last executing test programs: 44.407460078s ago: executing program 4 (id=2086): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x51) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0x5) 44.33493832s ago: executing program 4 (id=2090): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r1, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 43.737158814s ago: executing program 4 (id=2096): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x400000001fc, 0x301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) unshare(0x22020400) 43.583276478s ago: executing program 4 (id=2098): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 42.952597193s ago: executing program 4 (id=2108): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x4}], 0x1c) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140d, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x840) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.542705827s ago: executing program 4 (id=2117): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x7, 0x8, 0x77}, {@loopback, 0x4e20, 0x0, 0xffffffff, 0x2}}, 0x44) 41.482283649s ago: executing program 32 (id=2117): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x7, 0x8, 0x77}, {@loopback, 0x4e20, 0x0, 0xffffffff, 0x2}}, 0x44) 34.575781776s ago: executing program 0 (id=2170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 34.369759201s ago: executing program 0 (id=2175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 32.617520993s ago: executing program 0 (id=2176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 32.395779238s ago: executing program 0 (id=2190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 31.275747135s ago: executing program 0 (id=2186): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 31.197731397s ago: executing program 0 (id=2187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:06.0\x00', 0xd) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:07.0\x00', 0xd) 31.019324391s ago: executing program 3 (id=2193): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2a1, 0x0, 0x10000]}}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 30.529334093s ago: executing program 3 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 29.180392315s ago: executing program 3 (id=2206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="89e7ee2c7cdad9b4b47380c988a8", 0xe}, {&(0x7f0000000100)="b373ce060bcda8", 0x7}], 0x2) 28.824701204s ago: executing program 3 (id=2212): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 28.735686916s ago: executing program 3 (id=2213): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 28.474629243s ago: executing program 3 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 28.462591983s ago: executing program 33 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 15.953024565s ago: executing program 34 (id=2187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:06.0\x00', 0xd) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:07.0\x00', 0xd) 7.407260591s ago: executing program 1 (id=2334): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10410, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0xa, 0x5, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 6.375797596s ago: executing program 1 (id=2337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f00000001c0)=[{0x18, 0x11a, 0x1, "15"}], 0x18}, 0x0) 6.132527182s ago: executing program 1 (id=2340): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.950264635s ago: executing program 1 (id=2358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 2.90119032s ago: executing program 6 (id=2361): socket$unix(0x1, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) eventfd2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='0\x00', 0x2) 2.439341521s ago: executing program 5 (id=2365): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x800) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.218542486s ago: executing program 5 (id=2366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff030f6044ff0f0000000000001bff88f7ffff40006306", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 1.622116261s ago: executing program 7 (id=2368): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044045) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x50ab}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x200a6e1, 0x28004, 0x8, 0x3d6, 0x0, r6}, &(0x7f0000000500), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x300) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FdfW6tGixAUkyat2oMXpYJIRUEP9RiTbQndNtJEsbXYVMSTIAU9i0fRv8CbCKKeBK8exJMUivbS1lNkJjPJJt280GyyaffzgZl9nplndp7vztuzz7MbQMfqz2ZJxM6I+D0ieueyiwv0z73cuHZh7Oa1C2NJzM6+8XeSl7t+7cJYWbTcbkeRGUgj0o+TYieLTZ07f2q0Xq+dLfJD06ffGZo6d/7p906PnqydrJ0ZOXLk8KHh554deaYlcWZxXd/34eT+vS+/dfnVseOX3/7526y+O4v1jXG0Sn8W+D+zuaXrnmj1ztpsVz7vyedJd5srw5p1RUR2uCr59d8bXbFw8HrjpY/aWjlgQ2XPpp7lV8/MAnexJNZastJwzwDufOWDPvv+W06b0OzYMq6+MPcFKIv7RjHNremOtChTmf9+23r9EXF85t8vsyk2qB8CAKDRp2NfHKtGT3xw85tXsrZH7/yaNO7PX//M57uLMZS+iPh/ROyJiHsi4o+uiPsi8rIPRMSD66zPre2f9Mo633JFWfvv+WJsa3H7r2z9RV9XkduVx19JTkzUaweLz2QgKj1ZfniFfXx/9LfPllvX2P7Lpmz/ZVuwqMeV7iUddOOj06NRWU/UC65eitjX3Sz+ZH4kIImIvRGxb36rNQ3w7C4TE09+vX+5QqvHv4IWjDPNfpWFN5PFPxNL4i8ljeOTE7eMTw5ti3rt4FB5Vtzql18/eX25/a8r/ha4Wpt7bTj+S4v0JY3jtVOt3f9tnv9pNXkzH2euFmOO749OT58djqgmx/J8tSibLx9Z2LbMl+Wz83/gQPPrf0+xTRb/QxGRncQPR8QjEfFoUffHIuLxiDiwQow/vbh6/JG26fhfihhvev+bP/+XHP9z50+Vt8aFJSsmuk79+N1y+1/b8T+cpwaKJfn9bxXNqtPdpMq3+7kBAADAnSTNfwOfpIPz6TQdHJz7Df+98b+0Pjk1/dSJyXfPjM/9Vr4vKmnZ09Vb9IfWJ+q14WSmeMdKcjTqtZGir7jsLz1U9Bt/3rU9zw+OTdbH2xw7dLody1z/mb+62l07YINtb7p0pLrpFQHaYOk4ero4e/G1cDOAu5X/a0PnWuX6TzerHsDm8/yHztXs+r+4JG8sAO5Onv/QuVz/0KHSH9pdA6CNPP+hI6365/32JLY1LqmuXLi6RercssRWPSh5IqJMpFuiPhIblGj3nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA1/gsAAP//cd7anQ==") 1.045429055s ago: executing program 1 (id=2372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b754", 0x2d}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0e5", 0x61}, {&(0x7f0000000680)}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407", 0x63}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e4968", 0x49}], 0x5}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a37", 0x3}], 0x1}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x0) 1.039080305s ago: executing program 2 (id=2373): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0x4, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/227, 0x25) 991.454047ms ago: executing program 2 (id=2374): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 916.090608ms ago: executing program 2 (id=2375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 884.882699ms ago: executing program 7 (id=2376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000000000ea7906", 0xc}], 0x1}}], 0x1, 0x41) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x2, {0x0, 0x1, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000a580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000150) 845.48211ms ago: executing program 1 (id=2377): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 744.363682ms ago: executing program 5 (id=2378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x0, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0x0, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0x2, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 713.765583ms ago: executing program 6 (id=2379): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 698.824983ms ago: executing program 2 (id=2380): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 674.804654ms ago: executing program 5 (id=2381): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = getpgid(r0) getpriority(0x2, r1) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 567.252566ms ago: executing program 6 (id=2382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x22, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0xfffffff8, 0x95, 0x6, {0x9, 0x0, 0x3ff, 0x1, 0x5b40}, {0x9e, 0x0, 0x3, 0x7fff, 0x2, 0xff}, 0x800, 0x0, 0x56db}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 524.968207ms ago: executing program 7 (id=2383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd3f, 0x70bd24, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x64, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x48, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x9, 0x9, 0xde, 0xb}, {0x5, 0x7, 0x0, 0x7fffffff}, {0xe35, 0x40, 0x1, 0x6}, {0x8, 0x30, 0x1, 0x5}, {0x5, 0x3, 0x3, 0x3}, {0x1ea, 0x9}, {0x9, 0x6, 0x9, 0x3}, {0x1, 0x4, 0x2, 0x2}]}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 478.063999ms ago: executing program 2 (id=2384): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8001, 0x0) 477.595259ms ago: executing program 5 (id=2385): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) 375.552741ms ago: executing program 7 (id=2386): timerfd_create(0x0, 0x80000) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) keyctl$join(0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) 368.871171ms ago: executing program 2 (id=2387): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x820, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/17, 0x11}, 0x53}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) 260.933454ms ago: executing program 6 (id=2388): ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40087602, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r1, &(0x7f00000002c0)=""/141, 0x8d) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 156.313787ms ago: executing program 7 (id=2389): creat(&(0x7f0000000a00)='./file0\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001ca000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb, 0xfffb}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x2000c001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 130.451887ms ago: executing program 5 (id=2390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000007c0)="b373ce060bcda8bd13ce09e530a035a43c389192a94be525d47a1ad40800b92ca2ec04038f26d29c5ad4fcb6", 0x2c}], 0x2) 129.757777ms ago: executing program 6 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x45, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 22.728419ms ago: executing program 7 (id=2392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048854) 0s ago: executing program 6 (id=2393): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x2, 0xfff1}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008848}, 0x24004004) kernel console output (not intermixed with test programs): wap 8609792 [ 136.896388][ T3297] swapcached 9129984 [ 136.916347][ T3297] pgpgin 58997 [ 136.936001][ T3297] pgpgout 58997 [ 136.956445][ T3297] pgfault 89558 [ 136.977840][ T3297] pgmajfault 56 [ 136.994798][ T3297] inactive_anon 0 [ 137.014252][ T3297] active_anon 0 [ 137.017893][ T7778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1789'. [ 137.035932][ T3297] inactive_file 0 [ 137.047555][ T3297] active_file 0 [ 137.068602][ T3297] unevictable 0 [ 137.091619][ T3297] hierarchical_memory_limit 314572800 [ 137.127837][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 137.158530][ T3297] total_cache 0 [ 137.179927][ T3297] total_rss 0 [ 137.197419][ T3297] total_shmem 0 [ 137.209596][ T28] audit: type=1400 audit(1785299460.601:651): avc: denied { mount } for pid=7794 comm="syz.4.1796" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.215060][ T3297] total_mapped_file 0 [ 137.238319][ T7795] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.300082][ T3297] total_dirty 0 [ 137.301805][ T28] audit: type=1400 audit(1785299460.651:652): avc: denied { read } for pid=7796 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 137.336162][ T3297] total_writeback 0 [ 137.336428][ T28] audit: type=1400 audit(1785299460.651:653): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.359186][ T3297] total_workingset_refault_anon 91 [ 137.360806][ T28] audit: type=1400 audit(1785299460.691:654): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.385033][ T3297] total_workingset_refault_file 800 [ 137.390476][ T3297] total_swap 8609792 [ 137.399620][ T3297] total_swapcached 9129984 [ 137.413358][ T3297] total_pgpgin 58997 [ 137.429826][ T3297] total_pgpgout 58997 [ 137.443066][ T3297] total_pgfault 89558 [ 137.465086][ T3297] total_pgmajfault 56 [ 137.483869][ T3297] total_inactive_anon 0 [ 137.502531][ T3297] total_active_anon 0 [ 137.514764][ T3297] total_inactive_file 0 [ 137.528793][ T3297] total_active_file 0 [ 137.545412][ T3297] total_unevictable 0 [ 137.562771][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1763,pid=7719,uid=0 [ 137.629613][ T3297] Memory cgroup out of memory: Killed process 7719 (syz.1.1763) total-vm:98548kB, anon-rss:1240kB, file-rss:26380kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 137.666978][ T28] audit: type=1400 audit(1785299461.061:655): avc: denied { accept } for pid=7822 comm="syz.2.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.810082][ T7838] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.1814' sets config #4096 [ 137.895980][ T28] audit: type=1400 audit(1785299461.291:656): avc: denied { read } for pid=7840 comm="syz.4.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.121893][ T7865] netlink: 'syz.0.1828': attribute type 3 has an invalid length. [ 138.363989][ T7884] loop4: detected capacity change from 0 to 256 [ 138.379366][ T7889] program syz.1.1838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.450661][ T7907] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 139.507403][ T7907] SELinux: failed to load policy [ 139.536591][ T7913] loop4: detected capacity change from 0 to 512 [ 140.135025][ T7934] bridge0: entered promiscuous mode [ 140.145797][ T7937] loop4: detected capacity change from 0 to 512 [ 140.166526][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.287227][ T7937] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.363713][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 140.363769][ T28] audit: type=1400 audit(1785299463.761:661): avc: denied { write } for pid=7933 comm="syz.4.1858" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.422765][ T7954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.472731][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.503011][ T28] audit: type=1400 audit(1785299463.781:662): avc: denied { accept } for pid=7949 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.511963][ T7960] __nla_validate_parse: 4 callbacks suppressed [ 140.512019][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 140.551234][ T28] audit: type=1400 audit(1785299463.801:663): avc: denied { bind } for pid=7953 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.617888][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1868'. [ 140.673993][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1868'. [ 140.793543][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 140.850578][ T7983] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1879'. [ 140.876650][ T28] audit: type=1400 audit(1785299464.271:664): avc: denied { write } for pid=7984 comm="syz.4.1880" path="/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 140.889856][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 141.064603][ T7998] SELinux: invalid class [ 141.086898][ T7998] SELinux: failed to load policy [ 141.185084][ T28] audit: type=1400 audit(1785299464.581:665): avc: denied { write } for pid=8008 comm="syz.0.1891" name="functions" dev="configfs" ino=6052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.053764][ T28] audit: type=1400 audit(1785299465.451:666): avc: denied { read } for pid=8080 comm="syz.3.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.301992][ T28] audit: type=1400 audit(1785299465.691:667): avc: denied { write } for pid=8098 comm="syz.1.1928" name="uvc.usb0" dev="configfs" ino=6057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.397630][ T28] audit: type=1400 audit(1785299465.691:668): avc: denied { create } for pid=8098 comm="syz.1.1928" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 142.449485][ T28] audit: type=1400 audit(1785299465.691:669): avc: denied { write } for pid=8098 comm="syz.1.1928" name="uvc.usb0" dev="configfs" ino=6057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.543419][ T28] audit: type=1400 audit(1785299465.931:670): avc: denied { append } for pid=8110 comm="syz.0.1934" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.101549][ T8154] process 'syz.0.1953' launched './file0' with NULL argv: empty string added [ 143.143225][ T8157] program syz.3.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.633493][ T8181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1964'. [ 143.761635][ T8172] syz.0.1960 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 143.910253][ T8194] option changes via remount are deprecated (pid=8193 comm=syz.4.1969) [ 143.955443][ T8194] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 144.359218][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 144.700255][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 144.799964][ T8248] loop4: detected capacity change from 0 to 1024 [ 144.842478][ T8248] EXT4-fs: Ignoring removed oldalloc option [ 144.874849][ T8248] EXT4-fs: Ignoring removed bh option [ 144.988329][ T8248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.046287][ T8248] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.363888][ T8248] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1992: Freeing blocks not in datazone - block = 0, count = 16 [ 145.381149][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 145.381240][ T28] audit: type=1400 audit(1785299469.776:703): avc: denied { ioctl } for pid=8266 comm="syz.2.1998" path="socket:[19258]" dev="sockfs" ino=19258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.596501][ T36] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 145.746395][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 145.789023][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.789023][ T36] [ 145.826807][ T36] EXT4-fs (loop4): Total free blocks count 0 [ 145.867203][ T36] EXT4-fs (loop4): Free/Dirty block details [ 145.895787][ T36] EXT4-fs (loop4): free_blocks=16 [ 145.919864][ T36] EXT4-fs (loop4): dirty_blocks=16 [ 145.946795][ T36] EXT4-fs (loop4): Block reservation details [ 145.977531][ T36] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 146.031737][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 146.107586][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.103524][ T28] audit: type=1400 audit(1785299471.506:704): avc: denied { ioctl } for pid=8312 comm="syz.2.2012" path="socket:[19333]" dev="sockfs" ino=19333 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.758684][ T28] audit: type=1400 audit(1785299472.156:705): avc: denied { bind } for pid=8337 comm="syz.0.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.168106][ T8355] sctp: [Deprecated]: syz.2.2031 (pid 8355) Use of int in maxseg socket option. [ 148.168106][ T8355] Use struct sctp_assoc_value instead [ 148.484462][ T8365] bond0: entered promiscuous mode [ 148.529131][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 148.712766][ T28] audit: type=1400 audit(1785299473.106:706): avc: denied { connect } for pid=8374 comm="syz.3.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.444867][ T8406] syz.1.2047 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 149.478106][ T8406] CPU: 1 UID: 0 PID: 8406 Comm: syz.1.2047 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.478140][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.478162][ T8406] Call Trace: [ 149.478229][ T8406] [ 149.478238][ T8406] __dump_stack+0x1d/0x30 [ 149.478314][ T8406] dump_stack_lvl+0x95/0xd0 [ 149.478343][ T8406] dump_stack+0x15/0x1b [ 149.478371][ T8406] dump_header+0x80/0x240 [ 149.478401][ T8406] oom_kill_process+0x295/0x350 [ 149.478448][ T8406] out_of_memory+0x981/0xbc0 [ 149.478534][ T8406] try_charge_memcg+0x621/0xa00 [ 149.478569][ T8406] __obj_cgroup_charge+0x105/0x230 [ 149.478613][ T8406] __memcg_slab_post_alloc_hook+0x492/0x860 [ 149.478697][ T8406] ? should_fail_ex+0x30/0x270 [ 149.478739][ T8406] ? alloc_netdev_mqs+0x818/0xa90 [ 149.478831][ T8406] __kmalloc_cache_noprof+0x1f9/0x3d0 [ 149.478865][ T8406] ? alloc_netdev_mqs+0x818/0xa90 [ 149.478913][ T8406] alloc_netdev_mqs+0x818/0xa90 [ 149.478962][ T8406] tun_set_iff+0x423/0x880 [ 149.479014][ T8406] __tun_chr_ioctl+0x65e/0x14e0 [ 149.479059][ T8406] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 149.479130][ T8406] tun_chr_ioctl+0x27/0x40 [ 149.479169][ T8406] __se_sys_ioctl+0xce/0x140 [ 149.479197][ T8406] __x64_sys_ioctl+0x43/0x50 [ 149.479223][ T8406] x64_sys_call+0x1563/0x3020 [ 149.479322][ T8406] do_syscall_64+0x136/0x3c0 [ 149.479350][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.479381][ T8406] RIP: 0033:0x7f0d66f2de99 [ 149.479403][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.479469][ T8406] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.479499][ T8406] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 149.479514][ T8406] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 149.479528][ T8406] RBP: 00007f0d66fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 149.479547][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.479564][ T8406] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 149.479592][ T8406] [ 149.695735][ T8406] memory: usage 1024kB, limit 1024kB, failcnt 3685 [ 149.702352][ T8406] memory+swap: usage 9516kB, limit 9007199254740988kB, failcnt 0 [ 149.710123][ T8406] kmem: usage 1024kB, limit 9007199254740988kB, failcnt 0 [ 149.717927][ T8406] Memory cgroup stats for /syz1: [ 149.718188][ T8406] cache 0 [ 149.726229][ T8406] rss 0 [ 149.729411][ T8406] shmem 0 [ 149.732406][ T8406] mapped_file 0 [ 149.736205][ T8406] dirty 0 [ 149.739423][ T8406] writeback 0 [ 149.742947][ T8406] workingset_refault_anon 402 [ 149.757375][ T8406] workingset_refault_file 3245 [ 149.775760][ T8406] swap 8695808 [ 149.790690][ T8406] swapcached 10805248 [ 149.806086][ T8406] pgpgin 67680 [ 149.818549][ T8406] pgpgout 67680 [ 149.830559][ T8406] pgfault 98665 [ 149.841156][ T8406] pgmajfault 298 [ 149.854085][ T8406] inactive_anon 0 [ 149.870131][ T8406] active_anon 0 [ 149.880200][ T8406] inactive_file 0 [ 149.891716][ T8406] active_file 0 [ 149.900701][ T8406] unevictable 0 [ 149.912034][ T8406] hierarchical_memory_limit 1048576 [ 149.928646][ T8406] hierarchical_memsw_limit 9223372036854771712 [ 149.950043][ T8406] total_cache 0 [ 149.962824][ T8406] total_rss 0 [ 149.975153][ T8406] total_shmem 0 [ 149.987894][ T8406] total_mapped_file 0 [ 149.999155][ T8406] total_dirty 0 [ 150.015752][ T8406] total_writeback 0 [ 150.031965][ T8406] total_workingset_refault_anon 402 [ 150.049995][ T8406] total_workingset_refault_file 3245 [ 150.060068][ T8406] total_swap 8695808 [ 150.064510][ T8406] total_swapcached 10805248 [ 150.080570][ T8406] total_pgpgin 67680 [ 150.090194][ T8406] total_pgpgout 67680 [ 150.100284][ T8406] total_pgfault 98665 [ 150.104669][ T8406] total_pgmajfault 298 [ 150.108871][ T8406] total_inactive_anon 0 [ 150.113311][ T8406] total_active_anon 0 [ 150.117386][ T8406] total_inactive_file 0 [ 150.121759][ T8406] total_active_file 0 [ 150.126159][ T8406] total_unevictable 0 [ 150.130331][ T8406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2047,pid=8405,uid=0 [ 150.145613][ T8406] Memory cgroup out of memory: Killed process 8405 (syz.1.2047) total-vm:94180kB, anon-rss:1244kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 151.412039][ T8454] loop4: detected capacity change from 0 to 512 [ 151.479035][ T8454] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 151.645304][ T8454] EXT4-fs: error: could not find journal device path [ 152.627951][ T8444] syz.1.2061 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 152.683035][ T8444] CPU: 1 UID: 0 PID: 8444 Comm: syz.1.2061 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.683069][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.683087][ T8444] Call Trace: [ 152.683096][ T8444] [ 152.683106][ T8444] __dump_stack+0x1d/0x30 [ 152.683132][ T8444] dump_stack_lvl+0x95/0xd0 [ 152.683201][ T8444] dump_stack+0x15/0x1b [ 152.683219][ T8444] dump_header+0x80/0x240 [ 152.683267][ T8444] oom_kill_process+0x295/0x350 [ 152.683304][ T8444] out_of_memory+0x981/0xbc0 [ 152.683445][ T8444] try_charge_memcg+0x621/0xa00 [ 152.683472][ T8444] charge_memcg+0x6d/0x120 [ 152.683546][ T8444] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 152.683585][ T8444] swap_cache_alloc_folio+0x47b/0x5e0 [ 152.683621][ T8444] swap_cluster_readahead+0x2b1/0x460 [ 152.683717][ T8444] swapin_readahead+0xd8/0x8a0 [ 152.683807][ T8444] ? _raw_spin_unlock+0x9/0x30 [ 152.683835][ T8444] ? swap_put_entries_cluster+0x49c/0x4c0 [ 152.683927][ T8444] ? __entry_text_end+0xf208/0x102179 [ 152.683962][ T8444] ? __rcu_read_unlock+0x4e/0x70 [ 152.683996][ T8444] ? swap_cache_get_folio+0x1f7/0x200 [ 152.684036][ T8444] do_swap_page+0x2a2/0x1ec0 [ 152.684082][ T8444] ? __css_rstat_updated+0xbb/0x280 [ 152.684109][ T8444] ? __rcu_read_lock+0x36/0x50 [ 152.684132][ T8444] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 152.684163][ T8444] handle_mm_fault+0xb3c/0x2da0 [ 152.684325][ T8444] do_user_addr_fault+0x634/0x1060 [ 152.684365][ T8444] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 152.684438][ T8444] ? trace_page_fault_user+0x1f/0xa0 [ 152.684470][ T8444] exc_page_fault+0x62/0xa0 [ 152.684505][ T8444] asm_exc_page_fault+0x26/0x30 [ 152.684555][ T8444] RIP: 0033:0x7f0d66df439a [ 152.684570][ T8444] Code: 2c fa ff ff 8b 45 0c 85 c0 75 26 48 8d 75 0c b9 40 42 0f 00 ba 81 00 00 00 c7 45 0c 01 00 00 00 bf ca 00 00 00 31 c0 45 31 e4 e1 9a 13 00 eb 88 48 8d 3d 15 05 1d 00 31 c0 e8 91 ea fe ff 90 [ 152.684592][ T8444] RSP: 002b:00007f0d659870f0 EFLAGS: 00010246 [ 152.684613][ T8444] RAX: 0000000000000000 RBX: 00007f0d671b5fa8 RCX: 00000000000f4240 [ 152.684631][ T8444] RDX: 0000000000000081 RSI: 00007f0d671b5fac RDI: 00000000000000ca [ 152.684648][ T8444] RBP: 00007f0d671b5fa0 R08: 0000200000000000 R09: 3fffffffffffffff [ 152.684703][ T8444] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.684716][ T8444] R13: 00007f0d671b6038 R14: 00007ffd330eef70 R15: 00007ffd330ef058 [ 152.684737][ T8444] [ 152.687228][ T8444] memory: usage 1024kB, limit 1024kB, failcnt 7094 [ 152.929123][ T8444] memory+swap: usage 9424kB, limit 9007199254740988kB, failcnt 0 [ 152.952222][ T8444] kmem: usage 508kB, limit 9007199254740988kB, failcnt 0 [ 152.963853][ T8444] Memory cgroup stats for /syz1: [ 152.964182][ T8444] cache 520192 [ 152.972756][ T8444] rss 0 [ 152.975626][ T8444] shmem 0 [ 152.978888][ T8444] mapped_file 0 [ 152.982547][ T8444] dirty 0 [ 152.985658][ T8444] writeback 4096 [ 152.998513][ T8444] workingset_refault_anon 440 [ 153.015733][ T8444] workingset_refault_file 4125 [ 153.040112][ T8444] swap 8601600 [ 153.046827][ T8444] swapcached 11018240 [ 153.062474][ T8444] pgpgin 71520 [ 153.073425][ T8444] pgpgout 71391 [ 153.080537][ T8444] pgfault 101720 [ 153.085788][ T8444] pgmajfault 340 [ 153.089407][ T8444] inactive_anon 4096 [ 153.096619][ T8444] active_anon 0 [ 153.100141][ T8444] inactive_file 266240 [ 153.106735][ T8444] active_file 253952 [ 153.110668][ T8444] unevictable 0 [ 153.114342][ T8444] hierarchical_memory_limit 1048576 [ 153.119597][ T8444] hierarchical_memsw_limit 9223372036854771712 [ 153.126086][ T8444] total_cache 520192 [ 153.130057][ T8444] total_rss 0 [ 153.133513][ T8444] total_shmem 0 [ 153.137004][ T8444] total_mapped_file 0 [ 153.141133][ T8444] total_dirty 0 [ 153.144840][ T8444] total_writeback 4096 [ 153.148954][ T8444] total_workingset_refault_anon 440 [ 153.154387][ T8444] total_workingset_refault_file 4125 [ 153.159723][ T8444] total_swap 8601600 [ 153.163832][ T8444] total_swapcached 11018240 [ 153.168409][ T8444] total_pgpgin 71520 [ 153.172341][ T8444] total_pgpgout 71391 [ 153.176570][ T8444] total_pgfault 101720 [ 153.180663][ T8444] total_pgmajfault 340 [ 153.184854][ T8444] total_inactive_anon 4096 [ 153.189317][ T8444] total_active_anon 0 [ 153.193490][ T8444] total_inactive_file 266240 [ 153.198113][ T8444] total_active_file 253952 [ 153.202559][ T8444] total_unevictable 0 [ 153.206688][ T8444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2061,pid=8442,uid=0 [ 153.221541][ T8444] Memory cgroup out of memory: Killed process 8442 (syz.1.2061) total-vm:96228kB, anon-rss:1244kB, file-rss:21448kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 154.004742][ T8446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.132592][ T8510] IPVS: stopping master sync thread 7409 ... [ 154.193175][ T28] audit: type=1326 audit(1785299478.586:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz.3.2088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27dfbde99 code=0x0 [ 154.232972][ T8514] md: array md0 already has disks! [ 154.283369][ T28] audit: type=1326 audit(1785299478.676:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.2091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeab3ede99 code=0x7ffc0000 [ 154.317736][ T28] audit: type=1326 audit(1785299478.676:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.2091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeab3ede99 code=0x7ffc0000 [ 154.343905][ T28] audit: type=1326 audit(1785299478.706:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.2091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fdeab3ede99 code=0x7ffc0000 [ 154.411865][ T28] audit: type=1326 audit(1785299478.706:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.2091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeab3ede99 code=0x7ffc0000 [ 154.445636][ T28] audit: type=1326 audit(1785299478.706:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.2091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeab3ede99 code=0x7ffc0000 [ 154.934129][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2097'. [ 154.959139][ T8537] loop4: detected capacity change from 0 to 512 [ 154.980833][ T8537] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 155.003444][ T8537] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.016529][ T8537] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.023612][ T8537] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2098: Block bitmap for bg 0 marked uninitialized [ 155.037043][ T8537] loop4: lost filesystem error report for type 5 error -117 [ 155.037212][ T8537] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 155.044541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 155.044560][ C1] EXT4-fs (loop4): initial error at time 1785299479: ext4_read_block_bitmap_nowait:517 [ 155.044588][ C1] EXT4-fs (loop4): last error at time 1785299479: ext4_read_block_bitmap_nowait:517 [ 155.082276][ T8537] loop4: lost filesystem error report for type 5 error -117 [ 155.082513][ T8537] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2098: Block bitmap for bg 0 marked uninitialized [ 155.113031][ T8537] loop4: lost filesystem error report for type 5 error -117 [ 155.114599][ T8537] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 155.158627][ T8543] netlink: 'syz.2.2101': attribute type 8 has an invalid length. [ 155.170319][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 155.190396][ T28] audit: type=1400 audit(1785299479.576:713): avc: denied { setopt } for pid=8541 comm="syz.0.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.222065][ T8537] loop4: lost filesystem error report for type 5 error -117 [ 155.222342][ T8537] EXT4-fs (loop4): 1 orphan inode deleted [ 155.295299][ T8537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.298931][ T8546] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2102'. [ 155.367087][ T8552] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2102'. [ 155.515364][ T8558] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 155.529969][ T28] audit: type=1400 audit(1785299479.926:714): avc: denied { bind } for pid=8559 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.589112][ T3301] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /400/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 155.621565][ T28] audit: type=1400 audit(1785299479.986:715): avc: denied { read } for pid=3020 comm="dhcpcd" name="n25" dev="tmpfs" ino=8348 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.696728][ T28] audit: type=1400 audit(1785299479.986:716): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=8348 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.756198][ T3301] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 155.843870][ T3301] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 156.693332][ T8557] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 156.883850][ T8554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.912030][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.994614][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.091292][ T8634] netlink: 'syz.2.2121': attribute type 4 has an invalid length. [ 157.111612][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.232806][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.388892][ T12] dvmrp0: left allmulticast mode [ 157.544368][ T12] team0: Port device gretap1 removed [ 157.600083][ T12] bond0 (unregistering): Released all slaves [ 157.662386][ T12] tipc: Left network mode [ 157.680940][ T8521] Set syz1 is full, maxelem 65536 reached [ 157.688228][ T12] hsr_slave_0: left promiscuous mode [ 157.695677][ T12] hsr_slave_1: left promiscuous mode [ 157.707202][ T12] veth1_macvtap: left promiscuous mode [ 157.718778][ T12] veth0_macvtap: left promiscuous mode [ 157.735450][ T8521] syz.1.2093 (8521) used greatest stack depth: 7096 bytes left [ 158.424023][ T8716] syzkaller0: entered promiscuous mode [ 158.450330][ T8716] syzkaller0: entered allmulticast mode [ 158.560609][ T12] IPVS: stop unused estimator thread 0... [ 158.707993][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.816202][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.825001][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.844556][ T8643] bridge_slave_0: entered allmulticast mode [ 158.851148][ T8643] bridge_slave_0: entered promiscuous mode [ 158.882521][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.889908][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.900310][ T8643] bridge_slave_1: entered allmulticast mode [ 158.906793][ T8643] bridge_slave_1: entered promiscuous mode [ 159.011955][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.035014][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.079750][ T8643] team0: Port device team_slave_0 added [ 159.094592][ T8643] team0: Port device team_slave_1 added [ 159.158588][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.167304][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.223030][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.234535][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.257494][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.269512][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.295918][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.344847][ T8643] hsr_slave_0: entered promiscuous mode [ 159.371431][ T8643] hsr_slave_1: entered promiscuous mode [ 159.393503][ T8643] debugfs: 'hsr0' already exists in 'hsr' [ 159.409553][ T8643] Cannot create hsr debugfs directory [ 159.790810][ T8643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.809850][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 159.809868][ T28] audit: type=1400 audit(1785299484.206:743): avc: denied { write } for pid=8781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.847282][ T8643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.897987][ T8643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.924342][ T8643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.929925][ T28] audit: type=1400 audit(1785299484.326:744): avc: denied { write } for pid=8804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.974984][ T8643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.998117][ T8643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.036147][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 160.065243][ T8643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.087577][ T8643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.273517][ T8817] syzkaller0: entered promiscuous mode [ 160.288664][ T8817] syzkaller0: entered allmulticast mode [ 160.356359][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.370933][ T28] audit: type=1400 audit(1785299484.766:745): avc: denied { write } for pid=8815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.464606][ T28] audit: type=1400 audit(1785299484.866:746): avc: denied { write } for pid=8832 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.517824][ T8643] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.544896][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 160.555569][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.562667][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.784272][ T8834] syz.1.2151 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 160.835621][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.1.2151 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.835657][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.835673][ T8834] Call Trace: [ 160.835680][ T8834] [ 160.835688][ T8834] __dump_stack+0x1d/0x30 [ 160.835719][ T8834] dump_stack_lvl+0x95/0xd0 [ 160.835825][ T8834] dump_stack+0x15/0x1b [ 160.835852][ T8834] dump_header+0x80/0x240 [ 160.835880][ T8834] oom_kill_process+0x295/0x350 [ 160.835954][ T8834] out_of_memory+0x981/0xbc0 [ 160.836006][ T8834] try_charge_memcg+0x621/0xa00 [ 160.836111][ T8834] ? memcmp+0x5e/0x90 [ 160.836153][ T8834] __obj_cgroup_charge+0x105/0x230 [ 160.836196][ T8834] __memcg_slab_post_alloc_hook+0x492/0x860 [ 160.836266][ T8834] __kmalloc_node_track_caller_noprof+0x33c/0x4c0 [ 160.836364][ T8834] ? __addrconf_sysctl_register+0x60/0x340 [ 160.836539][ T8834] ? __addrconf_sysctl_register+0x60/0x340 [ 160.836567][ T8834] kmemdup_noprof+0x2b/0x70 [ 160.836617][ T8834] __addrconf_sysctl_register+0x60/0x340 [ 160.836750][ T8834] ? neigh_sysctl_register+0x682/0x6d0 [ 160.836791][ T8834] ? proc_create_single_data+0xfb/0x140 [ 160.836833][ T8834] addrconf_sysctl_register+0xe6/0x130 [ 160.836871][ T8834] ipv6_add_dev+0x888/0xab0 [ 160.836950][ T8834] addrconf_notify+0x3ad/0x8e0 [ 160.836977][ T8834] ? __pfx_addrconf_notify+0x10/0x10 [ 160.837024][ T8834] raw_notifier_call_chain+0x72/0x1a0 [ 160.837117][ T8834] ? blake2s_update+0x144/0x150 [ 160.837137][ T8834] call_netdevice_notifiers+0xb5/0x110 [ 160.837247][ T8834] register_netdevice+0xfbf/0x11a0 [ 160.837288][ T8834] tun_set_iff+0x5ce/0x880 [ 160.837328][ T8834] __tun_chr_ioctl+0x65e/0x14e0 [ 160.837372][ T8834] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 160.837398][ T8834] tun_chr_ioctl+0x27/0x40 [ 160.837459][ T8834] __se_sys_ioctl+0xce/0x140 [ 160.837485][ T8834] __x64_sys_ioctl+0x43/0x50 [ 160.837566][ T8834] x64_sys_call+0x1563/0x3020 [ 160.837591][ T8834] do_syscall_64+0x136/0x3c0 [ 160.837616][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.837645][ T8834] RIP: 0033:0x7f0d66f2de99 [ 160.837685][ T8834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.837759][ T8834] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.837786][ T8834] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 160.837856][ T8834] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 160.837874][ T8834] RBP: 00007f0d66fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 160.837892][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.837909][ T8834] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 160.837935][ T8834] [ 160.839748][ T8834] memory: usage 1024kB, limit 1024kB, failcnt 8072 [ 161.140008][ T8834] memory+swap: usage 9516kB, limit 9007199254740988kB, failcnt 0 [ 161.147997][ T8834] kmem: usage 1020kB, limit 9007199254740988kB, failcnt 0 [ 161.155629][ T8834] Memory cgroup stats for /syz1: [ 161.155848][ T8834] cache 0 [ 161.204384][ T8834] rss 4096 [ 161.214639][ T8834] shmem 0 [ 161.223820][ T8834] mapped_file 0 [ 161.228835][ T8834] dirty 0 [ 161.243567][ T8834] writeback 0 [ 161.247437][ T8834] workingset_refault_anon 724 [ 161.262166][ T8834] workingset_refault_file 4227 [ 161.291702][ T8834] swap 8695808 [ 161.299813][ T8834] swapcached 12521472 [ 161.310451][ T8834] pgpgin 72241 [ 161.320187][ T8834] pgpgout 72240 [ 161.329741][ T8834] pgfault 103013 [ 161.338453][ T8834] pgmajfault 542 [ 161.348573][ T8834] inactive_anon 0 [ 161.358699][ T8834] active_anon 4096 [ 161.368142][ T8834] inactive_file 0 [ 161.375067][ T8834] active_file 0 [ 161.393770][ T8834] unevictable 0 [ 161.403208][ T8834] hierarchical_memory_limit 1048576 [ 161.473042][ T8834] hierarchical_memsw_limit 9223372036854771712 [ 161.487106][ T8834] total_cache 0 [ 161.497595][ T8834] total_rss 4096 [ 161.506770][ T8834] total_shmem 0 [ 161.515421][ T8834] total_mapped_file 0 [ 161.526817][ T8834] total_dirty 0 [ 161.542470][ T8834] total_writeback 0 [ 161.552776][ T8834] total_workingset_refault_anon 724 [ 161.565414][ T8834] total_workingset_refault_file 4227 [ 161.579827][ T8834] total_swap 8695808 [ 161.593010][ T8834] total_swapcached 12521472 [ 161.607379][ T8834] total_pgpgin 72241 [ 161.618107][ T8834] total_pgpgout 72240 [ 161.631450][ T8834] total_pgfault 103013 [ 161.803164][ T8834] total_pgmajfault 542 [ 161.807370][ T8834] total_inactive_anon 0 [ 161.821049][ T8834] total_active_anon 4096 [ 161.836433][ T8834] total_inactive_file 0 [ 161.850100][ T8834] total_active_file 0 [ 161.866759][ T8834] total_unevictable 0 [ 161.880331][ T8834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2151,pid=8833,uid=0 [ 161.931170][ T8834] Memory cgroup out of memory: Killed process 8833 (syz.1.2151) total-vm:96228kB, anon-rss:1240kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 162.384009][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.391140][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.437210][ T8643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.469402][ T8643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.673567][ T28] audit: type=1400 audit(1785299487.076:747): avc: denied { relabelfrom } for pid=8866 comm="syz.0.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 162.808781][ T28] audit: type=1400 audit(1785299487.076:748): avc: denied { relabelto } for pid=8866 comm="syz.0.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.186524][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.717505][ T8912] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 163.798722][ T8643] veth0_vlan: entered promiscuous mode [ 163.818833][ T8643] veth1_vlan: entered promiscuous mode [ 163.869024][ T8643] veth0_macvtap: entered promiscuous mode [ 163.879066][ T28] audit: type=1400 audit(1785299488.276:749): avc: denied { write } for pid=8918 comm="syz.3.2168" name="c.1" dev="configfs" ino=6082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.905770][ T8919] Config c/1 of g1 needs at least one function. [ 163.920368][ T8643] veth1_macvtap: entered promiscuous mode [ 163.933785][ T8919] udc usbip-vudc.0: failed to start g1: -22 [ 163.940027][ T8919] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.000166][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.018440][ T8919] UDC core: g1: couldn't find an available UDC or it's busy [ 164.035096][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.089635][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.124187][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.655755][ T8924] syz.1.2171 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 164.670920][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.1.2171 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.670970][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.670982][ T8924] Call Trace: [ 164.670990][ T8924] [ 164.671000][ T8924] __dump_stack+0x1d/0x30 [ 164.671029][ T8924] dump_stack_lvl+0x95/0xd0 [ 164.671049][ T8924] dump_stack+0x15/0x1b [ 164.671122][ T8924] dump_header+0x80/0x240 [ 164.671156][ T8924] oom_kill_process+0x295/0x350 [ 164.671194][ T8924] out_of_memory+0x981/0xbc0 [ 164.671269][ T8924] try_charge_memcg+0x621/0xa00 [ 164.671293][ T8924] charge_memcg+0x6d/0x120 [ 164.671323][ T8924] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 164.671443][ T8924] swap_cache_alloc_folio+0x47b/0x5e0 [ 164.671483][ T8924] swap_cluster_readahead+0x2b1/0x460 [ 164.671604][ T8924] swapin_readahead+0xd8/0x8a0 [ 164.671651][ T8924] ? _raw_spin_unlock+0x9/0x30 [ 164.671680][ T8924] ? swap_put_entries_cluster+0x49c/0x4c0 [ 164.671709][ T8924] ? wake_page_function+0x11a/0x1f0 [ 164.671770][ T8924] ? __wake_up_locked_key+0x3d/0x60 [ 164.671796][ T8924] ? __rcu_read_unlock+0x4e/0x70 [ 164.671823][ T8924] ? swap_cache_get_folio+0x1f7/0x200 [ 164.671929][ T8924] do_swap_page+0x2a2/0x1ec0 [ 164.671967][ T8924] ? __css_rstat_updated+0xbb/0x280 [ 164.672024][ T8924] ? __rcu_read_lock+0x36/0x50 [ 164.672055][ T8924] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 164.672084][ T8924] handle_mm_fault+0xb3c/0x2da0 [ 164.672195][ T8924] do_user_addr_fault+0x634/0x1060 [ 164.672224][ T8924] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 164.672301][ T8924] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 164.672336][ T8924] ? trace_page_fault_user+0x1f/0xa0 [ 164.672373][ T8924] exc_page_fault+0x62/0xa0 [ 164.672425][ T8924] asm_exc_page_fault+0x26/0x30 [ 164.672444][ T8924] RIP: 0033:0x7f0d66ee8fc3 [ 164.672459][ T8924] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 86 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 164.672507][ T8930] syz.1.2171: vmalloc error: size 65536, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null) [ 164.672540][ T8924] RSP: 002b:00007ffd330ef150 EFLAGS: 00010246 [ 164.672561][ T8924] RAX: 0000000000000000 RBX: 0000555570ff4500 RCX: 0000000000000000 [ 164.672578][ T8924] RDX: 00007ffd330ef190 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.672635][ T8924] RBP: 00007f0d671b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 164.672693][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000028430 [ 164.672769][ T8924] R13: 00007f0d671b627c R14: 00000000000281ef R15: 00007f0d671b6270 [ 164.672828][ T8924] [ 164.673132][ T8924] memory: usage 1024kB, limit 1024kB, failcnt 9025 [ 164.718607][ T8930] ,cpuset= [ 164.724853][ T8924] memory+swap: usage 9536kB, limit 9007199254740988kB, failcnt 0 [ 164.753245][ T8930] / [ 164.757543][ T8924] kmem: usage 1020kB, limit 9007199254740988kB, failcnt 0 [ 164.785407][ T8930] ,mems_allowed=0 [ 164.787933][ T8924] Memory cgroup stats for [ 164.815078][ T8930] [ 164.818906][ T8924] /syz1 [ 164.858012][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.1.2171 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.858097][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.858144][ T8930] Call Trace: [ 164.858168][ T8930] [ 164.858195][ T8930] __dump_stack+0x1d/0x30 [ 164.858258][ T8930] dump_stack_lvl+0x95/0xd0 [ 164.858313][ T8930] dump_stack+0x15/0x1b [ 164.858418][ T8930] warn_alloc+0x145/0x1c0 [ 164.858526][ T8930] ? alloc_pages_mpol+0xd9/0x1d0 [ 164.858681][ T8930] ? alloc_pages_noprof+0xb6/0x140 [ 164.858770][ T8930] __vmalloc_node_range_noprof+0xdfd/0x11e0 [ 164.858968][ T8930] __kvmalloc_node_noprof+0x3a0/0x590 [ 164.859047][ T8930] ? alloc_netdev_mqs+0x733/0xa90 [ 164.859228][ T8930] ? alloc_netdev_mqs+0x733/0xa90 [ 164.859388][ T8930] ? alloc_netdev_mqs+0x733/0xa90 [ 164.859498][ T8930] alloc_netdev_mqs+0x733/0xa90 [ 164.859656][ T8930] tun_set_iff+0x423/0x880 [ 164.859752][ T8930] __tun_chr_ioctl+0x65e/0x14e0 [ 164.859864][ T8930] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 164.860103][ T8930] tun_chr_ioctl+0x27/0x40 [ 164.860191][ T8930] __se_sys_ioctl+0xce/0x140 [ 164.860255][ T8930] __x64_sys_ioctl+0x43/0x50 [ 164.860299][ T8930] x64_sys_call+0x1563/0x3020 [ 164.860412][ T8930] do_syscall_64+0x136/0x3c0 [ 164.860546][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.860567][ T8930] RIP: 0033:0x7f0d66f2de99 [ 164.860582][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.860599][ T8930] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.860659][ T8930] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 164.860774][ T8930] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 164.860832][ T8930] RBP: 00007f0d66fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 164.860930][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.860968][ T8930] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 164.861025][ T8930] [ 164.879466][ T8930] Mem-Info: [ 164.903737][ T8924] : [ 164.989925][ T8930] active_anon:10481 inactive_anon:1352 isolated_anon:0 [ 164.989925][ T8930] active_file:180 inactive_file:21059 isolated_file:0 [ 164.989925][ T8930] unevictable:0 dirty:0 writeback:0 [ 164.989925][ T8930] slab_reclaimable:3349 slab_unreclaimable:18198 [ 164.989925][ T8930] mapped:30163 shmem:2595 pagetables:3444 [ 164.989925][ T8930] sec_pagetables:0 bounce:0 [ 164.989925][ T8930] kernel_misc_reclaimable:0 [ 164.989925][ T8930] free:1868335 free_pcp:15963 free_cma:0 [ 164.998704][ T8924] cache 0 [ 165.045798][ T8930] Node 0 active_anon:41924kB inactive_anon:5408kB active_file:720kB inactive_file:84236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120652kB dirty:0kB writeback:0kB shmem:10380kB kernel_stack:3904kB pagetables:13776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 165.050779][ T8924] rss 0 [ 165.093114][ T8930] Node 0 [ 165.094861][ T8924] shmem 0 [ 165.120780][ T8930] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.128658][ T8924] mapped_file 0 [ 165.199670][ T8930] lowmem_reserve[]: [ 165.230959][ T8924] dirty 0 [ 165.281975][ T8930] 0 [ 165.301439][ T8924] writeback 0 [ 165.317578][ T8924] workingset_refault_anon 919 [ 165.322353][ T8924] workingset_refault_file 4473 [ 165.327170][ T8924] swap 8716288 [ 165.330690][ T8924] swapcached 13611008 [ 165.334706][ T8924] pgpgin 72800 [ 165.338144][ T8924] pgpgout 72799 [ 165.341624][ T8924] pgfault 103601 [ 165.345200][ T8924] pgmajfault 669 [ 165.348823][ T8924] inactive_anon 0 [ 165.352729][ T8924] active_anon 4096 [ 165.356605][ T8924] inactive_file 0 [ 165.360271][ T8924] active_file 0 [ 165.363874][ T8924] unevictable 0 [ 165.367553][ T8924] hierarchical_memory_limit 1048576 [ 165.372777][ T8924] hierarchical_memsw_limit 9223372036854771712 [ 165.378918][ T8930] 2878 7857 7857 [ 165.379006][ T8924] total_cache 0 [ 165.379018][ T8924] total_rss 0 [ 165.389506][ T8924] total_shmem 0 [ 165.393012][ T8924] total_mapped_file 0 [ 165.397059][ T8924] total_dirty 0 [ 165.400620][ T8924] total_writeback 0 [ 165.404527][ T8924] total_workingset_refault_anon 919 [ 165.409789][ T8924] total_workingset_refault_file 4473 [ 165.415130][ T8924] total_swap 8716288 [ 165.419100][ T8930] [ 165.421612][ T8930] Node 0 DMA32 free:2944132kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947656kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 165.452828][ T8930] lowmem_reserve[]: 0 0 4978 4978 [ 165.453144][ T8924] total_swapcached 13611008 [ 165.462717][ T8924] total_pgpgin 72800 [ 165.466670][ T8924] total_pgpgout 72799 [ 165.470681][ T8924] total_pgfault 103601 [ 165.474928][ T8924] total_pgmajfault 669 [ 165.479066][ T8924] total_inactive_anon 0 [ 165.483263][ T8924] total_active_anon 4096 [ 165.487516][ T8924] total_inactive_file 0 [ 165.491689][ T8924] total_active_file 0 [ 165.496480][ T8930] Node 0 Normal free:4513848kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41924kB inactive_anon:5408kB active_file:720kB inactive_file:84236kB unevictable:0kB writepending:0kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:60352kB local_pcp:59500kB free_cma:0kB [ 165.530193][ T8924] total_unevictable 0 [ 165.534338][ T8924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2171,pid=8924,uid=0 [ 165.549111][ T8924] Memory cgroup out of memory: Killed process 8924 (syz.1.2171) total-vm:100596kB, anon-rss:1240kB, file-rss:26320kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 165.567774][ T8930] lowmem_reserve[]: 0 0 0 0 [ 165.576814][ T8930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.614827][ T8930] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944132kB [ 165.680500][ T8930] Node 0 Normal: 1063*4kB (UME) 532*8kB (UME) 186*16kB (UME) 136*32kB (UME) 53*64kB (UME) 25*128kB (UME) 61*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 5*2048kB (UE) 1089*4096kB (UM) = 4521628kB [ 165.747546][ T8930] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 165.758801][ T8930] 23891 total pagecache pages [ 165.765143][ T8930] 59 pages in swap cache [ 165.772479][ T8930] Free swap = 100760kB [ 165.777870][ T8930] Total swap = 124996kB [ 165.782298][ T8930] 2097051 pages RAM [ 165.786264][ T8930] 0 pages HighMem/MovableOnly [ 165.791055][ T8930] 81738 pages reserved [ 165.801307][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.811573][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.906586][ T28] audit: type=1400 audit(1785299490.306:750): avc: denied { mounton } for pid=8643 comm="syz-executor" path="/root/syzkaller.zuxpwE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 165.943505][ T28] audit: type=1400 audit(1785299490.336:751): avc: denied { mount } for pid=8643 comm="syz-executor" name="/" dev="gadgetfs" ino=5147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.375641][ T8960] netlink: 'syz.1.2177': attribute type 6 has an invalid length. [ 167.279917][ T28] audit: type=1400 audit(1785299491.676:752): avc: denied { mounton } for pid=8987 comm="syz.0.2186" path="/458/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.459943][ T28] audit: type=1400 audit(1785299491.856:753): avc: denied { write } for pid=8985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.577711][ T28] audit: type=1400 audit(1785299491.976:754): avc: denied { write } for pid=9012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.647202][ T28] audit: type=1400 audit(1785299492.006:755): avc: denied { bind } for pid=9013 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.868995][ T28] audit: type=1400 audit(1785299492.266:756): avc: denied { write } for pid=9017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.893193][ T9018] hub 5-0:1.0: USB hub found [ 167.915908][ T9018] hub 5-0:1.0: 8 ports detected [ 167.996505][ T28] audit: type=1400 audit(1785299492.396:757): avc: denied { write } for pid=9042 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.111612][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.128752][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 168.128803][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.128820][ T3297] Call Trace: [ 168.128828][ T3297] [ 168.128838][ T3297] __dump_stack+0x1d/0x30 [ 168.128887][ T3297] dump_stack_lvl+0x95/0xd0 [ 168.128955][ T3297] dump_stack+0x15/0x1b [ 168.128982][ T3297] dump_header+0x80/0x240 [ 168.129027][ T3297] oom_kill_process+0x295/0x350 [ 168.129080][ T3297] out_of_memory+0x981/0xbc0 [ 168.129163][ T3297] try_charge_memcg+0x621/0xa00 [ 168.129190][ T3297] charge_memcg+0x6d/0x120 [ 168.129239][ T3297] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 168.129278][ T3297] swap_cache_alloc_folio+0x47b/0x5e0 [ 168.129353][ T3297] swap_cluster_readahead+0x3d2/0x460 [ 168.129417][ T3297] swapin_readahead+0xd8/0x8a0 [ 168.129460][ T3297] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 168.129587][ T3297] ? hrtimer_start_range_ns+0x108/0x120 [ 168.129685][ T3297] ? __rcu_read_unlock+0x4e/0x70 [ 168.129720][ T3297] ? swap_cache_get_folio+0x1f7/0x200 [ 168.129760][ T3297] do_swap_page+0x2a2/0x1ec0 [ 168.129840][ T3297] ? __schedule+0x799/0xd10 [ 168.129876][ T3297] ? __rcu_read_lock+0x36/0x50 [ 168.129908][ T3297] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 168.130049][ T3297] handle_mm_fault+0xb3c/0x2da0 [ 168.130121][ T3297] do_user_addr_fault+0x634/0x1060 [ 168.130163][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 168.130204][ T3297] exc_page_fault+0x62/0xa0 [ 168.130242][ T3297] asm_exc_page_fault+0x26/0x30 [ 168.130270][ T3297] RIP: 0033:0x7f0d66ee9017 [ 168.130292][ T3297] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.130339][ T3297] RSP: 002b:00007ffd330ef350 EFLAGS: 00010202 [ 168.130359][ T3297] RAX: 0000000000000000 RBX: 0000555570ff4500 RCX: 00007f0d66ee9017 [ 168.130377][ T3297] RDX: 00007ffd330ef390 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.130453][ T3297] RBP: 00007ffd330ef3fc R08: 0000000000000000 R09: 0000000000000000 [ 168.130466][ T3297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 168.130479][ T3297] R13: 00000000000927c0 R14: 0000000000028f70 R15: 00007ffd330ef450 [ 168.130500][ T3297] [ 168.130570][ T3297] memory: usage 1024kB, limit 1024kB, failcnt 10356 [ 168.524614][ T3297] memory+swap: usage 9528kB, limit 9007199254740988kB, failcnt 0 [ 168.540240][ T3297] kmem: usage 1024kB, limit 9007199254740988kB, failcnt 0 [ 168.555089][ T3297] Memory cgroup stats for /syz1: [ 168.555321][ T3297] cache 0 [ 168.572977][ T3297] rss 0 [ 168.579054][ T3297] shmem 0 [ 168.591297][ T3297] mapped_file 0 [ 168.601343][ T3297] dirty 0 [ 168.623209][ T3297] writeback 0 [ 168.631052][ T3297] workingset_refault_anon 1276 [ 168.643719][ T3297] workingset_refault_file 4871 [ 168.654025][ T3297] swap 8708096 [ 168.660492][ T3297] swapcached 15253504 [ 168.669191][ T3297] pgpgin 73668 [ 168.679009][ T3297] pgpgout 73668 [ 168.685468][ T3297] pgfault 104286 [ 168.729130][ T3297] pgmajfault 911 [ 168.740340][ T3297] inactive_anon 0 [ 168.751486][ T3297] active_anon 0 [ 168.763782][ T3297] inactive_file 0 [ 168.774693][ T3297] active_file 0 [ 168.785364][ T3297] unevictable 0 [ 168.800463][ T3297] hierarchical_memory_limit 1048576 [ 168.814419][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 168.832213][ T3297] total_cache 0 [ 168.844355][ T3297] total_rss 0 [ 168.853473][ T3297] total_shmem 0 [ 168.862677][ T3297] total_mapped_file 0 [ 168.875322][ T3297] total_dirty 0 [ 168.887402][ T3297] total_writeback 0 [ 168.898442][ T3297] total_workingset_refault_anon 1276 [ 168.912936][ T3297] total_workingset_refault_file 4871 [ 168.925498][ T3297] total_swap 8708096 [ 168.932948][ T3297] total_swapcached 15253504 [ 168.943036][ T3297] total_pgpgin 73668 [ 168.949712][ T3297] total_pgpgout 73668 [ 168.959921][ T3297] total_pgfault 104286 [ 168.965980][ T3297] total_pgmajfault 911 [ 168.974499][ T3297] total_inactive_anon 0 [ 168.983062][ T3297] total_active_anon 0 [ 168.991678][ T3297] total_inactive_file 0 [ 169.000379][ T3297] total_active_file 0 [ 169.010586][ T3297] total_unevictable 0 [ 169.016326][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2191,pid=9002,uid=0 [ 169.052971][ T3297] Memory cgroup out of memory: Killed process 9002 (syz.1.2191) total-vm:96360kB, anon-rss:1240kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 169.348382][ T9066] macvlan2: entered promiscuous mode [ 169.363944][ T9066] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 169.403855][ T9066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.425794][ T9066] team0: Port device macvlan2 added [ 169.477991][ T9071] syzkaller0: entered promiscuous mode [ 169.526116][ T9071] syzkaller0: entered allmulticast mode [ 169.743546][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2211'. [ 169.814095][ T9088] hub 5-0:1.0: USB hub found [ 169.825560][ T9088] hub 5-0:1.0: 8 ports detected [ 170.002770][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.241071][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.340556][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 170.377071][ T9101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2219'. [ 170.858782][ T28] audit: type=1400 audit(1785299495.256:758): avc: denied { getopt } for pid=9106 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.892531][ T9107] 9p: Bad value for 'wfdno' [ 171.106466][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.147259][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.176269][ T9101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.205384][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.236016][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.274523][ T9101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.316880][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 171.431579][ T9101] syz.1.2219 (9101) used greatest stack depth: 5696 bytes left [ 171.861116][ T9125] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 171.877304][ T28] audit: type=1400 audit(1785299496.126:759): avc: denied { write } for pid=9114 comm="syz.5.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.031464][ T9125] bond1 (unregistering): Released all slaves [ 172.444542][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.538973][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.908466][ T28] audit: type=1400 audit(1785299497.296:760): avc: denied { watch watch_reads } for pid=9139 comm="syz.2.2226" path="/452" dev="tmpfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.959227][ T9141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9141 comm=syz.2.2226 [ 173.270633][ T9150] hub 5-0:1.0: USB hub found [ 173.293766][ T9150] hub 5-0:1.0: 8 ports detected [ 173.378335][ T28] audit: type=1400 audit(1785299497.776:761): avc: denied { write } for pid=9144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.503862][ T28] audit: type=1400 audit(1785299497.906:762): avc: denied { write } for pid=9161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.576724][ T49] bond0 (unregistering): Released all slaves [ 173.626604][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 173.676419][ T49] tipc: Left network mode [ 173.689913][ T9172] GUP no longer grows the stack in syz.1.2230 (9172): 200000004000-20000000a000 (200000002000) [ 173.701232][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.1.2230 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.701265][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.701322][ T9172] Call Trace: [ 173.701328][ T9172] [ 173.701338][ T9172] __dump_stack+0x1d/0x30 [ 173.701368][ T9172] dump_stack_lvl+0x95/0xd0 [ 173.701395][ T9172] dump_stack+0x15/0x1b [ 173.701468][ T9172] __get_user_pages+0x1b27/0x1f10 [ 173.701507][ T9172] ? __rcu_read_unlock+0x4e/0x70 [ 173.701539][ T9172] get_user_pages_remote+0x1d5/0x6b0 [ 173.701635][ T9172] __access_remote_vm+0x156/0x4d0 [ 173.701671][ T9172] access_remote_vm+0x32/0x40 [ 173.701770][ T9172] proc_pid_cmdline_read+0x334/0x710 [ 173.701831][ T9172] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 173.701973][ T9172] vfs_readv+0x417/0x6d0 [ 173.702006][ T9172] __x64_sys_preadv+0xfd/0x1c0 [ 173.702088][ T9172] x64_sys_call+0x2915/0x3020 [ 173.702113][ T9172] do_syscall_64+0x136/0x3c0 [ 173.702149][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.702191][ T9172] RIP: 0033:0x7f0d66f2de99 [ 173.702236][ T9172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.702254][ T9172] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 173.702278][ T9172] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 173.702361][ T9172] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 173.702399][ T9172] RBP: 00007f0d66fc3eaf R08: 00000000fffffff9 R09: 0000000000000000 [ 173.702416][ T9172] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 173.702432][ T9172] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 173.702457][ T9172] [ 173.906974][ T49] hsr_slave_0: left promiscuous mode [ 173.912749][ T49] hsr_slave_1: left promiscuous mode [ 173.934138][ T49] veth1_macvtap: left promiscuous mode [ 173.958919][ T49] veth0_macvtap: left promiscuous mode [ 174.098815][ T28] audit: type=1400 audit(1785299498.496:763): avc: denied { write } for pid=9174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.187833][ T9188] loop5: detected capacity change from 0 to 1024 [ 174.226956][ T9188] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.251765][ T28] audit: type=1400 audit(1785299498.646:764): avc: denied { write } for pid=9191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.297569][ T9188] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2232: Invalid block bitmap block 0 in block_group 0 [ 174.364012][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.398961][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.419377][ T9096] bridge_slave_0: entered allmulticast mode [ 174.432881][ T9096] bridge_slave_0: entered promiscuous mode [ 174.449079][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.459580][ T9188] loop5: lost filesystem error report for type 5 error -117 [ 174.463003][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 174.464826][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.470431][ C0] EXT4-fs (loop5): initial error at time 1785299498: ext4_read_block_bitmap_nowait:483 [ 174.493392][ T9096] bridge_slave_1: entered allmulticast mode [ 174.493778][ C0] EXT4-fs (loop5): last error at time 1785299498: ext4_read_block_bitmap_nowait:483 [ 174.505943][ T9096] bridge_slave_1: entered promiscuous mode [ 174.510670][ T9188] Quota error (device loop5): write_blk: dquota write failed [ 174.544927][ T9188] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 174.582715][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.603045][ T9188] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2232: Failed to acquire dquot type 0 [ 174.629284][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.655648][ T9188] loop5: lost filesystem error report for type 5 error -117 [ 174.655882][ T9188] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2232: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.714023][ T9096] team0: Port device team_slave_0 added [ 174.726314][ T9188] loop5: lost filesystem error report for type 5 error -117 [ 174.726508][ T9188] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.2232: Invalid inode bitmap blk 0 in block_group 0 [ 174.751451][ T320] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 174.763318][ T9096] team0: Port device team_slave_1 added [ 174.781012][ T320] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 174.810590][ T9188] loop5: lost filesystem error report for type 5 error -117 [ 174.825195][ T9188] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 174.864777][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.871806][ T320] loop5: lost filesystem error report for type 5 error -117 [ 174.886836][ T9188] loop5: lost filesystem error report for type 5 error -117 [ 174.904053][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.960085][ T9188] EXT4-fs (loop5): 1 orphan inode deleted [ 174.979962][ T28] audit: type=1400 audit(1785299499.366:765): avc: denied { write } for pid=9198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.009021][ T9188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.076318][ T9188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.128433][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.163476][ T9190] syz.1.2231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 175.173440][ T9190] CPU: 0 UID: 0 PID: 9190 Comm: syz.1.2231 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.173479][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.173499][ T9190] Call Trace: [ 175.173508][ T9190] [ 175.173539][ T9190] __dump_stack+0x1d/0x30 [ 175.173574][ T9190] dump_stack_lvl+0x95/0xd0 [ 175.173605][ T9190] dump_stack+0x15/0x1b [ 175.173632][ T9190] dump_header+0x80/0x240 [ 175.173729][ T9190] oom_kill_process+0x295/0x350 [ 175.173767][ T9190] out_of_memory+0x981/0xbc0 [ 175.173859][ T9190] try_charge_memcg+0x621/0xa00 [ 175.173896][ T9190] charge_memcg+0x6d/0x120 [ 175.173965][ T9190] __mem_cgroup_charge+0x28/0xb0 [ 175.174034][ T9190] shmem_get_folio_gfp+0x49f/0xd90 [ 175.174078][ T9190] shmem_fault+0xf6/0x250 [ 175.174209][ T9190] handle_mm_fault+0x167a/0x2da0 [ 175.174343][ T9190] __get_user_pages+0x129c/0x1f10 [ 175.174428][ T9190] __mm_populate+0x242/0x390 [ 175.174474][ T9190] vm_mmap_pgoff+0x23b/0x2d0 [ 175.174504][ T9190] ksys_mmap_pgoff+0xc1/0x310 [ 175.174590][ T9190] ? __x64_sys_mmap+0x49/0x70 [ 175.174623][ T9190] x64_sys_call+0x14df/0x3020 [ 175.174669][ T9190] do_syscall_64+0x136/0x3c0 [ 175.174704][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.174733][ T9190] RIP: 0033:0x7f0d66f2de99 [ 175.174828][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.174857][ T9190] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.174886][ T9190] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 175.174907][ T9190] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 175.175004][ T9190] RBP: 00007f0d66fc3eaf R08: ffffffffffffffff R09: 0000000000000000 [ 175.175032][ T9190] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 175.175051][ T9190] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 175.175144][ T9190] [ 175.175160][ T9190] memory: usage 1024kB, limit 1024kB, failcnt 13319 [ 175.234896][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.237651][ T9190] memory+swap: usage 9496kB, limit 9007199254740988kB, failcnt 0 [ 175.237675][ T9190] kmem: usage 772kB, limit 9007199254740988kB, failcnt 0 [ 175.237691][ T9190] Memory cgroup stats for /syz1: [ 175.238152][ T9190] cache 241664 [ 175.296657][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.300452][ T9190] rss 0 [ 175.300463][ T9190] shmem 0 [ 175.300469][ T9190] mapped_file 53248 [ 175.300476][ T9190] dirty 0 [ 175.300482][ T9190] writeback 0 [ 175.300488][ T9190] workingset_refault_anon 1518 [ 175.300496][ T9190] workingset_refault_file 5264 [ 175.300506][ T9190] swap 8687616 [ 175.300518][ T9190] swapcached 16420864 [ 175.300525][ T9190] pgpgin 76307 [ 175.300534][ T9190] pgpgout 76248 [ 175.300540][ T9190] pgfault 107646 [ 175.300547][ T9190] pgmajfault 1070 [ 175.300554][ T9190] inactive_anon 0 [ 175.300560][ T9190] active_anon 0 [ 175.300567][ T9190] inactive_file 184320 [ 175.300574][ T9190] active_file 57344 [ 175.439851][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.440020][ T9190] unevictable 0 [ 175.462340][ T49] IPVS: stop unused estimator thread 0... [ 175.463165][ T9190] hierarchical_memory_limit 1048576 [ 175.463178][ T9190] hierarchical_memsw_limit 9223372036854771712 [ 175.527337][ T9190] total_cache 241664 [ 175.531313][ T9190] total_rss 0 [ 175.534638][ T9190] total_shmem 0 [ 175.538121][ T9190] total_mapped_file 53248 [ 175.542489][ T9190] total_dirty 0 [ 175.545992][ T9190] total_writeback 0 [ 175.549877][ T9190] total_workingset_refault_anon 1518 [ 175.555191][ T9190] total_workingset_refault_file 5264 [ 175.560482][ T9190] total_swap 8687616 [ 175.564426][ T9190] total_swapcached 16420864 [ 175.568940][ T9190] total_pgpgin 76307 [ 175.572835][ T9190] total_pgpgout 76248 [ 175.576864][ T9190] total_pgfault 107646 [ 175.580957][ T9190] total_pgmajfault 1070 [ 175.585173][ T9190] total_inactive_anon 0 [ 175.589386][ T9190] total_active_anon 0 [ 175.593396][ T9190] total_inactive_file 184320 [ 175.598051][ T9190] total_active_file 57344 [ 175.602398][ T9190] total_unevictable 0 [ 175.606417][ T9190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2231,pid=9178,uid=0 [ 175.621048][ T9190] Memory cgroup out of memory: Killed process 9178 (syz.1.2231) total-vm:94048kB, anon-rss:1240kB, file-rss:21836kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 175.674152][ T9096] hsr_slave_0: entered promiscuous mode [ 175.706187][ T9096] hsr_slave_1: entered promiscuous mode [ 175.727315][ T9096] debugfs: 'hsr0' already exists in 'hsr' [ 175.748999][ T9096] Cannot create hsr debugfs directory [ 176.160837][ T9218] syz.1.2235 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 176.224508][ T9218] CPU: 0 UID: 0 PID: 9218 Comm: syz.1.2235 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.224535][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 176.224547][ T9218] Call Trace: [ 176.224553][ T9218] [ 176.224561][ T9218] __dump_stack+0x1d/0x30 [ 176.224663][ T9218] dump_stack_lvl+0x95/0xd0 [ 176.224683][ T9218] dump_stack+0x15/0x1b [ 176.224704][ T9218] dump_header+0x80/0x240 [ 176.224783][ T9218] oom_kill_process+0x295/0x350 [ 176.224817][ T9218] out_of_memory+0x981/0xbc0 [ 176.224867][ T9218] try_charge_memcg+0x621/0xa00 [ 176.224909][ T9218] charge_memcg+0x6d/0x120 [ 176.224949][ T9218] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 176.225016][ T9218] swap_cache_alloc_folio+0x47b/0x5e0 [ 176.225113][ T9218] swap_cluster_readahead+0x2b1/0x460 [ 176.225185][ T9218] swapin_readahead+0xd8/0x8a0 [ 176.225215][ T9218] ? plist_del+0x1e8/0x200 [ 176.225257][ T9218] ? futex_unqueue+0xc5/0xf0 [ 176.225316][ T9218] ? __rcu_read_unlock+0x4e/0x70 [ 176.225352][ T9218] ? swap_cache_get_folio+0x1f7/0x200 [ 176.225387][ T9218] do_swap_page+0x2a2/0x1ec0 [ 176.225422][ T9218] ? __rcu_read_lock+0x36/0x50 [ 176.225522][ T9218] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 176.225554][ T9218] handle_mm_fault+0xb3c/0x2da0 [ 176.225613][ T9218] do_user_addr_fault+0x634/0x1060 [ 176.225668][ T9218] ? trace_page_fault_user+0x1f/0xa0 [ 176.225706][ T9218] exc_page_fault+0x62/0xa0 [ 176.225783][ T9218] asm_exc_page_fault+0x26/0x30 [ 176.225810][ T9218] RIP: 0033:0x7f0d66f2deab [ 176.225887][ T9218] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 176.225910][ T9218] RSP: 002b:00007ffd330ef1b8 EFLAGS: 00010213 [ 176.225927][ T9218] RAX: 000000000000006e RBX: 000000000002af6e RCX: ffffffffffffffe8 [ 176.225939][ T9218] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0d671b609c [ 176.225951][ T9218] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 176.225968][ T9218] R10: 00007ffd330ef2c0 R11: 0000000000000246 R12: 00007ffd330ef2e0 [ 176.225986][ T9218] R13: 00007f0d671b609c R14: 000000000002afa0 R15: 00007ffd330ef2c0 [ 176.226071][ T9218] [ 176.266078][ T9218] memory: usage 1024kB, limit 1024kB, failcnt 13476 [ 176.460205][ T9218] memory+swap: usage 9512kB, limit 9007199254740988kB, failcnt 0 [ 176.468184][ T9218] kmem: usage 1016kB, limit 9007199254740988kB, failcnt 0 [ 176.475440][ T9218] Memory cgroup stats for /syz1: [ 176.475714][ T9218] cache 0 [ 176.505856][ T9218] rss 0 [ 176.512173][ T9218] shmem 0 [ 176.518569][ T9218] mapped_file 0 [ 176.525385][ T9218] dirty 0 [ 176.531324][ T9218] writeback 0 [ 176.538069][ T9218] workingset_refault_anon 1556 [ 176.548233][ T9218] workingset_refault_file 5264 [ 176.558589][ T9218] swap 8691712 [ 176.565411][ T9218] swapcached 16719872 [ 176.573038][ T9218] pgpgin 76384 [ 176.580134][ T9218] pgpgout 76382 [ 176.588081][ T9218] pgfault 107793 [ 176.594584][ T9218] pgmajfault 1095 [ 176.602704][ T9218] inactive_anon 4096 [ 176.610059][ T9218] active_anon 4096 [ 176.617793][ T9218] inactive_file 0 [ 176.625913][ T9218] active_file 0 [ 176.632813][ T9218] unevictable 0 [ 176.640605][ T9218] hierarchical_memory_limit 1048576 [ 176.651598][ T9218] hierarchical_memsw_limit 9223372036854771712 [ 176.664097][ T9218] total_cache 0 [ 176.671203][ T9218] total_rss 0 [ 176.678602][ T9218] total_shmem 0 [ 176.685432][ T9218] total_mapped_file 0 [ 176.693558][ T9218] total_dirty 0 [ 176.701389][ T9218] total_writeback 0 [ 176.708603][ T9218] total_workingset_refault_anon 1556 [ 176.719565][ T9218] total_workingset_refault_file 5264 [ 176.732768][ T9218] total_swap 8691712 [ 176.741170][ T9218] total_swapcached 16719872 [ 176.750163][ T9218] total_pgpgin 76384 [ 176.759442][ T9218] total_pgpgout 76382 [ 176.768157][ T9218] total_pgfault 107793 [ 176.776777][ T9218] total_pgmajfault 1095 [ 176.785515][ T9218] total_inactive_anon 4096 [ 176.794385][ T9218] total_active_anon 4096 [ 176.804175][ T9218] total_inactive_file 0 [ 176.812789][ T9218] total_active_file 0 [ 176.821359][ T9218] total_unevictable 0 [ 176.828776][ T9218] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2235,pid=9218,uid=0 [ 176.858848][ T9218] Memory cgroup out of memory: Killed process 9218 (syz.1.2235) total-vm:96228kB, anon-rss:1240kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 176.999360][ T9096] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.019557][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.027739][ T9096] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.057767][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.069421][ T9096] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.103410][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.142849][ T9096] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.172550][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.240854][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 177.240871][ T28] audit: type=1400 audit(1785299501.636:769): avc: denied { write } for pid=9246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.385206][ T28] audit: type=1400 audit(1785299501.786:770): avc: denied { write } for pid=9269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.438143][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.505476][ T9096] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.541694][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.548802][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.587390][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.594530][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.939470][ T28] audit: type=1400 audit(1785299502.336:771): avc: denied { write } for pid=9281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.048116][ T28] audit: type=1400 audit(1785299502.446:772): avc: denied { write } for pid=9301 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.135192][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 178.166844][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.458974][ T28] audit: type=1400 audit(1785299502.856:773): avc: denied { bind } for pid=9323 comm="syz.5.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.475240][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.486374][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.535181][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.542417][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.549814][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.556144][ T28] audit: type=1400 audit(1785299502.916:774): avc: denied { write } for pid=9308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.556994][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.639137][ T9324] team0: Port device bridge0 added [ 178.661649][ T28] audit: type=1400 audit(1785299503.056:775): avc: denied { write } for pid=9333 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.745161][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 178.837013][ T28] audit: type=1326 audit(1785299503.236:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.2.2248" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f69fac27c17 code=0x0 [ 178.930953][ T9096] veth0_vlan: entered promiscuous mode [ 178.969756][ T9096] veth1_vlan: entered promiscuous mode [ 179.022840][ T9096] veth0_macvtap: entered promiscuous mode [ 179.049811][ T9096] veth1_macvtap: entered promiscuous mode [ 179.088498][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.118483][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.151116][ T54] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.172391][ T54] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.205895][ T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.238009][ T54] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.251494][ T28] audit: type=1400 audit(1785299503.646:777): avc: denied { write } for pid=9346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.359186][ T28] audit: type=1400 audit(1785299503.736:778): avc: denied { write } for pid=9358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.439309][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 179.698984][ T9371] loop6: detected capacity change from 0 to 1024 [ 182.063729][ T9431] __nla_validate_parse: 21 callbacks suppressed [ 182.063757][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.109150][ T9431] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.179991][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.233443][ T9407] syz.1.2263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 182.247629][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.297403][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.1.2263 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.297438][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.297462][ T9407] Call Trace: [ 182.297470][ T9407] [ 182.297478][ T9407] __dump_stack+0x1d/0x30 [ 182.297504][ T9407] dump_stack_lvl+0x95/0xd0 [ 182.297541][ T9407] dump_stack+0x15/0x1b [ 182.297560][ T9407] dump_header+0x80/0x240 [ 182.297583][ T9407] oom_kill_process+0x295/0x350 [ 182.297626][ T9407] out_of_memory+0x981/0xbc0 [ 182.297736][ T9407] try_charge_memcg+0x621/0xa00 [ 182.297767][ T9407] charge_memcg+0x6d/0x120 [ 182.297804][ T9407] __mem_cgroup_charge+0x28/0xb0 [ 182.297894][ T9407] handle_mm_fault+0x1041/0x2da0 [ 182.297937][ T9407] ? _raw_spin_lock+0x52/0xa0 [ 182.297979][ T9407] __get_user_pages+0x129c/0x1f10 [ 182.298064][ T9407] ? insn_get_prefixes+0xa43/0xc70 [ 182.298094][ T9407] __gup_longterm_locked+0x2e9/0xe30 [ 182.298155][ T9407] gup_fast_fallback+0x312/0x5c0 [ 182.298200][ T9407] pin_user_pages_fast+0x5f/0x90 [ 182.298279][ T9407] io_pin_pages+0xc7/0x170 [ 182.298313][ T9407] io_region_pin_pages+0x58/0xf0 [ 182.298425][ T9407] io_create_region+0x2b2/0x320 [ 182.298467][ T9407] io_allocate_scq_urings+0x114/0x3d0 [ 182.298537][ T9407] io_uring_create+0x2ec/0x4f0 [ 182.298577][ T9407] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 182.298608][ T9407] __x64_sys_io_uring_setup+0x31/0x40 [ 182.298634][ T9407] x64_sys_call+0x2962/0x3020 [ 182.298708][ T9407] do_syscall_64+0x136/0x3c0 [ 182.298740][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.298768][ T9407] RIP: 0033:0x7f0d66f2de99 [ 182.298832][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.298856][ T9407] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 182.298883][ T9407] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 182.298901][ T9407] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001195 [ 182.298918][ T9407] RBP: 00007f0d66fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 182.298935][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.298985][ T9407] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 182.299011][ T9407] [ 182.326518][ T9431] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.341597][ T9407] memory: usage 1024kB, limit 1024kB, failcnt 14971 [ 182.573967][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.585430][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.595740][ T9431] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.617152][ T9436] loop5: detected capacity change from 0 to 128 [ 182.628888][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.639582][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2273'. [ 182.775455][ T9407] memory+swap: usage 9508kB, limit 9007199254740988kB, failcnt 0 [ 182.808655][ T9407] kmem: usage 792kB, limit 9007199254740988kB, failcnt 0 [ 182.840102][ T9407] Memory cgroup stats for /syz1: [ 182.840414][ T9407] cache 0 [ 182.865144][ T9407] rss 237568 [ 182.875901][ T9407] shmem 0 [ 182.890008][ T9407] mapped_file 0 [ 182.902179][ T9407] dirty 0 [ 182.910625][ T9407] writeback 0 [ 182.920300][ T9407] workingset_refault_anon 2018 [ 182.937502][ T9407] workingset_refault_file 5738 [ 182.975806][ T9407] swap 8687616 [ 182.983561][ T9407] swapcached 18780160 [ 182.997439][ T9407] pgpgin 77669 [ 183.012741][ T9407] pgpgout 77611 [ 183.023443][ T9407] pgfault 109205 [ 183.035684][ T9407] pgmajfault 1454 [ 183.045783][ T9407] inactive_anon 32768 [ 183.061358][ T9407] active_anon 204800 [ 183.065364][ T9407] inactive_file 0 [ 183.070721][ T9407] active_file 0 [ 183.079256][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.103570][ T9407] unevictable 0 [ 183.112232][ T9407] hierarchical_memory_limit 1048576 [ 183.122493][ T9407] hierarchical_memsw_limit 9223372036854771712 [ 183.141873][ T9407] total_cache 0 [ 183.157438][ T9407] total_rss 237568 [ 183.171124][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.182916][ T9407] total_shmem 0 [ 183.199548][ T9407] total_mapped_file 0 [ 183.226887][ T9407] total_dirty 0 [ 183.236699][ T9407] total_writeback 0 [ 183.249303][ T9407] total_workingset_refault_anon 2018 [ 183.266265][ T9407] total_workingset_refault_file 5738 [ 183.282655][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.284083][ T9407] total_swap 8687616 [ 183.385365][ T9407] total_swapcached 18780160 [ 183.400557][ T9407] total_pgpgin 77669 [ 183.423025][ T9407] total_pgpgout 77611 [ 183.438028][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.459870][ T9407] total_pgfault 109205 [ 183.470703][ T9407] total_pgmajfault 1454 [ 183.493156][ T9407] total_inactive_anon 32768 [ 183.514204][ T9407] total_active_anon 204800 [ 183.526968][ T9407] total_inactive_file 0 [ 183.547041][ T9407] total_active_file 0 [ 183.566156][ T9407] total_unevictable 0 [ 183.585356][ T9407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2263,pid=9406,uid=0 [ 183.655253][ T9407] Memory cgroup out of memory: Killed process 9406 (syz.1.2263) total-vm:96096kB, anon-rss:1472kB, file-rss:22104kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 183.974852][ T36] bond0 (unregistering): Released all slaves [ 184.071109][ T36] hsr_slave_0: left promiscuous mode [ 184.085693][ T36] hsr_slave_1: left promiscuous mode [ 184.109331][ T36] veth1_macvtap: left promiscuous mode [ 184.127304][ T9470] loop6: detected capacity change from 0 to 512 [ 184.220211][ T9470] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #11: block 992: comm syz.6.2282: lblock 6 mapped to illegal pblock 992 (length 1) [ 184.282866][ T9470] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.284877][ T9470] ------------[ cut here ]------------ [ 184.294054][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 184.294073][ C1] EXT4-fs (loop6): initial error at time 1785299508: ext4_map_blocks:791: inode 11: block 992 [ 184.294108][ C1] EXT4-fs (loop6): last error at time 1785299508: ext4_map_blocks:791: inode 11: block 992 [ 184.326678][ T9470] EA inode 11 i_nlink=2 [ 184.326709][ T9470] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.6.2282/9470 [ 184.341796][ T9470] Modules linked in: [ 184.345842][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.6.2282 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.355252][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.365437][ T9470] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 184.372089][ T9470] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 184.391964][ T9470] RSP: 0018:ffffc9000f8f37f8 EFLAGS: 00010246 [ 184.398238][ T9470] RAX: ffff8881040ce170 RBX: ffff8881004b89d0 RCX: ffffffff81c29d46 [ 184.406265][ T9470] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3630 [ 184.414377][ T9470] RBP: 000000000000000b R08: 00018881004b8983 R09: 0000000000000000 [ 184.422463][ T9470] R10: ffffc9000f8f3728 R11: 0001c9000f8f3728 R12: ffff8881004b8980 [ 184.430558][ T9470] R13: ffffffff871d3630 R14: ffff8881004b8938 R15: 0000000000000001 [ 184.438638][ T9470] FS: 00007f21bcc756c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 184.447713][ T9470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.454523][ T9470] CR2: 00007fb366266ff8 CR3: 000000012aba0000 CR4: 00000000003506f0 [ 184.462745][ T9470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.470900][ T9470] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 184.479022][ T9470] Call Trace: [ 184.482499][ T9470] [ 184.485501][ T9470] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 184.491478][ T9470] ext4_xattr_delete_inode+0x6b5/0x790 [ 184.497077][ T9470] ext4_evict_inode+0xb18/0xdf0 [ 184.502045][ T9470] ? __pfx_ext4_evict_inode+0x10/0x10 [ 184.503960][ T9477] loop5: detected capacity change from 0 to 4096 [ 184.507510][ T9470] evict+0x2a5/0x510 [ 184.507558][ T9470] iput+0x430/0x5a0 [ 184.521691][ T9470] ext4_process_orphan+0x1a4/0x1c0 [ 184.526868][ T9470] ext4_orphan_cleanup+0x6a6/0xa10 [ 184.532033][ T9470] ? ext4_register_li_request+0x403/0x440 [ 184.537862][ T9470] ext4_fill_super+0x33ab/0x3760 [ 184.542957][ T9470] ? set_blocksize+0x14c/0x270 [ 184.547822][ T9470] ? __pfx_ext4_fill_super+0x10/0x10 [ 184.553184][ T9470] get_tree_bdev_flags+0x291/0x300 [ 184.558327][ T9470] ? __pfx_ext4_fill_super+0x10/0x10 [ 184.563839][ T9470] get_tree_bdev+0x1f/0x30 [ 184.568298][ T9470] ext4_get_tree+0x1c/0x30 [ 184.572824][ T9470] vfs_get_tree+0x57/0x1d0 [ 184.577542][ T9470] do_new_mount+0x288/0x8d0 [ 184.582099][ T9470] path_mount+0x4ad/0xb90 [ 184.586564][ T9470] __se_sys_mount+0x28c/0x2e0 [ 184.591315][ T9470] __x64_sys_mount+0x67/0x80 [ 184.596026][ T9470] x64_sys_call+0x2d61/0x3020 [ 184.600739][ T9470] do_syscall_64+0x136/0x3c0 [ 184.605395][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.611389][ T9470] RIP: 0033:0x7f21be25f10a [ 184.615843][ T9470] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.635615][ T9470] RSP: 002b:00007f21bcc74e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.644128][ T9470] RAX: ffffffffffffffda RBX: 00007f21bcc74ee0 RCX: 00007f21be25f10a [ 184.652251][ T9470] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f21bcc74ea0 [ 184.660401][ T9470] RBP: 00002000000009c0 R08: 00007f21bcc74ee0 R09: 0000000000800718 [ 184.668455][ T9470] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 184.676589][ T9470] R13: 00007f21bcc74ea0 R14: 000000000000048d R15: 0000200000000200 [ 184.684628][ T9470] [ 184.687671][ T9470] ---[ end trace 0000000000000000 ]--- [ 184.710844][ T9477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.753367][ T9470] EXT4-fs (loop6): 1 orphan inode deleted [ 184.823165][ T9470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.993127][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.017078][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.041083][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 185.041143][ T28] audit: type=1400 audit(1785299509.436:782): avc: denied { write } for pid=9484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.044960][ T9442] bridge_slave_0: entered allmulticast mode [ 185.116781][ T28] audit: type=1400 audit(1785299509.516:783): avc: denied { write } for pid=9499 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.155302][ T9442] bridge_slave_0: entered promiscuous mode [ 185.170909][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.197703][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.227789][ T9442] bridge_slave_1: entered allmulticast mode [ 185.247874][ T9442] bridge_slave_1: entered promiscuous mode [ 185.272166][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 185.314157][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.357034][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.436542][ T9442] team0: Port device team_slave_0 added [ 185.447832][ T9442] team0: Port device team_slave_1 added [ 185.492041][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.507417][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.543031][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.570821][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.578187][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.606813][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.682454][ T9442] hsr_slave_0: entered promiscuous mode [ 185.701273][ T9442] hsr_slave_1: entered promiscuous mode [ 185.749887][ T28] audit: type=1400 audit(1785299510.146:784): avc: denied { write } for pid=9503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.890125][ T9096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.913926][ T28] audit: type=1400 audit(1785299510.306:785): avc: denied { write } for pid=9515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.992775][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 186.033981][ T9442] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.539644][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.552869][ T8643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.568237][ T36] IPVS: stop unused estimator thread 0... [ 187.608288][ T9442] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.647068][ T28] audit: type=1400 audit(1785299512.046:786): avc: denied { write } for pid=9523 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.685943][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.718487][ T9442] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.759406][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.780203][ T9442] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.824990][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.603319][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.627523][ T9442] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.660058][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.667323][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.748613][ T28] audit: type=1400 audit(1785299513.146:787): avc: denied { write } for pid=9554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.785855][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.793035][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.891509][ T28] audit: type=1400 audit(1785299513.286:788): avc: denied { write } for pid=9581 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.983697][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 188.999266][ T9583] netlink: 'syz.2.2302': attribute type 11 has an invalid length. [ 189.026281][ T9583] __nla_validate_parse: 20 callbacks suppressed [ 189.026348][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2302'. [ 189.144160][ T9593] syzkaller0: entered promiscuous mode [ 189.153031][ T9593] syzkaller0: entered allmulticast mode [ 189.391229][ T9442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.518818][ T9589] syz.1.2305 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 189.536114][ T9629] syz_tun: entered allmulticast mode [ 189.543930][ T28] audit: type=1400 audit(1785299513.936:789): avc: denied { write } for pid=9603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.584367][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.1.2305 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.584407][ T9589] Tainted: [W]=WARN [ 189.584417][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.584434][ T9589] Call Trace: [ 189.584442][ T9589] [ 189.584452][ T9589] __dump_stack+0x1d/0x30 [ 189.584517][ T9589] dump_stack_lvl+0x95/0xd0 [ 189.584625][ T9589] dump_stack+0x15/0x1b [ 189.584651][ T9589] dump_header+0x80/0x240 [ 189.584740][ T9589] oom_kill_process+0x295/0x350 [ 189.584777][ T9589] out_of_memory+0x981/0xbc0 [ 189.584861][ T9589] try_charge_memcg+0x621/0xa00 [ 189.584904][ T9589] charge_memcg+0x6d/0x120 [ 189.584989][ T9589] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 189.585036][ T9589] swap_cache_alloc_folio+0x47b/0x5e0 [ 189.585096][ T9589] swap_cluster_readahead+0x2b1/0x460 [ 189.585145][ T9589] swapin_readahead+0xd8/0x8a0 [ 189.585181][ T9589] ? _raw_spin_unlock+0x9/0x30 [ 189.585215][ T9589] ? swap_put_entries_cluster+0x49c/0x4c0 [ 189.585263][ T9589] ? wake_page_function+0x11a/0x1f0 [ 189.585304][ T9589] ? __wake_up_locked_key+0x3d/0x60 [ 189.585346][ T9589] ? __rcu_read_unlock+0x4e/0x70 [ 189.585448][ T9589] ? swap_cache_get_folio+0x1f7/0x200 [ 189.585488][ T9589] do_swap_page+0x2a2/0x1ec0 [ 189.585520][ T9589] ? __css_rstat_updated+0xbb/0x280 [ 189.585629][ T9589] ? __rcu_read_lock+0x36/0x50 [ 189.585675][ T9589] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 189.585759][ T9589] handle_mm_fault+0xb3c/0x2da0 [ 189.585804][ T9589] do_user_addr_fault+0x634/0x1060 [ 189.585844][ T9589] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 189.585876][ T9589] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 189.585938][ T9589] ? trace_page_fault_user+0x1f/0xa0 [ 189.586052][ T9589] exc_page_fault+0x62/0xa0 [ 189.586162][ T9589] asm_exc_page_fault+0x26/0x30 [ 189.586236][ T9589] RIP: 0033:0x7f0d66ef48a0 [ 189.586268][ T9589] Code: fc 48 0f 44 c2 4c 21 e8 48 03 40 18 4c 29 e8 49 39 c4 4c 0f 42 e0 48 89 de 48 89 ef e8 29 d3 ff ff 48 85 c0 0f 84 50 01 00 00 <48> 8b 50 f8 f6 c2 02 0f 84 9b 00 00 00 80 3d 04 ce 28 00 00 0f 84 [ 189.586291][ T9589] RSP: 002b:00007ffd330eefa0 EFLAGS: 00010206 [ 189.586311][ T9589] RAX: 0000555571007a00 RBX: 0000000000000110 RCX: 0000555571007a00 [ 189.586328][ T9589] RDX: 0000000000000121 RSI: 0000000000000110 RDI: 0000555571007a00 [ 189.586344][ T9589] RBP: 00007f0d67180e20 R08: 00007f0d67180e20 R09: 0000000000000001 [ 189.586361][ T9589] R10: 0000000000021000 R11: 0000000000000000 R12: 0000000000020610 [ 189.586424][ T9589] R13: 00005555710079f0 R14: 00007f0d67180e20 R15: 0000000000000000 [ 189.586477][ T9589] [ 189.586503][ T9589] memory: usage 1024kB, limit 1024kB, failcnt 16590 [ 189.865724][ T28] audit: type=1400 audit(1785299514.266:790): avc: denied { write } for pid=9633 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.902425][ T9589] memory+swap: usage 9500kB, limit 9007199254740988kB, failcnt 0 [ 189.914840][ T9589] kmem: usage 1008kB, limit 9007199254740988kB, failcnt 0 [ 189.922039][ T9589] Memory cgroup stats for /syz1: [ 189.922327][ T9589] cache 0 [ 189.931641][ T9589] rss 0 [ 189.934677][ T9589] shmem 0 [ 189.937642][ T9589] mapped_file 0 [ 189.941118][ T9589] dirty 0 [ 189.944156][ T9589] writeback 0 [ 189.947644][ T9589] workingset_refault_anon 2562 [ 189.952608][ T9589] workingset_refault_file 6115 [ 189.959411][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 189.970512][ T9589] swap 8679424 [ 189.988021][ T9589] swapcached 21413888 [ 190.000118][ T9589] pgpgin 78816 [ 190.033350][ T9589] pgpgout 78812 [ 190.043405][ T9589] pgfault 110393 [ 190.064859][ T9589] pgmajfault 1875 [ 190.075304][ T9589] inactive_anon 8192 [ 190.091773][ T9589] active_anon 8192 [ 190.113017][ T9589] inactive_file 0 [ 190.134006][ T9589] active_file 0 [ 190.147095][ T9589] unevictable 0 [ 190.157546][ T9589] hierarchical_memory_limit 1048576 [ 190.176728][ T9589] hierarchical_memsw_limit 9223372036854771712 [ 190.191744][ T9589] total_cache 0 [ 190.208490][ T9589] total_rss 0 [ 190.212734][ T9589] total_shmem 0 [ 190.223000][ T9589] total_mapped_file 0 [ 190.241513][ T9589] total_dirty 0 [ 190.253397][ T9589] total_writeback 0 [ 190.264700][ T9589] total_workingset_refault_anon 2562 [ 190.281301][ T9589] total_workingset_refault_file 6115 [ 190.308425][ T9589] total_swap 8679424 [ 190.318035][ T9442] veth0_vlan: entered promiscuous mode [ 190.326753][ T9589] total_swapcached 21413888 [ 190.349111][ T9589] total_pgpgin 78816 [ 190.360586][ T9442] veth1_vlan: entered promiscuous mode [ 190.367303][ T9589] total_pgpgout 78812 [ 190.376256][ T9589] total_pgfault 110393 [ 190.389188][ T9589] total_pgmajfault 1875 [ 190.401346][ T9442] veth0_macvtap: entered promiscuous mode [ 190.408586][ T9589] total_inactive_anon 8192 [ 190.413644][ T9589] total_active_anon 8192 [ 190.425280][ T9442] veth1_macvtap: entered promiscuous mode [ 190.431223][ T9589] total_inactive_file 0 [ 190.436188][ T9589] total_active_file 0 [ 190.445711][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.454935][ T9589] total_unevictable 0 [ 190.458992][ T9589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2305,pid=9589,uid=0 [ 190.476009][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.490467][ T9589] Memory cgroup out of memory: Killed process 9589 (syz.1.2305) total-vm:96228kB, anon-rss:1240kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 190.534832][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.554238][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.583186][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.592800][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.730488][ T28] audit: type=1400 audit(1785299515.126:791): avc: denied { write } for pid=9671 comm="syz.6.2323" name="functions" dev="configfs" ino=6052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.802933][ T28] audit: type=1400 audit(1785299515.166:792): avc: denied { write } for pid=9673 comm="syz.2.2324" name="UDC" dev="configfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 190.830524][ T28] audit: type=1400 audit(1785299515.166:793): avc: denied { open } for pid=9673 comm="syz.2.2324" path="/488/config/usb_gadget/g1/UDC" dev="configfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 190.988654][ T9685] syz_tun: entered allmulticast mode [ 191.013590][ T9684] syz_tun: left allmulticast mode [ 191.178488][ T9697] tipc: Started in network mode [ 191.202122][ T9697] tipc: Node identity 8aad390b83c3, cluster identity 4711 [ 191.209970][ T9697] tipc: Enabled bearer , priority 0 [ 191.245211][ T9697] syzkaller0: MTU too low for tipc bearer [ 191.279372][ T9697] tipc: Disabling bearer [ 191.504335][ T9701] syzkaller0: entered promiscuous mode [ 191.532400][ T9701] syzkaller0: entered allmulticast mode [ 191.794219][ T28] audit: type=1400 audit(1785299516.196:794): avc: denied { listen } for pid=9707 comm="syz.2.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.517915][ T9706] loop5: detected capacity change from 0 to 512 [ 192.540839][ T9733] sctp: [Deprecated]: syz.7.2341 (pid 9733) Use of int in maxseg socket option. [ 192.540839][ T9733] Use struct sctp_assoc_value instead [ 192.556969][ T28] audit: type=1400 audit(1785299516.936:795): avc: denied { write } for pid=9732 comm="syz.7.2341" lport=55947 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 192.621779][ T28] audit: type=1400 audit(1785299516.936:796): avc: denied { getopt } for pid=9732 comm="syz.7.2341" lport=55947 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 192.625459][ T9706] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #11: block 992: comm syz.5.2335: lblock 6 mapped to illegal pblock 992 (length 1) [ 192.646381][ T28] audit: type=1400 audit(1785299516.936:797): avc: denied { write } for pid=9718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.686363][ T9706] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.686822][ T9706] EXT4-fs (loop5): 1 orphan inode deleted [ 192.696069][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 192.696093][ C1] EXT4-fs (loop5): initial error at time 1785299517: ext4_map_blocks:791: inode 11: block 992 [ 192.696155][ C1] EXT4-fs (loop5): last error at time 1785299517: ext4_map_blocks:791: inode 11: block 992 [ 192.729708][ T9706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.753049][ T9737] loop6: detected capacity change from 0 to 512 [ 192.792037][ T28] audit: type=1400 audit(1785299517.186:798): avc: denied { write } for pid=9741 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.838930][ T9737] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2342: inode has both inline data and extents flags [ 192.927036][ T9748] tap0: tun_chr_ioctl cmd 1074025672 [ 192.937827][ T9737] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.942026][ T9737] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2342: couldn't read orphan inode 15 (err -117) [ 192.963083][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 192.963107][ C0] EXT4-fs (loop6): initial error at time 1785299517: ext4_orphan_get:1399: inode 15 [ 192.963157][ C0] EXT4-fs (loop6): last error at time 1785299517: ext4_orphan_get:1399: inode 15 [ 192.963175][ T9748] tap0: ignored: set checksum enabled [ 192.963188][ C0] [ 193.053057][ T9737] loop6: lost filesystem error report for type 5 error -117 [ 193.075771][ T9737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.164568][ T28] audit: type=1400 audit(1785299517.566:799): avc: denied { write } for pid=9736 comm="syz.6.2342" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.170828][ T9737] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 193.274267][ T28] audit: type=1400 audit(1785299517.566:800): avc: denied { ioctl } for pid=9736 comm="syz.6.2342" path="/29/file0/cpu.stat" dev="loop6" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 193.401970][ T9725] syz.1.2340 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 193.494969][ T9725] CPU: 1 UID: 0 PID: 9725 Comm: syz.1.2340 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 193.495082][ T9725] Tainted: [W]=WARN [ 193.495090][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 193.495103][ T9725] Call Trace: [ 193.495109][ T9725] [ 193.495117][ T9725] __dump_stack+0x1d/0x30 [ 193.495144][ T9725] dump_stack_lvl+0x95/0xd0 [ 193.495171][ T9725] dump_stack+0x15/0x1b [ 193.495270][ T9725] dump_header+0x80/0x240 [ 193.495301][ T9725] oom_kill_process+0x295/0x350 [ 193.495349][ T9725] out_of_memory+0x981/0xbc0 [ 193.495459][ T9725] try_charge_memcg+0x621/0xa00 [ 193.495489][ T9725] charge_memcg+0x6d/0x120 [ 193.495529][ T9725] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 193.495635][ T9725] swap_cache_alloc_folio+0x47b/0x5e0 [ 193.495710][ T9725] swap_cluster_readahead+0x2b1/0x460 [ 193.495761][ T9725] swapin_readahead+0xd8/0x8a0 [ 193.495801][ T9725] ? _raw_spin_unlock+0x9/0x30 [ 193.495835][ T9725] ? swap_put_entries_cluster+0x49c/0x4c0 [ 193.495874][ T9725] ? __entry_text_end+0xf208/0x102179 [ 193.495906][ T9725] ? __rcu_read_unlock+0x4e/0x70 [ 193.496014][ T9725] ? swap_cache_get_folio+0x1f7/0x200 [ 193.496052][ T9725] do_swap_page+0x2a2/0x1ec0 [ 193.496093][ T9725] ? __css_rstat_updated+0xbb/0x280 [ 193.496124][ T9725] ? __rcu_read_lock+0x36/0x50 [ 193.496166][ T9725] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 193.496205][ T9725] handle_mm_fault+0xb3c/0x2da0 [ 193.496271][ T9725] do_user_addr_fault+0x634/0x1060 [ 193.496425][ T9725] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 193.496471][ T9725] ? trace_page_fault_user+0x1f/0xa0 [ 193.496518][ T9725] exc_page_fault+0x62/0xa0 [ 193.496611][ T9725] asm_exc_page_fault+0x26/0x30 [ 193.496638][ T9725] RIP: 0033:0x7f0d66dfb83e [ 193.496707][ T9725] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 76 c5 3b 00 85 c0 0f 8e 53 fd ff ff 9d 7f fe ff 49 39 c4 73 88 48 8d 1d 51 a7 3b 00 83 3d 56 c5 3b [ 193.496733][ T9725] RSP: 002b:00007ffd330ef1c0 EFLAGS: 00010202 [ 193.496755][ T9725] RAX: 0000000000000001 RBX: 00007f0d671b7da0 RCX: 0000555570ff4808 [ 193.496774][ T9725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.496790][ T9725] RBP: 00007f0d671b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 193.496808][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002f2ba [ 193.496898][ T9725] R13: 00007f0d671b609c R14: 000000000002f012 R15: 00007f0d671b6090 [ 193.496927][ T9725] [ 193.769651][ T9725] memory: usage 1024kB, limit 1024kB, failcnt 17766 [ 193.776512][ T9725] memory+swap: usage 9516kB, limit 9007199254740988kB, failcnt 0 [ 193.784291][ T9725] kmem: usage 800kB, limit 9007199254740988kB, failcnt 0 [ 193.791332][ T9725] Memory cgroup stats for /syz1: [ 193.791596][ T9725] cache 0 [ 193.799471][ T9725] rss 229376 [ 193.802685][ T9725] shmem 0 [ 193.805628][ T9725] mapped_file 0 [ 193.809162][ T9725] dirty 0 [ 193.812124][ T9725] writeback 0 [ 193.815418][ T9725] workingset_refault_anon 2921 [ 193.820221][ T9725] workingset_refault_file 6370 [ 193.825072][ T9725] swap 8695808 [ 193.828525][ T9725] swapcached 23629824 [ 193.832520][ T9725] pgpgin 79791 [ 193.835907][ T9725] pgpgout 79735 [ 193.839390][ T9725] pgfault 111403 [ 193.908997][ T9725] pgmajfault 2092 [ 193.912719][ T9725] inactive_anon 45056 [ 193.916722][ T9725] active_anon 180224 [ 193.920638][ T9725] inactive_file 0 [ 193.924284][ T9725] active_file 0 [ 193.927818][ T9725] unevictable 0 [ 193.931287][ T9725] hierarchical_memory_limit 1048576 [ 193.936604][ T9725] hierarchical_memsw_limit 9223372036854771712 [ 193.942771][ T9725] total_cache 0 [ 193.946299][ T9725] total_rss 229376 [ 193.950088][ T9725] total_shmem 0 [ 193.980344][ T9725] total_mapped_file 0 [ 193.987892][ T9725] total_dirty 0 [ 194.010335][ T9725] total_writeback 0 [ 194.014196][ T9725] total_workingset_refault_anon 2921 [ 194.019531][ T9725] total_workingset_refault_file 6370 [ 194.024823][ T9725] total_swap 8695808 [ 194.028785][ T9725] total_swapcached 23629824 [ 194.033312][ T9725] total_pgpgin 79791 [ 194.037282][ T9725] total_pgpgout 79735 [ 194.041279][ T9725] total_pgfault 111403 [ 194.045370][ T9725] total_pgmajfault 2092 [ 194.049607][ T9725] total_inactive_anon 45056 [ 194.054127][ T9725] total_active_anon 180224 [ 194.058560][ T9725] total_inactive_file 0 [ 194.062726][ T9725] total_active_file 0 [ 194.066718][ T9725] total_unevictable 0 [ 194.070735][ T9725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2340,pid=9725,uid=0 [ 194.085406][ T9725] Memory cgroup out of memory: Killed process 9725 (syz.1.2340) total-vm:94180kB, anon-rss:1464kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 194.273218][ T9096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.593930][ T8643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.604087][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2356'. [ 194.803764][ T9807] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 194.898010][ T9807] bond1 (unregistering): Released all slaves [ 195.975184][ T9825] SELinux: failed to load policy [ 195.980198][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 195.980211][ T28] audit: type=1400 audit(1785299520.376:805): avc: denied { load_policy } for pid=9824 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 196.292410][ T9812] syz.1.2358: vmalloc error: size 65536, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0 [ 196.363796][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.1.2358 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 196.363883][ T9812] Tainted: [W]=WARN [ 196.363957][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 196.363969][ T9812] Call Trace: [ 196.363975][ T9812] [ 196.363985][ T9812] __dump_stack+0x1d/0x30 [ 196.364019][ T9812] dump_stack_lvl+0x95/0xd0 [ 196.364046][ T9812] dump_stack+0x15/0x1b [ 196.364068][ T9812] warn_alloc+0x145/0x1c0 [ 196.364161][ T9812] ? alloc_pages_mpol+0xd9/0x1d0 [ 196.364192][ T9812] ? alloc_pages_noprof+0xb6/0x140 [ 196.364222][ T9812] __vmalloc_node_range_noprof+0xdfd/0x11e0 [ 196.364303][ T9812] __kvmalloc_node_noprof+0x3a0/0x590 [ 196.364339][ T9812] ? alloc_netdev_mqs+0x733/0xa90 [ 196.364376][ T9812] ? alloc_netdev_mqs+0x733/0xa90 [ 196.364425][ T9812] ? alloc_netdev_mqs+0x733/0xa90 [ 196.364471][ T9812] alloc_netdev_mqs+0x733/0xa90 [ 196.364511][ T9812] tun_set_iff+0x423/0x880 [ 196.364555][ T9812] __tun_chr_ioctl+0x65e/0x14e0 [ 196.364608][ T9812] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 196.364644][ T9812] tun_chr_ioctl+0x27/0x40 [ 196.364672][ T9812] __se_sys_ioctl+0xce/0x140 [ 196.364698][ T9812] __x64_sys_ioctl+0x43/0x50 [ 196.364730][ T9812] x64_sys_call+0x1563/0x3020 [ 196.364760][ T9812] do_syscall_64+0x136/0x3c0 [ 196.364858][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.364921][ T9812] RIP: 0033:0x7f0d66f2de99 [ 196.364940][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.364962][ T9812] RSP: 002b:00007f0d65987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.364985][ T9812] RAX: ffffffffffffffda RBX: 00007f0d671b5fa0 RCX: 00007f0d66f2de99 [ 196.365002][ T9812] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 196.365062][ T9812] RBP: 00007f0d66fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 196.365078][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.365111][ T9812] R13: 00007f0d671b6038 R14: 00007f0d671b5fa0 R15: 00007ffd330ef058 [ 196.365148][ T9812] [ 196.366307][ T9836] loop7: detected capacity change from 0 to 128 [ 196.490610][ T9812] Mem-Info: [ 196.589490][ T9812] active_anon:11097 inactive_anon:1244 isolated_anon:0 [ 196.589490][ T9812] active_file:180 inactive_file:21224 isolated_file:0 [ 196.589490][ T9812] unevictable:0 dirty:84 writeback:4 [ 196.589490][ T9812] slab_reclaimable:3446 slab_unreclaimable:18177 [ 196.589490][ T9812] mapped:29401 shmem:2329 pagetables:3676 [ 196.589490][ T9812] sec_pagetables:0 bounce:0 [ 196.589490][ T9812] kernel_misc_reclaimable:0 [ 196.589490][ T9812] free:1875530 free_pcp:5671 free_cma:0 [ 196.636373][ T9836] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.652687][ T9812] Node 0 active_anon:44516kB inactive_anon:4980kB active_file:740kB inactive_file:84872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117600kB dirty:388kB writeback:0kB shmem:9268kB kernel_stack:4080kB pagetables:14764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.683137][ T9812] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.696120][ T9836] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.720352][ T9812] lowmem_reserve[]: 0 2878 7857 7857 [ 196.757047][ T9812] Node 0 DMA32 free:2944132kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947656kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 196.809432][ T9836] EXT4-fs warning (device loop7): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 196.822802][ T9812] lowmem_reserve[]: 0 0 4978 4978 [ 196.840398][ T9812] Node 0 Normal free:4543492kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44400kB inactive_anon:4980kB active_file:740kB inactive_file:84872kB unevictable:0kB writepending:388kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:18044kB local_pcp:10352kB free_cma:0kB [ 196.881077][ T9812] lowmem_reserve[]: 0 0 0 0 [ 196.884030][ T9442] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.890756][ T9812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.909139][ T9812] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944132kB [ 196.925885][ T9812] Node 0 Normal: 1062*4kB (UM) 84*8kB (UME) 90*16kB (UME) 413*32kB (UME) 238*64kB (UME) 76*128kB (UME) 83*256kB (UM) 10*512kB (UM) 10*1024kB (UM) 5*2048kB (UE) 1087*4096kB (UM) = 4543736kB [ 196.960625][ T9812] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 196.970298][ T9812] 23766 total pagecache pages [ 197.033164][ T9812] 50 pages in swap cache [ 197.037657][ T9812] Free swap = 116052kB [ 197.041907][ T9812] Total swap = 124996kB [ 197.046082][ T9812] 2097051 pages RAM [ 197.049909][ T9812] 0 pages HighMem/MovableOnly [ 197.054599][ T9812] 81738 pages reserved [ 197.172217][ T9845] loop7: detected capacity change from 0 to 512 [ 197.277652][ T9845] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #11: block 992: comm syz.7.2368: lblock 6 mapped to illegal pblock 992 (length 1) [ 197.308311][ T9837] syzkaller0: entered promiscuous mode [ 197.316841][ T9845] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.330867][ T9837] syzkaller0: entered allmulticast mode [ 197.348843][ T9845] EXT4-fs (loop7): 1 orphan inode deleted [ 197.355152][ T9845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.560521][ T28] audit: type=1400 audit(1785299521.956:806): avc: denied { write } for pid=9855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.629038][ T9442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.712032][ T28] audit: type=1400 audit(1785299522.106:807): avc: denied { write } for pid=9876 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.766892][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2376'. [ 197.813906][ T28] audit: type=1400 audit(1785299522.146:808): avc: denied { create } for pid=9877 comm="syz.7.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.897785][ T28] audit: type=1400 audit(1785299522.156:809): avc: denied { bind } for pid=9877 comm="syz.7.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.923232][ T28] audit: type=1400 audit(1785299522.156:810): avc: denied { setopt } for pid=9877 comm="syz.7.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.947124][ T28] audit: type=1400 audit(1785299522.156:811): avc: denied { write } for pid=9877 comm="syz.7.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.995891][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2382'. [ 198.035395][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2383'. [ 198.058995][ T9902] netlink: 30 bytes leftover after parsing attributes in process `syz.6.2382'. [ 198.165339][ T9916] syzkaller1: entered promiscuous mode [ 198.186005][ T28] audit: type=1400 audit(1785299522.586:812): avc: denied { write } for pid=9887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.215830][ T9916] syzkaller1: entered allmulticast mode [ 198.291057][ T28] audit: type=1400 audit(1785299522.686:813): avc: denied { write } for pid=9927 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.499732][ T9939] tipc: Started in network mode [ 198.521785][ T28] audit: type=1400 audit(1785299522.916:814): avc: denied { write } for pid=9929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.522125][ T9939] tipc: Node identity 3e7d3cb95437, cluster identity 4711 [ 198.555050][ T35] ================================================================== [ 198.563163][ T35] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 198.570206][ T35] [ 198.572524][ T35] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3378 on cpu 0: [ 198.580579][ T35] wq_worker_running+0x9b/0x120 [ 198.585438][ T35] schedule_timeout+0xca/0x180 [ 198.590244][ T35] wait_for_common+0xef/0x1d0 [ 198.594927][ T35] usb_start_wait_urb+0x12c/0x220 [ 198.599956][ T35] usb_control_msg+0x182/0x240 [ 198.604720][ T35] hub_ext_port_status+0xc2/0x470 [ 198.609770][ T35] hub_event+0x47e/0x2aa0 [ 198.614106][ T35] process_scheduled_works+0x4d4/0x9a0 [ 198.619568][ T35] worker_thread+0x569/0x750 [ 198.624171][ T35] kthread+0x221/0x270 [ 198.628238][ T35] ret_from_fork+0x146/0x330 [ 198.632854][ T35] ret_from_fork_asm+0x1a/0x30 [ 198.637621][ T35] [ 198.639936][ T35] read to 0xffff888237c2a8e4 of 4 bytes by task 35 on cpu 1: [ 198.647293][ T35] kick_pool+0x49/0x2d0 [ 198.651452][ T35] __queue_work+0x8e9/0xb90 [ 198.656049][ T35] queue_work_on+0xa9/0x140 [ 198.660553][ T35] process_srcu+0xa39/0xd90 [ 198.665060][ T35] process_scheduled_works+0x4d4/0x9a0 [ 198.670526][ T35] worker_thread+0x569/0x750 [ 198.675116][ T35] kthread+0x221/0x270 [ 198.679179][ T35] ret_from_fork+0x146/0x330 [ 198.683780][ T35] ret_from_fork_asm+0x1a/0x30 [ 198.688549][ T35] [ 198.690880][ T35] value changed: 0x00000000 -> 0x00000001 [ 198.696584][ T35] [ 198.698899][ T35] Reported by Kernel Concurrency Sanitizer on: [ 198.705043][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 198.715820][ T35] Tainted: [W]=WARN [ 198.719627][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.729679][ T35] Workqueue: rcu_gp process_srcu [ 198.734629][ T35] ================================================================== [ 198.747030][ T9939] tipc: Enabled bearer , priority 0 [ 198.812469][ T9939] syzkaller0: entered promiscuous mode [ 198.818136][ T9939] syzkaller0: entered allmulticast mode [ 198.824624][ T9939] tipc: Resetting bearer [ 198.979824][ T9938] tipc: Resetting bearer [ 198.993402][ T9938] tipc: Disabling bearer