vcYfe+nnk0AHCEifP/eBkX5/9PZMq1+z577rygQ9ft2b8HUo//zMGaV871vG+u563tvf+b2z8dev+3eF3icJ8Xz/W60Nyuk73t58VppebFAAAcyuL8P/6l6/z5f3vzk0bzt64p85Oxa8uK+Xk2vvn5ITI/P9zXv8z/vS9ezPwfAODIFuf/8dce49//+y9pOvt3672PnhPfPN08fabx0/Q8vfPrbMHnAN7adYBJXyN4iKwDFP61KusAAABHlq7xmdL037P/aLrN/p593u/lX5xTvlmV9PL4sh3bRkYuuWrr+uEdI5dsuXL9yPZLrt62cceOkS21cu3OG3PnLemlcFeopP3RuFx23rYo/XsIi3L+HkIs/9rE91OOO378xvS/h5Ctdn7B3xGYOH7NtTfv+JVmKN9ofOQd77z4H8kpH9WP/+UfP/2SDdsv2bhl446Nw5s27hyZWm5s1tozi+/NjN0yq+9LzfyYpjT77+/sTDtK09rRlfZH3vezJ5l2LE5bsjjv+w9y2v2z//bFT508+uZ9IQwdU35nW/2XrB79zxeN/MuOfb/aOtb+0oztr5dM21X0faXZ8nF/Kpuu3L7jtA1XXrUl+42SrYnrGaV6eo7WM9Knf7nJ9Yl1Ofmz/ZxCedqNQ1PT6xMAAEwR3/+P17Px/cMvpBdQMb/5eXp77x/nztOHmpunZ7+XrGieni0f97fZeXq1zXl6tv6ieXqj8o3m6Xnz7rz4/5pTfraaHyftfc4jd5xc2tw4yX6fQdE4yZaf7ThJ2hwn2fqLxkmj8o3GSd5xz4v/oZzyeZofD+19Lid3PNzZ3Hj460y6aDxky892PJTaHA/Z+ovGQ6PyjcZD3vHNi39BTvlmTR0fYwNjfFyMXHL1lds+OancXH//Rfvtm9vv/2hV8+2f2899zX375/ZzZe21v7uJ9rf3ubLc9j/T3kpY8/0/t9/v0qqDtl6bftis6PNnReu4a3PyZ7uOO2/ajUOTdVx468T5f3y7J87/b0u3nX4b6PD/njTfY9Ywfoe+x6zoOsbr+QyVHQK8ngMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0p7uydHy77+btBy447p9+9tmR12/45x9tvvGvrvvO7wYv/4ef3t/z7Tf2rj9xw6//8ajLH/7EuXvu+vpjr/U9+OcXCwP3j/+snJomqyEkLychVH+8/8uf2/vUsWN5SQihnPTvCmFxsuSxxUkmwtCfQgjr6+2ceucDr5+xYWx7423dU/IXZYJk9yv0lmN7JrczhGsK94jDUDUdZzsPXH1a+M3fr73pF8u+/72u3S/tmiiSVEMohRA21JILL538+K4Qwvz0/5g42pbGB6fbNSGEnkmPO6egXSc12f6VOenj0+28dNtbECfevzyTLmXKZdNRV2bbU1Bfu/La0Wq5Igsy6ezJqF157Yz5i9PtD9PtqbOMX47/k1BKQqXe/E3JxBgJk45bEpLxY1mtp0v1YxvS/c+kk0y6lEmXuzL7NV5vOtDKSTI1P5bL5MfTcSXNP3HyubqBC3Py35Fuq+kT9Y2YDtkbNb3TbtT3a1xs1/4Z2nIwlCadgxrl1w98ejB607zeZMm0x4w2EO/bu/b2FeV1j+/rz2lHcn+Sxk9air/z54sXfOy7t161NC/+paU0fqml+C+c9/QrF9/6ra/lxr8zxi+3FP/0R3pePu+Jm5fn9s/+2D+VluIPv/jkHcuOvmx3bvvvjvGrLcVfvefp7r4Djzya2/6h2D/zW4r//Ps+8Nv7nn3opdz4IcbvaSn+uj1bP989cOCU3PiPjvfPjb3jI7SF8fPq7rOfGxj4/WBe/Gdi//e1FP/eXXe9955Ft52be3zXxP7pbyn++Sc/fNOCAw+dkHfuTO7u1CsnwNvTUek11i1pumCeWV+3yM4z2zXpbP7VwUrtmm9B+r+vkxVljNWzcA7jAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZPrl9Wd+9KL3f2htJQkhySkz2kC8rzxv9erBFuodfvHJO5YdfdnuyXlLW4gDAAAAFIvz8FI9pxqWhquT+eH4huXjGsHxMZVMzc+uIcQ42TWCVuOUOhSn3KE4lQ7F6epQnHkditPdoTjVgjjV0Fyc+TPEqYyNiibb0zNje5qP09uhOAs6FKevE3Gyg7mN9izqUJz+GeM0Pw4XdyjOkg7FOapDcY7uUJxjOhTnLzoU59gOxcmuKc92HPalJY/LizN+o1wYp5KU63c0Wk8/Nq3nhDbr6S2op6/o9bjJeuY3Wc9JmceVZllPtcl6/rLNepIm6/nrNuspFdQTx+012fbFemKqyfF/bYfi7OxQnOs6FOf6DsX5dIfifKZDcW5oMw5As+L8f2K+1x+6K38betIzTnYVIE4Rlo3/nP56l3dCivHemcmfVxQvO1HPxFs22/ZlFxAy8ZZn8rumxKvU5yMzxKtOjrcic2fh/jaYg02Od2omv7soXnZhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm0C+vP/OjF73/Q2tDEsb+NTTaQLyvPG/16sEW6t279vYV5XWP75uc111pIRAAAABQKM7Du+o51dBdWRW6k3lTylXTdYBqmi7317YDC8OasW0yWBpP9ySLZ3xcJX3cyh2bt67cfu3Od23cPHzFyBUjW96z6sxVZw+ddfZZKzds3DQyVPsZQndBvBDC+PLD9mt3fnJ406aRbdtrmdn2L00ftzRNJ+njBt4dhsa2N461v+/lsKSgvtK0+ubuRjPHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6NXbsLkfMq4wB+3pnZmem2sSv9moZmO+SjRC2axK2kWrovCBbaJGQpyGx1LcEmWNw0oU1KrGMbsK0JitASCJFcGInF1uJNP2wR+0EgUqMBNwZpi/ZCL5RWK2nJhaSMZHfO7MzsTGYdS5Omv9/FvDPnPOc875mLhf+7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQZqqjkxURsfGB5MQki41tQ7iXDafpuU++n71+a0/LAyfXN48Vsj1sREAAADQU8zhA42RYijksiEbrpz+tDg0TYTZ3A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHz0TFVHJiqjY+MXJiEkXWpqHcS5bD5Ny330feOdJz/36vDw35vHSn3sAwAAAPQWc3imMVIMpbAkDCRXttTFZwML29a318V9Fs2zruXZwUD3uiXz3O+aedZ9okfduvp1RwAAAIAPv5j/c42RoVDILeia/3vl+lh3dVtdtn7t57cCAAAAwP8n5v9CY6QUCrlSI6/PN+8vbquL63v93z6uX9Zlfa//56+tX/2fHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PKaqIxOV0bHxbBJC0qWm1kGcy+bTtNxH31UvDP7zlkMPLW4eK+T62AgAAADoKebw2ehdDIXcYBgIF07n/uGb9j/95aefHQkhzMT8fD7s2LBt292rZl5j3cojhwZ+cPit78ypWznzetYOCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvG+mqiMTldGx8QuSEJIuNbUO4lw2n6blPvq+/oUv/fXx48+92TxW6mMfAAAAoLeYw2ezfzGUQj7kw+XTn5qz/mmZtvXdnhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5497vnXfNzdMTm6825uP9Jtk5zlxG96cM2/O9l8mAADg/XZ1SELtf3TF+rN91wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLlgqjoyURkdGy8mISRdamodxLlsPk3LffRNnz9aWHDyhZeax0p97AMAAAD0FnP4bPYvhlIYCAPhsulPnZ4JTOf/oQ/wJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBzylR1ZKIyOja+IAkh6VJT6yDOZfNpWu6j72M7933+4MXfv7l5rJDrYyMAAACgp5jD842RYijkPhkK4ar658nWBUm2fu38XGB23daWZYPzXldtWZed97pdbSfL1U8zs64Y9xuauTbWleeuKzetK4VG+3LLurCnZdWCHvcZAAAA4CyK+b/QGBkKhVyhKef+rKV+SM4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqYqo5MVEbHxpMkhKRLTa2DOJfNp2m5j773/e7jF33t57u3N4+V+tgHAAAA6C3m8NnsXwylsCh8LCyazv1hqLU+1v2rcurgo//+2/IQVlx+bDjXvu2P45vfvH7ji+0vIWRaqzMhXFzvl3Tp99s/PHrv0tqpx0NYcVn2qjn9wpn7tW6Z1p6pbFy77fCxrT2+HAAAADhPxPw/0BgZCoXcXV3zf0zePfJ/w3QAv/jenb+8tP5aT+RtKzJD9X6ZLv2+uPTJvyxb/Y+3Tuf/M/X7zL7NBy9taTgz0iZJa6Obt687dt2BTDz1TP9sW//4vXzl22/+Z9OOR07N9C+GYn18Ya5T/7mvbS5Ia5OZveNr3ttbbe2f63L+h37/0vFfL9z97un+71w92Oh/zRnOf+b+g7c+vOf6fYfWtfYPIZQ79X/73ZvDFX+688H28w+2bZxr+uabX9skae3I4hMHVu8v3dDaP2nrH7//Xxx/bM9PH/nes7F//K3I8iWtG8/tHPtn2vq/suuSnS8/sH5ha/9Ml/O/eNurw1vK3/1j+/nvaNk11/Uu5p7/iWufuv21Den97VMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnl6nqyERldGw8k4SQdKmpdRDnsvk0LffR941bjr592+6f/Kh5rNTHPgAAAEBvMYfPZv9iKIV8yIfB6dz/TGXj2m2Hj20NQzOzSf2am9xyz7ZPbdqy/a47ztKdAwAAAPMV83+uMTIUCrmlYaCe/0c3b1937LoDmZj/MzH/b7pzcuOK0Kh7ZdclO19+YP3CxnOCEKZ/FlA8XffZ2bqbbjw6dOLP31jWsW7VbN2RxScOrN5fuiHWhea6laHxfOKJa5+6/bUN6f2N+2uu+/TXt0zWH0/EfQdvfXjP9fsOrWuco34drO8b6yYze8fXvLe3Guuy9Wuxfm4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYK6p6shEZXRsPGRDSLrU1DqIc9l8mpb76Ltm6a8evOjkc4uaxwq5PjYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYb/+QqSq4jiAnzOz2447u7qrQVvRulpR2ENSEFEvFRWhEUJPhoSl+RAFQURhD62hkVjRS5D1IlFBtYVQkJskWqzRP+mlhwoKrIdApIVykB4qduaecfY6t6G7FlSfDwxnf2fu/d7fvffMnR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf5WBvrHmeHjHg43bzrvpk8fvOfHYLe/dv+2SR1//YWLTDR/vHXzl5MzmFVu+vnHZpv33rpne/eKhX4bf+e1oz+BHWsOqrKyFEI/HEGrvzz73xMyn58zNxRBCNY5MhjAalx4ajbmE1b+GEDa3+5z/5tsnrtwyN27bNTBvfkkuJH9eoV5N/bSMzO+X/5Zats62Nh6+LHx7/frtny9/683+qWOTpzaJtY71FMLijZ3794cQFmWvOWm1jaWds3FdCGGwY7+re/R1YWcxWrzd5QX1+dl4VjbWexwvvb8yV1dy2+XrpD83DvY43kIV9VF2u16GcnX+YbRQRX2m+bQE3s3GVX8xv5peMVRi6Gu3f188tUZCx32LITbvZa1dV9r3NmTnn6tjrq7k6mp/7ryax80WWjXG+fNpu9x8ehz3ZfMrOp/VXdxeMH9uNtayD+rJVIf8Hy310/5on1dT6mv2T3r5J1Q6nkHd5ts3PrsZ9WyuHpeets/vXaT3ZtY/dXF1wweHRwr6iHtjlh9L5W/9bHTozjd2PjRWlL+xkuVXSuV/t/bIT3fsfOmFwvxnU361VP4VBwaPr/1wx8rC6zObrk9fqfy7jn709PKz757qdq+b+XtSfq1U/nXTRwaGGwcOFva/Ol2fRaXyv7n25u9f+3LfscL8kPIHS+VvmH7gmYHxxqWF+QdbH4V6c4WWWD8/T1311fj4jxNF+V+k6z/cJT/2zH91cvc1Ly/ZtaZwfa5L12ekVP+3XrR/+1Bj3wVFz86450x9cwL8Py3L/sd6MqvL/s5cqI7fC89P9LW+gYay1/CZPFDO3HEW/435AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAMHJAAAAACC/r9uR6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAP//vHMtvw==") r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x30}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r11, 0x0) write$FUSE_WRITE(r11, &(0x7f0000005c80)={0x18}, 0x18) renameat2(r9, &(0x7f0000000140)='./file0\x00', r9, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e, 0x2e, 0xd5b1c52c00aec414]}}, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.023948742s ago: executing program 0 (id=377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2.020186777s ago: executing program 2 (id=378): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c040000100001040000000000000000004800ff", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 2.015824535s ago: executing program 3 (id=379): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049f73720476fb379ce25c0ea42027ba6a7d6e3840d9ab8a824ead708bf72b8eecead3cab6d9481962a189a600dece7dd6cae47e25fd708b45da88295068b73d025dc162712507d33adf2ab5d31173796fe2270cca25d78a51ccd0a115198d8bd016aeb1b285366e8606e3f46b669e4e76ef0fdad1f4d4efd054c1e9628c3437d064dba798be2c185cea31685aad05f5fab7eed43084f56ae24cd5eac9c45321898688d5f98a6dd1695a0bd10e248de84c82b15d6ce5e0ffa15a8ee93fc4947de9f752685b9645ebdc7def"], 0x1, 0x151, &(0x7f0000000700)="$eJzs2r1K82AUB/DzvipKL8Gp0Ax1yLdWwV0QnLwAMbTPEx9MjCSCtFPwBhSHeAmurrp5CZ3d3NQrcIrkyzRJQVBBsf/fktOe5J8EwpmO7HuuzgOZaCW83H3673tuu2eu97nOLcpsE1E7KcZxfKVQw/57fxyHSuOEzl1+7NrRzi0XDjOaGQAAAAAAAAAAAAAAAAAAAAAAM6LznBetg8i75sJh+kQ3GI4OLcdhflD8I1G+o0M88ja5kJhZyeu+Eknp/o6Its6SPK3Sl5KkpfzHv/r91BP3WA2GI1m4ls1sdmQYZk9b1bQ1Q02z1HqidJE/U5lavd9NuU/0oDX3iaiVHeaXRXR+Wk8v3/8zRfi1y1HMevH4QjS9VXzrzA8WJr/Vueycjb209Tve4k8W9flBg0Wzc5/MD6XvOYOP5kdx9Tc8zrSpB/AT3gIAAP//Kr4ovA==") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000003180)=""/4112, &(0x7f0000000000)=0x1010) chdir(&(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 1.837644792s ago: executing program 0 (id=380): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008012, &(0x7f00000003c0)={[{@nombcache}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8141, 0x0) lseek(r1, 0x8000, 0x4) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x4810428, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) (fail_nth: 12) 1.837312911s ago: executing program 2 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000400000000bb00000000000000000000ffff"], 0x0) 1.761391174s ago: executing program 2 (id=382): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@filestreams}, {@grpquota}, {@prjquota}]}, 0x5, 0xb919, &(0x7f0000000840)="$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") r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001780)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {0x2, 0x2}, {0xfffffffd}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x10, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a0000000002f6000000000008000600ffffffff"], 0x2c}}, 0x4000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000150000000000000000000a000000"], 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@filestreams}, {@grpquota}, {@prjquota}]}, 0x5, 0xb919, &(0x7f0000000840)="$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") (async) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001780)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {0x2, 0x2}, {0xfffffffd}, {0xfffffffd}], 0x0, 0x0, 0x0, 0x1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') (async) preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x10, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a0000000002f6000000000008000600ffffffff"], 0x2c}}, 0x4000) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000150000000000000000000a000000"], 0x1c}}, 0x0) (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) 1.725667299s ago: executing program 1 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200040001000c0001"], 0x28}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.537768998s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00002c01180000000000000084000000070000000a01010200000000180000000000"], 0x48}], 0x1, 0x0) 1.532830224s ago: executing program 0 (id=385): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e40000000000000950000000400040018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) 1.532375007s ago: executing program 1 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7200000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d660551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 519.239892ms ago: executing program 1 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210429bd7000fddbdf253100000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000100130000000800010050000000080052"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24048010) 290.572309ms ago: executing program 3 (id=388): r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x9) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20004441) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200a02, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x270, r1, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x71, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ecb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd9c}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf31}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x270}}, 0x4000000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000500)=""/60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x238, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfff, 0x7c}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd6, 0xac, "7980782b2cad2aead0bf89c41befa6a132988443a3c56dc9703dd33c47a4d88e15a17faa679a0e0604711e159cc3c13810461d7f36e3bdf14e96e2d153d136fe8742ad57f4011300fcc2345f75f4ee15aa9da90b9f195368a0e46adc0e887e2cad220022af3597f5c947c1f699c74cc461024ff7068ce1fb7886846693fb4eaa6668603f09c5f415f65ff84dd3c233fd654d8a4357a5078b0ce92558def2472ab6909453da606c64c348413d9540343978a78d3a153c14119c56c3e284c8a77a1e28d3a4bf365e347d368951f69f62982383"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x1b}, {0x36, 0x1}, {0x5, 0x1}, {0x18}, {0x1}, {0x12, 0x1}, {0x36, 0x1}, {0x48}, {0x9, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf7}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf4, 0xac, "106801d2c9874b2cd962fa455289dcfc81ca87893a6f650cdc48761c97522de8d8e174842088d719d1492e8c8f75eb383dcffd24c442765dc5e66ceb352f9b5512406b0cbc774c109ebd0547766e8127bc27d82debdba66cc5ff943e84de9b38b9c11dd3e81780c0afdf94e01c4a4d65895156ff9d40a27dad27d83d5b710cd29f4ef5e3a3290b894160f77cb4624fe057bd80df4a61b4da82838416c00acaa5bff9f77a159b769330847e5926d81b60511ed08c5dccc3612d6112e51eab152f8004a843630f111267ce66d18d902d8fcdb561c9599d2d80d8eec83b5a600b06f885ba8c91499d53a8f299dd1abe67be"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}]}, 0x238}, 0x1, 0x0, 0x0, 0x4040004}, 0x4004000) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2c}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}]}, 0x30}}, 0x44c1) (async) write$UHID_CREATE2(r2, &(0x7f00000009c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x64, 0x81, 0x80000000, 0x6, 0x9, 0x5, "a6a6382954fc05391419699b6b3709834238b7aadcabcca92c0c933b153071ee74946fe1946adc4c8ae68adde27463fd3a32955aaf73ab8b51f9f7789cd013cc63d766d65fd89eb25144529ddba9e25c0519ccb06ca6530d91271ccfea146ce7d5e8fbca"}}, 0x17c) getpid() (async) pwritev(r2, &(0x7f0000001d40)=[{&(0x7f0000000b40)="18671455868550ded70c4084fcc51b32838737598bd62c5b4b6c67bfff0bc3eaf0ae60a8e0a2be51404f017fe00de037abb9d88994f77eb96ca987102cf048b99ff0e4f089c8c71b401857e0cc27b85e449d208eae392f12099f17e745b26f06406d0f8fb9e88e1bec14a2072867a19bb016b39d7158c35b15fe5d279c1cdd8e00d794ffc56719bb484152a36a647d888afd8cee24f14233c57e44919281de951afb997798f704d424f827572a4f386b8c8a61894956e1a19e82c8ed11d4115f4292b48ae65796b082c259e0de5ba0e3f1d3a308055b4659f38d94acad391ab1e25c23c9124f1c429ba3dad61bb443439d2bd266b80038303b323d7432b4bf2c8f129a4ad8306b8a5582828dcc436bc9ede7cde5e217b3e0ac8d6e0ade9af39b0a725073b4ece23253d027f35049a91693e2483dc39f0a7dfbd3eb8c501a16606ceb6f1b9ebbd9a9f7da8d8ba31ce7722da6b3e4bf152376f62140e276b29ea92b50989f17a38878d8fba771adc7c6ada131570557b8d5c90bc96735a1e5b23bed91a5ffa936b16c85a1633c1db4308bea4d00ae41ef98c9115744f3109cd0b8aed3583b42397917c3228a879c8de5042d8c1c2ed8cc0c3703a7000621ac2e05f09c6d45616c2e1001a15ba354421002875621ed074c8e9797187046115647e069988125c811649ec657343ae4d68d17b61b703c32aeba544c1fe6128ec591ee104658defaf41569a12aa6d1e314482908dc9d81d4b613dfed52bdb42226f2df747838c7dc5bb383f478f04571b4f9cb3abdc494c551c78b15afd640c001b64f69a0746f5a928a1fe9e3a8d3871b7cc7e8d0a5f471f89057834143c0e659a200d941fb3a6a0ff4fb8237a63da792e4223163a9247644ffd3e43fbba77d70b2b65c01da38a7160a15190d494842811d5ef5c61b39f627f01e150cb2902c666ecf7bce3d8977080bd9e16838101ac8fa1556cf620774714b82b7db09d0390b9325713c1cd61666e8f84ca5ae296dc348de1ba33ade9d25c8430e5ec8f7c032d111d91b55e7542007d7d8eabcdbab8fdfd2ddf587a5160a45291c0ae9c7bcc36ba712509209343783df4c73761062c6301d7972d0a135dc95b4eb6a18b8a6f4748abbbd6683d96b6695a246339c10c309e3b317803d2323b4a61188259e7e8b65dc275d86d6e3e293632fef86f1f50445547a3b072c6f93c3c6512757db8746470cda831a7e25dd82e6da05ce0f0452238fe7a726dd511df0a089f04185d79a2def9481d75d10597752a30b330bf026874599a43f9ed7b29305e80499996259e2894964e1b9f5d0d1e7f9a39855ac14d89b762fb3fc9f9a7f01fa224aafc3b9722665ef6f7aabfcea247e5f4cb79700b93457c942738eec2ff3c2b3db4f0f20fe3570c1a3e3154f914ee5729be5acf0bdbc5ed9ca96d7ecea182f1dddcc777c478da63630c9df9022094ba7928554a1c799342f7f6ad6406f86864d7998bd90cc20bae6b7320e63ec9655470d6cfbb6f7fbe0ddaa6dcf6703fdae138d44f357a3737c353d494f87c17afd46c309740ca31cf7989ab9859e37e083150114b786f3559bd31a022185fc64f0f8f93bf0d07050e87804ef3538bd703998b9f036f63197081f6e033804a1e4197936b239d06568ad58169daed8e48c027a4cf40da775f0e60d14993161d17de891d720b4de21cb5aef5953b1852854283c637eaf4e14b2dc71691d0c93960138a15ff141a7dba38a0f14e6beaacfce633906c92749b716363202e98a990148000cfc1ed12c7ef3fc8bfb9a0b056ea75b9703c74b1ac0388a9c63419fe2c6cb81672df79472929e5d083da53a2b12d9e45577cc91e8c739d6510596d1bf39bb2c3477e75b066fe8c4f4c55557d6a7fbf51e3ecd9fcdc7d01736c5ff8ed73fdbe86aee39d3d22a806803da545494b0de85e60d7fcce0b4b56c8aa2cef1097d8353f92664dbe7a36dc86b744fdeb639e8ce08b19f30645b2c0d4efbdd5a9bcd60b76c35c9b33fdae5af885d9227edabb26d3e17b53e9fad8dc6332ff980423c147c886b41f852fbf02cee3a842cf42723a4406d5e67fceafb4e746e7e30346c035af64b68d1d2defc5a034fbb3bfc331ff27a26368c6f966f25616c243f36fc73da9745f7efaf8f50ba75d0d99c1d9eea4c99a55e77b4b5c858dd44f06added674bf4ecafdc24b536683d9902dc1ee4c0eecc16f0b00699f78ecc83e8a1244f9138310d0fcc4a1c1e0218c5948200b2fc6f078386075a3cdfaa67d7daa4e9258c6e9003ebbd5c8926aae1cd9cec78f06ef8c53665b61b5fd0b799ccbae4769dfc85176c6121937ae9e4ebf5790e618f03d0cd92e4f4a7085e537f9e83b2cb4d8f2fdc74ad5527603c09b8bccb455d997b7345b1282156b3561aecd1ad19e967a8f831478cc1e1bba42660edb498b722bf297d9c23c7eba797c346f05c092959181c9d7b5d2fd84cd2735364a3b6eea5a59c13e7815f0269e61cc80687bfdce14d99292c6007f2d743c73bfe1bfd24c2feed268b529e65a0755ecf0f023b6e9a877c24ba5a3c987f0fb8b130f676933216a3af729bfef1d792a7d25ba59672201c624dbd58988baa2307a2b3429271f3b3ca3ffa35588460535004024f2d8449b3086c2554b2854e386ba501e3e01391802371584f057d9514c20d226d7fb24471d626bccbd848babdd9f43e07e5f7508252fde4fd49e8cc513aea82c638481dbb3848b4eeea638fcc5219d4f55a5ac742ad6ea9147b1df77772ceb74ba3843981e6617f85fa4bd71b59f4412542cac7ec8f06b0146d7597282fc82edfbd153a76b94fe2770a6b5970023896cf1242122820ce3dabc28a045a216f31be3f844e5c12d1dd9ac139e7196f795a2e756b8f4f8bb1de6bffb47f9e77f6357e5e3a383e87596784a49a56cc6399533cf663923fc7e98322562794ce842630612be2968c0def17446ddded3195f68d97a2ca92139689844ac72efad08574c7f2788fe4ce4a0f36eae4e8d41bc821de9f6ccc6f964daeca9d09684ea715af966cc0cd7adc7410213474bbb4fd515b10ff8b6373323ded176dd27140488a5cdde02b358889b35f0cb1486607cf69ff7e04c7ea448dc3bbcebb48264339332af479df7fe635d2b15967700443a1593f6ba3c493f332461dc735a15a1b8eb526af269ce0c64d04fc68d2a8e85f7b1424423d404d190b434b33d61f13caadefa0bb499a60d24104957c93d222c60e12de3b761cd800c1a1c4f9fef17490010640277417dc138880d33da04cbb59a6fe65abcd3581f961bc237c2f6f4c311a1354f55c654f7bafdc4347b2fba3f90721e8c9e74fd08832a0f4717646d7c309fa9c7e4d7384172b3dc3e98c3c9f72c20b838fc5163b8ed2f4d662d450845e33ead8231a0d0753ebba080807358877065846a60dfff2e41e8be7ab20254b4e5bd0ad01a672ac80d580fb45b0f97d9447eb3d9e6f511fe852c8ae946535a9ba58d46c4fac88119e4cf9e9108041975eaedf350dd48c71000aa62a015fe4051806af7cacea560905c95903e9a07e5b17f583f42d941dec62194ae8f9b2ba7439996696ea7a855e085153f83a1e3aaedf1cc6c49616a362a27fafada9f7b0ca9a39ddca29defb565ae6232149f34ac890eaf64766693edec8a38e30e7ab16e3e4886f2c4469e370f8b3b19e9b879bc8bc3452aa23089f77779c7d1aef093dfffe1b7753a7096b9d2c9b047d8f33b02ef0328355caf3b802d3a2dc1b2ee941bc3deab84102eeff4e7a152b5c5a066fa651c2cc3d141a7da0461bd53d2b5f2ec956fc2d88a7d2f0957ef10ea22b19fd137ce3525d44a47104c0165e05460ddff44d1abbb23016ff36ed3362fe99784d0ac58379b20bbb79f8a7ecfac38619e8903e745e76a1cea2074d751ac75f751b99036a61bf7b384ec93c43b77171bb11bfa4a15160d559c9a575157957994218c144a399e59ab265c9ebcc0d21b383447de81347ba3e769589977430091419fbf46cf478486eee72ef88a104eb57eb4e66574610a56d0349052ccc9ff6038f93755ff8acb16985b6fd7c3bffe575ba9a6576acd50ef3be6871b97c31f9adc22c030e10f9b2c9c3e16c5fce5ffd7c80a84030f673aac9e1cfcc8a53761abb7ba49a623c4f640f3870f9b03738a88cca53a0c06516c19a7a69f94f235f1cf0260327d178e4f770f7a278c81ee5801972f1c01c7680d0abb8288830fdda489282ac51b6589e4b7746528d08e209c5d3e9fdac3daf5b9dcc19c3cde362f403cabba2609697ba0583a0c08725d95cc6e785c169f4d3186366ede5ce9fbc3efc216a38a6068fdfefd02778b2f83ec30dbcceebd319180fe89123c30315e4b51ea2f51aa32cc748558fcbe796943d9f3169f91f14fa1b702533c4f777b9e2a4ed8bd546655bda3b3e3a8af0ab1e77b499a8bd04cc0ec58e972befe4bf4fcf333903b06979823c716c2496200af1692adbf05d8cc73debdb2391c5193c5382efa9f1c649392a273eda1308c0986f19845dc6d15f8923d26994cdf2a868ac62d6d42f27920fd5130f3ac939f2e196cc3d4e262d26014348cb8b00db94cf14cc9c74b3c9a1e1f29fcb4bc463bbfc2b0d190831d33fea3b6f9aa03a7695cca2343e63cb42904e6e09ed70b74ab909e9b9a01f63f885f95dc32062d773363f78347c88dfe4983d4d46315c07d7f2a6e4fec28509005e86c0c2420f06cf5d66e55b3c5c860ad8b15693ca1ba40b1b6bef10a83b378b8559178a3dea2332d3350bae05ffa78493237e5cdbec5e818e33ba705315a89d94eb07ac3a1097043065c197ce4edbc17f496fa8aa294990b8cf8b5cf1e7bc482e528dcaf7afe2ba20b87f22733ff4ec51f8bbb634491203b4a2dd576e46943f2ca07f3bcdabdd5c0ded650f0f87ed5946be81d083d31a83f024a3ac474b8fc98d09bcaa2202f932aaac5ec8c6ea11533034123cfb954fe148f49e73ca18f55c09d1d86649952d9430464fa128d584d66ea2278bd3a9d9aa704604dbdccb2d1ee351b385cb87ea2144082d48d690466620577241ba905979ebfe5d5eb495fbd0a5b4b4cd17dc152f5f22a4bf465407b65214df5e0eb956595c6648ee20104684b61661b130973467d8ffcde41373f7d9eb1cf0d18fc18ae3b9f90f6874ed8468ed87f796bf41da434f2df0f96c7480e1439b7ae79c0a3710b729a484a58a1cc79499617f903c4d0d94ceb4407a93dcd7eb5a1ad61f867bc950b4f51f54dc3914004c142bdb670e097b6e848144f91cdba5877abb790836cd082c641aa8b845f22655841067afc2fe423ff4d7e54bfcf9430f452d1647991a3c9c1588a3b7489d1a6e20ed608d5b691d9b778e1dbbde3e9534f916405d9dee2c9f5fd4feeea6e35f9174901fa09c82121ca8daaf0cf3c02eb864c2bf95c1dc03dad56b97fcbd6c6763a03ecdba6cee4900cbf9d3685f9cb297538018db40d02b8a30bdc7782847a18e8479ff4830ec25fe9b8652ec53d6d224204e21e8e2ee71c1b86e04766c7cd348df11346634c122312d8bf054d11ca63ace28f3c618ccea342cb37e7675de68045dbcf7a3d995769c84e0e12c94f578eb2c2b9a3547697884de5c7bb21e623003e558c042b84eff5b63fb1efb60cc387fa8ef1739e99d3d36ded797ed97b0c7ad34b5cb110c6733c9c432688379c53b96fd2f3ab1407acdcd9be5bfa2932a4bd0d93cddf801b9d2bbbe88c798a49a96d52454377291100bfbf2e5d4b2fb0adf156fc6c11db9aadb92ae6f5cec48eda2e161f86339238ca7b6c9ef263fd580c9ea6286", 0x1000}, {&(0x7f0000001b40)="6c8861a29c55a84feea17aa09bd31d9cb4e2e7739512c8c4686e8afd9d15457070177b2b58934c4e96e9c8195722d8f3a03229da77527f0b362886aaebd60c0a26f69f098efe4add8cd4458a9aa18de020bf8090e121eb2576d05b07e60509f678ef8ef37207862dc7f347626c764dfc36fcbe8ba5f128b04b0bd99c5dc3cf9c20684669f2cf728c0a7e21d574194b2672470ec3d8e8a2644d542f166731f27d38cb2e304b4c17cfda4c4294d0bf0221c490d74e69bd854b0e5e9c158e6c87bed448810d16799c", 0xc7}, {&(0x7f0000001c40)="66a7f9c358c2526ec8da126500aca5e7aa01ffbc467c0d7e907c37dff18ea19259d0e9cef8ebc2d63fac5627a1df6e4326f1c9a7263766cc9b8eae3a223819900e1779cd5ed304089ee946539e466a5cc16800292f86ba5059759151f0075a9d67a03efab3339d1077502a46392fae275d5939f8bf5b06bddb048a83453f39ee8c486981", 0x84}, {&(0x7f0000001d00)="01cc0aa18bbbb745f074835855", 0xd}], 0x4, 0x4, 0x7fffffff) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001d80)=@v2={0x2, @adiantum, 0x4, '\x00', @d}) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001dc0), 0x80000, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xb8, 0x0, 0x802, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7e, 0xac, "c3f98bc8afc3b3f0365927de89c898fea9826abe673c7ca7c2aed1c3f90dc5cce4248f9a1939a5e3b9435c68142576a2554ec60f9cfadb5f1e8b9b7215daa1661a0441552b7ae7a0053368814d50ce4c84ea6a4bf571cf18a5bfc627b1def839dc3f80159f72ba3f92b5433f4a434cfbe6700d2e625bb45d0f2f"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x13, 0xbe, "8f8956bd731c4b02bc86ca2ac959c5"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x4815) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000001f80)={0x8, 0x0, "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"}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000020c0)={0x3, 'pim6reg\x00', {0x8001}, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002340)={'tunl0\x00', &(0x7f00000022c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x9, 0x3, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x68, 0x0, 0x75, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xf7, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x7, 0x28, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0xad, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @multicast2, @local]}]}}}}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002580)={r2, 0x20, &(0x7f0000002540)={&(0x7f0000002400)=""/52, 0x34, 0x0, &(0x7f0000002440)=""/254, 0xfe}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002640)={{r2, 0xffffffffffffffff}, &(0x7f00000025c0), &(0x7f0000002600)=r5}, 0x20) (async) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002680), 0x402000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x15, 0x12, &(0x7f0000002100)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @jmp={0x5, 0x0, 0x3, 0x4, 0x2, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000021c0)='syzkaller\x00', 0x5, 0xb5, &(0x7f0000002200)=""/181, 0x40f00, 0x40, '\x00', r6, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000023c0)={0x2, 0xa, 0xe, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000026c0)=[r5, r5, r2, r8, r9, r5], 0x0, 0x10, 0x90, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f0000002800)={0x118, r3, 0x800, 0x70bd29, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe1, 0xbe, "dcd4f08b165f7ac91c7c105e05a16d38f7fe1b8250226b72ed24717f70d30d0aa8abc5bc535257f4c60701adf2bb84b296d1160c3bac065a1b8b8bbfede937f8db9a5ee8684bac00f8ca6892c7660637b6c118c6655ef8be3785a9cd9d2fa837255da715665c1ee272db8205a8eeb8297d48e84ef71aae7e8f9733d9b1ce1d49d34f053b5a78cccf4af8f9c6752469c62eadcc0ec5c0d23225ab615cd4decc71d42d685158556ce77f0b22b30a5b22e2bc5d5c65ef53d69d26dc186a48929d4658c965ca5d1ae06fea157b295b0d3df7a4b90d46baac2b4b4d946a3e85"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x880}, 0x8a0) (async) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x864e1) (async) r10 = add_key$fscrypt_v1(&(0x7f00000029c0), &(0x7f0000002a00)={'fscrypt:', @desc2}, &(0x7f0000002a40)={0x0, "8a0e9c7a4e594ea5974d17771c86574f47ec60ecbbb92168c25a53393d7b6f30265c4dd3e1a51139df76cb38510e214db2a7c712f4430cf43da6dc5acda2996d", 0x1e}, 0x48, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r10, 0x23) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind(r11, &(0x7f0000002ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x2, 0x3, 0x1}}, 0x80) 141.829683ms ago: executing program 0 (id=389): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000000780)=""/193, 0xc1}], 0x2}}], 0x1, 0x20, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) (fail_nth: 69) 141.487539ms ago: executing program 3 (id=390): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x4, {{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@mcast1, 0x0, 0x33}, @in6=@remote, {0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x25, 0x4}, {0x0, 0x200000, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 22.927093ms ago: executing program 3 (id=391): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000980)={[{@errors_remount}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 0s ago: executing program 0 (id=392): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) write$UHID_INPUT2(r1, &(0x7f0000000180)={0xc, {0x5c, "bf34e29610b770bd30d9bf0d2e48b506d23581a2b37d3761881c247867168c98830270b3cadc0933f4a6069246888e7c7861f4072e44f42def8d1144f9d337abe4f4f4678c37778538fca01460f58324c07996c739f8d1116af1e30a"}}, 0x62) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setfsgid(0xee00) socket$igmp6(0xa, 0x3, 0x2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) pipe2$9p(&(0x7f0000000100), 0x80400) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100000000000000000000000000000000000300", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) kernel console output (not intermixed with test programs): uetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.195183][ T6522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.197670][ T6522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.201484][ T6522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.203827][ T6522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.206926][ T6523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.216814][ T6533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.218179][ T6085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.219412][ T6085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.219814][ T6085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.226019][ T6520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.228354][ T6520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.228975][ T6085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.229246][ T6085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.236099][ T6533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.238274][ T6085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.239677][ T6085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.242576][ T6085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.244262][ T6085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.245429][ T6530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.254411][ T6530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.267507][ T6522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.561497][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 41.576011][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 41.628749][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 41.714269][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 41.772649][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.773897][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.774055][ T6518] bridge_slave_0: entered allmulticast mode [ 41.774942][ T6518] bridge_slave_0: entered promiscuous mode [ 41.777009][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.777058][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.777160][ T6518] bridge_slave_1: entered allmulticast mode [ 41.778015][ T6518] bridge_slave_1: entered promiscuous mode [ 41.802191][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.802298][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.802404][ T6531] bridge_slave_0: entered allmulticast mode [ 41.803238][ T6531] bridge_slave_0: entered promiscuous mode [ 41.834307][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.837572][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.837982][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.838119][ T6531] bridge_slave_1: entered allmulticast mode [ 41.838974][ T6531] bridge_slave_1: entered promiscuous mode [ 41.869581][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.892500][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 41.895817][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.897739][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.899949][ T6517] bridge_slave_0: entered allmulticast mode [ 41.902527][ T6517] bridge_slave_0: entered promiscuous mode [ 41.905127][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.905209][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.905325][ T6517] bridge_slave_1: entered allmulticast mode [ 41.906197][ T6517] bridge_slave_1: entered promiscuous mode [ 41.927825][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.957989][ T6518] team0: Port device team_slave_0 added [ 41.961061][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.974471][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.976458][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.978676][ T6525] bridge_slave_0: entered allmulticast mode [ 41.981321][ T6525] bridge_slave_0: entered promiscuous mode [ 41.982811][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.982856][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.982960][ T6525] bridge_slave_1: entered allmulticast mode [ 41.984001][ T6525] bridge_slave_1: entered promiscuous mode [ 41.985911][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.995088][ T6518] team0: Port device team_slave_1 added [ 42.020765][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.036853][ T6531] team0: Port device team_slave_0 added [ 42.038455][ T6531] team0: Port device team_slave_1 added [ 42.061887][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.062926][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.062953][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.062992][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.064668][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.064695][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.064734][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.078455][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.078484][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.078518][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.108356][ T6517] team0: Port device team_slave_0 added [ 42.109986][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.129189][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.131204][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.133798][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.143266][ T6517] team0: Port device team_slave_1 added [ 42.153229][ T6525] team0: Port device team_slave_0 added [ 42.158050][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.160298][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.162564][ T6524] bridge_slave_0: entered allmulticast mode [ 42.165332][ T6524] bridge_slave_0: entered promiscuous mode [ 42.166769][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.166814][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.166918][ T6524] bridge_slave_1: entered allmulticast mode [ 42.167797][ T6524] bridge_slave_1: entered promiscuous mode [ 42.189637][ T6518] hsr_slave_0: entered promiscuous mode [ 42.191816][ T6518] hsr_slave_1: entered promiscuous mode [ 42.195985][ T6525] team0: Port device team_slave_1 added [ 42.229846][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.229901][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.229961][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.243446][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.245848][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.248596][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.249803][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.249829][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.249862][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.269321][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.269373][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.269416][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.299436][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.311860][ T6531] hsr_slave_0: entered promiscuous mode [ 42.312461][ T6531] hsr_slave_1: entered promiscuous mode [ 42.312883][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.312967][ T6531] Cannot create hsr debugfs directory [ 42.329131][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.375855][ T6517] hsr_slave_0: entered promiscuous mode [ 42.376393][ T6517] hsr_slave_1: entered promiscuous mode [ 42.376724][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.376754][ T6517] Cannot create hsr debugfs directory [ 42.391098][ T6525] hsr_slave_0: entered promiscuous mode [ 42.393300][ T6525] hsr_slave_1: entered promiscuous mode [ 42.395515][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.395547][ T6525] Cannot create hsr debugfs directory [ 42.440302][ T6524] team0: Port device team_slave_0 added [ 42.465179][ T6524] team0: Port device team_slave_1 added [ 42.555827][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.555887][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.555937][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.557143][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.557168][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.557204][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.640146][ T6524] hsr_slave_0: entered promiscuous mode [ 42.640701][ T6524] hsr_slave_1: entered promiscuous mode [ 42.641012][ T6524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.641041][ T6524] Cannot create hsr debugfs directory [ 42.746442][ T6518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.752197][ T6518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.770404][ T6518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.780338][ T6518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.823950][ T6531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.833153][ T6531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.840762][ T6531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.844348][ T6531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.880091][ T6517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.885205][ T6517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.895346][ T6517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.899265][ T6517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.958006][ T6525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.959979][ T6525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.973294][ T6525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.978748][ T6525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.018930][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.069517][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.073334][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.080298][ T6524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.084231][ T6524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.090174][ T6524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.097829][ T6524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.104081][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.109343][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.109466][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.122844][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.122957][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.136211][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.149001][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.149089][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.170747][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.170840][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.179183][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.196273][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.196347][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.212999][ T6517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.213070][ T6517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.225497][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.225571][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.254294][ T6522] Bluetooth: hci1: command tx timeout [ 43.255986][ T6523] Bluetooth: hci2: command tx timeout [ 43.271506][ T6531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.274778][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.312968][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.330925][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.341724][ T6523] Bluetooth: hci3: command tx timeout [ 43.341988][ T6523] Bluetooth: hci0: command tx timeout [ 43.342123][ T6523] Bluetooth: hci4: command tx timeout [ 43.366311][ T6518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.371036][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.371122][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.371967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.372011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.402532][ T6525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.402615][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.428026][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.436305][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.479140][ T6517] veth0_vlan: entered promiscuous mode [ 43.482425][ T6517] veth1_vlan: entered promiscuous mode [ 43.502210][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.509417][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.537050][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.537130][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.541154][ T6517] veth0_macvtap: entered promiscuous mode [ 43.545064][ T6517] veth1_macvtap: entered promiscuous mode [ 43.557104][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.562467][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.562553][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.568274][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.616205][ T6517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616304][ T6517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616614][ T6517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616818][ T6517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.632676][ T6531] veth0_vlan: entered promiscuous mode [ 43.647555][ T6531] veth1_vlan: entered promiscuous mode [ 43.660347][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.674857][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.707147][ T6531] veth0_macvtap: entered promiscuous mode [ 43.710540][ T6531] veth1_macvtap: entered promiscuous mode [ 43.721273][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.727786][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.746508][ T6525] veth0_vlan: entered promiscuous mode [ 43.751724][ T6531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.752303][ T6531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.752336][ T6531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.752367][ T6531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.818649][ T6525] veth1_vlan: entered promiscuous mode [ 43.848944][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.849182][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.881512][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.881563][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.886991][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.902130][ T6525] veth0_macvtap: entered promiscuous mode [ 43.905401][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.905463][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.923201][ T6518] veth0_vlan: entered promiscuous mode [ 43.943393][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.943454][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.946248][ T6525] veth1_macvtap: entered promiscuous mode [ 43.960692][ T6518] veth1_vlan: entered promiscuous mode [ 44.000201][ T6518] veth0_macvtap: entered promiscuous mode [ 44.002159][ T6518] veth1_macvtap: entered promiscuous mode [ 44.008879][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.022087][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.028678][ T6531] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.030028][ T6525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.030077][ T6525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.030107][ T6525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.030137][ T6525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.034797][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.070323][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.141884][ T6629] loop3: detected capacity change from 0 to 1024 [ 44.146631][ T6629] ======================================================= [ 44.146631][ T6629] WARNING: The mand mount option has been deprecated and [ 44.146631][ T6629] and is ignored by this kernel. Remove the mand [ 44.146631][ T6629] option from the mount to silence this warning. [ 44.146631][ T6629] ======================================================= [ 44.157371][ T6518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.157454][ T6518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.157485][ T6518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.157515][ T6518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.192602][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.200899][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.200964][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.267278][ T2114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.267339][ T2114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.279663][ T6524] veth0_vlan: entered promiscuous mode [ 44.285643][ T6524] veth1_vlan: entered promiscuous mode [ 44.298403][ T6524] veth0_macvtap: entered promiscuous mode [ 44.301983][ T6524] veth1_macvtap: entered promiscuous mode [ 44.310444][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.314716][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.318894][ T6524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.321461][ T6524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.324132][ T6524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.326455][ T6524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.447732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.451917][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.222240][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.270047][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.270107][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.327575][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.329809][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.333959][ T6522] Bluetooth: hci2: command tx timeout [ 45.334020][ T6522] Bluetooth: hci1: command tx timeout [ 45.359935][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 45.538255][ T6523] Bluetooth: hci4: command tx timeout [ 45.539881][ T6523] Bluetooth: hci0: command tx timeout [ 45.541439][ T6523] Bluetooth: hci3: command tx timeout [ 45.560929][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.570205][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.471513][ T6522] Bluetooth: hci1: command tx timeout [ 47.570453][ T6522] Bluetooth: hci2: command tx timeout [ 47.583805][ T6523] Bluetooth: hci3: command tx timeout [ 47.584141][ T6522] Bluetooth: hci0: command tx timeout [ 47.588305][ T6522] Bluetooth: hci4: command tx timeout [ 49.018369][ T6666] loop3: detected capacity change from 0 to 4096 [ 49.102924][ T6673] loop0: detected capacity change from 0 to 1024 [ 49.103173][ T6666] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 49.175276][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.247691][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.247843][ T6680] chnl_net:caif_netlink_parms(): no params data found [ 49.322172][ T6684] loop4: detected capacity change from 0 to 2048 [ 49.402326][ T6684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.574025][ T6530] Bluetooth: hci2: command tx timeout [ 49.574100][ T6530] Bluetooth: hci1: command tx timeout [ 50.282829][ T6523] Bluetooth: hci3: command tx timeout [ 50.282906][ T6523] Bluetooth: hci4: command tx timeout [ 50.282963][ T6523] Bluetooth: hci0: command tx timeout [ 50.386749][ T6686] loop3: detected capacity change from 0 to 4096 [ 50.392825][ T6686] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 50.399024][ T6686] ntfs3(loop3): It is recommened to use chkdsk. [ 50.400865][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.511692][ T6686] ntfs3(loop3): ino=9, mi_enum_attr [ 50.512392][ T6686] ntfs3(loop3): Failed to load $Secure (-22). [ 50.512424][ T6686] ntfs3(loop3): Failed to initialize $Secure (-22). [ 50.570161][ T6682] loop2: detected capacity change from 0 to 40427 [ 50.584166][ T6682] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 50.584253][ T6682] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.734147][ T6682] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.734324][ T6682] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.822172][ T6682] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 50.907354][ T6690] loop1: detected capacity change from 0 to 32768 [ 50.992332][ T6690] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 51.007533][ T6698] loop0: detected capacity change from 0 to 32768 [ 51.233034][ T6690] OCFS2: ERROR (device loop1): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 8, 0) [ 51.244672][ T6690] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 51.244759][ T6690] OCFS2: File system is now read-only. [ 51.244796][ T6690] (syz.1.15,6690,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 51.244830][ T6690] (syz.1.15,6690,1):ocfs2_populate_write_desc:1384 ERROR: status = -30 [ 51.244865][ T6690] (syz.1.15,6690,1):ocfs2_write_begin_nolock:1690 ERROR: status = -30 [ 51.244909][ T6690] (syz.1.15,6690,1):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 51.252325][ T6686] loop3: detected capacity change from 0 to 32768 [ 51.493734][ T6686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14 (6686) [ 51.523405][ T6686] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 51.524526][ T6686] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 51.524568][ T6686] BTRFS info (device loop3): disk space caching is enabled [ 51.524671][ T6686] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 52.293340][ T6518] ocfs2: Unmounting device (7,1) on (node local) [ 52.323718][ T6686] BTRFS info (device loop3): rebuilding free space tree [ 52.831384][ T6686] BTRFS info (device loop3): disabling free space tree [ 52.856274][ T6686] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.857105][ T6686] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.299069][ T6517] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 53.370749][ T6745] loop2: detected capacity change from 0 to 512 [ 53.417085][ T6745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.470958][ T6745] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.25: corrupted inode contents [ 53.472139][ T6745] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.25: mark_inode_dirty error [ 53.472528][ T6745] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.25: corrupted inode contents [ 53.472862][ T6745] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.25: mark_inode_dirty error [ 53.532754][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.915589][ T6761] loop2: detected capacity change from 0 to 4096 [ 53.925253][ T6758] block device autoloading is deprecated and will be removed. [ 53.927205][ T6761] ntfs3: Unknown parameter 'nosparse' [ 53.987416][ T6761] loop2: detected capacity change from 0 to 512 [ 54.002737][ T6761] EXT4-fs (loop2): mounted filesystem 0000004b-0845-4100-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.031482][ T6761] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 18: comm syz.2.28: lblock 23 mapped to illegal pblock 18 (length 1) [ 54.296252][ T6525] EXT4-fs (loop2): unmounting filesystem 0000004b-0845-4100-0000-000000000000. [ 54.476872][ T6762] loop3: detected capacity change from 0 to 32768 [ 54.506821][ T6762] btrfs: Unknown parameter 'obj_type' [ 54.673855][ T6771] loop9: detected capacity change from 0 to 8 [ 55.265653][ T6771] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 55.265713][ T6771] loop9: partition table partially beyond EOD, truncated [ 55.266716][ T6771] loop9: p1 size 81768186 extends beyond EOD, truncated [ 55.327731][ T6699] udevd[6699]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 55.459916][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 55.509900][ T6779] loop3: detected capacity change from 0 to 128 [ 55.558327][ T6785] loop2: detected capacity change from 0 to 512 [ 55.627799][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.684261][ T6785] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.37: corrupted inode contents [ 55.684583][ T6785] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.37: mark_inode_dirty error [ 55.685261][ T6785] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.37: corrupted inode contents [ 55.690907][ T6785] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.37: mark_inode_dirty error [ 55.732526][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 55.770350][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.833365][ T6796] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.38'. [ 55.852208][ T6796] openvswitch: netlink: Key 23 has unexpected len 44049 expected 2 [ 55.915169][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 55.915299][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 56.009348][ T6524] cgroup: fork rejected by pids controller in /syz4 [ 56.046140][ T6810] netlink: 136 bytes leftover after parsing attributes in process `syz.1.45'. [ 56.046206][ T6810] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 56.052646][ T6809] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 57.087553][ T6824] FAULT_INJECTION: forcing a failure. [ 57.087553][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.087669][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.2.51 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 57.087686][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.087693][ T6824] Call trace: [ 57.087698][ T6824] show_stack+0x2c/0x3c (C) [ 57.087718][ T6824] __dump_stack+0x30/0x40 [ 57.087734][ T6824] dump_stack_lvl+0xd8/0x12c [ 57.087747][ T6824] dump_stack+0x1c/0x28 [ 57.087760][ T6824] should_fail_ex+0x41c/0x594 [ 57.087775][ T6824] should_fail+0x14/0x24 [ 57.087788][ T6824] should_fail_usercopy+0x20/0x30 [ 57.087798][ T6824] _inline_copy_from_user+0x40/0x180 [ 57.087811][ T6824] ___sys_sendmsg+0x144/0x278 [ 57.087823][ T6824] __sys_sendmmsg+0x1f4/0x548 [ 57.087833][ T6824] __arm64_sys_sendmmsg+0xa0/0xbc [ 57.087844][ T6824] invoke_syscall+0x98/0x2b8 [ 57.087858][ T6824] el0_svc_common+0x130/0x23c [ 57.087872][ T6824] do_el0_svc+0x48/0x58 [ 57.087885][ T6824] el0_svc+0x58/0x17c [ 57.087897][ T6824] el0t_64_sync_handler+0x78/0x108 [ 57.087909][ T6824] el0t_64_sync+0x198/0x19c [ 57.198084][ T6813] loop0: detected capacity change from 0 to 32768 [ 57.210962][ T6830] loop3: detected capacity change from 0 to 512 [ 57.323827][ T6813] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 58.019230][ T6830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.054438][ T6813] XFS (loop0): Ending clean mount [ 58.063901][ T6830] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.53: corrupted inode contents [ 58.073793][ T6830] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.53: mark_inode_dirty error [ 58.080713][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.081985][ T6830] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.53: corrupted inode contents [ 58.082323][ T6830] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.53: mark_inode_dirty error [ 58.097496][ T6830] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 21: comm syz.3.53: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 58.107263][ T6830] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 21: comm syz.3.53: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 58.614303][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.656951][ T6531] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 58.735642][ T6523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.738591][ T6523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.741326][ T6523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.746873][ T6523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.749285][ T6523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.864079][ T6859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.58'. [ 58.866983][ T6861] loop3: detected capacity change from 0 to 1024 [ 58.983454][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.275857][ T6871] loop0: detected capacity change from 0 to 1024 [ 59.363172][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.086288][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.666878][ T6889] loop9: detected capacity change from 0 to 8 [ 61.179641][ T6889] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 61.181783][ T6889] loop9: partition table partially beyond EOD, truncated [ 61.187541][ T6889] loop9: p1 size 81768186 extends beyond EOD, truncated [ 61.190775][ T6523] Bluetooth: hci2: command tx timeout [ 61.546400][ T6820] udevd[6820]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 61.708648][ T6852] chnl_net:caif_netlink_parms(): no params data found [ 61.782840][ T42] bridge_slave_1: left allmulticast mode [ 61.782969][ T42] bridge_slave_1: left promiscuous mode [ 61.784288][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.805152][ T42] bridge_slave_0: left allmulticast mode [ 61.806839][ T42] bridge_slave_0: left promiscuous mode [ 61.808777][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.667617][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 62.720195][ T6892] loop1: detected capacity change from 0 to 32768 [ 62.786623][ T6892] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 62.849699][ T6518] ocfs2: Unmounting device (7,1) on (node local) [ 63.067263][ T6913] loop2: detected capacity change from 0 to 40427 [ 63.092147][ T6913] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 63.092260][ T6913] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.121356][ T6913] F2FS-fs (loop2): invalid crc value [ 63.253721][ T6523] Bluetooth: hci2: command tx timeout [ 63.259496][ T6913] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.259564][ T6913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.280003][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 63.413220][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 64.648652][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.688369][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.745406][ T42] bond0 (unregistering): Released all slaves [ 64.803411][ T6953] chnl_net:caif_netlink_parms(): no params data found [ 64.856346][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.856484][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.904393][ T6960] netlink: 136 bytes leftover after parsing attributes in process `syz.0.86'. [ 64.904466][ T6960] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 66.029837][ T6523] Bluetooth: hci2: command tx timeout [ 66.635683][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.635770][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.635925][ T6852] bridge_slave_0: entered allmulticast mode [ 66.637250][ T6852] bridge_slave_0: entered promiscuous mode [ 66.638397][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.638456][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.638573][ T6852] bridge_slave_1: entered allmulticast mode [ 66.639418][ T6852] bridge_slave_1: entered promiscuous mode [ 66.667822][ T6989] FAULT_INJECTION: forcing a failure. [ 66.667822][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.674471][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.1.94 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 66.674493][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.674501][ T6989] Call trace: [ 66.674505][ T6989] show_stack+0x2c/0x3c (C) [ 66.674525][ T6989] __dump_stack+0x30/0x40 [ 66.674540][ T6989] dump_stack_lvl+0xd8/0x12c [ 66.674553][ T6989] dump_stack+0x1c/0x28 [ 66.674566][ T6989] should_fail_ex+0x41c/0x594 [ 66.674580][ T6989] should_fail+0x14/0x24 [ 66.674593][ T6989] should_fail_usercopy+0x20/0x30 [ 66.674604][ T6989] _inline_copy_from_user+0x40/0x180 [ 66.674626][ T6989] ___sys_sendmsg+0x144/0x278 [ 66.674637][ T6989] __sys_sendmmsg+0x1f4/0x548 [ 66.674648][ T6989] __arm64_sys_sendmmsg+0xa0/0xbc [ 66.674659][ T6989] invoke_syscall+0x98/0x2b8 [ 66.674673][ T6989] el0_svc_common+0x130/0x23c [ 66.674686][ T6989] do_el0_svc+0x48/0x58 [ 66.674699][ T6989] el0_svc+0x58/0x17c [ 66.674712][ T6989] el0t_64_sync_handler+0x78/0x108 [ 66.674724][ T6989] el0t_64_sync+0x198/0x19c [ 66.842310][ T6997] loop1: detected capacity change from 0 to 512 [ 66.930529][ T6997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.955219][ T7005] loop2: detected capacity change from 0 to 512 [ 66.961525][ T6997] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.96: corrupted inode contents [ 66.962815][ T6997] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.96: mark_inode_dirty error [ 66.963863][ T6997] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.96: corrupted inode contents [ 66.965003][ T6997] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.96: mark_inode_dirty error [ 66.976585][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.981898][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.023920][ T6997] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 21: comm syz.1.96: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 67.031193][ T7005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.050583][ T7005] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.98: corrupted inode contents [ 67.051285][ T7005] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.98: mark_inode_dirty error [ 67.051579][ T7005] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.98: corrupted inode contents [ 67.054318][ T7005] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.98: mark_inode_dirty error [ 67.054705][ T6997] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 21: comm syz.1.96: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 67.105569][ T7005] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 21: comm syz.2.98: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 67.106708][ T7005] FAULT_INJECTION: forcing a failure. [ 67.106708][ T7005] name failslab, interval 1, probability 0, space 0, times 1 [ 67.106745][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.2.98 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 67.106759][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.106766][ T7005] Call trace: [ 67.106770][ T7005] show_stack+0x2c/0x3c (C) [ 67.106789][ T7005] __dump_stack+0x30/0x40 [ 67.106804][ T7005] dump_stack_lvl+0xd8/0x12c [ 67.106817][ T7005] dump_stack+0x1c/0x28 [ 67.106830][ T7005] should_fail_ex+0x41c/0x594 [ 67.106845][ T7005] should_failslab+0xc0/0x128 [ 67.106859][ T7005] kmem_cache_alloc_noprof+0x80/0x3e8 [ 67.106874][ T7005] getname_flags+0xb4/0x470 [ 67.106888][ T7005] __arm64_sys_mkdirat+0x7c/0xa4 [ 67.106900][ T7005] invoke_syscall+0x98/0x2b8 [ 67.106913][ T7005] el0_svc_common+0x130/0x23c [ 67.106927][ T7005] do_el0_svc+0x48/0x58 [ 67.106940][ T7005] el0_svc+0x58/0x17c [ 67.106952][ T7005] el0t_64_sync_handler+0x78/0x108 [ 67.106965][ T7005] el0t_64_sync+0x198/0x19c [ 67.182036][ T6996] loop0: detected capacity change from 0 to 32768 [ 67.184766][ T6996] BTRFS warning: excessive commit interval 994269533, use with care [ 67.184851][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.191173][ T6996] btrfs: Bad value for 'max_inline' [ 67.204549][ T6518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.341271][ T7014] loop1: detected capacity change from 0 to 1024 [ 67.421786][ T7016] loop1: detected capacity change from 0 to 256 [ 67.482206][ T7016] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 67.516293][ T6996] loop0: detected capacity change from 0 to 4096 [ 68.114545][ T6530] Bluetooth: hci2: command tx timeout [ 68.174872][ T6852] team0: Port device team_slave_0 added [ 68.177938][ T6852] team0: Port device team_slave_1 added [ 68.236182][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 68.362951][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.363011][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.363076][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.378825][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.380736][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.388282][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.618847][ T42] hsr_slave_0: left promiscuous mode [ 68.620192][ T42] hsr_slave_1: left promiscuous mode [ 68.620671][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.620724][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.622482][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.622528][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.638403][ T7037] loop1: detected capacity change from 0 to 16 [ 68.641681][ T7037] erofs (device loop1): mounted with root inode @ nid 36. [ 68.648633][ T7037] erofs (device loop1): readahead error at folio 87 @ nid 36 [ 68.648741][ T7037] erofs (device loop1): readahead error at folio 86 @ nid 36 [ 68.648860][ T7037] erofs (device loop1): bogus lookback distance 363 @ lcn 82 of nid 36 [ 68.648893][ T7037] erofs (device loop1): readahead error at folio 83 @ nid 36 [ 68.648922][ T7037] erofs (device loop1): bogus lookback distance 363 @ lcn 82 of nid 36 [ 68.648952][ T7037] erofs (device loop1): readahead error at folio 82 @ nid 36 [ 68.649023][ T7037] erofs (device loop1): readahead error at folio 79 @ nid 36 [ 68.649054][ T7037] erofs (device loop1): readahead error at folio 78 @ nid 36 [ 68.649099][ T7037] erofs (device loop1): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 68.649130][ T7037] erofs (device loop1): readahead error at folio 76 @ nid 36 [ 68.649167][ T7037] erofs (device loop1): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 68.649197][ T7037] erofs (device loop1): readahead error at folio 75 @ nid 36 [ 68.649240][ T7037] erofs (device loop1): readahead error at folio 74 @ nid 36 [ 68.649286][ T7037] erofs (device loop1): readahead error at folio 72 @ nid 36 [ 68.649316][ T7037] erofs (device loop1): readahead error at folio 71 @ nid 36 [ 68.649354][ T7037] erofs (device loop1): readahead error at folio 70 @ nid 36 [ 68.649512][ T7037] erofs (device loop1): readahead error at folio 63 @ nid 36 [ 68.649572][ T7037] erofs (device loop1): readahead error at folio 61 @ nid 36 [ 68.649627][ T7037] erofs (device loop1): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 68.649657][ T7037] erofs (device loop1): readahead error at folio 59 @ nid 36 [ 68.649686][ T7037] erofs (device loop1): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 68.649716][ T7037] erofs (device loop1): readahead error at folio 58 @ nid 36 [ 68.649760][ T7037] erofs (device loop1): readahead error at folio 56 @ nid 36 [ 68.649881][ T7037] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 68.649911][ T7037] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 68.649940][ T7037] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 68.649969][ T7037] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 68.650006][ T7037] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 68.650052][ T7037] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 68.650082][ T7037] erofs (device loop1): readahead error at folio 43 @ nid 36 [ 68.650111][ T7037] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 68.650145][ T7037] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 68.650183][ T7037] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 68.650213][ T7037] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 68.650242][ T7037] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 68.650271][ T7037] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 68.650308][ T7037] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 68.650338][ T7037] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 68.650404][ T7037] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 68.650507][ T7037] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 68.650538][ T7037] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 68.650907][ T7037] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 68.650957][ T7037] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 68.651064][ T7037] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 68.651455][ T7037] syz.1.104: attempt to access beyond end of device [ 68.651455][ T7037] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 68.651724][ T7037] syz.1.104: attempt to access beyond end of device [ 68.651724][ T7037] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 68.651849][ T7037] syz.1.104: attempt to access beyond end of device [ 68.651849][ T7037] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 68.652373][ T7037] syz.1.104: attempt to access beyond end of device [ 68.652373][ T7037] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 68.652468][ T7037] syz.1.104: attempt to access beyond end of device [ 68.652468][ T7037] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 68.652562][ T7037] syz.1.104: attempt to access beyond end of device [ 68.652562][ T7037] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 68.685815][ T42] veth1_macvtap: left promiscuous mode [ 68.685971][ T42] veth0_macvtap: left promiscuous mode [ 68.686094][ T42] veth1_vlan: left promiscuous mode [ 68.686891][ T42] veth0_vlan: left promiscuous mode [ 68.927112][ T7029] loop0: detected capacity change from 0 to 32768 [ 68.930547][ T7029] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.103 (7029) [ 68.938317][ T7029] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.941148][ T7029] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.943802][ T7029] BTRFS info (device loop0): disk space caching is enabled [ 68.945904][ T7029] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 69.046044][ T7029] BTRFS info (device loop0): rebuilding free space tree [ 69.078805][ T7029] BTRFS info (device loop0): disabling free space tree [ 69.078886][ T7029] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.078937][ T7029] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.103760][ T7029] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 69.911508][ T7060] loop3: detected capacity change from 0 to 512 [ 69.931558][ T7060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 69.931626][ T7060] UDF-fs: Scanning with blocksize 512 failed [ 69.940643][ T7060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 69.940699][ T7060] UDF-fs: Scanning with blocksize 1024 failed [ 69.941086][ T7060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 69.941111][ T7060] UDF-fs: Scanning with blocksize 2048 failed [ 69.941498][ T7060] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 69.943431][ T7060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.980699][ T3910] cfg80211: failed to load regulatory.db [ 70.550209][ T7070] loop9: detected capacity change from 0 to 8 [ 70.688426][ T7070] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 70.688645][ T7070] loop9: partition table partially beyond EOD, truncated [ 70.690417][ T7070] loop9: p1 size 81768186 extends beyond EOD, truncated [ 71.219002][ T6820] udevd[6820]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 71.293989][ T7078] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 71.927164][ T42] team0 (unregistering): Port device team_slave_1 removed [ 72.134636][ T42] team0 (unregistering): Port device team_slave_0 removed [ 74.338218][ T7037] netlink: 624 bytes leftover after parsing attributes in process `syz.1.104'. [ 74.497738][ T7065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.109'. [ 74.498401][ T7068] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.728503][ T7078] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.761974][ T6852] hsr_slave_0: entered promiscuous mode [ 74.762535][ T6852] hsr_slave_1: entered promiscuous mode [ 74.762899][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.762940][ T6852] Cannot create hsr debugfs directory [ 75.477172][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 75.670463][ T7091] loop1: detected capacity change from 0 to 32768 [ 75.981587][ T7120] loop1: detected capacity change from 0 to 1024 [ 76.050341][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.111153][ T7106] loop0: detected capacity change from 0 to 32768 [ 76.120846][ T7106] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 76.120846][ T7106] downgrade (size 2912): [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: [ 76.120846][ T7106] errors: sb_clean_missing [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: alloc_read [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: delete_dead_inodes [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: alloc_read,check_inodes,delete_dead_inodes,set_fs_needs_rebalance [ 76.120846][ T7106] errors: (unknown error 512) [ 76.120846][ T7106] version: 0.5: (unknown version) [ 76.120846][ T7106] recovery passes: [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: fs_freespace_init,bucket_gens_init,check_inodes,delete_dead_inodes [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.120846][ T7106] recovery passes: [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.6: (unknown version) [ 76.120846][ T7106] recovery passes: delete_dead_snapshots [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.33: (unknown version) [ 76.120846][ T7106] recovery passes: check_snapshots [ 76.120846][ T7106] errors: [ 76.120846][ T7106] version: 0.0: (unknown version) [ 76.121049][ T7106] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade [ 76.200805][ T7120] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.217788][ T7120] EXT4-fs (loop1): Remounting filesystem read-only [ 76.223393][ T6909] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 76.282491][ T7118] loop2: detected capacity change from 0 to 32768 [ 76.305634][ T6518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.317062][ T7118] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.442744][ T7118] XFS (loop2): Ending clean mount [ 76.526707][ T7149] binder: 7148:7149 tried to acquire reference to desc 0, got 1 instead [ 76.529885][ T7149] binder: 7148:7149 got transaction to context manager from process owning it [ 76.536165][ T7149] binder: 7148:7149 transaction async to 7148:0 failed 5/29201/-22, code 0 size 88-24 line 3141 [ 76.543808][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.580450][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 76.600094][ T7154] chnl_net:caif_netlink_parms(): no params data found [ 76.655484][ T6525] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.924672][ T7164] netlink: 136 bytes leftover after parsing attributes in process `syz.2.129'. [ 76.933649][ T7164] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 77.051953][ T7145] loop1: detected capacity change from 0 to 32768 [ 77.108159][ T7167] loop3: detected capacity change from 0 to 32768 [ 77.197764][ T7145] syz.1.124: attempt to access beyond end of device [ 77.197764][ T7145] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 77.197869][ T7145] metapage_write_end_io: I/O error [ 77.198388][ T7145] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 77.198388][ T7145] [ 77.206862][ T7174] tipc: Started in network mode [ 77.206916][ T7174] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 77.207127][ T7174] tipc: Enabled bearer , priority 27 [ 77.227461][ T7145] ERROR: (device loop1): remounting filesystem as read-only [ 77.243225][ T7167] journal_load_superblock: Cannot read journal superblock [ 77.243304][ T7167] (syz.3.130,7167,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 77.243332][ T7167] (syz.3.130,7167,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 77.243358][ T7167] (syz.3.130,7167,0):ocfs2_check_volume:2432 ERROR: status = -5 [ 77.243383][ T7167] (syz.3.130,7167,0):ocfs2_mount_volume:1764 ERROR: status = -5 [ 77.253819][ T7167] (syz.3.130,7167,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.262337][ T7145] blkno = 8ed2c, nblocks = 1 [ 77.262393][ T7145] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 77.262393][ T7145] [ 77.275547][ T7145] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 77.275547][ T7145] [ 77.278133][ T7167] input: syz0 as /devices/virtual/input/input2 [ 77.985114][ T6852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.017658][ T6852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.046780][ T7185] FAULT_INJECTION: forcing a failure. [ 78.046780][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.046847][ T7185] CPU: 1 UID: 0 PID: 7185 Comm: syz.0.134 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 78.046863][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.046871][ T7185] Call trace: [ 78.046875][ T7185] show_stack+0x2c/0x3c (C) [ 78.046896][ T7185] __dump_stack+0x30/0x40 [ 78.046911][ T7185] dump_stack_lvl+0xd8/0x12c [ 78.046924][ T7185] dump_stack+0x1c/0x28 [ 78.046937][ T7185] should_fail_ex+0x41c/0x594 [ 78.046952][ T7185] should_fail+0x14/0x24 [ 78.046965][ T7185] should_fail_usercopy+0x20/0x30 [ 78.046976][ T7185] _inline_copy_from_user+0x40/0x180 [ 78.046989][ T7185] ___sys_sendmsg+0x144/0x278 [ 78.047000][ T7185] __sys_sendmmsg+0x1f4/0x548 [ 78.047011][ T7185] __arm64_sys_sendmmsg+0xa0/0xbc [ 78.047021][ T7185] invoke_syscall+0x98/0x2b8 [ 78.047035][ T7185] el0_svc_common+0x130/0x23c [ 78.047049][ T7185] do_el0_svc+0x48/0x58 [ 78.047062][ T7185] el0_svc+0x58/0x17c [ 78.047080][ T7185] el0t_64_sync_handler+0x78/0x108 [ 78.047093][ T7185] el0t_64_sync+0x198/0x19c [ 78.090434][ T6852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.125503][ T6852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.248720][ T6518] syz-executor: attempt to access beyond end of device [ 78.248720][ T6518] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 78.248840][ T6518] metapage_write_end_io: I/O error [ 78.249382][ T6518] JFS: metapage_get_blocks failed [ 78.249456][ T6518] JFS: metapage_get_blocks failed [ 78.249497][ T6518] JFS: metapage_get_blocks failed [ 78.249539][ T6518] JFS: metapage_get_blocks failed [ 78.308455][ T6575] tipc: Node number set to 8432298 [ 78.355040][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.363086][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.086518][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.086620][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.087560][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.087616][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.173149][ T6852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.173229][ T6852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.216200][ T7206] FAULT_INJECTION: forcing a failure. [ 79.216200][ T7206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.219491][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.1.138 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 79.219513][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.219520][ T7206] Call trace: [ 79.219525][ T7206] show_stack+0x2c/0x3c (C) [ 79.219546][ T7206] __dump_stack+0x30/0x40 [ 79.219561][ T7206] dump_stack_lvl+0xd8/0x12c [ 79.219574][ T7206] dump_stack+0x1c/0x28 [ 79.219587][ T7206] should_fail_ex+0x41c/0x594 [ 79.219602][ T7206] should_fail+0x14/0x24 [ 79.219625][ T7206] should_fail_usercopy+0x20/0x30 [ 79.219636][ T7206] strncpy_from_user+0x48/0x370 [ 79.219648][ T7206] getname_flags+0xe8/0x470 [ 79.219662][ T7206] __arm64_sys_mkdirat+0x7c/0xa4 [ 79.219673][ T7206] invoke_syscall+0x98/0x2b8 [ 79.219688][ T7206] el0_svc_common+0x130/0x23c [ 79.219701][ T7206] do_el0_svc+0x48/0x58 [ 79.219714][ T7206] el0_svc+0x58/0x17c [ 79.219727][ T7206] el0t_64_sync_handler+0x78/0x108 [ 79.219739][ T7206] el0t_64_sync+0x198/0x19c [ 79.365825][ T7213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.453375][ T7167] loop3: detected capacity change from 0 to 65536 [ 79.492770][ T7167] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 79.546107][ T7174] loop2: detected capacity change from 0 to 40427 [ 79.558386][ T7167] XFS (loop3): Ending clean mount [ 79.596800][ T7167] XFS (loop3): Quotacheck needed: Please wait. [ 79.600692][ T7235] loop1: detected capacity change from 0 to 512 [ 79.624986][ T312] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 79.625128][ T312] XFS (loop3): Unmount and run xfs_repair [ 79.625151][ T312] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 79.625174][ T312] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 79.625195][ T312] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 79.625216][ T312] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 79.625237][ T312] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 79.625258][ T312] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 79.625279][ T312] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 79.625299][ T312] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.625320][ T312] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.625401][ T312] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 2 error 74 [ 79.639161][ T7167] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 79.705409][ T7235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.720671][ T6568] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 79.720796][ T6568] XFS (loop3): Unmount and run xfs_repair [ 79.720818][ T6568] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 79.720842][ T6568] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 79.720864][ T6568] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 79.720885][ T6568] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 79.720905][ T6568] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 79.720926][ T6568] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 79.720947][ T6568] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 79.720967][ T6568] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.720988][ T6568] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.721011][ T6568] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 2 error 74 [ 79.733940][ T6568] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 79.733993][ T6568] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 79.759897][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.761189][ T7235] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.140: corrupted inode contents [ 79.762947][ T7235] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.140: mark_inode_dirty error [ 79.763321][ T7235] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.140: corrupted inode contents [ 79.763924][ T7235] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.140: mark_inode_dirty error [ 79.802458][ T7235] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 21: comm syz.1.140: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 79.840580][ T7235] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 21: comm syz.1.140: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 79.908885][ T6517] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 80.028036][ T6518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.645868][ T7287] dlm: plock device version mismatch: kernel (1.2.0), user (1844772865.3701796831.2219908657) [ 81.827541][ T6852] veth0_vlan: entered promiscuous mode [ 81.829932][ T7297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.847143][ T6852] veth1_vlan: entered promiscuous mode [ 81.970245][ T6852] veth0_macvtap: entered promiscuous mode [ 82.023979][ T6852] veth1_macvtap: entered promiscuous mode [ 82.050395][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.122172][ T7307] loop9: detected capacity change from 0 to 8 [ 82.153281][ T7307] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 82.153500][ T7307] loop9: partition table partially beyond EOD, truncated [ 82.154837][ T7307] loop9: p1 size 81768186 extends beyond EOD, truncated [ 82.738313][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.741478][ T6852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.741553][ T6852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.741594][ T6852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.741641][ T6852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.869223][ T7311] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 82.945929][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 83.104813][ T7315] netlink: 'syz.2.157': attribute type 3 has an invalid length. [ 83.958040][ T7311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.973278][ T7323] loop3: detected capacity change from 0 to 1024 [ 83.992105][ T7323] loop3: detected capacity change from 0 to 1024 [ 84.242239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.242299][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.248055][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.248092][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.946534][ T7121] udevd[7121]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 85.007295][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 85.007437][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 85.164840][ T7363] netlink: 136 bytes leftover after parsing attributes in process `syz.3.168'. [ 85.167604][ T7363] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 85.409921][ T7379] FAULT_INJECTION: forcing a failure. [ 85.409921][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.415959][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.3.174 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 85.415982][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.415990][ T7379] Call trace: [ 85.415994][ T7379] show_stack+0x2c/0x3c (C) [ 85.416015][ T7379] __dump_stack+0x30/0x40 [ 85.416035][ T7379] dump_stack_lvl+0xd8/0x12c [ 85.416048][ T7379] dump_stack+0x1c/0x28 [ 85.416061][ T7379] should_fail_ex+0x41c/0x594 [ 85.416077][ T7379] should_fail+0x14/0x24 [ 85.416090][ T7379] should_fail_usercopy+0x20/0x30 [ 85.416101][ T7379] _inline_copy_from_user+0x40/0x180 [ 85.416114][ T7379] ___sys_sendmsg+0x144/0x278 [ 85.416125][ T7379] __sys_sendmmsg+0x1f4/0x548 [ 85.416135][ T7379] __arm64_sys_sendmmsg+0xa0/0xbc [ 85.416146][ T7379] invoke_syscall+0x98/0x2b8 [ 85.416160][ T7379] el0_svc_common+0x130/0x23c [ 85.416174][ T7379] do_el0_svc+0x48/0x58 [ 85.416187][ T7379] el0_svc+0x58/0x17c [ 85.416200][ T7379] el0t_64_sync_handler+0x78/0x108 [ 85.416212][ T7379] el0t_64_sync+0x198/0x19c [ 86.370296][ T7388] loop1: detected capacity change from 0 to 4096 [ 87.150948][ T7398] loop0: detected capacity change from 0 to 512 [ 87.224376][ T7398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.234759][ T7383] loop2: detected capacity change from 0 to 32768 [ 87.401428][ T7383] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 87.406315][ T7398] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.178: corrupted inode contents [ 87.413914][ T7398] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.178: mark_inode_dirty error [ 87.420379][ T7398] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.178: corrupted inode contents [ 87.425131][ T7398] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.178: mark_inode_dirty error [ 87.431077][ T7383] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.144583][ T7413] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 21: comm syz.0.178: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 88.192591][ T7383] XFS (loop2): Ending clean mount [ 88.246466][ T7383] XFS (loop2): Quotacheck needed: Please wait. [ 88.334893][ T7398] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 21: comm syz.0.178: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 88.352492][ T2114] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x10 [ 88.355894][ T2114] XFS (loop2): Unmount and run xfs_repair [ 88.357523][ T2114] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 88.359708][ T2114] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 88.362184][ T2114] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 88.365462][ T2114] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 88.367968][ T2114] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 88.368016][ T2114] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 88.368044][ T2114] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 88.368070][ T2114] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.368096][ T2114] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 88.368135][ T2114] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x10 len 8 error 74 [ 88.633028][ T7430] loop3: detected capacity change from 0 to 256 [ 89.001287][ T7383] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 89.011106][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.110265][ T6525] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.123670][ T6525] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 90.237959][ T7433] loop1: detected capacity change from 0 to 32768 [ 90.252091][ T7433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.186 (7433) [ 90.278516][ T7433] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.278619][ T7433] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 90.278661][ T7433] BTRFS info (device loop1): using free-space-tree [ 90.299890][ T7451] loop3: detected capacity change from 0 to 256 [ 90.300450][ T7451] msdos: Unknown parameter 'u' [ 90.321060][ T7451] loop3: detected capacity change from 0 to 512 [ 90.364755][ T7451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.469400][ T7474] loop0: detected capacity change from 0 to 256 [ 90.476259][ T7474] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.490769][ T6518] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.540566][ T7474] FAT-fs (loop0): Directory bread(block 64) failed [ 90.540672][ T7474] FAT-fs (loop0): Directory bread(block 65) failed [ 90.540742][ T7474] FAT-fs (loop0): Directory bread(block 66) failed [ 90.540849][ T7474] FAT-fs (loop0): Directory bread(block 67) failed [ 90.540905][ T7474] FAT-fs (loop0): Directory bread(block 68) failed [ 90.540937][ T7474] FAT-fs (loop0): Directory bread(block 69) failed [ 90.540986][ T7474] FAT-fs (loop0): Directory bread(block 70) failed [ 90.541018][ T7474] FAT-fs (loop0): Directory bread(block 71) failed [ 90.541080][ T7474] FAT-fs (loop0): Directory bread(block 72) failed [ 90.541113][ T7474] FAT-fs (loop0): Directory bread(block 73) failed [ 90.751393][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.757449][ T7482] netlink: 'syz.1.198': attribute type 13 has an invalid length. [ 90.760396][ T7482] veth0_macvtap: left promiscuous mode [ 90.774618][ T7482] macvtap0: entered promiscuous mode [ 90.782664][ T7482] macvtap0: refused to change device tx_queue_len [ 90.996594][ T7492] loop4: detected capacity change from 0 to 512 [ 91.102960][ T7488] Zero length message leads to an empty skb [ 91.248710][ T7492] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.248931][ T7492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.249070][ T7492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.823816][ T7492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 91.823920][ T7492] System zones: 1-12 [ 91.843995][ T7492] EXT4-fs (loop4): 1 truncate cleaned up [ 91.844945][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.066295][ T7492] EXT4-fs: Ignoring removed orlov option [ 92.068085][ T7492] EXT4-fs: can't change dax mount option while remounting [ 93.216742][ T6852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.242230][ T7504] loop2: detected capacity change from 0 to 32768 [ 93.288687][ T7504] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.204 (7504) [ 93.323011][ T7504] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 93.323118][ T7504] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 93.323184][ T7504] BTRFS info (device loop2): using free-space-tree [ 93.481663][ T312] kworker/u8:5: attempt to access beyond end of device [ 93.481663][ T312] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 94.336120][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 94.451956][ T7550] loop1: detected capacity change from 0 to 16 [ 94.499303][ T7552] fuse: Unknown parameter '0x0000000000000007' [ 94.522089][ T7555] loop4: detected capacity change from 0 to 512 [ 94.528201][ T7550] erofs (device loop1): mounted with root inode @ nid 36. [ 94.597978][ T7555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.601055][ T7555] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.217: corrupted inode contents [ 94.601451][ T7555] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.217: mark_inode_dirty error [ 94.601760][ T7555] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.217: corrupted inode contents [ 94.602006][ T7555] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.217: mark_inode_dirty error [ 94.616006][ T7555] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 21: comm syz.4.217: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 94.617100][ T7555] FAULT_INJECTION: forcing a failure. [ 94.617100][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 94.617195][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.4.217 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 94.617209][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.617216][ T7555] Call trace: [ 94.617220][ T7555] show_stack+0x2c/0x3c (C) [ 94.617240][ T7555] __dump_stack+0x30/0x40 [ 94.617255][ T7555] dump_stack_lvl+0xd8/0x12c [ 94.617268][ T7555] dump_stack+0x1c/0x28 [ 94.617281][ T7555] should_fail_ex+0x41c/0x594 [ 94.617296][ T7555] should_failslab+0xc0/0x128 [ 94.617309][ T7555] __kmalloc_noprof+0xf4/0x4c8 [ 94.617320][ T7555] tomoyo_encode+0x274/0x4a4 [ 94.617335][ T7555] tomoyo_realpath_from_path+0x480/0x4d4 [ 94.617349][ T7555] tomoyo_path_number_perm+0x1a0/0x47c [ 94.617362][ T7555] tomoyo_path_mkdir+0xa8/0xec [ 94.617373][ T7555] security_path_mkdir+0x16c/0x358 [ 94.617386][ T7555] do_mkdirat+0x180/0x4c8 [ 94.617397][ T7555] __arm64_sys_mkdirat+0x8c/0xa4 [ 94.617408][ T7555] invoke_syscall+0x98/0x2b8 [ 94.617421][ T7555] el0_svc_common+0x130/0x23c [ 94.617435][ T7555] do_el0_svc+0x48/0x58 [ 94.617448][ T7555] el0_svc+0x58/0x17c [ 94.617460][ T7555] el0t_64_sync_handler+0x78/0x108 [ 94.617473][ T7555] el0t_64_sync+0x198/0x19c [ 94.617494][ T7555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.618456][ T7555] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 21: comm syz.4.217: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 94.680033][ T6525] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 94.848961][ T6852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.982896][ T7540] loop3: detected capacity change from 0 to 32768 [ 94.989164][ T7540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.213 (7540) [ 94.997918][ T7540] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.001012][ T7540] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 95.007790][ T7540] BTRFS info (device loop3): using free-space-tree [ 95.138193][ T7540] Injecting memory failure for pfn 0x123e7a at process virtual address 0x20000000 [ 95.147532][ T7540] Memory failure: 0x123e7a: Sending SIGBUS to syz.3.213:7540 due to hardware memory corruption [ 95.148130][ T7540] Memory failure: 0x123e7a: recovery action for dirty LRU page: Recovered [ 95.260464][ T6517] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.357863][ T7590] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 95.359268][ T7590] cramfs: wrong magic [ 95.461050][ T7588] loop2: detected capacity change from 0 to 32768 [ 97.340113][ T7612] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 97.343883][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.346175][ T7612] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.556670][ T7618] netlink: 136 bytes leftover after parsing attributes in process `syz.1.231'. [ 97.556743][ T7618] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 97.700905][ T7624] loop1: detected capacity change from 0 to 64 [ 97.749024][ T7624] hfs: unable to locate alternate MDB [ 97.749162][ T7624] hfs: continuing without an alternate MDB [ 97.854515][ T7627] FAULT_INJECTION: forcing a failure. [ 97.854515][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.858474][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.2.234 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 97.858493][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.858501][ T7627] Call trace: [ 97.858505][ T7627] show_stack+0x2c/0x3c (C) [ 97.858526][ T7627] __dump_stack+0x30/0x40 [ 97.858544][ T7627] dump_stack_lvl+0xd8/0x12c [ 97.858557][ T7627] dump_stack+0x1c/0x28 [ 97.858570][ T7627] should_fail_ex+0x41c/0x594 [ 97.858585][ T7627] should_fail+0x14/0x24 [ 97.858599][ T7627] should_fail_usercopy+0x20/0x30 [ 97.858616][ T7627] _inline_copy_from_user+0x40/0x180 [ 97.858630][ T7627] ___sys_sendmsg+0x144/0x278 [ 97.858641][ T7627] __sys_sendmmsg+0x1f4/0x548 [ 97.858652][ T7627] __arm64_sys_sendmmsg+0xa0/0xbc [ 97.858667][ T7627] invoke_syscall+0x98/0x2b8 [ 97.858682][ T7627] el0_svc_common+0x130/0x23c [ 97.858695][ T7627] do_el0_svc+0x48/0x58 [ 97.858709][ T7627] el0_svc+0x58/0x17c [ 97.858721][ T7627] el0t_64_sync_handler+0x78/0x108 [ 97.858734][ T7627] el0t_64_sync+0x198/0x19c [ 99.710228][ T7645] loop3: detected capacity change from 0 to 512 [ 99.867660][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.875959][ T7645] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.241: corrupted inode contents [ 99.876396][ T7645] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.241: mark_inode_dirty error [ 99.876713][ T7645] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.241: corrupted inode contents [ 99.877037][ T7645] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.241: mark_inode_dirty error [ 99.910003][ T7645] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 21: comm syz.3.241: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 99.916148][ T7645] FAULT_INJECTION: forcing a failure. [ 99.916148][ T7645] name failslab, interval 1, probability 0, space 0, times 0 [ 99.916216][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.3.241 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 99.916231][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.916238][ T7645] Call trace: [ 99.916242][ T7645] show_stack+0x2c/0x3c (C) [ 99.916262][ T7645] __dump_stack+0x30/0x40 [ 99.916277][ T7645] dump_stack_lvl+0xd8/0x12c [ 99.916290][ T7645] dump_stack+0x1c/0x28 [ 99.916303][ T7645] should_fail_ex+0x41c/0x594 [ 99.916318][ T7645] should_failslab+0xc0/0x128 [ 99.916336][ T7645] kmem_cache_alloc_lru_noprof+0x84/0x3ec [ 99.916351][ T7645] ext4_alloc_inode+0x30/0x414 [ 99.916365][ T7645] alloc_inode+0x68/0x19c [ 99.916377][ T7645] new_inode+0x2c/0x130 [ 99.916387][ T7645] __ext4_new_inode+0x284/0x3278 [ 99.916403][ T7645] ext4_mkdir+0x324/0xa28 [ 99.916414][ T7645] vfs_mkdir+0x284/0x424 [ 99.916425][ T7645] do_mkdirat+0x1f8/0x4c8 [ 99.916435][ T7645] __arm64_sys_mkdirat+0x8c/0xa4 [ 99.916446][ T7645] invoke_syscall+0x98/0x2b8 [ 99.916460][ T7645] el0_svc_common+0x130/0x23c [ 99.916473][ T7645] do_el0_svc+0x48/0x58 [ 99.916486][ T7645] el0_svc+0x58/0x17c [ 99.916499][ T7645] el0t_64_sync_handler+0x78/0x108 [ 99.916511][ T7645] el0t_64_sync+0x198/0x19c [ 100.032134][ T7634] loop4: detected capacity change from 0 to 32768 [ 100.118657][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.129308][ T7634] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.510507][ T7676] netlink: 136 bytes leftover after parsing attributes in process `syz.0.252'. [ 100.510574][ T7676] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 100.530324][ T6852] ocfs2: Unmounting device (7,4) on (node local) [ 100.562399][ T7677] binder: 7675:7677 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 100.566452][ T7677] binder: 7675:7677 ioctl c0306201 20000540 returned -22 [ 100.567618][ T7654] loop1: detected capacity change from 0 to 32768 [ 100.568626][ T7677] binder: 7675:7677 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 100.571539][ T7654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.242 (7654) [ 100.576130][ T7654] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.576219][ T7654] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 100.576275][ T7654] BTRFS info (device loop1): using free-space-tree [ 100.613213][ T7654] BTRFS info (device loop1): rebuilding free space tree [ 100.728712][ T7693] binder: 7675:7693 ioctl c018aa06 200000c0 returned -22 [ 100.858429][ T6518] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.047633][ T7677] loop2: detected capacity change from 0 to 32768 [ 101.923663][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 101.978781][ T7677] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,data_checksum=xxhash,str_hash=crc64,erasure_code,no_splitbrain_check,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 101.978781][ T7677] allowing incompatible features above 0.0: (unknown version) [ 101.978781][ T7677] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.978870][ T7677] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 101.979550][ T7677] bcachefs (loop2): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_keys in superblock: k->u64s 0, fixing [ 101.979699][ T7677] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 101.979807][ T7677] bcachefs (loop2): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 101.979807][ T7677] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 101.979807][ T7677] running recovery passes: check_extents_to_backpointers,check_inodes [ 101.980082][ T7677] bcachefs (loop2): dropping and reconstructing all alloc info [ 102.019273][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 102.042971][ T7677] bcachefs (loop2): accounting_read... done [ 102.092009][ T7677] bcachefs (loop2): alloc_read... done [ 102.092208][ T7677] bcachefs (loop2): snapshots_read... done [ 102.092541][ T7677] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 102.092988][ T7677] bcachefs (loop2): done starting filesystem [ 102.280951][ T6525] bcachefs (loop2): shutting down [ 102.433406][ T7697] loop0: detected capacity change from 0 to 65536 [ 102.445785][ T6525] bcachefs (loop2): shutdown complete [ 102.592812][ T7728] loop4: detected capacity change from 0 to 512 [ 102.593418][ T7728] EXT4-fs: Ignoring removed oldalloc option [ 102.633301][ T7728] EXT4-fs (loop4): 1 truncate cleaned up [ 102.655260][ T7728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.657863][ T7734] loop3: detected capacity change from 0 to 512 [ 102.685481][ T7728] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.269: invalid indirect mapped block 234881024 (level 0) [ 102.718530][ T7734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.727621][ T7734] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.271: corrupted inode contents [ 102.731272][ T7734] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.271: mark_inode_dirty error [ 102.739414][ T7734] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.271: corrupted inode contents [ 102.743083][ T7734] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.271: mark_inode_dirty error [ 102.756218][ T7697] loop0: detected capacity change from 0 to 16 [ 102.763349][ T7734] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 21: comm syz.3.271: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 102.764230][ T6852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.770175][ T7697] erofs (device loop0): mounted with root inode @ nid 36. [ 102.774151][ T7734] FAULT_INJECTION: forcing a failure. [ 102.774151][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 102.774189][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.3.271 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 102.774203][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.774211][ T7734] Call trace: [ 102.774215][ T7734] show_stack+0x2c/0x3c (C) [ 102.774236][ T7734] __dump_stack+0x30/0x40 [ 102.774250][ T7734] dump_stack_lvl+0xd8/0x12c [ 102.774264][ T7734] dump_stack+0x1c/0x28 [ 102.774276][ T7734] should_fail_ex+0x41c/0x594 [ 102.774292][ T7734] should_failslab+0xc0/0x128 [ 102.774306][ T7734] kmem_cache_alloc_noprof+0x80/0x3e8 [ 102.774320][ T7734] security_inode_alloc+0x3c/0x324 [ 102.774334][ T7734] inode_init_always_gfp+0x710/0xb84 [ 102.774346][ T7734] alloc_inode+0x80/0x19c [ 102.774356][ T7734] new_inode+0x2c/0x130 [ 102.774367][ T7734] __ext4_new_inode+0x284/0x3278 [ 102.774382][ T7734] ext4_mkdir+0x324/0xa28 [ 102.774394][ T7734] vfs_mkdir+0x284/0x424 [ 102.774405][ T7734] do_mkdirat+0x1f8/0x4c8 [ 102.774415][ T7734] __arm64_sys_mkdirat+0x8c/0xa4 [ 102.774426][ T7734] invoke_syscall+0x98/0x2b8 [ 102.774440][ T7734] el0_svc_common+0x130/0x23c [ 102.774454][ T7734] do_el0_svc+0x48/0x58 [ 102.774467][ T7734] el0_svc+0x58/0x17c [ 102.774479][ T7734] el0t_64_sync_handler+0x78/0x108 [ 102.774492][ T7734] el0t_64_sync+0x198/0x19c [ 102.830470][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.056242][ T7744] loop3: detected capacity change from 0 to 1024 [ 103.060561][ T7744] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 103.067582][ T7744] EXT4-fs: failed to create workqueue [ 103.072342][ T7744] EXT4-fs (loop3): mount failed [ 103.104310][ T7738] loop1: detected capacity change from 0 to 32768 [ 103.106801][ T7738] btrfs: Bad value for 'max_inline' [ 103.221934][ T7761] loop1: detected capacity change from 0 to 1024 [ 103.225319][ T7757] netlink: 136 bytes leftover after parsing attributes in process `syz.0.280'. [ 103.225386][ T7757] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 103.359106][ T7431] hfsplus: b-tree write err: -5, ino 4 [ 103.373909][ T7766] loop3: detected capacity change from 0 to 24 [ 103.374489][ T7766] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 103.389348][ T7766] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.648507][ T7776] loop9: detected capacity change from 0 to 8 [ 103.700019][ T7776] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.700283][ T7776] loop9: partition table partially beyond EOD, truncated [ 104.877747][ T7776] loop9: p1 size 81768186 extends beyond EOD, truncated [ 104.917234][ T7766] Cannot find add_set index 0 as target [ 105.043899][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 105.148291][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 105.319434][ T7351] udevd[7351]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 105.417824][ T7801] loop4: detected capacity change from 0 to 512 [ 105.508153][ T7801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.517266][ T7809] netlink: 136 bytes leftover after parsing attributes in process `syz.0.300'. [ 105.517337][ T7809] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 105.535397][ T7801] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.297: corrupted inode contents [ 105.542896][ T7801] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.297: mark_inode_dirty error [ 105.551768][ T7801] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.297: corrupted inode contents [ 105.555410][ T7801] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.297: mark_inode_dirty error [ 105.583975][ T7801] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 21: comm syz.4.297: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 105.592626][ T7801] FAULT_INJECTION: forcing a failure. [ 105.592626][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 105.592790][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.4.297 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 105.592808][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.592815][ T7801] Call trace: [ 105.592819][ T7801] show_stack+0x2c/0x3c (C) [ 105.592839][ T7801] __dump_stack+0x30/0x40 [ 105.592855][ T7801] dump_stack_lvl+0xd8/0x12c [ 105.592868][ T7801] dump_stack+0x1c/0x28 [ 105.592881][ T7801] should_fail_ex+0x41c/0x594 [ 105.592896][ T7801] should_failslab+0xc0/0x128 [ 105.592910][ T7801] __kmalloc_noprof+0xf4/0x4c8 [ 105.592921][ T7801] qtree_write_dquot+0xd8/0x4c8 [ 105.592933][ T7801] v2_write_dquot+0x124/0x1f0 [ 105.592944][ T7801] dquot_commit+0x13c/0x1ec [ 105.592958][ T7801] ext4_write_dquot+0x1b8/0x320 [ 105.592973][ T7801] ext4_mark_dquot_dirty+0xe8/0x140 [ 105.592987][ T7801] mark_all_dquot_dirty+0x10c/0x46c [ 105.593001][ T7801] dquot_alloc_inode+0x680/0xbf0 [ 105.593015][ T7801] __ext4_new_inode+0x2694/0x3278 [ 105.593030][ T7801] ext4_mkdir+0x324/0xa28 [ 105.593042][ T7801] vfs_mkdir+0x284/0x424 [ 105.593053][ T7801] do_mkdirat+0x1f8/0x4c8 [ 105.593063][ T7801] __arm64_sys_mkdirat+0x8c/0xa4 [ 105.593074][ T7801] invoke_syscall+0x98/0x2b8 [ 105.593088][ T7801] el0_svc_common+0x130/0x23c [ 105.593101][ T7801] do_el0_svc+0x48/0x58 [ 105.593114][ T7801] el0_svc+0x58/0x17c [ 105.593127][ T7801] el0t_64_sync_handler+0x78/0x108 [ 105.593139][ T7801] el0t_64_sync+0x198/0x19c [ 105.593303][ T7801] EXT4-fs error (device loop4): ext4_write_dquot:6913: comm syz.4.297: Failed to commit dquot type 0 [ 105.805519][ T7815] loop1: detected capacity change from 0 to 128 [ 105.809827][ T7815] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 105.810039][ T7815] FAT-fs (loop1): FAT read failed (blocknr 255) [ 105.868752][ T6852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.892250][ T7823] FAULT_INJECTION: forcing a failure. [ 105.892250][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.892327][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.1.307 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 105.892341][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.892349][ T7823] Call trace: [ 105.892353][ T7823] show_stack+0x2c/0x3c (C) [ 105.892374][ T7823] __dump_stack+0x30/0x40 [ 105.892388][ T7823] dump_stack_lvl+0xd8/0x12c [ 105.892401][ T7823] dump_stack+0x1c/0x28 [ 105.892414][ T7823] should_fail_ex+0x41c/0x594 [ 105.892429][ T7823] should_fail+0x14/0x24 [ 105.892442][ T7823] should_fail_usercopy+0x20/0x30 [ 105.892453][ T7823] _inline_copy_from_user+0x40/0x180 [ 105.892467][ T7823] ___sys_sendmsg+0x144/0x278 [ 105.892477][ T7823] __sys_sendmmsg+0x1f4/0x548 [ 105.892488][ T7823] __arm64_sys_sendmmsg+0xa0/0xbc [ 105.892499][ T7823] invoke_syscall+0x98/0x2b8 [ 105.892516][ T7823] el0_svc_common+0x130/0x23c [ 105.892529][ T7823] do_el0_svc+0x48/0x58 [ 105.892542][ T7823] el0_svc+0x58/0x17c [ 105.892555][ T7823] el0t_64_sync_handler+0x78/0x108 [ 105.892567][ T7823] el0t_64_sync+0x198/0x19c [ 107.364038][ T7805] loop3: detected capacity change from 0 to 32768 [ 107.366918][ T7805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.299 (7805) [ 107.433804][ T7805] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.434502][ T7805] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 107.434544][ T7805] BTRFS info (device loop3): using free-space-tree [ 107.645159][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 107.742636][ T7825] loop0: detected capacity change from 0 to 40427 [ 107.748740][ T6517] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.757572][ T7825] F2FS-fs (loop0): Unrecognized mount option "at¢‹h/3ˆvS²Ogc_merge" or missing value [ 108.035729][ T7861] loop9: detected capacity change from 0 to 8 [ 108.069091][ T7861] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.069156][ T7861] loop9: partition table partially beyond EOD, truncated [ 108.069297][ T7861] loop9: p1 size 81768186 extends beyond EOD, truncated [ 108.268816][ T7836] loop1: detected capacity change from 0 to 32768 [ 108.288951][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 108.419167][ T7836] [ 108.419167][ T7836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.419167][ T7836] [ 108.441397][ T7836] ERROR: (device loop1): diWrite: ixpxd invalid [ 108.441397][ T7836] [ 108.450428][ T7836] ERROR: (device loop1): txAbort: [ 108.450428][ T7836] [ 108.834964][ T6518] [ 108.834964][ T6518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.834964][ T6518] [ 108.835271][ T6518] [ 108.835271][ T6518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.835271][ T6518] [ 109.059129][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.059570][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.836194][ T7888] syz.0.319 (7888) used obsolete PPPIOCDETACH ioctl [ 109.849927][ T7888] ubi31: attaching mtd0 [ 109.862811][ T7888] ubi31: scanning is finished [ 109.862930][ T7888] ubi31: empty MTD device detected [ 110.206224][ T7888] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.206289][ T7888] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.206331][ T7888] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.206361][ T7888] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 110.206392][ T7888] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.206421][ T7888] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.206451][ T7888] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1925151920 [ 110.206484][ T7888] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.225425][ T7891] ubi31: background thread "ubi_bgt31d" started, PID 7891 [ 110.332926][ T7894] FAULT_INJECTION: forcing a failure. [ 110.332926][ T7894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.333003][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.3.322 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 110.333017][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.333024][ T7894] Call trace: [ 110.333028][ T7894] show_stack+0x2c/0x3c (C) [ 110.333049][ T7894] __dump_stack+0x30/0x40 [ 110.333069][ T7894] dump_stack_lvl+0xd8/0x12c [ 110.333082][ T7894] dump_stack+0x1c/0x28 [ 110.333095][ T7894] should_fail_ex+0x41c/0x594 [ 110.333111][ T7894] should_fail+0x14/0x24 [ 110.333124][ T7894] should_fail_usercopy+0x20/0x30 [ 110.333135][ T7894] _inline_copy_from_user+0x40/0x180 [ 110.333147][ T7894] ___sys_sendmsg+0x144/0x278 [ 110.333158][ T7894] __sys_sendmmsg+0x1f4/0x548 [ 110.333169][ T7894] __arm64_sys_sendmmsg+0xa0/0xbc [ 110.333180][ T7894] invoke_syscall+0x98/0x2b8 [ 110.333194][ T7894] el0_svc_common+0x130/0x23c [ 110.333208][ T7894] do_el0_svc+0x48/0x58 [ 110.333221][ T7894] el0_svc+0x58/0x17c [ 110.333233][ T7894] el0t_64_sync_handler+0x78/0x108 [ 110.333245][ T7894] el0t_64_sync+0x198/0x19c [ 110.473441][ T7897] Cannot find add_set index 0 as target [ 111.417049][ T7886] loop4: detected capacity change from 0 to 32768 [ 111.511032][ T7883] __jfs_setxattr: xattr_size = 120, new_size = 12866 [ 111.518158][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 112.612175][ T7897] loop3: detected capacity change from 0 to 32768 [ 112.649259][ T7897] XFS: ikeep mount option is deprecated. [ 112.672640][ T7897] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.680235][ T7921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.829645][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 112.832643][ T7937] loop0: detected capacity change from 0 to 512 [ 112.863436][ T7904] loop1: detected capacity change from 0 to 65536 [ 112.893406][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.902806][ T7904] XFS (loop1): Mounting V5 filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 in no-recovery mode. Filesystem will be inconsistent. [ 112.911597][ T7937] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.335: corrupted inode contents [ 112.912404][ T7897] XFS (loop3): Ending clean mount [ 112.914396][ T7897] XFS (loop3): Quotacheck needed: Please wait. [ 112.915372][ T7937] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.335: mark_inode_dirty error [ 112.916385][ T7937] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.335: corrupted inode contents [ 112.916667][ T7937] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.335: mark_inode_dirty error [ 112.942769][ T7937] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 21: comm syz.0.335: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 112.947017][ T7937] FAULT_INJECTION: forcing a failure. [ 112.947017][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 112.947065][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.0.335 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 112.947080][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.947087][ T7937] Call trace: [ 112.947091][ T7937] show_stack+0x2c/0x3c (C) [ 112.947111][ T7937] __dump_stack+0x30/0x40 [ 112.947126][ T7937] dump_stack_lvl+0xd8/0x12c [ 112.947139][ T7937] dump_stack+0x1c/0x28 [ 112.947152][ T7937] should_fail_ex+0x41c/0x594 [ 112.947167][ T7937] should_failslab+0xc0/0x128 [ 112.947181][ T7937] __kmalloc_node_track_caller_noprof+0xf4/0x4d0 [ 112.947194][ T7937] kstrdup+0x50/0x108 [ 112.947205][ T7937] smack_inode_init_security+0x528/0x68c [ 112.947219][ T7937] security_inode_init_security+0x17c/0x7f4 [ 112.947232][ T7937] ext4_init_security+0x44/0x58 [ 112.947246][ T7937] __ext4_new_inode+0x2854/0x3278 [ 112.947261][ T7937] ext4_mkdir+0x324/0xa28 [ 112.947272][ T7937] vfs_mkdir+0x284/0x424 [ 112.947283][ T7937] do_mkdirat+0x1f8/0x4c8 [ 112.947293][ T7937] __arm64_sys_mkdirat+0x8c/0xa4 [ 112.947304][ T7937] invoke_syscall+0x98/0x2b8 [ 112.947318][ T7937] el0_svc_common+0x130/0x23c [ 112.947332][ T7937] do_el0_svc+0x48/0x58 [ 112.947345][ T7937] el0_svc+0x58/0x17c [ 112.947357][ T7937] el0t_64_sync_handler+0x78/0x108 [ 112.947370][ T7937] el0t_64_sync+0x198/0x19c [ 112.949296][ T7904] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x100/0x1d4, xfs_agi block 0x8002 [ 112.949506][ T7904] XFS (loop1): Unmount and run xfs_repair [ 112.949527][ T7904] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 112.949549][ T7904] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 112.949570][ T7904] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 112.949591][ T7904] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949623][ T7904] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949644][ T7904] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949664][ T7904] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949685][ T7904] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949705][ T7904] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 112.949729][ T7904] XFS (loop1): metadata I/O error in "xfs_read_agi+0x240/0x5c8" at daddr 0x8002 len 1 error 74 [ 112.950307][ T7904] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 112.957113][ T7897] XFS (loop3): Quotacheck: Done. [ 113.055929][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.152943][ T6517] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.170800][ T7955] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 113.276798][ T7955] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.344962][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 113.345034][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 113.500565][ T7904] loop1: detected capacity change from 0 to 40427 [ 113.515664][ T7904] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 113.519636][ T7904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.524775][ T7904] F2FS-fs (loop1): invalid crc value [ 113.584668][ T7904] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.584732][ T7904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.656399][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 114.309664][ T7977] loop4: detected capacity change from 0 to 4096 [ 114.473941][ T7977] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 114.506492][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 114.510324][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 115.071819][ T7966] ntfs3(loop4): ino=0, attr_set_size [ 115.162805][ T7994] netlink: 'syz.4.342': attribute type 9 has an invalid length. [ 115.163431][ T7977] ntfs3(loop4): ino=0, attr_set_size [ 115.358714][ T7997] loop3: detected capacity change from 0 to 256 [ 115.390288][ T7997] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 115.587226][ T7991] loop2: detected capacity change from 0 to 4096 [ 115.617335][ T8005] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 115.656300][ T8008] loop1: detected capacity change from 0 to 128 [ 115.675128][ T7991] NILFS (loop2): invalid segment: Checksum error in segment payload [ 115.675272][ T7991] NILFS (loop2): trying rollback from an earlier position [ 115.680311][ T7991] NILFS (loop2): invalid segment: Checksum error in segment payload [ 115.680371][ T7991] NILFS (loop2): error -22 while searching super root [ 115.703499][ T8008] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.354: iget: checksum invalid [ 115.706683][ T8008] EXT4-fs (loop1): get root inode failed [ 115.706722][ T8008] EXT4-fs (loop1): mount failed [ 115.744671][ T8008] loop1: detected capacity change from 0 to 128 [ 115.759776][ T8008] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 115.759863][ T8008] EXT4-fs: failed to create workqueue [ 115.759914][ T8008] EXT4-fs (loop1): mount failed [ 115.763313][ T8017] loop4: detected capacity change from 0 to 512 [ 115.769608][ T8017] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.789832][ T7991] loop2: detected capacity change from 0 to 512 [ 115.797873][ T8017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 115.798069][ T8017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.817560][ T8017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.356: bg 0: block 361: padding at end of block bitmap is not set [ 115.825896][ T7991] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.825966][ T7991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.837842][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 115.837947][ T8017] EXT4-fs (loop4): Remounting filesystem read-only [ 115.846189][ T8017] EXT4-fs (loop4): 1 truncate cleaned up [ 115.847108][ T8017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 115.937863][ T8030] loop3: detected capacity change from 0 to 512 [ 116.061978][ T6852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 117.142604][ T7991] EXT4-fs (loop2): 1 truncate cleaned up [ 117.143511][ T7991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.210244][ T7991] netlink: 104 bytes leftover after parsing attributes in process `syz.2.347'. [ 117.293890][ T8042] loop0: detected capacity change from 0 to 47 [ 117.295695][ T8030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.315886][ T8030] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.359: corrupted inode contents [ 117.323306][ T8030] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.359: mark_inode_dirty error [ 117.327759][ T8030] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.359: corrupted inode contents [ 117.337623][ T8030] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.359: mark_inode_dirty error [ 117.365918][ T8030] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 21: comm syz.3.359: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 117.372860][ T8030] FAULT_INJECTION: forcing a failure. [ 117.372860][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 117.383742][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.3.359 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 117.383766][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.383773][ T8030] Call trace: [ 117.383778][ T8030] show_stack+0x2c/0x3c (C) [ 117.383799][ T8030] __dump_stack+0x30/0x40 [ 117.383814][ T8030] dump_stack_lvl+0xd8/0x12c [ 117.383827][ T8030] dump_stack+0x1c/0x28 [ 117.383840][ T8030] should_fail_ex+0x41c/0x594 [ 117.383855][ T8030] should_failslab+0xc0/0x128 [ 117.383869][ T8030] __kmalloc_noprof+0xf4/0x4c8 [ 117.383880][ T8030] qtree_write_dquot+0xd8/0x4c8 [ 117.383892][ T8030] v2_write_dquot+0x124/0x1f0 [ 117.383902][ T8030] dquot_commit+0x13c/0x1ec [ 117.383916][ T8030] ext4_write_dquot+0x1b8/0x320 [ 117.383931][ T8030] ext4_mark_dquot_dirty+0xe8/0x140 [ 117.383945][ T8030] mark_all_dquot_dirty+0x10c/0x46c [ 117.383959][ T8030] __dquot_alloc_space+0x570/0xd0c [ 117.383980][ T8030] ext4_mb_new_blocks+0xd44/0x4208 [ 117.383995][ T8030] ext4_new_meta_blocks+0x144/0x33c [ 117.384007][ T8030] ext4_xattr_block_set+0x1a20/0x24bc [ 117.384019][ T8030] ext4_xattr_set_handle+0xde8/0x1260 [ 117.384030][ T8030] ext4_initxattrs+0xa4/0x11c [ 117.384042][ T8030] security_inode_init_security+0x6dc/0x7f4 [ 117.384055][ T8030] ext4_init_security+0x44/0x58 [ 117.384067][ T8030] __ext4_new_inode+0x2854/0x3278 [ 117.384081][ T8030] ext4_mkdir+0x324/0xa28 [ 117.384093][ T8030] vfs_mkdir+0x284/0x424 [ 117.384104][ T8030] do_mkdirat+0x1f8/0x4c8 [ 117.384115][ T8030] __arm64_sys_mkdirat+0x8c/0xa4 [ 117.384125][ T8030] invoke_syscall+0x98/0x2b8 [ 117.384139][ T8030] el0_svc_common+0x130/0x23c [ 117.384152][ T8030] do_el0_svc+0x48/0x58 [ 117.384165][ T8030] el0_svc+0x58/0x17c [ 117.384179][ T8030] el0t_64_sync_handler+0x78/0x108 [ 117.384191][ T8030] el0t_64_sync+0x198/0x19c [ 117.443357][ T8030] EXT4-fs error (device loop3): ext4_write_dquot:6913: comm syz.3.359: Failed to commit dquot type 0 [ 117.471270][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.488679][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.676220][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 118.541205][ T8066] FAULT_INJECTION: forcing a failure. [ 118.541205][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.541278][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.1.372 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 118.541295][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.541303][ T8066] Call trace: [ 118.541307][ T8066] show_stack+0x2c/0x3c (C) [ 118.541327][ T8066] __dump_stack+0x30/0x40 [ 118.541341][ T8066] dump_stack_lvl+0xd8/0x12c [ 118.541355][ T8066] dump_stack+0x1c/0x28 [ 118.541368][ T8066] should_fail_ex+0x41c/0x594 [ 118.541383][ T8066] should_fail+0x14/0x24 [ 118.541396][ T8066] should_fail_usercopy+0x20/0x30 [ 118.541407][ T8066] _inline_copy_from_user+0x40/0x180 [ 118.541423][ T8066] ___sys_sendmsg+0x144/0x278 [ 118.541434][ T8066] __sys_sendmmsg+0x1f4/0x548 [ 118.541444][ T8066] __arm64_sys_sendmmsg+0xa0/0xbc [ 118.541455][ T8066] invoke_syscall+0x98/0x2b8 [ 118.541470][ T8066] el0_svc_common+0x130/0x23c [ 118.541483][ T8066] do_el0_svc+0x48/0x58 [ 118.541496][ T8066] el0_svc+0x58/0x17c [ 118.541509][ T8066] el0t_64_sync_handler+0x78/0x108 [ 118.541521][ T8066] el0t_64_sync+0x198/0x19c [ 120.319037][ T8086] netlink: 136 bytes leftover after parsing attributes in process `syz.2.378'. [ 120.321844][ T8086] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 120.333940][ T8088] loop3: detected capacity change from 0 to 22 [ 120.334570][ T8088] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 120.354582][ T8088] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.406338][ T8091] loop0: detected capacity change from 0 to 512 [ 120.554832][ T8091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.561209][ T8091] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 120.565211][ T8091] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.380: mark_inode_dirty error [ 120.579440][ T8091] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.380: corrupted inode contents [ 120.583358][ T8091] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.380: mark_inode_dirty error [ 120.594013][ T8091] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 21: comm syz.0.380: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 120.614839][ T8091] FAULT_INJECTION: forcing a failure. [ 120.614839][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 120.618839][ T8102] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 120.618985][ T8102] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 120.619702][ T8102] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 120.619732][ T8102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.383'. [ 120.622159][ T8102] wlan1: mtu less than device minimum [ 120.629411][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.0.380 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 120.629434][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.629442][ T8091] Call trace: [ 120.629447][ T8091] show_stack+0x2c/0x3c (C) [ 120.629468][ T8091] __dump_stack+0x30/0x40 [ 120.629483][ T8091] dump_stack_lvl+0xd8/0x12c [ 120.629496][ T8091] dump_stack+0x1c/0x28 [ 120.629509][ T8091] should_fail_ex+0x41c/0x594 [ 120.629524][ T8091] should_failslab+0xc0/0x128 [ 120.629538][ T8091] kmem_cache_alloc_noprof+0x80/0x3e8 [ 120.629553][ T8091] ext4_mb_new_blocks+0x4bc/0x4208 [ 120.629569][ T8091] ext4_new_meta_blocks+0x144/0x33c [ 120.629581][ T8091] ext4_xattr_block_set+0x1a20/0x24bc [ 120.629594][ T8091] ext4_xattr_set_handle+0xde8/0x1260 [ 120.629605][ T8091] ext4_initxattrs+0xa4/0x11c [ 120.629626][ T8091] security_inode_init_security+0x6dc/0x7f4 [ 120.629640][ T8091] ext4_init_security+0x44/0x58 [ 120.629652][ T8091] __ext4_new_inode+0x2854/0x3278 [ 120.629666][ T8091] ext4_mkdir+0x324/0xa28 [ 120.629678][ T8091] vfs_mkdir+0x284/0x424 [ 120.629689][ T8091] do_mkdirat+0x1f8/0x4c8 [ 120.629699][ T8091] __arm64_sys_mkdirat+0x8c/0xa4 [ 120.629710][ T8091] invoke_syscall+0x98/0x2b8 [ 120.629724][ T8091] el0_svc_common+0x130/0x23c [ 120.629738][ T8091] do_el0_svc+0x48/0x58 [ 120.629751][ T8091] el0_svc+0x58/0x17c [ 120.629764][ T8091] el0t_64_sync_handler+0x78/0x108 [ 120.629776][ T8091] el0t_64_sync+0x198/0x19c [ 121.679674][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.010767][ T8080] loop4: detected capacity change from 0 to 32768 [ 122.121266][ T8080] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck_memory_usage_percent=39,norecovery,nojournal_transaction_names [ 122.121266][ T8080] allowing incompatible features above 0.0: (unknown version) [ 122.121266][ T8080] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 122.155515][ T8080] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 122.155664][ T8080] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 122.155819][ T8080] bcachefs (loop4): Version upgrade required: [ 122.155819][ T8080] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 122.155819][ T8080] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 122.155819][ T8080] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 122.189957][ T8124] FAULT_INJECTION: forcing a failure. [ 122.189957][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.190025][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.0.389 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 122.190039][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.190046][ T8124] Call trace: [ 122.190050][ T8124] show_stack+0x2c/0x3c (C) [ 122.190071][ T8124] __dump_stack+0x30/0x40 [ 122.190086][ T8124] dump_stack_lvl+0xd8/0x12c [ 122.190099][ T8124] dump_stack+0x1c/0x28 [ 122.190112][ T8124] should_fail_ex+0x41c/0x594 [ 122.190127][ T8124] should_fail+0x14/0x24 [ 122.190140][ T8124] should_fail_usercopy+0x20/0x30 [ 122.190151][ T8124] _inline_copy_from_user+0x40/0x180 [ 122.190164][ T8124] ___sys_sendmsg+0x144/0x278 [ 122.190175][ T8124] __sys_sendmmsg+0x1f4/0x548 [ 122.190185][ T8124] __arm64_sys_sendmmsg+0xa0/0xbc [ 122.190196][ T8124] invoke_syscall+0x98/0x2b8 [ 122.190213][ T8124] el0_svc_common+0x130/0x23c [ 122.190227][ T8124] do_el0_svc+0x48/0x58 [ 122.190240][ T8124] el0_svc+0x58/0x17c [ 122.190252][ T8124] el0t_64_sync_handler+0x78/0x108 [ 122.190265][ T8124] el0t_64_sync+0x198/0x19c [ 122.210663][ T8080] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870912:U32_MAX len 0 ver 0: (unpack error) [ 122.210694][ T8080] invalid variable length fields, deleting [ 122.227748][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 122.246295][ T8080] bcachefs (loop4): accounting_read... done [ 122.285229][ T8080] bcachefs (loop4): alloc_read... done [ 122.285467][ T8080] bcachefs (loop4): snapshots_read... done [ 122.285677][ T8080] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 122.285851][ T8080] bcachefs (loop4): done starting filesystem [ 122.349558][ T8128] loop3: detected capacity change from 0 to 512 [ 122.354571][ T8128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.354659][ T8128] EXT4-fs: Ignoring removed oldalloc option [ 122.379419][ T8100] loop2: detected capacity change from 0 to 65536 [ 122.419068][ T8080] bcachefs (loop4): pointer to nonexistent device 237 in key [ 122.419137][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.420157][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.420157][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.423240][ T8079] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.423240][ T8079] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.424623][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.424623][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.425038][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.425038][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.425517][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.425517][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.425839][ T8079] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.425839][ T8079] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.475400][ T8079] [ 122.476029][ T8079] ====================================================== [ 122.477931][ T8079] WARNING: possible circular locking dependency detected [ 122.479894][ T8079] 6.16.0-rc1-syzkaller-g39dfc971e42d #0 Not tainted [ 122.481702][ T8079] ------------------------------------------------------ [ 122.483622][ T8079] syz.4.376/8079 is trying to acquire lock: [ 122.485252][ T8079] ffff0000f8c701b0 (bcachefs_btree){+.+.}-{0:0}, at: trans_set_locked+0x68/0x200 [ 122.487767][ T8079] [ 122.487767][ T8079] but task is already holding lock: [ 122.489833][ T8079] ffff0000df271218 (mapping.invalidate_lock#9){.+.+}-{4:4}, at: filemap_fault+0x3fc/0x1280 [ 122.492742][ T8079] [ 122.492742][ T8079] which lock already depends on the new lock. [ 122.492742][ T8079] [ 122.495655][ T8079] [ 122.495655][ T8079] the existing dependency chain (in reverse order) is: [ 122.498133][ T8079] [ 122.498133][ T8079] -> #7 (mapping.invalidate_lock#9){.+.+}-{4:4}: [ 122.500460][ T8079] down_read+0x58/0x2f8 [ 122.501827][ T8079] filemap_fault+0x3fc/0x1280 [ 122.503221][ T8079] bch2_page_fault+0x2cc/0x700 [ 122.504776][ T8079] __do_fault+0x1fc/0x4cc [ 122.506082][ T8079] handle_mm_fault+0x2c94/0x4d38 [ 122.507620][ T8079] __get_user_pages+0x1ddc/0x309c [ 122.509169][ T8079] populate_vma_page_range+0x218/0x2e8 [ 122.510881][ T8079] __mm_populate+0x208/0x330 [ 122.512322][ T8079] vm_mmap_pgoff+0x378/0x43c [ 122.513760][ T8079] ksys_mmap_pgoff+0x394/0x5b8 [ 122.515221][ T8079] __arm64_sys_mmap+0xf8/0x110 [ 122.516660][ T8079] invoke_syscall+0x98/0x2b8 [ 122.518172][ T8079] el0_svc_common+0x130/0x23c [ 122.519574][ T8079] do_el0_svc+0x48/0x58 [ 122.520871][ T8079] el0_svc+0x58/0x17c [ 122.522114][ T8079] el0t_64_sync_handler+0x78/0x108 [ 122.523668][ T8079] el0t_64_sync+0x198/0x19c [ 122.525104][ T8079] [ 122.525104][ T8079] -> #6 (&mm->mmap_lock){++++}-{4:4}: [ 122.527219][ T8079] __might_fault+0xc4/0x124 [ 122.528626][ T8079] drm_mode_object_get_properties+0x1f0/0x524 [ 122.530493][ T8079] drm_mode_getconnector+0xd78/0x1254 [ 122.532100][ T8079] drm_ioctl_kernel+0x238/0x310 [ 122.533649][ T8079] drm_ioctl+0x65c/0xa5c [ 122.535029][ T8079] __arm64_sys_ioctl+0x14c/0x1c4 [ 122.536532][ T8079] invoke_syscall+0x98/0x2b8 [ 122.538005][ T8079] el0_svc_common+0x130/0x23c [ 122.539595][ T8079] do_el0_svc+0x48/0x58 [ 122.540901][ T8079] el0_svc+0x58/0x17c [ 122.542199][ T8079] el0t_64_sync_handler+0x78/0x108 [ 122.543804][ T8079] el0t_64_sync+0x198/0x19c [ 122.545165][ T8079] [ 122.545165][ T8079] -> #5 (crtc_ww_class_mutex){+.+.}-{4:4}: [ 122.547477][ T8079] drm_modeset_acquire_init+0x1d8/0x374 [ 122.549129][ T8079] drmm_mode_config_init+0xb44/0x1118 [ 122.550772][ T8079] vkms_init+0x2a8/0x548 [ 122.552077][ T8079] do_one_initcall+0x250/0x990 [ 122.553597][ T8079] do_initcall_level+0x154/0x214 [ 122.555113][ T8079] do_initcalls+0x84/0xf4 [ 122.556459][ T8079] do_basic_setup+0x8c/0xa0 [ 122.557897][ T8079] kernel_init_freeable+0x2dc/0x444 [ 122.559477][ T8079] kernel_init+0x24/0x1dc [ 122.560845][ T8079] ret_from_fork+0x10/0x20 [ 122.562202][ T8079] [ 122.562202][ T8079] -> #4 (crtc_ww_class_acquire){+.+.}-{0:0}: [ 122.564532][ T8079] drm_modeset_acquire_init+0x1b8/0x374 [ 122.566143][ T8079] drm_client_modeset_commit_atomic+0xcc/0x6ac [ 122.568084][ T8079] drm_client_modeset_commit_locked+0xd0/0x4a0 [ 122.570008][ T8079] drm_client_modeset_commit+0x50/0x7c [ 122.571717][ T8079] __drm_fb_helper_restore_fbdev_mode_unlocked+0x94/0x198 [ 122.573791][ T8079] drm_fb_helper_set_par+0xa4/0x108 [ 122.575431][ T8079] fbcon_init+0xe58/0x1d0c [ 122.576764][ T8079] visual_init+0x27c/0x540 [ 122.578132][ T8079] do_bind_con_driver+0x7b8/0xdd8 [ 122.579698][ T8079] do_take_over_console+0x824/0x97c [ 122.581294][ T8079] do_fbcon_takeover+0x158/0x25c [ 122.582790][ T8079] fbcon_fb_registered+0x354/0x4c8 [ 122.584355][ T8079] register_framebuffer+0x538/0x6c8 [ 122.585929][ T8079] __drm_fb_helper_initial_config_and_unlock+0x103c/0x159c [ 122.588053][ T8079] drm_fb_helper_initial_config+0x3c/0x58 [ 122.589837][ T8079] drm_fbdev_client_hotplug+0x154/0x22c [ 122.591556][ T8079] drm_client_register+0x13c/0x1d4 [ 122.593105][ T8079] drm_fbdev_client_setup+0x194/0x3d0 [ 122.594773][ T8079] drm_client_setup+0x78/0x140 [ 122.596176][ T8079] vkms_init+0x498/0x548 [ 122.597552][ T8079] do_one_initcall+0x250/0x990 [ 122.599049][ T8079] do_initcall_level+0x154/0x214 [ 122.600557][ T8079] do_initcalls+0x84/0xf4 [ 122.601946][ T8079] do_basic_setup+0x8c/0xa0 [ 122.603297][ T8079] kernel_init_freeable+0x2dc/0x444 [ 122.604965][ T8079] kernel_init+0x24/0x1dc [ 122.606316][ T8079] ret_from_fork+0x10/0x20 [ 122.607717][ T8079] [ 122.607717][ T8079] -> #3 (&client->modeset_mutex){+.+.}-{4:4}: [ 122.610154][ T8079] __mutex_lock_common+0x1d0/0x2190 [ 122.611784][ T8079] mutex_lock_nested+0x2c/0x38 [ 122.613328][ T8079] drm_client_modeset_probe+0x2e8/0x4d7c [ 122.615000][ T8079] __drm_fb_helper_initial_config_and_unlock+0xf0/0x159c [ 122.617083][ T8079] drm_fb_helper_initial_config+0x3c/0x58 [ 122.618842][ T8079] drm_fbdev_client_hotplug+0x154/0x22c [ 122.620533][ T8079] drm_client_register+0x13c/0x1d4 [ 122.622126][ T8079] drm_fbdev_client_setup+0x194/0x3d0 [ 122.623767][ T8079] drm_client_setup+0x78/0x140 [ 122.625256][ T8079] vkms_init+0x498/0x548 [ 122.626604][ T8079] do_one_initcall+0x250/0x990 [ 122.628158][ T8079] do_initcall_level+0x154/0x214 [ 122.629644][ T8079] do_initcalls+0x84/0xf4 [ 122.630960][ T8079] do_basic_setup+0x8c/0xa0 [ 122.632332][ T8079] kernel_init_freeable+0x2dc/0x444 [ 122.633949][ T8079] kernel_init+0x24/0x1dc [ 122.635385][ T8079] ret_from_fork+0x10/0x20 [ 122.636725][ T8079] [ 122.636725][ T8079] -> #2 (&helper->lock){+.+.}-{4:4}: [ 122.638880][ T8079] __mutex_lock_common+0x1d0/0x2190 [ 122.640436][ T8079] mutex_lock_nested+0x2c/0x38 [ 122.641919][ T8079] __drm_fb_helper_restore_fbdev_mode_unlocked+0x74/0x198 [ 122.644007][ T8079] drm_fb_helper_set_par+0xa4/0x108 [ 122.645586][ T8079] fbcon_init+0xe58/0x1d0c [ 122.646966][ T8079] visual_init+0x27c/0x540 [ 122.648289][ T8079] do_bind_con_driver+0x7b8/0xdd8 [ 122.649842][ T8079] do_take_over_console+0x824/0x97c [ 122.651426][ T8079] do_fbcon_takeover+0x158/0x25c [ 122.652910][ T8079] fbcon_fb_registered+0x354/0x4c8 [ 122.654444][ T8079] register_framebuffer+0x538/0x6c8 [ 122.656001][ T8079] __drm_fb_helper_initial_config_and_unlock+0x103c/0x159c [ 122.658134][ T8079] drm_fb_helper_initial_config+0x3c/0x58 [ 122.659867][ T8079] drm_fbdev_client_hotplug+0x154/0x22c [ 122.661493][ T8079] drm_client_register+0x13c/0x1d4 [ 122.663120][ T8079] drm_fbdev_client_setup+0x194/0x3d0 [ 122.664761][ T8079] drm_client_setup+0x78/0x140 [ 122.666314][ T8079] vkms_init+0x498/0x548 [ 122.667682][ T8079] do_one_initcall+0x250/0x990 [ 122.669124][ T8079] do_initcall_level+0x154/0x214 [ 122.670669][ T8079] do_initcalls+0x84/0xf4 [ 122.672015][ T8079] do_basic_setup+0x8c/0xa0 [ 122.673393][ T8079] kernel_init_freeable+0x2dc/0x444 [ 122.675095][ T8079] kernel_init+0x24/0x1dc [ 122.676435][ T8079] ret_from_fork+0x10/0x20 [ 122.677794][ T8079] [ 122.677794][ T8079] -> #1 (console_lock){+.+.}-{0:0}: [ 122.679897][ T8079] console_lock+0x194/0x1ec [ 122.681353][ T8079] bch2_print_string_as_lines+0x68/0x260 [ 122.683053][ T8079] bch2_print_str+0x94/0xd0 [ 122.684408][ T8079] bch2_dev_missing_bkey+0x124/0x188 [ 122.685983][ T8079] bch2_bkey_pick_read_device+0x954/0x133c [ 122.687791][ T8079] __bch2_read_extent+0x6f0/0x3638 [ 122.689313][ T8079] bchfs_read+0x107c/0x17e8 [ 122.690712][ T8079] bch2_readahead+0xa18/0xd88 [ 122.692126][ T8079] read_pages+0x13c/0x4c4 [ 122.693503][ T8079] page_cache_ra_order+0x7b8/0xb34 [ 122.694988][ T8079] do_sync_mmap_readahead+0x2f0/0x660 [ 122.696496][ T8079] filemap_fault+0x5e4/0x1280 [ 122.697940][ T8079] bch2_page_fault+0x2cc/0x700 [ 122.699396][ T8079] __do_fault+0x1fc/0x4cc [ 122.700684][ T8079] handle_mm_fault+0x2c94/0x4d38 [ 122.702181][ T8079] __get_user_pages+0x1ddc/0x309c [ 122.703668][ T8079] populate_vma_page_range+0x218/0x2e8 [ 122.705310][ T8079] __mm_populate+0x208/0x330 [ 122.706680][ T8079] vm_mmap_pgoff+0x378/0x43c [ 122.708070][ T8079] ksys_mmap_pgoff+0x394/0x5b8 [ 122.709100][ T8128] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.391: Parent and EA inode have the same ino 15 [ 122.709330][ T8128] EXT4-fs (loop3): Remounting filesystem read-only [ 122.709396][ T8128] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 122.709452][ T8128] EXT4-fs (loop3): 1 orphan inode deleted [ 122.715268][ T8128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.721959][ T8079] __arm64_sys_mmap+0xf8/0x110 [ 122.723411][ T8079] invoke_syscall+0x98/0x2b8 [ 122.724824][ T8079] el0_svc_common+0x130/0x23c [ 122.726205][ T8079] do_el0_svc+0x48/0x58 [ 122.727535][ T8079] el0_svc+0x58/0x17c [ 122.728757][ T8079] el0t_64_sync_handler+0x78/0x108 [ 122.730264][ T8079] el0t_64_sync+0x198/0x19c [ 122.731630][ T8079] [ 122.731630][ T8079] -> #0 (bcachefs_btree){+.+.}-{0:0}: [ 122.733695][ T8079] __lock_acquire+0x1774/0x30a4 [ 122.735161][ T8079] lock_acquire+0x14c/0x2e0 [ 122.736562][ T8079] trans_set_locked+0x94/0x200 [ 122.738017][ T8079] bch2_trans_begin+0x71c/0xaac [ 122.739444][ T8079] bch2_read_err_msg_trans+0x64/0x298 [ 122.741031][ T8079] __bch2_read_extent+0x25f0/0x3638 [ 122.742590][ T8079] bchfs_read+0x107c/0x17e8 [ 122.743979][ T8079] bch2_read_single_folio+0x498/0x6e4 [ 122.745539][ T8079] bch2_read_folio+0x40/0x84 [ 122.746950][ T8079] filemap_read_folio+0xec/0x2f8 [ 122.748362][ T8079] filemap_fault+0xd48/0x1280 [ 122.749824][ T8079] bch2_page_fault+0x2cc/0x700 [ 122.751208][ T8079] __do_fault+0x1fc/0x4cc [ 122.752544][ T8079] handle_mm_fault+0x1a08/0x4d38 [ 122.754058][ T8079] do_page_fault+0x8d8/0x1554 [ 122.755434][ T8079] do_translation_fault+0xc4/0x114 [ 122.756942][ T8079] do_mem_abort+0x70/0x194 [ 122.758302][ T8079] el0_da+0x64/0x160 [ 122.759436][ T8079] el0t_64_sync_handler+0x84/0x108 [ 122.760996][ T8079] el0t_64_sync+0x198/0x19c [ 122.762379][ T8079] [ 122.762379][ T8079] other info that might help us debug this: [ 122.762379][ T8079] [ 122.765147][ T8079] Chain exists of: [ 122.765147][ T8079] bcachefs_btree --> &mm->mmap_lock --> mapping.invalidate_lock#9 [ 122.765147][ T8079] [ 122.768851][ T8079] Possible unsafe locking scenario: [ 122.768851][ T8079] [ 122.770844][ T8079] CPU0 CPU1 [ 122.772254][ T8079] ---- ---- [ 122.773749][ T8079] rlock(mapping.invalidate_lock#9); [ 122.775206][ T8079] lock(&mm->mmap_lock); [ 122.777046][ T8079] lock(mapping.invalidate_lock#9); [ 122.779161][ T8079] lock(bcachefs_btree); [ 122.780380][ T8079] [ 122.780380][ T8079] *** DEADLOCK *** [ 122.780380][ T8079] [ 122.782643][ T8079] 2 locks held by syz.4.376/8079: [ 122.784046][ T8079] #0: ffff0000da7eedd0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x38/0x2d8 [ 122.786798][ T8079] #1: ffff0000df271218 (mapping.invalidate_lock#9){.+.+}-{4:4}, at: filemap_fault+0x3fc/0x1280 [ 122.789746][ T8079] [ 122.789746][ T8079] stack backtrace: [ 122.791368][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.4.376 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 122.794302][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.797110][ T8079] Call trace: [ 122.797996][ T8079] show_stack+0x2c/0x3c (C) [ 122.799224][ T8079] __dump_stack+0x30/0x40 [ 122.800401][ T8079] dump_stack_lvl+0xd8/0x12c [ 122.801682][ T8079] dump_stack+0x1c/0x28 [ 122.802866][ T8079] print_circular_bug+0x324/0x32c [ 122.804268][ T8079] check_noncircular+0x154/0x174 [ 122.805627][ T8079] __lock_acquire+0x1774/0x30a4 [ 122.806972][ T8079] lock_acquire+0x14c/0x2e0 [ 122.808206][ T8079] trans_set_locked+0x94/0x200 [ 122.809533][ T8079] bch2_trans_begin+0x71c/0xaac [ 122.810842][ T8079] bch2_read_err_msg_trans+0x64/0x298 [ 122.812393][ T8079] __bch2_read_extent+0x25f0/0x3638 [ 122.813950][ T8079] bchfs_read+0x107c/0x17e8 [ 122.815219][ T8079] bch2_read_single_folio+0x498/0x6e4 [ 122.816709][ T8079] bch2_read_folio+0x40/0x84 [ 122.818218][ T8079] filemap_read_folio+0xec/0x2f8 [ 122.819750][ T8079] filemap_fault+0xd48/0x1280 [ 122.821044][ T8079] bch2_page_fault+0x2cc/0x700 [ 122.822471][ T8079] __do_fault+0x1fc/0x4cc [ 122.823667][ T8079] handle_mm_fault+0x1a08/0x4d38 [ 122.825080][ T8079] do_page_fault+0x8d8/0x1554 [ 122.826412][ T8079] do_translation_fault+0xc4/0x114 [ 122.827861][ T8079] do_mem_abort+0x70/0x194 [ 122.829082][ T8079] el0_da+0x64/0x160 [ 122.830157][ T8079] el0t_64_sync_handler+0x84/0x108 [ 122.831541][ T8079] el0t_64_sync+0x198/0x19c [ 122.839268][ T8079] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.839268][ T8079] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.839560][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.839560][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.839856][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.839856][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.840103][ T8080] bcachefs (loop4): /file3 offset 0: no_devices_valid [ 122.840103][ T8080] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 0 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 237:893353206280 gen 0 [ 122.854467][ T6517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.874892][ T8100] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 122.953117][ T8141] loop9: detected capacity change from 0 to 8 [ 122.993573][ T8141] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.993628][ T8141] loop9: partition table partially beyond EOD, truncated [ 122.998277][ T8141] loop9: p1 size 81768186 extends beyond EOD, truncated [ 123.124926][ T8100] XFS (loop2): Ending clean mount [ 123.278457][ T8100] XFS (loop2): Quotacheck needed: Please wait. [ 123.281694][ T4147] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x140/0x1150, inode 0x25 dinode [ 123.281766][ T4147] XFS (loop2): Unmount and run xfs_repair [ 123.281789][ T4147] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 123.281814][ T4147] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 123.281837][ T4147] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.281860][ T4147] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 123.281882][ T4147] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 123.281904][ T4147] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.281926][ T4147] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 123.281948][ T4147] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 123.281970][ T4147] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 123.322065][ T8100] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 123.326661][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 123.329540][ T8100] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 123.333290][ T8100] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x8001 [ 123.336551][ T8100] XFS (loop2): Unmount and run xfs_repair [ 123.338403][ T8100] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 123.340691][ T8100] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00 XAGF..........@. [ 123.343343][ T8100] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 123.346130][ T8100] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 123.348727][ T8100] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00 ......;_..;\.... [ 123.351385][ T8100] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 123.354510][ T8100] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.357101][ T8100] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.359822][ T8100] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.362471][ T8100] XFS (loop2): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x8001 len 1 error 74 [ 123.374809][ T7083] udevd[7083]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 123.411285][ T6525] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x140/0x1150, inode 0x25 dinode [ 123.411366][ T6525] XFS (loop2): Unmount and run xfs_repair [ 123.411384][ T6525] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 123.411404][ T6525] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 123.411423][ T6525] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.411441][ T6525] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 123.411459][ T6525] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 123.411477][ T6525] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.411495][ T6525] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 123.411512][ T6525] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 123.411530][ T6525] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 123.411649][ T6525] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x140/0x1150, inode 0x25 dinode [ 123.411680][ T6525] XFS (loop2): Unmount and run xfs_repair [ 123.411697][ T6525] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 123.411725][ T6525] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 123.411747][ T6525] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.411765][ T6525] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 123.411782][ T6525] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 123.411800][ T6525] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.411818][ T6525] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 123.411836][ T6525] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 123.411866][ T6525] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 123.512045][ T6852] bcachefs (loop4): shutting down [ 123.524173][ T6852] bcachefs (loop4): shutdown complete [ 123.796956][ T6525] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 123.800393][ T6525] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 124.065807][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.155553][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.274726][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.355987][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.503459][ T41] bridge_slave_1: left allmulticast mode [ 124.503644][ T41] bridge_slave_1: left promiscuous mode [ 124.503776][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.509941][ T41] bridge_slave_0: left allmulticast mode [ 124.509991][ T41] bridge_slave_0: left promiscuous mode [ 124.510083][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.050344][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.085452][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.135785][ T41] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 126.218744][ T41] bond0 (unregistering): Released all slaves [ 126.285329][ T41] tipc: Disabling bearer [ 126.287139][ T41] tipc: Left network mode [ 126.304218][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.304286][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.751198][ T41] hsr_slave_0: left promiscuous mode [ 126.752760][ T41] hsr_slave_1: left promiscuous mode [ 126.753670][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.753720][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.763985][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.764042][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.769476][ T41] veth1_macvtap: left promiscuous mode [ 126.769541][ T41] veth0_macvtap: left promiscuous mode [ 126.769626][ T41] veth1_vlan: left promiscuous mode [ 126.769685][ T41] veth0_vlan: left promiscuous mode [ 128.625679][ T41] team0 (unregistering): Port device team_slave_1 removed [ 128.795854][ T41] team0 (unregistering): Port device team_slave_0 removed