last executing test programs: 1m56.008622326s ago: executing program 2 (id=263): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x2, [{0x0, 0x1ff}, {0x9}, {}, {0x10000000, 0x894a}, {}, {0x400000}, {0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) r6 = dup3(0xffffffffffffffff, r5, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000013affff0008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x101002, 0x142) write$cgroup_pid(r8, &(0x7f0000000000), 0x12) listen(r6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xe255}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000380)=0x9b, 0x0, 0x4) r9 = syz_io_uring_setup(0x44f, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$session_to_parent(0x12) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./cgroup/pids.max\x00', &(0x7f0000000240)='./cgroup/pids.max/../file0\x00', r8}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x6, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r8, 0x2, &(0x7f0000000200)={{r12, r13+60000000}, {r14, r15+60000000}}, &(0x7f0000000300)) io_uring_enter(r9, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 1m55.683827569s ago: executing program 2 (id=267): setpriority(0x1, 0x0, 0xffffffffffffffd1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m55.198545648s ago: executing program 2 (id=273): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x0, 0x148, 0x118, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x7, 0x4c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x1, 0x2, 0x2, 0x4], 0x5}, {0x1, [0x0, 0x4, 0x3, 0x0, 0x5, 0x4], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000040)=0x6, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x28, &(0x7f0000000080)=0x6, 0x0, 0x4) pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m48.574715821s ago: executing program 1 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000002100010000000400000000000a0000eaff0000000200001c080006"], 0x4c}}, 0x0) 1m48.403830116s ago: executing program 1 (id=299): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) mmap(&(0x7f00005ad000/0x3000)=nil, 0x3000, 0x3000011, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) getresuid(0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/179, 0x9d) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123241, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) tee(r2, r3, 0x3ff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(0xffffffffffffffff, r5, 0x0, 0x801000004201045) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0xb2) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io(r9, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20250e0400000e32265764984540e6b6c2b1c0a645a2ecb5f6da5eee7cab4db9ec8ef5c55ab697135b9f831dd428250e3ae5a55bf459c5969d6c3a9a93ae224109aeb5c8e9218b58c774e3a23be169d0380a"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1m47.200130849s ago: executing program 4 (id=303): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x51) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)={0x964, 0x1, 0x5, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x7}, 0x7, 0x4, 0x7, 0x3, 0x1d, 'syz0\x00', "18acb812159f6013e58c8030681681ebea20a2c3b4216a6340f00a429883d090", "cdc25c133758629eb1cc0f7ed159503d244c077fbe4b52551fca66e874309a34", [{0x0, 0x9, {0x3, 0xfffffffa}}, {0x6, 0xf, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x102}}, {0x0, 0xfff3, {0x1, 0x3}}, {0x5, 0x8, {0x3, 0x3}}, {0x0, 0x9, {0x2, 0x10001}}, {0x7f, 0xfff, {0x0, 0x3ae}}, {0x8a, 0xfff, {0x1, 0x33}}, {0x9, 0xe81c, {0x1, 0x7}}, {0xf3df, 0x8, {0x3, 0x1}}, {0x8, 0x7, {0x1, 0x9}}, {0x2, 0x8, {0x0, 0xe8e1}}, {0x8, 0x0, {0x1}}, {0x7f, 0x7b4, {0x0, 0x5}}, {0x4, 0x67f, {0x2, 0xa4400000}}, {0x3655, 0x72ef, {0x3, 0x9}}, {0x90e, 0xfffe, {0x3, 0x6}}, {0xffff, 0x1, {0x1, 0xf2b}}, {0xff, 0xf0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x101}}, {0xc983, 0x100, {0x3, 0x6}}, {0x67, 0x3, {0x0, 0xffff8001}}, {0x1, 0xb528, {0x3, 0x9}}, {0x8, 0x8, {0x3, 0xf}}, {0x3, 0x81, {0x0, 0x1}}, {0x2, 0x8f33, {0x3, 0x4}}, {0x4, 0x8, {0x3, 0x8000}}, {0x5c, 0x2, {0x3, 0x1}}, {0x6, 0x4, {0x1, 0x1}}, {0x0, 0xa, {0x1, 0x6}}, {0x8001, 0xf2, {0x3}}, {0x2, 0x2, {0x3, 0x9}}, {0x7ff, 0x3, {0x2, 0x5}}, {0x100, 0x0, {0x3, 0x4}}, {0x5, 0x5, {0x3, 0x7ff}}, {0xce, 0x1, {0x3, 0x9}}, {0x40, 0x0, {0x1, 0xe7}}, {0x69d, 0xb9c2, {0x1, 0x200000}}, {0x59c0, 0x8, {0x0, 0x4}}, {0x3, 0x4, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0xc355c311a93e6a29, 0x10000}, 0x9, 0x4, 0x6, 0xf, 0x6, 'syz0\x00', "b597b77bd2dd95181e422b02267db400677c117e69852725624dfba99a84a0f0", "2ed905635b07e22d945d5dac1aa30cf65b7d015ae29cdbe1593f63435260d406", [{0x7, 0x406, {0x3, 0x58}}, {0x200, 0x4, {0x0, 0x8}}, {0x2, 0x7, {0x3, 0x3e}}, {0x2, 0x1, {0x0, 0x9}}, {0xcf, 0x7f, {0x1, 0x7fff}}, {0x416a, 0xfff7, {0x0, 0x2}}, {0xc, 0x3, {0x2, 0x80000001}}, {0x0, 0x8, {0x0, 0x3}}, {0x1, 0x1, {0x2, 0x2}}, {0x6, 0x8, {0x3, 0x7}}, {0xffff, 0x6, {0x3, 0x6}}, {0xf801, 0x7, {0x2, 0x2491}}, {0x5, 0x401, {0x2, 0x200}}, {0xb3c, 0xed9, {0x0, 0x8}}, {0x401, 0x6, {0x0, 0xf99}}, {0x9, 0x1, {0x2, 0xfffffff3}}, {0x0, 0x9, {0x2, 0xe474}}, {0x7fff, 0x400, {0x3, 0x8}}, {0x5, 0x0, {0x2, 0x8}}, {0x6, 0x3, {0x0, 0x3}}, {0xf, 0x0, {0x0, 0xc74}}, {0x4, 0x1, {0x3, 0x80000000}}, {0x1, 0x4, {0x2, 0x3361}}, {0x3, 0xfffd, {0x0, 0x8001}}, {0x1000, 0x5, {0x1, 0x9}}, {0x99fd, 0xff, {0x0, 0x4}}, {0x9, 0x6, {0x2, 0x6}}, {0x5, 0x60, {0x0, 0x10}}, {0x9, 0x5, {0x2, 0x8}}, {0x3, 0xd5c0, {0x0, 0x6e8952e}}, {0x3, 0x7, {0x1}}, {0x1, 0x9, {0x0, 0x2}}, {0x9, 0x7f}, {0x4, 0x5, {0x2, 0x92e}}, {0x93f1, 0xb, {0x1, 0x14000}}, {0x2, 0x0, {0x1, 0x5}}, {0x1ff, 0x8, {0x7, 0x5c}}, {0x2, 0x7, {0x0, 0x10}}, {0x3, 0x3, {0x3, 0x4}}, {0x800, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xfb}, 0x5, 0xf9, 0xcc3f, 0xfff9, 0xc, 'syz0\x00', "88d21a38be84df8abedd2728cc276b869f3d963cea27d02093f1094d8d588344", "72cbc0934280c349ed7e08b359c439e0331ee4ded3b4d4c6d88207a3a4347e69", [{0x7, 0x37aa, {0x2, 0x6}}, {0x37b, 0x7, {0x3, 0xff}}, {0x3, 0xb, {0x3, 0xfffffffc}}, {0xff, 0x5, {0x0, 0x3}}, {0x7e6, 0x9ea, {0x2, 0x1}}, {0x1, 0x5, {0x0, 0x3}}, {0x8, 0x9a, {0x0, 0x80}}, {0x7, 0xf30c, {0x2, 0x6beec9dd}}, {0x5, 0x4c80, {0x0, 0x8}}, {0x10, 0xc, {0x0, 0xb06}}, {0x58b, 0x9, {0x1, 0xfffffc01}}, {0x3, 0x4, {0x2, 0xfffffffb}}, {0x1, 0x3ff, {0x2, 0x8}}, {0x1000, 0xfff, {0x2, 0x8673}}, {0x200, 0x8, {0x3, 0x6c}}, {0x0, 0x81, {0x0, 0x7}}, {0x40, 0x201, {0x2, 0x60}}, {0x8, 0x2, {0x1, 0x6}}, {0x1, 0x4, {0x2, 0x876}}, {0x5, 0x3, {0x2, 0x5}}, {0x4, 0x7, {0x3, 0x1}}, {0xc81f, 0x1, {0x2, 0x512}}, {0x1, 0x3, {0x3, 0x4}}, {0x6, 0x3, {0x1, 0x1}}, {0x4, 0x9, {0x1, 0x7}}, {0x4, 0x4c3a, {0x3, 0x2}}, {0x9, 0x4, {0x1}}, {0xa, 0x800, {0x1, 0x1}}, {0x0, 0x5, {0x1, 0x7}}, {0x1, 0x101, {0x1, 0x7fffffff}}, {0x0, 0x5, {0x2, 0x4}}, {0x100, 0x8, {0x0, 0x3}}, {0x8000, 0x92, {0x3, 0x9}}, {0xfffb, 0x1, {0x2, 0x3}}, {0x8, 0x401, {0x1, 0x4}}, {0x5, 0xfd, {0x0, 0x2}}, {0x7, 0x1, {0x3, 0x218}}, {0x3, 0x3}, {0x7fff, 0x6, {0x2, 0x31e6}}, {0x1, 0x9, {0x0, 0xd5}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xb, 0xa, 0x1, 0x2, 0x23, 'syz0\x00', "592883a702bc77f2e757cfe0c53049f05c499ed711b5b9165f896b85b1307cab", "12c516c868223301df754a6866abbafa543600d27f353937936fdca22b275383", [{0x100, 0x6, {0x3, 0x4}}, {0x5, 0x7, {0x3, 0xf}}, {0x8, 0x8, {0x1, 0xb5}}, {0x3, 0x400, {0x2, 0x5}}, {0x3, 0x401, {0x1, 0x2}}, {0x1de, 0xc, {0x0, 0x4}}, {0xfc00, 0x24, {0x3, 0x1}}, {0x46f9, 0x8, {0x1, 0x3}}, {0x7, 0x0, {0x0, 0x80000000}}, {0x0, 0xc1e, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0xd71c}}, {0x3, 0x0, {0x1, 0x3}}, {0x1, 0xb41a, {0x2, 0x10}}, {0x0, 0xfff7, {0x2, 0x40004}}, {0x1da8, 0x1, {0x2, 0x6}}, {0x10, 0x4, {0x2, 0x1}}, {0x3, 0x4, {0x1, 0x2}}, {0x9, 0x9, {0x3, 0x6}}, {0x2, 0x5, {0x1, 0x7ff}}, {0x0, 0xdc, {0x1}}, {0x99, 0xfff, {0x2, 0x8001}}, {0x9, 0x7f, {0x2, 0x40}}, {0x0, 0x2, {0x3, 0x3}}, {0x7, 0x3, {0x0, 0x1000}}, {0x1, 0x7, {0x2, 0x800}}, {0xf49b, 0x6, {0x3, 0x401}}, {0x5, 0x4, {0x1, 0x10001}}, {0x10, 0x4, {0x3, 0x7}}, {0x4, 0x9, {0x0, 0x9}}, {0x401, 0x6, {0x3, 0x2}}, {0xe, 0xb1a, {0x0, 0xff}}, {0x1, 0x7, {0x0, 0xc}}, {0xf4b, 0xd, {0x0, 0xceb}}, {0x7, 0x9, {0x3, 0x7}}, {0xf, 0x1, {0x3, 0x2}}, {0xa, 0xd, {0x3, 0x10}}, {0x9298, 0x5, {0x0, 0x9}}, {0x0, 0x7, {0x0, 0x2}}, {0xfff8, 0xa258, {0x2, 0x7f}}, {0x400, 0xb, {0x0, 0x3f32}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x24000000}, 0x40400c0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000400), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000540), &(0x7f0000000540)=[r9, r9], &(0x7f0000000040), 0x0, 0x300}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_getoverrun(0x0) 1m45.968113156s ago: executing program 2 (id=273): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x0, 0x148, 0x118, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x7, 0x4c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x1, 0x2, 0x2, 0x4], 0x5}, {0x1, [0x0, 0x4, 0x3, 0x0, 0x5, 0x4], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000040)=0x6, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x28, &(0x7f0000000080)=0x6, 0x0, 0x4) pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m45.004490709s ago: executing program 2 (id=306): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 1m44.9064845s ago: executing program 1 (id=307): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) close(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000240)={0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x69, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @empty}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="a876dd276217d7533218606461858bdd9012e91008483494cd3d7a998e84cddea246f9587430eb65ee0410bdc37ad6494542322aedcfa9e74ac09bf4e6672b2164a803034ae9d4b2b8d59788b14a0890b906fe721936f30b957b0cd3b78fb81a8b0acd054d2bfa226b2778be384d28a76c6abc4e0c5d9ac34b7f149b4a9ac4864695eb1489b11cc254b278c9dec82cc82591d2ccc4f115", 0x97}, {&(0x7f0000000440)="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", 0xd8}, {&(0x7f0000000380)="71ab0a61fe0dc4d37f45932c66976d0dec1610120a2bfd7d4010cb24abef03eeaf7407f122ca5d044b1769554983d97a3000bdab5580fb70e5118ed3b1b3dff31e558ef05ba914a4953bf04ad9a14018360cf16a73fb1381f2a61d7d3673d150cf48f1a34528b5cc783c63f7ee0fddd92e867e667f641ee64fdad2c09ea556dfd2c7", 0x82}], 0x3}}], 0x2, 0x44008004) (async) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffad03000008000000b70400000200000085e2ffff8100000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@empty, 0x6c, r7}) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="070f040007736a69050be0c9c58c0007042251cf396637b42a4113a5968b8c6935d632e3dd9a9b433b3dea4594689072fa2c8e1a2a3718a17f5ae7"], 0x7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_opts(r9, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) close(r8) (async) socket$netlink(0x10, 0x3, 0x0) 1m44.903009317s ago: executing program 4 (id=308): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @mcast1, 0x80000000}, 0x1c) socket(0x2, 0x80805, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) (fail_nth: 41) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000040), &(0x7f0000000300)) 1m44.662830769s ago: executing program 4 (id=310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e21, &(0x7f0000000b40)={0x0, 0x51a9, 0x10100, 0x1, 0x294}, &(0x7f0000000040)=0x0, &(0x7f0000000a00)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0xfffffff5) 1m44.480840525s ago: executing program 4 (id=312): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000af5ffffffffffffff0000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 1m44.457260315s ago: executing program 1 (id=313): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x303}, "7d671e204ef9f51d", "9ecc4b2b96d28df19c86b6842bbf27f7", "3b541451", "d838b3324f8ec67b"}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0xff1f0000}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000400)={@broadcast, @random="12ad0800dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xf, 0x4, 0x1, 0x9, 0x48b8, 0x64, 0x7, 0x6, 0x84, 0x80, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x24, 0xa4, 0x1, 0x1, [{@broadcast, 0x3}, {@multicast2, 0xad}, {@rand_addr=0x64010100, 0xc}, {@remote, 0xc0}]}, @timestamp_prespec={0x44, 0x4, 0xcc, 0x3, 0x8}]}}}}}}}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r6 = dup2(r4, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x200, 0x1, 0x3, 0x8, 0x576b, 0x7}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x47, "5a29dea5a36e59479705c4cf188ef8dfabe62456595327db418b0513695bd79ea471c1c80b0c8697bcd38cf9a8ab3825c6fa02c0ffff577c0a41392571dc6a53b4ac4bfa9b0b29"}, &(0x7f0000000040)=0x4f) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1m44.313146535s ago: executing program 4 (id=315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x0, 0x0}) listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x2, 0x4, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) unshare(0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m43.987914056s ago: executing program 2 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902970003010000000904000000010100000a24010000000201021324060000ebffff0800000000000000000000092403fd030300000009829d8d46f8431cfd0924030004020004fc0a2405040050b04dc2ef09060100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101ea"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r9 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x40, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "db97"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0xb6, 0x1, 0x1, 0x9}, @call_mgmt={0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xd, 0x8, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0x3c, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0x8}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0xf, 0x6, 0x8, 0x2}, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="050fab7800b07dbdc974447bacba5aa7e7"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x843}}]}) 1m43.968308926s ago: executing program 0 (id=317): socket$isdn(0x22, 0x2, 0x25) socket$isdn(0x22, 0x2, 0x22) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x77e, 0x0, 0x0, 0x0) (fail_nth: 32) 1m43.50095227s ago: executing program 0 (id=318): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x20}}}}}}, 0x0) 1m43.403397347s ago: executing program 1 (id=319): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000404e0415120000000000010902240001000000090904000401030000000921040004012207000905810320000000055f14a5e378932f684048e0d55569d73582b39b7402000000000000003562a2d1c6e8b8f6757346aeab13c620c8eea2312ecfdc5dda906629144ed950351a4f3ebba32397df350da9df490d52523e185e76e938618f6b70d08015a15eb770ed86db1cce2b3bd972ee0d20864590bab59914e422771ee0"], 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000404e0415120000000000010902240001000000090904000401030000000921040004012207000905810320000000055f14a5e378932f684048e0d55569d73582b39b7402000000000000003562a2d1c6e8b8f6757346aeab13c620c8eea2312ecfdc5dda906629144ed950351a4f3ebba32397df350da9df490d52523e185e76e938618f6b70d08015a15eb770ed86db1cce2b3bd972ee0d20864590bab59914e422771ee0"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000240000000160800014000000007"], 0xc4}, 0x1, 0x0, 0x0, 0x14}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe0000000077040000ffffffd0c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0x8, "b608"}, @local=@item_4={0x3, 0x2, 0x4, "910dbb68"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0x8, "b608"}, @local=@item_4={0x3, 0x2, 0x4, "910dbb68"}]}}, 0x0}, 0x0) 1m43.18247923s ago: executing program 0 (id=321): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x408100) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f00000001c0)={'wp256-generic\x00'}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700080008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000348000000080800074000000031080006"], 0xe4}}, 0x0) 1m43.063346298s ago: executing program 0 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) (fail_nth: 4) 1m43.012856192s ago: executing program 3 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000005000000000000ac1414bb00000000000000000000000000000400100000000a0062003b", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/37], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130007"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000100000000000ffffe26ede8bd3ff7f00000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000ddff080400000000001000000000000000002d4fd8e809947cbe26f3f97ca424d37df507f0e846d5636564727b58f4d5457bedc128fc62421c2fd4a200200042ac946d66459bcb2ac393ccede3c0b51a06c62a005363fda6f8797f23f1c290be000000000000000000000000000000ca56495a5271b4dff68f2e01382d588fc7b51feee8f567d3526b0537d73c4da0dbf7ed91d0eb07e45604"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000680)={0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x32, &(0x7f0000000640)=""/50}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x2, 0x15, 0x0, 0x3, 0x40, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bb0, 0x9, {0x6, 0x33, 0x80, 0x5, 0x0, 0x3, 0x0, @in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_sec_ctx={0x1d, 0x18, 0xaa, 0x8, 0xdb, "f1a654fe3df1bad1249cd25cfba9601d04d220eadb08565399ce493705571e5207f0a5b540f37ee3af4425de03471c16c6706096d3db1e2fdece5f185a4c64c2889881c99b46506473a4d959e923b259734256093afb5df0808d2cad8a8e35bcfaf4aab715bff0426aec9314bd08d7b1050c6aba278f590bc6030c088e9b7fe9f92b6a16b2e2e77dfd379056615135d79478397271080b86bdec842107664690868b711104cf28a7ee4e17a8e6537cf32ddff3a2bbfcbbdd0bd78ac538a41d8dbcf301b719c8111eb287eb4f694356716d1526224d5494e2db93fb"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb0, 0x7, {0x6, 0xff, 0xf7, 0x6, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in6=@loopback}}, @sadb_address={0x5, 0x5, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffff9}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x28, 0xc, 0x10}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x200}}, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'virt_wifi0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9139}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000b"]) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) 1m42.822518168s ago: executing program 3 (id=324): r0 = timerfd_create(0x0, 0x0) flock(r0, 0x1) flock(r0, 0x6) 1m42.484596243s ago: executing program 3 (id=325): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xd5111cc9e8ab9f1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b80)=0x2000000) 1m42.342514858s ago: executing program 0 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$packet(r1, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x9}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="47a3f37779a616a362684c815b8e1b404cff10d0d2a0983387", 0x19}], 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x9, &(0x7f0000000280)=[{0x7, 0xc, 0x7, 0x4}, {0x0, 0x5, 0x8}, {0xb04, 0x4, 0x80, 0x40}, {0x4, 0xde, 0x70, 0x8}, {0x6, 0x4, 0x8, 0x5}, {0x1, 0xf8, 0x0, 0x3}, {0xf, 0x2, 0x6, 0x93d8}, {0xd, 0x10, 0xf0, 0x101}, {0x9, 0xc7, 0x4, 0x5}]}, 0x10) 1m42.240641995s ago: executing program 3 (id=327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x3b0, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 1m41.9874538s ago: executing program 3 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r2], 0x64}}, 0x0) 1m41.749288418s ago: executing program 0 (id=329): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x5b0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x4008af24, &(0x7f0000001140)) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501", @ANYRES32], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007eb180d1e4b8997694a6988b5719196e459a53aedce4aa2e4f52021273aadd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d00000008500000006000000bf91000000000000b7020000000000008500000000000000b700000000004e5e0000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="400003ffffde000000001852b22a7f9f27086b6c7177e166d410d1bbb1285c8bd84ff65c46ddab33410b00580809c712557dfc3add31cbd971f53707bfab724678d1c3365150a11a27cd1a"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0xa1, &(0x7f0000000b00)=ANY=[@ANYBLOB="a1038b9e47910128c2ffee73fbc3486179ce7aa26581efb4c6c0d287b48fe2ecbf5e713f9c73e03bf2051bde413fc89df091bb0d9256151c220346f1e16f8c1c921d91c5d766208e7ff516eb1176697269b73d95b47a27df459a99714d13e2cf9e7ea6f401bdbb6bd4baed0997653bc5018f0555be9c92b5e4142674ad016c15042cba5ce4d0ba58c314290ec32c8e726a9681fce6", @ANYRES8=r5]}, {0x22, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2203b34200003b37940e1825278fb82869e43a6c61460f7c3e86dd035f5d5809a747cb42f6166adf892496e4b508f1e57f0672216386188ee40558dbdef7e236666a5b302e25549e3dc74caf8583006b7c24f1cf7321ca7e0fc212e11690172eacdaa6d27f6731cf1b4d8bea751cd6f694e0948204159b6f10c6078268b43f56042c4b3d07ee604ed225e765a362e6c808ebb06c1a6291d5e53fb5136a6bcbf069f5e301752a8e6898afdf8edd2d654c58d9782d3b69f52c9afa3d"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1407}}, {0xec, &(0x7f0000000bc0)=@string={0xec, 0x3, "10babc65519774aa6da8158657bd4c0b18398ec3429dc3aa6579e1ad9a73239abd0e49feb96b1821440028db2d982a8b4f03e1529d53b8d601f5a9d24a4739ebfffea5ba52e13307ed6a3a55b5e2540dbd03175e79f15f45369db01bc8c15d94bfe6eed5f20837d23889beb8b779b5e89ef86f8519712fac2f8bfa7239e36673d51c8a2376fe8673ebbccd0d7c4d060105ba2cea2679dc8ade58422247ea1a1fb3d977c097671b2589eb79cee5f9d71d1d5899935ce963e5cbc43ff6b6090a7be958c821a551ec7762200698e4c11fffd3f6b4efbc89c55f09035ebabfdf97d6a755bf1e62478e231253"}}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb1}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x59}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}]}, &(0x7f0000000300)='syzkaller\x00', 0xa, 0x52, &(0x7f0000000340)=""/82, 0x41100, 0x22, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x5, 0x1, 0x6}, 0x10, 0x2f13, r6, 0x1, &(0x7f0000000680)=[r4, r4], &(0x7f00000006c0)=[{0x0, 0x3, 0x5, 0x9}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex, 0x16, 0xe3fd9cbadbe694d, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r10, &(0x7f0000002080)={0x2020}, 0x1f1c) r11 = getpid() r12 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r11, r12, 0x0, 0x5, &(0x7f00000002c0)='[&\'%\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r13}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="290000002800020000000000", @ANYRES32=r13, @ANYRES64=r9], 0x20) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x401) write$char_usb(r14, 0x0, 0x59) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m41.528769774s ago: executing program 1 (id=330): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000041000701fcffffff00000000027c000008002d00", @ANYRES32=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000900)={0x0, 0xaee1, 0x10, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r4, 0x47f4, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2, @multicast2}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001b0000000000000000000000000000000000fe7aaeb05215b52fcadbd24992feffd4b37e62dba9389fe5f044e516deb60b1a18d777b1e2cda192e45af11bbabfd0f3aaf2ed195f3d24f84a00393d699507e7f6161e86207e43c77a0d9ad8f2d2b8da1f9094d6f9a6b003a55c42f063e1c878e812b8308967166391af6e13769ffcf8bb6165cf6336330be0d8f217d34beabeb175f851a4d36e291a864f476383853e23c55a465358aa7a1dcc78670484b53aa12aa5039630a7eef23837cd5a9facfc286a2087e2844ad7fb736bf4d5f13d745b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) (async) close(r7) 1m41.125493011s ago: executing program 3 (id=331): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x0, 0x79, 0x16, 0xfd}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 1m40.465876553s ago: executing program 4 (id=332): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="800021271e00000000000000ffffff000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c"], 0x34}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) stat(&(0x7f0000010000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020000)) 0s ago: executing program 32 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902970003010000000904000000010100000a24010000000201021324060000ebffff0800000000000000000000092403fd030300000009829d8d46f8431cfd0924030004020004fc0a2405040050b04dc2ef09060100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101ea"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r9 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x40, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "db97"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0xb6, 0x1, 0x1, 0x9}, @call_mgmt={0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xd, 0x8, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0x3c, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x6, 0x8}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0xf, 0x6, 0x8, 0x2}, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="050fab7800b07dbdc974447bacba5aa7e7"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x843}}]}) kernel console output (not intermixed with test programs): dit: type=1326 audit(1744327466.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2da58d169 code=0x7fc00000 [ 116.896600][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.424379][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 117.460711][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 117.602171][ T6223] loop2: detected capacity change from 0 to 7 [ 117.742224][ T6223] Dev loop2: unable to read RDB block 7 [ 117.750101][ T6223] loop2: AHDI p1 p2 [ 117.754444][ T6223] loop2: partition table partially beyond EOD, truncated [ 117.783770][ T6223] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 117.846801][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.535857][ T5151] Bluetooth: hci3: command tx timeout [ 118.620447][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 119.155229][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.326063][ T6242] FAULT_INJECTION: forcing a failure. [ 119.326063][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 119.358087][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.2.90 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 119.358118][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.358131][ T6242] Call Trace: [ 119.358140][ T6242] [ 119.358149][ T6242] dump_stack_lvl+0x241/0x360 [ 119.358199][ T6242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.358237][ T6242] ? __pfx__printk+0x10/0x10 [ 119.358272][ T6242] ? __pfx___might_resched+0x10/0x10 [ 119.358303][ T6242] should_fail_ex+0x424/0x570 [ 119.358330][ T6242] should_failslab+0xac/0x100 [ 119.358360][ T6242] kmem_cache_alloc_noprof+0x78/0x390 [ 119.358389][ T6242] ? alloc_empty_file+0x56/0x1d0 [ 119.358425][ T6242] alloc_empty_file+0x56/0x1d0 [ 119.358472][ T6242] alloc_file_pseudo+0x206/0x320 [ 119.358498][ T6242] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 119.358519][ T6242] ? security_inode_alloc+0xd2/0x310 [ 119.358561][ T6242] sock_alloc_file+0xb7/0x2e0 [ 119.358592][ T6242] do_accept+0x374/0x700 [ 119.358627][ T6242] ? __pfx_do_accept+0x10/0x10 [ 119.358680][ T6242] __sys_accept4+0x121/0x1d0 [ 119.358713][ T6242] ? __pfx___sys_accept4+0x10/0x10 [ 119.358753][ T6242] __x64_sys_accept4+0x9a/0xb0 [ 119.358785][ T6242] do_syscall_64+0xf3/0x230 [ 119.358811][ T6242] ? clear_bhb_loop+0x45/0xa0 [ 119.358835][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.358855][ T6242] RIP: 0033:0x7f11b018d169 [ 119.358878][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.358894][ T6242] RSP: 002b:00007f11b10bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 119.358915][ T6242] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018d169 [ 119.358930][ T6242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.358941][ T6242] RBP: 00007f11b10bd090 R08: 0000000000000000 R09: 0000000000000000 [ 119.358954][ T6242] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 119.358966][ T6242] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 119.358996][ T6242] [ 119.570851][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.676835][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 119.691801][ T5919] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.695281][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.710885][ T5919] usb 5-1: config 0 has no interface number 0 [ 119.717169][ T52] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.724967][ T5919] usb 5-1: config 0 interface 184 has no altsetting 0 [ 119.740538][ T5919] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.750338][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.754892][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.758569][ T5919] usb 5-1: Product: syz [ 119.769601][ T5919] usb 5-1: Manufacturer: syz [ 119.774190][ T5919] usb 5-1: SerialNumber: syz [ 119.781685][ T5919] usb 5-1: config 0 descriptor?? [ 119.791582][ T5919] smsc75xx v1.0.0 [ 119.853099][ T6125] bridge_slave_0: entered allmulticast mode [ 119.861408][ T52] usb 4-1: device descriptor read/64, error -71 [ 119.871893][ T6125] bridge_slave_0: entered promiscuous mode [ 119.905874][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.917512][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.926093][ T6125] bridge_slave_1: entered allmulticast mode [ 119.933455][ T6125] bridge_slave_1: entered promiscuous mode [ 120.124646][ T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.177832][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.217812][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.268852][ T52] usb 4-1: device descriptor read/64, error -71 [ 120.405667][ T52] usb usb4-port1: attempt power cycle [ 120.422050][ T6125] team0: Port device team_slave_0 added [ 120.449822][ T6125] team0: Port device team_slave_1 added [ 120.588657][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.615063][ T5151] Bluetooth: hci3: command tx timeout [ 120.627556][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.755720][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.781029][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.835075][ T52] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.917800][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.934806][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 120.943290][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.964148][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.975572][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.012181][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 121.062072][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.062142][ T52] usb 4-1: device descriptor read/8, error -71 [ 121.117633][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.133474][ T9] usb 2-1: config 0 descriptor?? [ 121.389141][ T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.446762][ T52] usb 4-1: device descriptor read/8, error -71 [ 121.531263][ T6125] hsr_slave_0: entered promiscuous mode [ 121.550498][ T6125] hsr_slave_1: entered promiscuous mode [ 121.565654][ T52] usb usb4-port1: unable to enumerate USB device [ 121.990799][ T5919] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 122.030688][ T5919] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.039266][ T918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.096625][ T5919] usb 5-1: USB disconnect, device number 4 [ 122.209565][ T918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.231219][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.273726][ T918] usb 3-1: config 0 descriptor?? [ 122.297700][ T918] cp210x 3-1:0.0: cp210x converter detected [ 122.730183][ T918] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 122.750625][ T918] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 122.793395][ T918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 122.943686][ T918] usb 3-1: USB disconnect, device number 4 [ 122.979625][ T918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.991869][ T918] cp210x 3-1:0.0: device disconnected [ 123.024865][ T52] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 123.170055][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.207240][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.220266][ T6125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.228297][ T52] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.238069][ T52] usb 5-1: config 1 has no interface number 1 [ 123.246039][ T52] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 123.254274][ T6125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.270522][ T52] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 123.273516][ T6125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.286545][ T52] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.300085][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.320577][ T6125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.340775][ T52] usb 5-1: Product: syz [ 123.345439][ T52] usb 5-1: Manufacturer: syz [ 123.350239][ T52] usb 5-1: SerialNumber: syz [ 123.397314][ T5919] usb 2-1: USB disconnect, device number 5 [ 123.731481][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.826787][ T52] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 123.882722][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.912919][ T52] usb 5-1: USB disconnect, device number 5 [ 123.937075][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.937212][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.939203][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.939310][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.113368][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.179379][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.525654][ T6125] veth0_vlan: entered promiscuous mode [ 124.631237][ T6125] veth1_vlan: entered promiscuous mode [ 124.806264][ T6125] veth0_macvtap: entered promiscuous mode [ 124.887845][ T6125] veth1_macvtap: entered promiscuous mode [ 125.006312][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.033197][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.059058][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.100903][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.140835][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.154718][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.183105][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.232003][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.270220][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.317084][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.337709][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.388055][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.406385][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.446671][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.472408][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.485082][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.503247][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.517684][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.527152][ T5897] usb 5-1: config 0 descriptor?? [ 125.550280][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.587738][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.633309][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.659377][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.693215][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.718212][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.789706][ T6125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.809575][ T6125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.834309][ T6125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.845782][ T6125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.192325][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.192350][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.274369][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.279106][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.365967][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 126.366086][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.375002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.375025][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.377686][ T5897] usb 5-1: USB disconnect, device number 6 [ 126.825951][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 127.076095][ T6387] netlink: 68 bytes leftover after parsing attributes in process `syz.2.118'. [ 127.256397][ T6388] netlink: 56 bytes leftover after parsing attributes in process `syz.1.119'. [ 127.404915][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.456957][ T6404] geneve1: entered promiscuous mode [ 127.468035][ T6404] geneve1: entered allmulticast mode [ 127.584817][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 127.600633][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.614824][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.653165][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.751490][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.772945][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.790338][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.805495][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.822384][ T5910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.834696][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 127.879280][ T5910] usb 5-1: Manufacturer: syz [ 127.906339][ T5910] usb 5-1: config 0 descriptor?? [ 127.975065][ T24] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 127.983211][ T24] usb 2-1: config 0 has no interface number 0 [ 128.103277][ T24] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 128.182215][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.227463][ T24] usb 2-1: Product: syz [ 128.236292][ T24] usb 2-1: Manufacturer: syz [ 128.243855][ T24] usb 2-1: SerialNumber: syz [ 128.289217][ T24] usb 2-1: config 0 descriptor?? [ 128.337725][ T5910] rc_core: IR keymap rc-hauppauge not found [ 128.369131][ T6450] capability: warning: `syz.0.125' uses deprecated v2 capabilities in a way that may be insecure [ 128.413251][ T5910] Registered IR keymap rc-empty [ 128.451009][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.505131][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.569567][ T24] usbhid 2-1:0.78: couldn't find an input interrupt endpoint [ 128.578025][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 128.583713][ T24] usb 2-1: USB disconnect, device number 6 [ 128.671804][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 128.701459][ T6458] netlink: 68 bytes leftover after parsing attributes in process `syz.4.120'. [ 128.794688][ T6458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 128.819661][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.904748][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.962071][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.024874][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.084703][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.128603][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.161393][ T6467] FAULT_INJECTION: forcing a failure. [ 129.161393][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 129.185285][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.208393][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.3.126 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 129.208414][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.208423][ T6467] Call Trace: [ 129.208429][ T6467] [ 129.208435][ T6467] dump_stack_lvl+0x241/0x360 [ 129.208463][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.208484][ T6467] ? __pfx__printk+0x10/0x10 [ 129.208507][ T6467] ? __pfx___might_resched+0x10/0x10 [ 129.208528][ T6467] should_fail_ex+0x424/0x570 [ 129.208547][ T6467] should_failslab+0xac/0x100 [ 129.208569][ T6467] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 129.208590][ T6467] ? __alloc_skb+0x1c2/0x480 [ 129.208602][ T6467] ? rtnl_bridge_dellink+0x55f/0x910 [ 129.208626][ T6467] __alloc_skb+0x1c2/0x480 [ 129.208638][ T6467] ? __pfx_rtnl_bridge_dellink+0x10/0x10 [ 129.208662][ T6467] ? __pfx___alloc_skb+0x10/0x10 [ 129.208679][ T6467] ? netlink_ack_tlv_len+0x6e/0x200 [ 129.208701][ T6467] netlink_ack+0x147/0xa70 [ 129.208719][ T6467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.208744][ T6467] ? ref_tracker_free+0x63e/0x7e0 [ 129.208764][ T6467] netlink_rcv_skb+0x296/0x480 [ 129.208785][ T6467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.208806][ T6467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.208838][ T6467] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.208860][ T6467] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.208881][ T6467] netlink_unicast+0x7f8/0x9a0 [ 129.208905][ T6467] ? __pfx_netlink_unicast+0x10/0x10 [ 129.208925][ T6467] ? skb_put+0x114/0x1f0 [ 129.208941][ T6467] netlink_sendmsg+0x8c3/0xcd0 [ 129.208970][ T6467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.208994][ T6467] ? aa_sock_msg_perm+0x91/0x160 [ 129.209018][ T6467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.209036][ T6467] __sock_sendmsg+0x221/0x270 [ 129.209058][ T6467] ____sys_sendmsg+0x523/0x860 [ 129.209079][ T6467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.209093][ T6467] ? __fget_files+0x2a/0x420 [ 129.209108][ T6467] ? __fget_files+0x2a/0x420 [ 129.209126][ T6467] __sys_sendmsg+0x271/0x360 [ 129.209145][ T6467] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.209197][ T6467] ? do_syscall_64+0xb6/0x230 [ 129.209218][ T6467] do_syscall_64+0xf3/0x230 [ 129.209235][ T6467] ? clear_bhb_loop+0x45/0xa0 [ 129.209252][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.209266][ T6467] RIP: 0033:0x7fc2da58d169 [ 129.209278][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.209290][ T6467] RSP: 002b:00007fc2db3c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.209310][ T6467] RAX: ffffffffffffffda RBX: 00007fc2da7a5fa0 RCX: 00007fc2da58d169 [ 129.209320][ T6467] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 129.209329][ T6467] RBP: 00007fc2db3c3090 R08: 0000000000000000 R09: 0000000000000000 [ 129.209338][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.209346][ T6467] R13: 0000000000000000 R14: 00007fc2da7a5fa0 R15: 00007fc2da8cfa28 [ 129.209366][ T6467] [ 129.255001][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.257220][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.524138][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.530161][ C1] hrtimer: interrupt took 315630352 ns [ 129.538759][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.595861][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.627454][ T5910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.630210][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.683849][ T6470] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 129.709951][ T5910] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 129.770372][ T6472] FAULT_INJECTION: forcing a failure. [ 129.770372][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 129.800223][ T5910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 129.822310][ T6473] No such timeout policy "syz0" [ 129.910092][ T5910] usb 5-1: USB disconnect, device number 7 [ 129.920579][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.1.129 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 129.920609][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.920621][ T6472] Call Trace: [ 129.920629][ T6472] [ 129.920638][ T6472] dump_stack_lvl+0x241/0x360 [ 129.920676][ T6472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.920705][ T6472] ? __pfx__printk+0x10/0x10 [ 129.920738][ T6472] ? __pfx___might_resched+0x10/0x10 [ 129.920766][ T6472] should_fail_ex+0x424/0x570 [ 129.920792][ T6472] should_failslab+0xac/0x100 [ 129.920822][ T6472] kmem_cache_alloc_noprof+0x78/0x390 [ 129.920849][ T6472] ? skb_clone+0x20c/0x390 [ 129.920876][ T6472] skb_clone+0x20c/0x390 [ 129.920896][ T6472] ? netlink_broadcast_filtered+0x702/0x12a0 [ 129.920927][ T6472] netlink_broadcast_filtered+0x710/0x12a0 [ 129.920960][ T6472] ? __pfx___alloc_skb+0x10/0x10 [ 129.920980][ T6472] ? skb_put+0x114/0x1f0 [ 129.921001][ T6472] netlink_sendmsg+0x870/0xcd0 [ 129.921043][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.921076][ T6472] ? aa_sock_msg_perm+0x91/0x160 [ 129.921110][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.921137][ T6472] __sock_sendmsg+0x221/0x270 [ 129.921167][ T6472] ____sys_sendmsg+0x523/0x860 [ 129.921198][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.921217][ T6472] ? __fget_files+0x2a/0x420 [ 129.921239][ T6472] ? __fget_files+0x2a/0x420 [ 129.921267][ T6472] __sys_sendmsg+0x271/0x360 [ 129.921294][ T6472] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.921371][ T6472] ? do_syscall_64+0xb6/0x230 [ 129.921399][ T6472] do_syscall_64+0xf3/0x230 [ 129.921424][ T6472] ? clear_bhb_loop+0x45/0xa0 [ 129.921448][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.921467][ T6472] RIP: 0033:0x7f5f09b8d169 [ 129.921485][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.921501][ T6472] RSP: 002b:00007f5f0a92a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.921529][ T6472] RAX: ffffffffffffffda RBX: 00007f5f09da5fa0 RCX: 00007f5f09b8d169 [ 129.921543][ T6472] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 129.921556][ T6472] RBP: 00007f5f0a92a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.921568][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.921580][ T6472] R13: 0000000000000000 R14: 00007f5f09da5fa0 R15: 00007f5f09ecfa28 [ 129.921610][ T6472] [ 130.583599][ T6491] bridge0: port 3(vlan2) entered blocking state [ 130.618246][ T6491] bridge0: port 3(vlan2) entered disabled state [ 130.651828][ T6491] vlan2: entered allmulticast mode [ 130.670343][ T6491] bridge0: entered allmulticast mode [ 130.738686][ T6491] vlan2: left allmulticast mode [ 130.743703][ T6491] bridge0: left allmulticast mode [ 130.814732][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.880651][ T6496] bridge_slave_0: left allmulticast mode [ 130.895048][ T6496] bridge_slave_0: left promiscuous mode [ 130.901986][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.981831][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.004258][ T6496] bridge_slave_1: left allmulticast mode [ 131.012176][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.052351][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.083263][ T6496] bridge_slave_1: left promiscuous mode [ 131.107834][ T5896] usb 4-1: config 0 descriptor?? [ 131.128229][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.132862][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 131.182897][ T30] audit: type=1326 audit(1744327480.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.204974][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.247152][ T30] audit: type=1326 audit(1744327480.361:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247230][ T30] audit: type=1326 audit(1744327480.361:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247295][ T30] audit: type=1326 audit(1744327480.361:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247338][ T30] audit: type=1326 audit(1744327480.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247381][ T30] audit: type=1326 audit(1744327480.361:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e0878bad0 code=0x7ffc0000 [ 131.247444][ T30] audit: type=1326 audit(1744327480.361:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247488][ T30] audit: type=1326 audit(1744327480.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247608][ T30] audit: type=1326 audit(1744327480.361:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.247654][ T30] audit: type=1326 audit(1744327480.361:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e0878d169 code=0x7ffc0000 [ 131.261282][ T6496] bond0: (slave bond_slave_0): Releasing backup interface [ 131.687586][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.702547][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 131.865609][ T6496] bond0: (slave bond_slave_1): Releasing backup interface [ 131.928471][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 131.940301][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 131.954339][ T6496] team0: Port device team_slave_0 removed [ 131.973591][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.028079][ T6496] team0: Port device team_slave_1 removed [ 132.044199][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.062711][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.078348][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.092136][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.133606][ T6496] bond0: (slave geneve2): Releasing backup interface [ 132.155106][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.176503][ T6496] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.192937][ T5896] pwc: recv_control_msg error -32 req 02 val 2100 [ 132.198492][ T6496] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.222885][ T6496] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.245970][ T6496] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.247730][ T6541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.320700][ T6526] ip6erspan0: entered promiscuous mode [ 132.355197][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.376320][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.419604][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 132.471711][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.536038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.567919][ T6550] vlan2: entered allmulticast mode [ 132.580684][ T6550] bond0: entered allmulticast mode [ 132.591085][ T6550] bond_slave_0: entered allmulticast mode [ 132.602675][ T6550] bond_slave_1: entered allmulticast mode [ 132.612478][ T6550] bridge0: port 3(vlan2) entered blocking state [ 132.613480][ T6496] program syz.4.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.627420][ T6550] bridge0: port 3(vlan2) entered disabled state [ 132.639147][ T6550] vlan2: entered promiscuous mode [ 132.644341][ T6550] bond0: entered promiscuous mode [ 132.654053][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.660484][ T6550] bond_slave_0: entered promiscuous mode [ 132.675237][ T6550] bond_slave_1: entered promiscuous mode [ 132.687926][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.721553][ T6550] bridge0: port 3(vlan2) entered blocking state [ 132.728574][ T6550] bridge0: port 3(vlan2) entered forwarding state [ 132.747912][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.872138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.880507][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.889290][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.892498][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 132.909148][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.941788][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.982605][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 133.031274][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.054463][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.082638][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.098703][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.215793][ T5896] pwc: Registered as video103. [ 133.280437][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 133.434036][ T5896] usb 4-1: USB disconnect, device number 9 [ 133.754767][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.945126][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.171199][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 134.184683][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.234868][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.337873][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.395192][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.151'. [ 134.395668][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 134.442597][ T5897] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 134.460048][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 134.460060][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.466985][ T9] usb usb2-port1: attempt power cycle [ 134.484429][ T5897] usb 4-1: config 0 descriptor?? [ 134.516372][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.151'. [ 134.536713][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.151'. [ 134.701171][ T5897] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.883920][ T5910] usb 1-1: USB disconnect, device number 5 [ 134.893508][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.912141][ T6531] delete_channel: no stack [ 134.946438][ T9] usb 2-1: device descriptor read/8, error -71 [ 135.004275][ T5909] IPVS: starting estimator thread 0... [ 135.018970][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 135.033772][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 135.047523][ T6593] netlink: 'syz.2.154': attribute type 15 has an invalid length. [ 135.057743][ T6593] netlink: 'syz.2.154': attribute type 14 has an invalid length. [ 135.120720][ T5897] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 135.138387][ T5897] asix 4-1:0.0: probe with driver asix failed with error -61 [ 135.155912][ T6594] IPVS: using max 26 ests per chain, 62400 per kthread [ 135.195158][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.234693][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.263096][ T6599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.286927][ T9] usb 2-1: device descriptor read/8, error -71 [ 135.364641][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 135.371410][ T5919] usb 5-1: config 6 has an invalid interface number: 113 but max is 0 [ 135.380435][ T5919] usb 5-1: config 6 has no interface number 0 [ 135.386744][ T5919] usb 5-1: config 6 interface 113 has no altsetting 0 [ 135.395998][ T9] usb usb2-port1: unable to enumerate USB device [ 135.401593][ T5919] usb 5-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 135.411646][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.423695][ T5919] usb 5-1: Product: syz [ 135.429304][ T5919] usb 5-1: Manufacturer: syz [ 135.433913][ T5919] usb 5-1: SerialNumber: syz [ 135.454854][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.617175][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.630280][ T5896] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 135.639717][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.647914][ T5896] usb 1-1: Product: syz [ 135.654819][ T5896] usb 1-1: Manufacturer: syz [ 135.660901][ T5896] usb 1-1: SerialNumber: syz [ 135.671322][ T5896] usb 1-1: config 0 descriptor?? [ 135.684014][ T5896] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 135.691430][ T5896] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 135.730524][ T5919] usb-storage 5-1:6.113: USB Mass Storage device detected [ 135.755654][ T5919] usb-storage 5-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 135.771512][ T6610] FAULT_INJECTION: forcing a failure. [ 135.771512][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.809435][ T5919] usb 5-1: USB disconnect, device number 8 [ 135.816475][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.4.158 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 135.816503][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.816516][ T6610] Call Trace: [ 135.816524][ T6610] [ 135.816532][ T6610] dump_stack_lvl+0x241/0x360 [ 135.816569][ T6610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.816599][ T6610] ? __pfx__printk+0x10/0x10 [ 135.816641][ T6610] should_fail_ex+0x424/0x570 [ 135.816667][ T6610] _copy_from_iter+0x211/0x1c70 [ 135.816701][ T6610] ? __build_skb_around+0x247/0x3d0 [ 135.816737][ T6610] ? __alloc_skb+0x298/0x480 [ 135.816755][ T6610] ? __pfx__copy_from_iter+0x10/0x10 [ 135.816785][ T6610] ? __pfx___alloc_skb+0x10/0x10 [ 135.816806][ T6610] ? skb_put+0x114/0x1f0 [ 135.816830][ T6610] netlink_sendmsg+0x73c/0xcd0 [ 135.816871][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.816903][ T6610] ? aa_sock_msg_perm+0x91/0x160 [ 135.816945][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.816972][ T6610] __sock_sendmsg+0x221/0x270 [ 135.817002][ T6610] ____sys_sendmsg+0x523/0x860 [ 135.817033][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.817052][ T6610] ? __fget_files+0x2a/0x420 [ 135.817074][ T6610] ? __fget_files+0x2a/0x420 [ 135.817102][ T6610] __sys_sendmsg+0x271/0x360 [ 135.817129][ T6610] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.817204][ T6610] ? do_syscall_64+0xb6/0x230 [ 135.817233][ T6610] do_syscall_64+0xf3/0x230 [ 135.817257][ T6610] ? clear_bhb_loop+0x45/0xa0 [ 135.817280][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.817299][ T6610] RIP: 0033:0x7f98d0f8d169 [ 135.817315][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.817330][ T6610] RSP: 002b:00007f98d1e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.817350][ T6610] RAX: ffffffffffffffda RBX: 00007f98d11a5fa0 RCX: 00007f98d0f8d169 [ 135.817363][ T6610] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 135.817375][ T6610] RBP: 00007f98d1e06090 R08: 0000000000000000 R09: 0000000000000000 [ 135.817386][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.817397][ T6610] R13: 0000000000000000 R14: 00007f98d11a5fa0 R15: 00007f98d12cfa28 [ 135.817426][ T6610] [ 136.112775][ T5897] usb 1-1: USB disconnect, device number 6 [ 136.248805][ T6618] FAULT_INJECTION: forcing a failure. [ 136.248805][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 136.306200][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.4.160 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 136.306231][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.306243][ T6618] Call Trace: [ 136.306251][ T6618] [ 136.306260][ T6618] dump_stack_lvl+0x241/0x360 [ 136.306298][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.306327][ T6618] ? __pfx__printk+0x10/0x10 [ 136.306360][ T6618] ? __pfx___might_resched+0x10/0x10 [ 136.306390][ T6618] should_fail_ex+0x424/0x570 [ 136.306418][ T6618] should_failslab+0xac/0x100 [ 136.306448][ T6618] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 136.306477][ T6618] ? __alloc_skb+0x1c2/0x480 [ 136.306494][ T6618] ? __dev_queue_xmit+0x1780/0x3f60 [ 136.306521][ T6618] __alloc_skb+0x1c2/0x480 [ 136.306540][ T6618] ? do_syscall_64+0xf3/0x230 [ 136.306569][ T6618] ? __pfx___alloc_skb+0x10/0x10 [ 136.306595][ T6618] ? netlink_ack_tlv_len+0x6e/0x200 [ 136.306625][ T6618] netlink_ack+0x147/0xa70 [ 136.306661][ T6618] ? __pfx_nl80211_deauthenticate+0x10/0x10 [ 136.306698][ T6618] netlink_rcv_skb+0x296/0x480 [ 136.306726][ T6618] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.306749][ T6618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.306799][ T6618] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.306835][ T6618] genl_rcv+0x28/0x40 [ 136.306854][ T6618] netlink_unicast+0x7f8/0x9a0 [ 136.306889][ T6618] ? __pfx_netlink_unicast+0x10/0x10 [ 136.306919][ T6618] ? skb_put+0x114/0x1f0 [ 136.306942][ T6618] netlink_sendmsg+0x8c3/0xcd0 [ 136.306985][ T6618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.307019][ T6618] ? aa_sock_msg_perm+0x91/0x160 [ 136.307054][ T6618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.307081][ T6618] __sock_sendmsg+0x221/0x270 [ 136.307112][ T6618] ____sys_sendmsg+0x523/0x860 [ 136.307143][ T6618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.307161][ T6618] ? __fget_files+0x2a/0x420 [ 136.307184][ T6618] ? __fget_files+0x2a/0x420 [ 136.307212][ T6618] __sys_sendmsg+0x271/0x360 [ 136.307239][ T6618] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.307316][ T6618] ? do_syscall_64+0xb6/0x230 [ 136.307343][ T6618] do_syscall_64+0xf3/0x230 [ 136.307368][ T6618] ? clear_bhb_loop+0x45/0xa0 [ 136.307390][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.307409][ T6618] RIP: 0033:0x7f98d0f8d169 [ 136.307427][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.307443][ T6618] RSP: 002b:00007f98d1e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.307464][ T6618] RAX: ffffffffffffffda RBX: 00007f98d11a5fa0 RCX: 00007f98d0f8d169 [ 136.307483][ T6618] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 136.307496][ T6618] RBP: 00007f98d1e06090 R08: 0000000000000000 R09: 0000000000000000 [ 136.307508][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.307519][ T6618] R13: 0000000000000000 R14: 00007f98d11a5fa0 R15: 00007f98d12cfa28 [ 136.307550][ T6618] [ 136.826304][ T6623] warning: `syz.3.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.841792][ T30] audit: type=1326 audit(1744327485.991:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2da58d169 code=0x7ffc0000 [ 136.864100][ T30] audit: type=1326 audit(1744327485.991:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2da58d169 code=0x7ffc0000 [ 137.164800][ T5910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.185084][ T5897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.354777][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 137.361695][ T5897] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.371161][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.381985][ T5910] usb 1-1: device descriptor read/all, error -61 [ 137.393321][ T5897] usb 3-1: config 0 descriptor?? [ 137.412742][ T5897] cp210x 3-1:0.0: cp210x converter detected [ 137.534739][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.674881][ T5910] usb 1-1: device descriptor read/64, error -71 [ 137.803989][ T5910] usb usb1-port1: attempt power cycle [ 137.817029][ T5897] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 137.826571][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 137.844001][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.852275][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.903237][ T5897] usb 3-1: cp210x converter now attached to ttyUSB0 [ 138.088201][ T5919] usb 3-1: USB disconnect, device number 5 [ 138.117036][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.180723][ T5909] usb 4-1: USB disconnect, device number 10 [ 138.214658][ T5910] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.251903][ T5910] usb 1-1: device descriptor read/8, error -71 [ 138.294437][ T5919] cp210x 3-1:0.0: device disconnected [ 138.537078][ T5910] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.628174][ T5910] usb 1-1: device descriptor read/8, error -71 [ 138.734814][ T5909] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.744591][ T5910] usb usb1-port1: unable to enumerate USB device [ 138.821998][ T6652] FAULT_INJECTION: forcing a failure. [ 138.821998][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.836919][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.2.169 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 138.836948][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.836961][ T6652] Call Trace: [ 138.836968][ T6652] [ 138.836977][ T6652] dump_stack_lvl+0x241/0x360 [ 138.837014][ T6652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.837042][ T6652] ? __pfx__printk+0x10/0x10 [ 138.837082][ T6652] should_fail_ex+0x424/0x570 [ 138.837108][ T6652] _copy_to_user+0x31/0xb0 [ 138.837139][ T6652] simple_read_from_buffer+0xc4/0x170 [ 138.837173][ T6652] proc_fail_nth_read+0x1ef/0x260 [ 138.837197][ T6652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.837221][ T6652] ? rw_verify_area+0x246/0x630 [ 138.837242][ T6652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.837264][ T6652] vfs_read+0x21f/0xb90 [ 138.837292][ T6652] ? __pfx___mutex_lock+0x10/0x10 [ 138.837318][ T6652] ? __pfx_vfs_read+0x10/0x10 [ 138.837343][ T6652] ? __fget_files+0x2a/0x420 [ 138.837363][ T6652] ? __fget_files+0x39d/0x420 [ 138.837379][ T6652] ? __fget_files+0x2a/0x420 [ 138.837407][ T6652] ksys_read+0x19d/0x2d0 [ 138.837432][ T6652] ? __pfx_ksys_read+0x10/0x10 [ 138.837461][ T6652] ? do_syscall_64+0xb6/0x230 [ 138.837489][ T6652] do_syscall_64+0xf3/0x230 [ 138.837513][ T6652] ? clear_bhb_loop+0x45/0xa0 [ 138.837538][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.837557][ T6652] RIP: 0033:0x7f11b018bb7c [ 138.837575][ T6652] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.837590][ T6652] RSP: 002b:00007f11b10bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.837611][ T6652] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018bb7c [ 138.837625][ T6652] RDX: 000000000000000f RSI: 00007f11b10bd0a0 RDI: 0000000000000004 [ 138.837637][ T6652] RBP: 00007f11b10bd090 R08: 0000000000000000 R09: 0000000000000000 [ 138.837649][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.837660][ T6652] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 138.837698][ T6652] [ 138.962808][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.195698][ T6656] FAULT_INJECTION: forcing a failure. [ 139.195698][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 139.236317][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.2.171 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 139.236349][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.236361][ T6656] Call Trace: [ 139.236369][ T6656] [ 139.236378][ T6656] dump_stack_lvl+0x241/0x360 [ 139.236423][ T6656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.236452][ T6656] ? __pfx__printk+0x10/0x10 [ 139.236486][ T6656] ? __pfx___might_resched+0x10/0x10 [ 139.236516][ T6656] should_fail_ex+0x424/0x570 [ 139.236542][ T6656] should_failslab+0xac/0x100 [ 139.236573][ T6656] __kmalloc_noprof+0xdf/0x4d0 [ 139.236601][ T6656] ? tomoyo_encode+0x26f/0x540 [ 139.236636][ T6656] tomoyo_encode+0x26f/0x540 [ 139.236674][ T6656] tomoyo_realpath_from_path+0x59e/0x5e0 [ 139.236720][ T6656] tomoyo_path_number_perm+0x245/0x790 [ 139.236747][ T6656] ? __lock_acquire+0xad5/0xd80 [ 139.236769][ T6656] ? tomoyo_path_number_perm+0x215/0x790 [ 139.236798][ T6656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.236875][ T6656] ? __pfx_current_check_access_path+0x10/0x10 [ 139.236903][ T6656] ? d_alloc_parallel+0x30f/0x1660 [ 139.236932][ T6656] tomoyo_path_mknod+0x178/0x1c0 [ 139.236957][ T6656] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 139.236990][ T6656] security_path_mknod+0x181/0x3a0 [ 139.237014][ T6656] path_openat+0xe4e/0x35d0 [ 139.237073][ T6656] ? __pfx_path_openat+0x10/0x10 [ 139.237093][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.237136][ T6656] do_filp_open+0x284/0x4e0 [ 139.237163][ T6656] ? __pfx_do_filp_open+0x10/0x10 [ 139.237183][ T6656] ? do_raw_spin_lock+0x151/0x370 [ 139.237255][ T6656] do_sys_openat2+0x12b/0x1d0 [ 139.237290][ T6656] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.237318][ T6656] ? __fget_files+0x2a/0x420 [ 139.237340][ T6656] ? __fget_files+0x2a/0x420 [ 139.237365][ T6656] __x64_sys_openat+0x249/0x2a0 [ 139.237399][ T6656] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.237447][ T6656] ? do_syscall_64+0xb6/0x230 [ 139.237476][ T6656] do_syscall_64+0xf3/0x230 [ 139.237501][ T6656] ? clear_bhb_loop+0x45/0xa0 [ 139.237525][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.237544][ T6656] RIP: 0033:0x7f11b018d169 [ 139.237562][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.237578][ T6656] RSP: 002b:00007f11b10bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.237599][ T6656] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018d169 [ 139.237613][ T6656] RDX: 00000000000026e1 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 139.237627][ T6656] RBP: 00007f11b10bd090 R08: 0000000000000000 R09: 0000000000000000 [ 139.237639][ T6656] R10: 00000000fffffffb R11: 0000000000000246 R12: 0000000000000001 [ 139.237651][ T6656] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 139.237684][ T6656] [ 139.238664][ T6656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.541219][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.624573][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.679990][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.737220][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.786834][ T5909] usb 4-1: config 0 descriptor?? [ 140.052801][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.248577][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.257898][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.337469][ T6644] vlan2: entered allmulticast mode [ 140.342717][ T6644] hsr0: entered allmulticast mode [ 140.398481][ T6644] hsr_slave_0: entered allmulticast mode [ 140.404256][ T6644] hsr_slave_1: entered allmulticast mode [ 140.738537][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 140.767541][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.902540][ T5909] usb 4-1: USB disconnect, device number 11 [ 141.424861][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.657125][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.682677][ T24] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 141.713151][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.730138][ T24] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 141.749641][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.780654][ T24] usb 5-1: config 0 descriptor?? [ 142.101861][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.163475][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.582839][ T6709] FAULT_INJECTION: forcing a failure. [ 142.582839][ T6709] name failslab, interval 1, probability 0, space 0, times 0 [ 142.605046][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.3.187 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 142.605078][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.605091][ T6709] Call Trace: [ 142.605100][ T6709] [ 142.605109][ T6709] dump_stack_lvl+0x241/0x360 [ 142.605147][ T6709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.605177][ T6709] ? __pfx__printk+0x10/0x10 [ 142.605210][ T6709] ? __pfx___might_resched+0x10/0x10 [ 142.605239][ T6709] should_fail_ex+0x424/0x570 [ 142.605265][ T6709] should_failslab+0xac/0x100 [ 142.605296][ T6709] __kmalloc_noprof+0xdf/0x4d0 [ 142.605333][ T6709] ? property_entries_dup+0x81/0xd00 [ 142.605360][ T6709] property_entries_dup+0x81/0xd00 [ 142.605380][ T6709] ? dev_set_name+0xd7/0x120 [ 142.605402][ T6709] ? iommufd_test+0x16bd/0x56a0 [ 142.605429][ T6709] fwnode_create_software_node+0x86/0x1f0 [ 142.605455][ T6709] device_create_managed_software_node+0xd5/0x1f0 [ 142.605477][ T6709] ? iommufd_test+0x2efb/0x56a0 [ 142.605502][ T6709] iommufd_test+0x3335/0x56a0 [ 142.605536][ T6709] ? __pfx_iommufd_test+0x10/0x10 [ 142.605570][ T6709] ? __lock_acquire+0xad5/0xd80 [ 142.605626][ T6709] iommufd_fops_ioctl+0x4fc/0x610 [ 142.605658][ T6709] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.605691][ T6709] ? __fget_files+0x2a/0x420 [ 142.605716][ T6709] ? __fget_files+0x2a/0x420 [ 142.605739][ T6709] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.605769][ T6709] __se_sys_ioctl+0xf1/0x160 [ 142.605795][ T6709] do_syscall_64+0xf3/0x230 [ 142.605821][ T6709] ? clear_bhb_loop+0x45/0xa0 [ 142.605845][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.605865][ T6709] RIP: 0033:0x7fc2da58d169 [ 142.605884][ T6709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.605901][ T6709] RSP: 002b:00007fc2db3c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.605923][ T6709] RAX: ffffffffffffffda RBX: 00007fc2da7a5fa0 RCX: 00007fc2da58d169 [ 142.605937][ T6709] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 142.605950][ T6709] RBP: 00007fc2db3c3090 R08: 0000000000000000 R09: 0000000000000000 [ 142.605962][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.605974][ T6709] R13: 0000000000000000 R14: 00007fc2da7a5fa0 R15: 00007fc2da8cfa28 [ 142.606005][ T6709] [ 142.606019][ T6709] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 142.658315][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.866385][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.887384][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.062229][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 143.077187][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.086663][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.105262][ T24] usb 2-1: Product: syz [ 143.109489][ T24] usb 2-1: Manufacturer: syz [ 143.114119][ T24] usb 2-1: SerialNumber: syz [ 143.122235][ T6719] sg_write: data in/out 552873616/164 bytes for SCSI command 0xa0-- guessing data in; [ 143.122235][ T6719] program syz.3.191 not setting count and/or reply_len properly [ 143.138569][ T24] usb 2-1: config 0 descriptor?? [ 143.261959][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.282987][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.299022][ T6721] FAULT_INJECTION: forcing a failure. [ 143.299022][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 143.312037][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.0.190 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 143.312067][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.312079][ T6721] Call Trace: [ 143.312088][ T6721] [ 143.312097][ T6721] dump_stack_lvl+0x241/0x360 [ 143.312138][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.312169][ T6721] ? __pfx__printk+0x10/0x10 [ 143.312202][ T6721] ? __pfx___might_resched+0x10/0x10 [ 143.312232][ T6721] should_fail_ex+0x424/0x570 [ 143.312259][ T6721] should_failslab+0xac/0x100 [ 143.312290][ T6721] __kmalloc_noprof+0xdf/0x4d0 [ 143.312318][ T6721] ? property_entries_dup+0x81/0xd00 [ 143.312344][ T6721] property_entries_dup+0x81/0xd00 [ 143.312364][ T6721] ? dev_set_name+0xd7/0x120 [ 143.312386][ T6721] ? iommufd_test+0x16bd/0x56a0 [ 143.312413][ T6721] fwnode_create_software_node+0x86/0x1f0 [ 143.312440][ T6721] device_create_managed_software_node+0xd5/0x1f0 [ 143.312464][ T6721] ? iommufd_test+0x2efb/0x56a0 [ 143.312488][ T6721] iommufd_test+0x3335/0x56a0 [ 143.312522][ T6721] ? __pfx_iommufd_test+0x10/0x10 [ 143.312557][ T6721] ? __lock_acquire+0xad5/0xd80 [ 143.312610][ T6721] iommufd_fops_ioctl+0x4fc/0x610 [ 143.312643][ T6721] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 143.312677][ T6721] ? __fget_files+0x2a/0x420 [ 143.312702][ T6721] ? __fget_files+0x2a/0x420 [ 143.312725][ T6721] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 143.312756][ T6721] __se_sys_ioctl+0xf1/0x160 [ 143.312783][ T6721] do_syscall_64+0xf3/0x230 [ 143.312810][ T6721] ? clear_bhb_loop+0x45/0xa0 [ 143.312834][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.312854][ T6721] RIP: 0033:0x7f5e0878d169 [ 143.312872][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.312889][ T6721] RSP: 002b:00007f5e095aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.312912][ T6721] RAX: ffffffffffffffda RBX: 00007f5e089a5fa0 RCX: 00007f5e0878d169 [ 143.312927][ T6721] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 143.312940][ T6721] RBP: 00007f5e095aa090 R08: 0000000000000000 R09: 0000000000000000 [ 143.312953][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.312984][ T6721] R13: 0000000000000000 R14: 00007f5e089a5fa0 R15: 00007f5e08acfa28 [ 143.313021][ T6721] [ 143.313059][ T6721] iommufd_mock iommufd_mock1: add pasid-num-bits property failed, rc: -12 [ 143.563354][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.165859][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.225514][ T5919] usb 5-1: USB disconnect, device number 9 [ 144.450059][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 144.578711][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.589567][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.608918][ T5909] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.629275][ T5909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 144.641838][ T5909] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 144.655284][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.663303][ T5909] usb 1-1: Product: syz [ 144.670942][ T5909] usb 1-1: Manufacturer: syz [ 144.679296][ T5909] usb 1-1: SerialNumber: syz [ 144.910958][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.922481][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.933122][ T52] IPVS: starting estimator thread 0... [ 145.064953][ T6743] IPVS: using max 33 ests per chain, 79200 per kthread [ 145.150406][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.193850][ T24] usb 2-1: USB disconnect, device number 11 [ 145.224920][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.580676][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 145.591644][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.603547][ T9] usb 5-1: config 8 has an invalid interface number: 24 but max is 1 [ 145.620605][ T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 145.637835][ T9] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 145.691012][ T9] usb 5-1: config 8 has no interface number 0 [ 145.795239][ T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 145.833023][ T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 145.846850][ T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 145.860641][ T9] usb 5-1: config 8 interface 24 has no altsetting 0 [ 145.880274][ T9] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 145.894830][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.903486][ T9] usb 5-1: Product: syz [ 145.915092][ T9] usb 5-1: Manufacturer: syz [ 145.919813][ T9] usb 5-1: SerialNumber: syz [ 145.978161][ T6746] process 'syz.2.197' launched './file0' with NULL argv: empty string added [ 146.154498][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.165322][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.412968][ T6748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.513894][ T6748] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 146.605858][ T6751] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 146.783137][ T6753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.034889][ T24] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 147.187990][ T24] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 147.200040][ T24] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 147.442769][ T24] usb 2-1: config 0 has no interface number 0 [ 147.456268][ T24] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.494151][ T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 147.522971][ T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.554633][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 147.591783][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.627874][ T24] usb 2-1: config 0 descriptor?? [ 147.635690][ T6758] FAULT_INJECTION: forcing a failure. [ 147.635690][ T6758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.715253][ T6758] CPU: 1 UID: 0 PID: 6758 Comm: syz.2.201 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 147.715285][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.715299][ T6758] Call Trace: [ 147.715311][ T6758] [ 147.715320][ T6758] dump_stack_lvl+0x241/0x360 [ 147.715358][ T6758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.715388][ T6758] ? __pfx__printk+0x10/0x10 [ 147.715417][ T6758] should_fail_ex+0x424/0x570 [ 147.715444][ T6758] _copy_from_user+0x2d/0xb0 [ 147.715477][ T6758] sctp_setsockopt+0xc9/0x11e0 [ 147.715512][ T6758] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.715540][ T6758] do_sock_setsockopt+0x3b1/0x710 [ 147.715560][ T6758] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 147.715573][ T6758] ? __fget_files+0x2a/0x420 [ 147.715605][ T6758] ? __fget_files+0x39d/0x420 [ 147.715624][ T6758] ? __fget_files+0x2a/0x420 [ 147.715651][ T6758] __x64_sys_setsockopt+0x1ee/0x280 [ 147.715679][ T6758] do_syscall_64+0xf3/0x230 [ 147.715701][ T6758] ? clear_bhb_loop+0x45/0xa0 [ 147.715720][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.715735][ T6758] RIP: 0033:0x7f11b018d169 [ 147.715755][ T6758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.715773][ T6758] RSP: 002b:00007f11b10bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.715795][ T6758] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018d169 [ 147.715810][ T6758] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000005 [ 147.715821][ T6758] RBP: 00007f11b10bd090 R08: 000000000001000f R09: 0000000000000000 [ 147.715836][ T6758] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 147.715848][ T6758] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 147.715870][ T6758] [ 148.034476][ T5909] usbhid 1-1:1.0: can't add hid device: -71 [ 148.134743][ T5909] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 148.239869][ T5909] usb 1-1: USB disconnect, device number 11 [ 148.350655][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input8 [ 148.418224][ T24] input: failed to attach handler kbd to device input8, error: -5 [ 148.439841][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 148.515415][ T6763] vlan2: entered allmulticast mode [ 148.541719][ T6763] dummy0: entered allmulticast mode [ 148.551406][ T24] usb 2-1: USB disconnect, device number 12 [ 148.745721][ T9] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 148.782533][ T9] vmk80xx 5-1:8.24: probe with driver vmk80xx failed with error -22 [ 148.852599][ T9] usb 5-1: USB disconnect, device number 10 [ 149.219389][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 149.297688][ T6778] netlink: 88 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.334793][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.562503][ T6786] FAULT_INJECTION: forcing a failure. [ 149.562503][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 149.602168][ T6786] CPU: 1 UID: 0 PID: 6786 Comm: syz.4.213 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 149.602199][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.602212][ T6786] Call Trace: [ 149.602220][ T6786] [ 149.602229][ T6786] dump_stack_lvl+0x241/0x360 [ 149.602269][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.602299][ T6786] ? __pfx__printk+0x10/0x10 [ 149.602327][ T6786] ? do_trace_netlink_extack+0x8b/0x1f0 [ 149.602356][ T6786] ? __pfx___might_resched+0x10/0x10 [ 149.602387][ T6786] should_fail_ex+0x424/0x570 [ 149.602414][ T6786] should_failslab+0xac/0x100 [ 149.602446][ T6786] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 149.602477][ T6786] ? __alloc_skb+0x1c2/0x480 [ 149.602501][ T6786] __alloc_skb+0x1c2/0x480 [ 149.602527][ T6786] ? __pfx___alloc_skb+0x10/0x10 [ 149.602552][ T6786] ? netlink_ack_tlv_len+0x6e/0x200 [ 149.602584][ T6786] netlink_ack+0x147/0xa70 [ 149.602610][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.602666][ T6786] netlink_rcv_skb+0x296/0x480 [ 149.602695][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.602727][ T6786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.602774][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.602806][ T6786] ? __rcu_read_unlock+0xa1/0x110 [ 149.602830][ T6786] netlink_unicast+0x7f8/0x9a0 [ 149.602866][ T6786] ? __pfx_netlink_unicast+0x10/0x10 [ 149.602895][ T6786] ? skb_put+0x114/0x1f0 [ 149.602919][ T6786] netlink_sendmsg+0x8c3/0xcd0 [ 149.602966][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.603001][ T6786] ? aa_sock_msg_perm+0x91/0x160 [ 149.603037][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.603064][ T6786] __sock_sendmsg+0x221/0x270 [ 149.603096][ T6786] ____sys_sendmsg+0x523/0x860 [ 149.603128][ T6786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.603148][ T6786] ? __fget_files+0x2a/0x420 [ 149.603171][ T6786] ? __fget_files+0x2a/0x420 [ 149.603200][ T6786] __sys_sendmsg+0x271/0x360 [ 149.603228][ T6786] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.603308][ T6786] ? do_syscall_64+0xb6/0x230 [ 149.603337][ T6786] do_syscall_64+0xf3/0x230 [ 149.603362][ T6786] ? clear_bhb_loop+0x45/0xa0 [ 149.603388][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.603409][ T6786] RIP: 0033:0x7f98d0f8d169 [ 149.603426][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.603444][ T6786] RSP: 002b:00007f98d1e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.603467][ T6786] RAX: ffffffffffffffda RBX: 00007f98d11a5fa0 RCX: 00007f98d0f8d169 [ 149.603482][ T6786] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 149.603496][ T6786] RBP: 00007f98d1e06090 R08: 0000000000000000 R09: 0000000000000000 [ 149.603508][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.603520][ T6786] R13: 0000000000000000 R14: 00007f98d11a5fa0 R15: 00007f98d12cfa28 [ 149.603552][ T6786] [ 150.714646][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.864906][ T24] usb 5-1: device descriptor read/64, error -71 [ 151.105949][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 151.264885][ T24] usb 5-1: device descriptor read/64, error -71 [ 151.374838][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.383051][ T24] usb usb5-port1: attempt power cycle [ 151.427731][ T6814] netlink: 56 bytes leftover after parsing attributes in process `syz.3.224'. [ 151.441942][ T6820] FAULT_INJECTION: forcing a failure. [ 151.441942][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 151.447909][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 151.454970][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.2.225 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 151.455000][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.455013][ T6820] Call Trace: [ 151.455021][ T6820] [ 151.455030][ T6820] dump_stack_lvl+0x241/0x360 [ 151.455068][ T6820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.455099][ T6820] ? __pfx__printk+0x10/0x10 [ 151.455144][ T6820] should_fail_ex+0x424/0x570 [ 151.455173][ T6820] should_failslab+0xac/0x100 [ 151.455204][ T6820] kmem_cache_alloc_noprof+0x78/0x390 [ 151.455233][ T6820] ? skb_clone+0x20c/0x390 [ 151.455265][ T6820] skb_clone+0x20c/0x390 [ 151.455289][ T6820] ? dev_queue_xmit_nit+0x28c/0xcf0 [ 151.455330][ T6820] dev_queue_xmit_nit+0x361/0xcf0 [ 151.455369][ T6820] ? dev_queue_xmit_nit+0x2b/0xcf0 [ 151.455414][ T6820] dev_hard_start_xmit+0x1b5/0x840 [ 151.455465][ T6820] __dev_queue_xmit+0x1b80/0x3f60 [ 151.455490][ T6820] ? kasan_save_track+0x3f/0x80 [ 151.455514][ T6820] ? __kasan_slab_alloc+0x66/0x80 [ 151.455548][ T6820] ? do_syscall_64+0xf3/0x230 [ 151.455584][ T6820] ? __dev_queue_xmit+0x2f9/0x3f60 [ 151.455615][ T6820] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.455660][ T6820] ? __copy_skb_header+0xa7/0x5a0 [ 151.455686][ T6820] ? __asan_memcpy+0x40/0x70 [ 151.455710][ T6820] ? __skb_clone+0x5c/0x6d0 [ 151.455740][ T6820] ? __skb_clone+0x457/0x6d0 [ 151.455774][ T6820] ? skb_clone+0x240/0x390 [ 151.455803][ T6820] __netlink_deliver_tap+0x561/0x7f0 [ 151.455850][ T6820] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.455881][ T6820] netlink_deliver_tap+0x19d/0x1b0 [ 151.455914][ T6820] netlink_unicast+0x7c6/0x9a0 [ 151.455954][ T6820] ? __pfx_netlink_unicast+0x10/0x10 [ 151.455986][ T6820] ? skb_put+0x114/0x1f0 [ 151.456013][ T6820] netlink_sendmsg+0x8c3/0xcd0 [ 151.456060][ T6820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.456099][ T6820] ? aa_sock_msg_perm+0x91/0x160 [ 151.456138][ T6820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.456168][ T6820] __sock_sendmsg+0x221/0x270 [ 151.456202][ T6820] ____sys_sendmsg+0x523/0x860 [ 151.456238][ T6820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.456260][ T6820] ? __fget_files+0x2a/0x420 [ 151.456285][ T6820] ? __fget_files+0x2a/0x420 [ 151.456317][ T6820] __sys_sendmsg+0x271/0x360 [ 151.456347][ T6820] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.456437][ T6820] ? do_syscall_64+0xb6/0x230 [ 151.456484][ T6820] do_syscall_64+0xf3/0x230 [ 151.456512][ T6820] ? clear_bhb_loop+0x45/0xa0 [ 151.456539][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.456561][ T6820] RIP: 0033:0x7f11b018d169 [ 151.456582][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.456603][ T6820] RSP: 002b:00007f11b10bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.456627][ T6820] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018d169 [ 151.456645][ T6820] RDX: 0000000000004082 RSI: 0000200000000080 RDI: 000000000000000e [ 151.456660][ T6820] RBP: 00007f11b10bd090 R08: 0000000000000000 R09: 0000000000000000 [ 151.456675][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.456690][ T6820] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 151.456726][ T6820] [ 151.554845][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 151.798334][ T5909] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 151.806779][ T5909] usb 2-1: config 0 has no interface number 0 [ 151.812930][ T5909] usb 2-1: config 0 interface 185 has no altsetting 0 [ 151.822019][ T5909] usb 2-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 151.831435][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.834948][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.840562][ T5909] usb 2-1: Product: syz [ 151.852831][ T5909] usb 2-1: Manufacturer: syz [ 151.874602][ T5909] usb 2-1: SerialNumber: syz [ 151.880547][ T24] usb 5-1: device descriptor read/8, error -71 [ 151.888823][ T5909] usb 2-1: config 0 descriptor?? [ 152.115207][ T5909] usb 2-1: Could not find all expected endpoints [ 152.135514][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.172239][ T5909] usb 2-1: USB disconnect, device number 13 [ 152.209770][ T24] usb 5-1: device descriptor read/8, error -71 [ 152.339472][ T24] usb usb5-port1: unable to enumerate USB device [ 152.677828][ T6851] kernel profiling enabled (shift: 9) [ 152.721632][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 152.745878][ T5909] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 152.792907][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.813589][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.907068][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.922253][ T5909] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.930880][ T5909] usb 1-1: config 0 has no interface number 0 [ 152.943177][ T5909] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 152.953002][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.970250][ T5909] usb 1-1: Product: syz [ 152.976259][ T5909] usb 1-1: Manufacturer: syz [ 152.980983][ T5909] usb 1-1: SerialNumber: syz [ 153.308446][ T5909] usb 1-1: config 0 descriptor?? [ 153.358772][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 153.509065][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.686765][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 153.814948][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.829861][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.935177][ T9] usb 4-1: config 0 has no interface number 0 [ 153.990348][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 154.013927][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 154.036774][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.086469][ T5896] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 154.124839][ T5909] gspca_spca1528: reg_w err -110 [ 154.129010][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.153047][ T5896] usb 5-1: Product: syz [ 154.165212][ T5909] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 154.221719][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.232361][ T5896] usb 5-1: Manufacturer: syz [ 154.242501][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.265612][ T5896] usb 5-1: SerialNumber: syz [ 154.267396][ T9] usb 4-1: Product: syz [ 154.277524][ T9] usb 4-1: Manufacturer: syz [ 154.293770][ T9] usb 4-1: SerialNumber: syz [ 154.315997][ T9] usb 4-1: config 0 descriptor?? [ 154.319168][ T5896] usb 5-1: config 0 descriptor?? [ 154.348525][ T9] smsc75xx v1.0.0 [ 154.391996][ T5909] usb 1-1: USB disconnect, device number 12 [ 155.357520][ T6909] FAULT_INJECTION: forcing a failure. [ 155.357520][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 155.370829][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.2.255 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 155.370860][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.370873][ T6909] Call Trace: [ 155.370882][ T6909] [ 155.370892][ T6909] dump_stack_lvl+0x241/0x360 [ 155.370930][ T6909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.370961][ T6909] ? __pfx__printk+0x10/0x10 [ 155.370995][ T6909] ? __pfx___might_resched+0x10/0x10 [ 155.371028][ T6909] should_fail_ex+0x424/0x570 [ 155.371055][ T6909] should_failslab+0xac/0x100 [ 155.371087][ T6909] __kmalloc_noprof+0xdf/0x4d0 [ 155.371116][ T6909] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 155.371140][ T6909] ? apparmor_capable+0x13b/0x1b0 [ 155.371166][ T6909] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 155.371207][ T6909] genl_rcv_msg+0x819/0xf00 [ 155.371240][ T6909] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.371271][ T6909] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 155.371292][ T6909] ? lockdep_hardirqs_on+0x9d/0x150 [ 155.371333][ T6909] ? __lock_acquire+0xad5/0xd80 [ 155.371356][ T6909] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 155.371375][ T6909] ? __pfx_nl80211_start_ap+0x10/0x10 [ 155.371402][ T6909] ? __pfx_nl80211_post_doit+0x10/0x10 [ 155.371437][ T6909] netlink_rcv_skb+0x208/0x480 [ 155.371467][ T6909] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.371492][ T6909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.371544][ T6909] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.371580][ T6909] genl_rcv+0x28/0x40 [ 155.371600][ T6909] netlink_unicast+0x7f8/0x9a0 [ 155.371640][ T6909] ? __pfx_netlink_unicast+0x10/0x10 [ 155.371669][ T6909] ? skb_put+0x114/0x1f0 [ 155.371695][ T6909] netlink_sendmsg+0x8c3/0xcd0 [ 155.371738][ T6909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.371773][ T6909] ? aa_sock_msg_perm+0x91/0x160 [ 155.371809][ T6909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.371836][ T6909] __sock_sendmsg+0x221/0x270 [ 155.371887][ T6909] ____sys_sendmsg+0x523/0x860 [ 155.371919][ T6909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.371940][ T6909] ? __fget_files+0x2a/0x420 [ 155.371963][ T6909] ? __fget_files+0x2a/0x420 [ 155.371992][ T6909] __sys_sendmsg+0x271/0x360 [ 155.372020][ T6909] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.372100][ T6909] ? do_syscall_64+0xb6/0x230 [ 155.372130][ T6909] do_syscall_64+0xf3/0x230 [ 155.372156][ T6909] ? clear_bhb_loop+0x45/0xa0 [ 155.372186][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.372207][ T6909] RIP: 0033:0x7f11b018d169 [ 155.372225][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.372243][ T6909] RSP: 002b:00007f11b10bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.372266][ T6909] RAX: ffffffffffffffda RBX: 00007f11b03a5fa0 RCX: 00007f11b018d169 [ 155.372281][ T6909] RDX: 0000000000040864 RSI: 00002000000001c0 RDI: 0000000000000003 [ 155.372294][ T6909] RBP: 00007f11b10bd090 R08: 0000000000000000 R09: 0000000000000000 [ 155.372307][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.372320][ T6909] R13: 0000000000000000 R14: 00007f11b03a5fa0 R15: 00007f11b04cfa28 [ 155.372353][ T6909] [ 155.682662][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.049792][ T5909] usb 5-1: USB disconnect, device number 15 [ 156.167107][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 156.230536][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 156.286688][ T9] usb 4-1: USB disconnect, device number 12 [ 156.336945][ T30] audit: type=1326 audit(1744327505.481:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.426480][ T30] audit: type=1326 audit(1744327505.481:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.598584][ T30] audit: type=1326 audit(1744327505.521:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.626621][ T30] audit: type=1326 audit(1744327505.521:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.686555][ T30] audit: type=1326 audit(1744327505.521:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.741910][ T30] audit: type=1326 audit(1744327505.521:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.828086][ T30] audit: type=1326 audit(1744327505.521:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 156.972593][ T30] audit: type=1326 audit(1744327505.521:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 157.023090][ T6929] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 157.033603][ T6929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.262'. [ 157.101658][ T30] audit: type=1326 audit(1744327505.521:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 157.138954][ T6935] Zero length message leads to an empty skb [ 157.151840][ T30] audit: type=1326 audit(1744327505.521:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f11b018d169 code=0x7ffc0000 [ 157.208818][ T6936] batadv0: entered promiscuous mode [ 157.231248][ T6936] batadv_slave_0: entered promiscuous mode [ 157.338218][ T5860] cgroup: fork rejected by pids controller in /syz2 [ 157.894496][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 158.111055][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.224701][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 158.265738][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 158.282810][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.314855][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.329793][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.351696][ T24] usb 2-1: config 0 descriptor?? [ 158.374875][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 158.388502][ T5896] usb 5-1: config 5 has an invalid interface number: 135 but max is 3 [ 158.405562][ T5896] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 158.415344][ T5896] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 158.426314][ T5896] usb 5-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 158.436026][ T5896] usb 5-1: config 5 has no interface number 0 [ 158.442368][ T5896] usb 5-1: config 5 has no interface number 1 [ 158.476242][ T5896] usb 5-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 158.508158][ T5896] usb 5-1: config 5 interface 3 altsetting 2 endpoint 0x6 has an invalid bInterval 75, changing to 7 [ 158.528796][ T5896] usb 5-1: config 5 interface 3 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 158.540250][ T5896] usb 5-1: config 5 interface 3 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 158.566695][ T5896] usb 5-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 158.584877][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.600173][ T5896] usb 5-1: config 5 interface 3 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 158.627337][ T5896] usb 5-1: config 5 interface 135 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 158.641021][ T5896] usb 5-1: config 5 interface 3 has no altsetting 0 [ 158.647781][ T5896] usb 5-1: config 5 interface 135 has no altsetting 0 [ 158.670588][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 158.694837][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 158.715592][ T5896] usb 5-1: New USB device found, idVendor=17ef, idProduct=3054, bcdDevice=aa.43 [ 158.762341][ T24] usb 2-1: USB disconnect, device number 14 [ 158.769117][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.788812][ T5896] usb 5-1: SerialNumber:   [ 158.804814][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 158.816402][ T5896] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.829890][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.877292][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 158.908806][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.949530][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.972880][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.989235][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.998688][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.009650][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.020039][ T5909] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 159.029329][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.037613][ T5909] usb 4-1: Product: syz [ 159.037697][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.049155][ T5909] usb 4-1: Manufacturer: syz [ 159.053918][ T5909] usb 4-1: SerialNumber: syz [ 159.061935][ T5909] usb 4-1: config 0 descriptor?? [ 159.075762][ T5909] xbox_remote_probe: Unexpected endpoint_in [ 159.275129][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 159.365821][ T52] usb 4-1: USB disconnect, device number 13 [ 159.456418][ T5896] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 159.496290][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 159.513097][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.519244][ T24] usb 2-1: config 127 has an invalid interface number: 181 but max is 0 [ 159.532478][ T24] usb 2-1: config 127 has no interface number 0 [ 159.532541][ T24] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 159.532570][ T24] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 159.532595][ T24] usb 2-1: config 127 interface 181 has no altsetting 0 [ 159.547651][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 159.547687][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.547711][ T24] usb 2-1: Product: syz [ 159.547728][ T24] usb 2-1: Manufacturer: syz [ 159.547744][ T24] usb 2-1: SerialNumber: syz [ 159.551348][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 159.558712][ T6976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.558842][ T6976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.927778][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.084885][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 160.219492][ T5909] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 160.219529][ T5909] usb 4-1: config 0 has no interface number 0 [ 160.306174][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.367717][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.369716][ T6978] bridge_slave_0: entered allmulticast mode [ 160.414303][ T6978] bridge_slave_0: entered promiscuous mode [ 160.467816][ T5909] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 160.467842][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 160.467862][ T5909] usb 4-1: Product: syz [ 160.467879][ T5909] usb 4-1: Manufacturer: syz [ 160.487589][ T5909] usb 4-1: config 0 descriptor?? [ 160.503312][ T7000] FAULT_INJECTION: forcing a failure. [ 160.503312][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 160.503702][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.4.283 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 160.503734][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.503747][ T7000] Call Trace: [ 160.503756][ T7000] [ 160.503765][ T7000] dump_stack_lvl+0x241/0x360 [ 160.503803][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.503834][ T7000] ? __pfx__printk+0x10/0x10 [ 160.503869][ T7000] ? rt_is_expired+0x1c/0x2c0 [ 160.503900][ T7000] ? rt_is_expired+0x242/0x2c0 [ 160.503933][ T7000] should_fail_ex+0x424/0x570 [ 160.503960][ T7000] should_failslab+0xac/0x100 [ 160.503982][ T7000] kmem_cache_alloc_noprof+0x78/0x390 [ 160.504003][ T7000] ? __inet_bhash2_update_saddr+0x205/0x1ad0 [ 160.504040][ T7000] __inet_bhash2_update_saddr+0x205/0x1ad0 [ 160.504087][ T7000] ? xfrm_lookup_route+0xff/0x1c0 [ 160.504116][ T7000] tcp_v4_connect+0xa85/0x1ba0 [ 160.504147][ T7000] ? __pfx_tcp_v4_connect+0x10/0x10 [ 160.504180][ T7000] mptcp_connect+0x788/0xc30 [ 160.504211][ T7000] __inet_stream_connect+0x2a7/0xfb0 [ 160.504249][ T7000] ? __pfx___inet_stream_connect+0x10/0x10 [ 160.504274][ T7000] ? __kasan_kmalloc+0x9d/0xb0 [ 160.504293][ T7000] ? __kmalloc_cache_noprof+0x236/0x370 [ 160.504312][ T7000] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 160.504344][ T7000] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 160.504374][ T7000] mptcp_sendmsg_fastopen+0x16f/0x570 [ 160.504415][ T7000] mptcp_sendmsg+0x17a7/0x1a20 [ 160.504432][ T7000] ? __pfx___might_resched+0x10/0x10 [ 160.504462][ T7000] ? aa_sk_perm+0x96f/0xac0 [ 160.504499][ T7000] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 160.504523][ T7000] ? sock_rps_record_flow+0x1a/0x410 [ 160.504548][ T7000] ? inet_sendmsg+0x330/0x390 [ 160.504573][ T7000] __sock_sendmsg+0x1a6/0x270 [ 160.504595][ T7000] ____sys_sendmsg+0x523/0x860 [ 160.504617][ T7000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.504638][ T7000] ? __fget_files+0x2a/0x420 [ 160.504660][ T7000] ? __fget_files+0x2a/0x420 [ 160.504689][ T7000] __sys_sendmmsg+0x3a0/0x7b0 [ 160.504723][ T7000] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.504770][ T7000] ? rcu_read_lock_any_held+0xbb/0x160 [ 160.504791][ T7000] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 160.504825][ T7000] ? vfs_write+0xb29/0xd10 [ 160.504858][ T7000] ? ksys_write+0x24e/0x2d0 [ 160.504885][ T7000] ? __mutex_unlock_slowpath+0x229/0x800 [ 160.504926][ T7000] ? ksys_write+0x275/0x2d0 [ 160.504959][ T7000] __x64_sys_sendmmsg+0xa0/0xb0 [ 160.504985][ T7000] do_syscall_64+0xf3/0x230 [ 160.505009][ T7000] ? clear_bhb_loop+0x45/0xa0 [ 160.505032][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.505049][ T7000] RIP: 0033:0x7f98d0f8d169 [ 160.505062][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.505074][ T7000] RSP: 002b:00007f98d1e06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.505090][ T7000] RAX: ffffffffffffffda RBX: 00007f98d11a5fa0 RCX: 00007f98d0f8d169 [ 160.505107][ T7000] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 160.505120][ T7000] RBP: 00007f98d1e06090 R08: 0000000000000000 R09: 0000000000000000 [ 160.505134][ T7000] R10: 000000002000c000 R11: 0000000000000246 R12: 0000000000000001 [ 160.505146][ T7000] R13: 0000000000000000 R14: 00007f98d11a5fa0 R15: 00007f98d12cfa28 [ 160.505176][ T7000] [ 160.562929][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.563813][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.569553][ T6978] bridge_slave_1: entered allmulticast mode [ 160.629887][ T6978] bridge_slave_1: entered promiscuous mode [ 160.918944][ T7002] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in; [ 160.918944][ T7002] program syz.0.284 not setting count and/or reply_len properly [ 160.984082][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.993815][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.095844][ T5151] Bluetooth: hci4: command tx timeout [ 161.296911][ T6978] team0: Port device team_slave_0 added [ 161.490361][ T6978] team0: Port device team_slave_1 added [ 161.563264][ T5909] usb 4-1: USB disconnect, device number 14 [ 161.650210][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.669652][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.738840][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.773276][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.785129][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.812706][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.881990][ T6978] hsr_slave_0: entered promiscuous mode [ 161.894327][ T6978] hsr_slave_1: entered promiscuous mode [ 161.902728][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.913932][ T6978] Cannot create hsr debugfs directory [ 162.181433][ T24] kvaser_usb 2-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 162.225030][ T24] usb 2-1: USB disconnect, device number 15 [ 162.317841][ T7024] FAULT_INJECTION: forcing a failure. [ 162.317841][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.333303][ T7017] loop2: detected capacity change from 0 to 7 [ 162.354126][ T7017] Dev loop2: unable to read RDB block 7 [ 162.415819][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.1.290 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 162.415850][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.415864][ T7024] Call Trace: [ 162.415872][ T7024] [ 162.415881][ T7024] dump_stack_lvl+0x241/0x360 [ 162.415931][ T7024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.415962][ T7024] ? __pfx__printk+0x10/0x10 [ 162.416024][ T7024] should_fail_ex+0x424/0x570 [ 162.416052][ T7024] _copy_from_user+0x2d/0xb0 [ 162.416084][ T7024] input_event_from_user+0x211/0x510 [ 162.416115][ T7024] ? __pfx_input_event_from_user+0x10/0x10 [ 162.416144][ T7024] ? input_inject_event+0xd9/0x360 [ 162.416176][ T7024] evdev_write+0x4c4/0x7d0 [ 162.416220][ T7024] ? __pfx_evdev_write+0x10/0x10 [ 162.416242][ T7024] ? bpf_lsm_file_permission+0x9/0x10 [ 162.416266][ T7024] ? rw_verify_area+0x246/0x630 [ 162.416288][ T7024] ? __pfx_evdev_write+0x10/0x10 [ 162.416311][ T7024] vfs_write+0x2bc/0xd10 [ 162.416347][ T7024] ? __pfx_vfs_write+0x10/0x10 [ 162.416372][ T7024] ? __fget_files+0x2a/0x420 [ 162.416390][ T7024] ? __fget_files+0x2a/0x420 [ 162.416411][ T7024] ? __fget_files+0x39d/0x420 [ 162.416427][ T7024] ? __fget_files+0x2a/0x420 [ 162.416463][ T7024] ksys_write+0x19d/0x2d0 [ 162.416489][ T7024] ? __pfx_ksys_write+0x10/0x10 [ 162.416520][ T7024] ? do_syscall_64+0xb6/0x230 [ 162.416549][ T7024] do_syscall_64+0xf3/0x230 [ 162.416575][ T7024] ? clear_bhb_loop+0x45/0xa0 [ 162.416600][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.416619][ T7024] RIP: 0033:0x7f5f09b8d169 [ 162.416638][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.416655][ T7024] RSP: 002b:00007f5f0a92a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.416678][ T7024] RAX: ffffffffffffffda RBX: 00007f5f09da5fa0 RCX: 00007f5f09b8d169 [ 162.416693][ T7024] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 162.416706][ T7024] RBP: 00007f5f0a92a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.416719][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.416731][ T7024] R13: 0000000000000000 R14: 00007f5f09da5fa0 R15: 00007f5f09ecfa28 [ 162.416763][ T7024] [ 162.421894][ T7017] loop2: unable to read partition table [ 162.970903][ T7017] loop2: partition table beyond EOD, truncated [ 163.010565][ T7017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.057042][ T6978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.093295][ T7029] 8021q: VLANs not supported on ipvlan1 [ 163.169171][ T6978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.317599][ T7032] FAULT_INJECTION: forcing a failure. [ 163.317599][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 163.331877][ T6978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.354731][ T5151] Bluetooth: hci4: command tx timeout [ 163.361026][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.1.292 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 163.361055][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.361068][ T7032] Call Trace: [ 163.361075][ T7032] [ 163.361084][ T7032] dump_stack_lvl+0x241/0x360 [ 163.361121][ T7032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.361142][ T7032] ? __pfx__printk+0x10/0x10 [ 163.361166][ T7032] ? __pfx___might_resched+0x10/0x10 [ 163.361188][ T7032] should_fail_ex+0x424/0x570 [ 163.361207][ T7032] should_failslab+0xac/0x100 [ 163.361229][ T7032] kmem_cache_alloc_noprof+0x78/0x390 [ 163.361248][ T7032] ? security_file_alloc+0x32/0x310 [ 163.361269][ T7032] security_file_alloc+0x32/0x310 [ 163.361287][ T7032] init_file+0x90/0x300 [ 163.361302][ T7032] alloc_empty_file+0x70/0x1d0 [ 163.361325][ T7032] alloc_file_pseudo+0x206/0x320 [ 163.361343][ T7032] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.361365][ T7032] ? security_inode_alloc+0xd2/0x310 [ 163.361394][ T7032] sock_alloc_file+0xb7/0x2e0 [ 163.361416][ T7032] do_accept+0x374/0x700 [ 163.361441][ T7032] ? __pfx_do_accept+0x10/0x10 [ 163.361478][ T7032] __sys_accept4+0x121/0x1d0 [ 163.361501][ T7032] ? __pfx___sys_accept4+0x10/0x10 [ 163.361530][ T7032] __x64_sys_accept4+0x9a/0xb0 [ 163.361552][ T7032] do_syscall_64+0xf3/0x230 [ 163.361571][ T7032] ? clear_bhb_loop+0x45/0xa0 [ 163.361588][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.361602][ T7032] RIP: 0033:0x7f5f09b8d169 [ 163.361615][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.361627][ T7032] RSP: 002b:00007f5f0a92a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 163.361643][ T7032] RAX: ffffffffffffffda RBX: 00007f5f09da5fa0 RCX: 00007f5f09b8d169 [ 163.361654][ T7032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 163.361663][ T7032] RBP: 00007f5f0a92a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.361671][ T7032] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 163.361680][ T7032] R13: 0000000000000000 R14: 00007f5f09da5fa0 R15: 00007f5f09ecfa28 [ 163.361700][ T7032] [ 163.656344][ T6978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.140905][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.185034][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.354938][ T5909] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 164.443311][ T6978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.461578][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'. [ 164.477517][ T6978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.496793][ T5909] usb 4-1: device descriptor read/64, error -71 [ 164.530352][ T6978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.575214][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 164.622193][ T6978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.735130][ T5909] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 164.751138][ T9] usb 5-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 164.768918][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.781324][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=c8.a9 [ 164.797450][ T9] usb 5-1: New USB device strings: Mfr=181, Product=226, SerialNumber=3 [ 164.808224][ T9] usb 5-1: Product: syz [ 164.812654][ T9] usb 5-1: Manufacturer: syz [ 164.818141][ T9] usb 5-1: SerialNumber: syz [ 164.828441][ T9] usb 5-1: config 0 descriptor?? [ 164.894887][ T5910] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.902674][ T5909] usb 4-1: device descriptor read/64, error -71 [ 164.927941][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.971230][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.017548][ T5909] usb usb4-port1: attempt power cycle [ 165.020094][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.030265][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.050074][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 165.061406][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.065174][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 165.068630][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.081763][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 165.082737][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.112918][ T5910] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.123197][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.132084][ T5910] usb 2-1: Product: syz [ 165.139164][ T5910] usb 2-1: Manufacturer: syz [ 165.143929][ T5910] usb 2-1: SerialNumber: syz [ 165.166790][ T5910] usb 2-1: config 0 descriptor?? [ 165.181867][ T9] usb 5-1: USB disconnect, device number 17 [ 165.199668][ T7050] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 165.218971][ T5910] hub 2-1:0.0: bad descriptor, ignoring hub [ 165.231246][ T5910] hub 2-1:0.0: probe with driver hub failed with error -5 [ 165.289169][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.348051][ T6978] veth0_vlan: entered promiscuous mode [ 165.366282][ T6978] veth1_vlan: entered promiscuous mode [ 165.374666][ T5909] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 165.405581][ T5909] usb 4-1: device descriptor read/8, error -71 [ 165.414858][ T5151] Bluetooth: hci4: command tx timeout [ 165.418606][ T6978] veth0_macvtap: entered promiscuous mode [ 165.442365][ T6978] veth1_macvtap: entered promiscuous mode [ 165.444746][ T5845] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.476478][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.487704][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.498839][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.512587][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.535307][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.562174][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.578362][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.587468][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.604900][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 165.618147][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.639184][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.666172][ T5909] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 165.677736][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.695727][ T5845] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.705325][ T5845] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 165.714493][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.726105][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.731713][ T5909] usb 4-1: device descriptor read/8, error -71 [ 165.757181][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.790398][ T5845] usb 1-1: config 0 descriptor?? [ 165.810705][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.837245][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.865577][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.895569][ T5909] usb usb4-port1: unable to enumerate USB device [ 165.898912][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.929673][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.952257][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.099221][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.119719][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.194341][ T6978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.300667][ T6978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.316631][ T6978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.325894][ T6978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.546723][ T6424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.602301][ T6424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.646474][ T918] raw-gadget.3 gadget.1: failed to queue suspend event [ 166.734914][ T7050] raw-gadget.3 gadget.1: failed to queue resume event [ 166.756148][ T918] raw-gadget.3 gadget.1: failed to queue suspend event [ 166.765406][ T6424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.776452][ T6424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.834704][ T7050] raw-gadget.3 gadget.1: failed to queue resume event [ 166.866338][ T918] raw-gadget.3 gadget.1: failed to queue suspend event [ 166.955202][ T7050] raw-gadget.3 gadget.1: failed to queue resume event [ 167.010126][ T5845] raw-gadget.3 gadget.1: failed to queue suspend event [ 167.085703][ T7050] raw-gadget.3 gadget.1: failed to queue resume event [ 167.156986][ T52] raw-gadget.3 gadget.1: failed to queue suspend event [ 167.184894][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 167.184916][ T30] audit: type=1326 audit(1744327516.331:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.215015][ T30] audit: type=1326 audit(1744327516.331:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.240762][ T30] audit: type=1326 audit(1744327516.371:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.245525][ T7050] raw-gadget.3 gadget.1: failed to queue resume event [ 167.264584][ T30] audit: type=1326 audit(1744327516.371:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.269641][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.297721][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.366416][ T30] audit: type=1326 audit(1744327516.371:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.427605][ T30] audit: type=1326 audit(1744327516.371:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f98d0f8d169 code=0x7ffc0000 [ 167.480156][ T30] audit: type=1326 audit(1744327516.371:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98d0f29359 code=0x7ffc0000 [ 167.502902][ T5151] Bluetooth: hci4: command tx timeout [ 167.527347][ T30] audit: type=1326 audit(1744327516.371:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98d0f29359 code=0x7ffc0000 [ 167.556010][ T30] audit: type=1326 audit(1744327516.371:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98d0f29359 code=0x7ffc0000 [ 167.559221][ T7074] FAULT_INJECTION: forcing a failure. [ 167.559221][ T7074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.592089][ T7074] CPU: 0 UID: 0 PID: 7074 Comm: syz.3.304 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 167.592121][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.592133][ T7074] Call Trace: [ 167.592142][ T7074] [ 167.592150][ T7074] dump_stack_lvl+0x241/0x360 [ 167.592186][ T7074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.592215][ T7074] ? __pfx__printk+0x10/0x10 [ 167.592254][ T7074] should_fail_ex+0x424/0x570 [ 167.592281][ T7074] _copy_to_user+0x31/0xb0 [ 167.592313][ T7074] syslog_print_all+0x2bb/0x4b0 [ 167.592344][ T7074] ? __pfx_syslog_print_all+0x10/0x10 [ 167.592395][ T7074] do_syslog+0x45a/0x830 [ 167.592423][ T7074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.592448][ T7074] ? __fget_files+0x2a/0x420 [ 167.592466][ T7074] ? __pfx_do_syslog+0x10/0x10 [ 167.592492][ T7074] ? __fget_files+0x2a/0x420 [ 167.592536][ T7074] __x64_sys_syslog+0x7c/0x90 [ 167.592563][ T7074] do_syscall_64+0xf3/0x230 [ 167.592589][ T7074] ? clear_bhb_loop+0x45/0xa0 [ 167.592613][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.592633][ T7074] RIP: 0033:0x7fc2da58d169 [ 167.592650][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.592667][ T7074] RSP: 002b:00007fc2db3c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 167.592690][ T7074] RAX: ffffffffffffffda RBX: 00007fc2da7a5fa0 RCX: 00007fc2da58d169 [ 167.592705][ T7074] RDX: 0000000000000ffb RSI: 0000200000000a00 RDI: 0000000000000003 [ 167.592719][ T7074] RBP: 00007fc2db3c3090 R08: 0000000000000000 R09: 0000000000000000 [ 167.592731][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.592743][ T7074] R13: 0000000000000001 R14: 00007fc2da7a5fa0 R15: 00007fc2da8cfa28 [ 167.592773][ T7074] [ 167.776368][ T30] audit: type=1326 audit(1744327516.371:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98d0f29359 code=0x7ffc0000 [ 167.798374][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.868124][ T5909] raw-gadget.3 gadget.1: failed to queue suspend event [ 168.012606][ T7050] raw-gadget.3 gadget.1: failed to queue disconnect event [ 168.112557][ T5845] usb 1-1: USB disconnect, device number 13 [ 168.125116][ T918] usb 2-1: USB disconnect, device number 16 [ 168.207150][ T7084] FAULT_INJECTION: forcing a failure. [ 168.207150][ T7084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.207188][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.4.308 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 168.207213][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.207225][ T7084] Call Trace: [ 168.207232][ T7084] [ 168.207241][ T7084] dump_stack_lvl+0x241/0x360 [ 168.207276][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.207305][ T7084] ? __pfx__printk+0x10/0x10 [ 168.207347][ T7084] should_fail_ex+0x424/0x570 [ 168.207374][ T7084] _copy_to_iter+0x1f6/0x1c90 [ 168.207417][ T7084] ? __pfx__copy_to_iter+0x10/0x10 [ 168.207452][ T7084] ? vfs_write+0xb29/0xd10 [ 168.207479][ T7084] get_random_bytes_user+0x1e8/0x430 [ 168.207517][ T7084] ? __pfx_get_random_bytes_user+0x10/0x10 [ 168.207567][ T7084] ? import_ubuf+0x96/0x1d0 [ 168.207604][ T7084] __x64_sys_getrandom+0x154/0x250 [ 168.207638][ T7084] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 168.207665][ T7084] ? ksys_write+0x275/0x2d0 [ 168.207699][ T7084] ? do_syscall_64+0xb6/0x230 [ 168.207728][ T7084] do_syscall_64+0xf3/0x230 [ 168.207753][ T7084] ? clear_bhb_loop+0x45/0xa0 [ 168.207776][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.207795][ T7084] RIP: 0033:0x7f98d0f8d169 [ 168.207813][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.207830][ T7084] RSP: 002b:00007f98d1e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 168.207851][ T7084] RAX: ffffffffffffffda RBX: 00007f98d11a5fa0 RCX: 00007f98d0f8d169 [ 168.207866][ T7084] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040 [ 168.207879][ T7084] RBP: 00007f98d1e06090 R08: 0000000000000000 R09: 0000000000000000 [ 168.207892][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.207904][ T7084] R13: 0000000000000000 R14: 00007f98d11a5fa0 R15: 00007f98d12cfa28 [ 168.207941][ T7084] [ 168.274764][ T7087] hsr0: entered promiscuous mode [ 168.479497][ T7088] hsr0: left promiscuous mode [ 169.125566][ T5845] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 169.264790][ T5845] usb 5-1: device descriptor read/64, error -71 [ 169.304729][ T5909] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.313654][ T7111] delete_channel: no stack [ 169.326166][ T7111] delete_channel: no stack [ 169.469261][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 169.490898][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.534708][ T5845] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.582641][ T5909] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.629250][ T5909] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.641253][ T5909] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.732636][ T5909] usb 3-1: config 1 interface 1 has no altsetting 0 [ 169.741111][ T5845] usb 5-1: device descriptor read/64, error -71 [ 169.756002][ T5909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.780967][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.794422][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.800591][ T5909] usb 3-1: Product: syz [ 169.811150][ T5909] usb 3-1: Manufacturer: syz [ 169.827427][ T5909] usb 3-1: SerialNumber: syz [ 169.831848][ T7119] ALSA: mixer_oss: invalid OSS volume '' [ 169.846486][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.855120][ T5845] usb usb5-port1: attempt power cycle [ 169.925236][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.941066][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.004050][ T7124] FAULT_INJECTION: forcing a failure. [ 170.004050][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.013689][ T7126] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 170.017747][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.0.322 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 170.017776][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.017790][ T7124] Call Trace: [ 170.017799][ T7124] [ 170.017808][ T7124] dump_stack_lvl+0x241/0x360 [ 170.017854][ T7124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.017885][ T7124] ? __pfx__printk+0x10/0x10 [ 170.017929][ T7124] should_fail_ex+0x424/0x570 [ 170.017957][ T7124] _copy_from_user+0x2d/0xb0 [ 170.017990][ T7124] memdup_user+0x5e/0xd0 [ 170.018020][ T7124] kvm_arch_vm_ioctl+0x81b/0x17f0 [ 170.018049][ T7124] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 170.018074][ T7124] ? __lock_acquire+0xad5/0xd80 [ 170.018105][ T7124] ? __lock_acquire+0xad5/0xd80 [ 170.018141][ T7124] ? __lock_acquire+0xad5/0xd80 [ 170.018167][ T7124] ? __lock_acquire+0xad5/0xd80 [ 170.018209][ T7124] ? is_bpf_text_address+0x26/0x2a0 [ 170.018240][ T7124] ? is_bpf_text_address+0x288/0x2a0 [ 170.018263][ T7124] ? is_bpf_text_address+0x26/0x2a0 [ 170.018289][ T7124] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.018322][ T7124] ? kernel_text_address+0xa7/0xe0 [ 170.018343][ T7124] ? __kernel_text_address+0xd/0x40 [ 170.018363][ T7124] ? unwind_get_return_address+0x4d/0x90 [ 170.018393][ T7124] ? arch_stack_walk+0xff/0x150 [ 170.018434][ T7124] ? stack_trace_save+0x11a/0x1d0 [ 170.018468][ T7124] ? __pfx_stack_trace_save+0x10/0x10 [ 170.018501][ T7124] ? stack_depot_save_flags+0x44/0x940 [ 170.018541][ T7124] ? kasan_save_track+0x51/0x80 [ 170.018564][ T7124] ? kasan_save_track+0x3f/0x80 [ 170.018586][ T7124] ? kasan_save_free_info+0x40/0x50 [ 170.018605][ T7124] ? __kasan_slab_free+0x59/0x70 [ 170.018628][ T7124] ? kfree+0x198/0x430 [ 170.018654][ T7124] ? tomoyo_path_number_perm+0x5fd/0x790 [ 170.018680][ T7124] ? security_file_ioctl+0xc6/0x2a0 [ 170.018705][ T7124] ? __se_sys_ioctl+0x46/0x160 [ 170.018728][ T7124] ? do_syscall_64+0xf3/0x230 [ 170.018754][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.018780][ T7124] ? do_vfs_ioctl+0xef8/0x2750 [ 170.018818][ T7124] kvm_vm_ioctl+0x908/0xd90 [ 170.018850][ T7124] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 170.018890][ T7124] ? kasan_quarantine_put+0xdc/0x230 [ 170.018913][ T7124] ? lockdep_hardirqs_on+0x9d/0x150 [ 170.018947][ T7124] ? tomoyo_path_number_perm+0x215/0x790 [ 170.018980][ T7124] ? tomoyo_path_number_perm+0x684/0x790 [ 170.019012][ T7124] ? tomoyo_path_number_perm+0x215/0x790 [ 170.019043][ T7124] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.019078][ T7124] ? ksys_write+0x24e/0x2d0 [ 170.019112][ T7124] ? __lock_acquire+0xad5/0xd80 [ 170.019154][ T7124] ? __fget_files+0x2a/0x420 [ 170.019173][ T7124] ? __fget_files+0x2a/0x420 [ 170.019196][ T7124] ? __fget_files+0x2a/0x420 [ 170.019221][ T7124] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 170.019247][ T7124] __se_sys_ioctl+0xf1/0x160 [ 170.019275][ T7124] do_syscall_64+0xf3/0x230 [ 170.019302][ T7124] ? clear_bhb_loop+0x45/0xa0 [ 170.019328][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.019349][ T7124] RIP: 0033:0x7f5e0878d169 [ 170.019368][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.019387][ T7124] RSP: 002b:00007f5e095aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.019411][ T7124] RAX: ffffffffffffffda RBX: 00007f5e089a5fa0 RCX: 00007f5e0878d169 [ 170.019427][ T7124] RDX: 0000200000000780 RSI: 000000008208ae63 RDI: 0000000000000004 [ 170.019441][ T7124] RBP: 00007f5e095aa090 R08: 0000000000000000 R09: 0000000000000000 [ 170.019455][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.019467][ T7124] R13: 0000000000000000 R14: 00007f5e089a5fa0 R15: 00007f5e08acfa28 [ 170.019500][ T7124] [ 170.024728][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 170.484795][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 170.505389][ T5845] usb 5-1: device descriptor read/8, error -71 [ 170.577005][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.599685][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.625674][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 170.635352][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.647373][ T9] usb 2-1: config 0 descriptor?? [ 170.705131][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.724133][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.755093][ T5845] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.785444][ T5845] usb 5-1: device descriptor read/8, error -71 [ 170.810739][ T7139] xt_connbytes: Forcing CT accounting to be enabled [ 170.826945][ T7139] Cannot find set identified by id 0 to match [ 170.861778][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 170.869706][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.886665][ T9] usb 2-1: USB disconnect, device number 17 [ 170.895129][ T5845] usb usb5-port1: unable to enumerate USB device [ 171.330113][ T7145] netlink: 80 bytes leftover after parsing attributes in process `syz.3.328'. [ 178.455050][ C1] sched: DL replenish lagged too much [ 194.849984][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.306174][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.771539][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 216.584094][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 216.608147][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 240.209098][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 257.581877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.602320][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.301978][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 306.244483][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 306.251504][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7110/1:b..l [ 306.259936][ C0] rcu: (detected by 0, t=10503 jiffies, g=20501, q=971637 ncpus=2) [ 306.267958][ C0] task:syz.2.316 state:R running task stack:25000 pid:7110 tgid:7109 ppid:6978 task_flags:0x40044c flags:0x00004004 [ 306.282427][ C0] Call Trace: [ 306.285743][ C0] [ 306.288708][ C0] __schedule+0x1b88/0x5240 [ 306.293272][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 306.298597][ C0] ? __pfx___schedule+0x10/0x10 [ 306.303484][ C0] ? __lock_acquire+0xad5/0xd80 [ 306.308383][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 306.313705][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 306.318848][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 306.324618][ C0] irqentry_exit+0x5e/0x90 [ 306.329066][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.335172][ C0] RIP: 0010:lock_release+0x49/0x3e0 [ 306.340448][ C0] Code: 65 48 8b 03 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 c0 90 c9 11 83 f8 08 0f 83 93 02 00 00 89 c0 48 0f a3 05 e9 d0 c0 0e 73 16 82 b5 09 00 84 c0 75 0d f6 05 4d b7 aa 0e 01 0f 84 b1 02 00 00 [ 306.360096][ C0] RSP: 0018:ffffc900045af200 EFLAGS: 00000297 [ 306.366203][ C0] RAX: 0000000000000001 RBX: ffffffff9368a020 RCX: ffff88802bbe8000 [ 306.374207][ C0] RDX: 0000000000000000 RSI: ffffffff816e0bc8 RDI: ffffffff8ed3dfe0 [ 306.382211][ C0] RBP: ffffffff816e0bc8 R08: ffffc900045af39f R09: 0000000000000000 [ 306.390215][ C0] R10: ffffc900045af390 R11: fffff520008b5e74 R12: ffffc900045af350 [ 306.398218][ C0] R13: dffffc0000000000 R14: ffffc900045af728 R15: ffffffff8ed3dfe0 [ 306.406235][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 306.411398][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 306.416559][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 306.421706][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 306.426872][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 306.432023][ C0] ? kasan_record_aux_stack+0xbf/0xd0 [ 306.437428][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.443626][ C0] arch_stack_walk+0x11e/0x150 [ 306.448439][ C0] ? kmem_cache_free+0x2ff/0x410 [ 306.453421][ C0] stack_trace_save+0x11a/0x1d0 [ 306.458325][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 306.463758][ C0] ? kasan_save_track+0x51/0x80 [ 306.468644][ C0] ? kasan_save_track+0x3f/0x80 [ 306.473529][ C0] ? __kasan_kmalloc+0x9d/0xb0 [ 306.478328][ C0] ? __kmalloc_cache_noprof+0x236/0x370 [ 306.483919][ C0] ? kmem_cache_free+0x16e/0x410 [ 306.488893][ C0] ? exit_mmap+0x73e/0xde0 [ 306.493356][ C0] kasan_save_stack+0x3f/0x60 [ 306.498087][ C0] ? kasan_save_stack+0x3f/0x60 [ 306.502975][ C0] ? kasan_record_aux_stack+0xbf/0xd0 [ 306.508428][ C0] ? __phys_addr+0xba/0x170 [ 306.512979][ C0] kasan_record_aux_stack+0xbf/0xd0 [ 306.518214][ C0] kmem_cache_free+0x2ff/0x410 [ 306.523024][ C0] ? exit_mmap+0x73e/0xde0 [ 306.527492][ C0] exit_mmap+0x73e/0xde0 [ 306.531776][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 306.536589][ C0] ? __pfx_exit_aio+0x10/0x10 [ 306.541318][ C0] ? uprobe_clear_state+0x271/0x290 [ 306.546557][ C0] ? mm_update_next_owner+0xa4/0x810 [ 306.551883][ C0] __mmput+0x115/0x420 [ 306.555987][ C0] exit_mm+0x221/0x310 [ 306.560115][ C0] ? __pfx_exit_mm+0x10/0x10 [ 306.564741][ C0] ? taskstats_exit+0x326/0xa60 [ 306.569650][ C0] do_exit+0x994/0x27f0 [ 306.573841][ C0] ? do_raw_spin_lock+0x151/0x370 [ 306.578902][ C0] ? __pfx_do_exit+0x10/0x10 [ 306.583524][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.588957][ C0] do_group_exit+0x207/0x2c0 [ 306.593576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.598775][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 306.603976][ C0] get_signal+0x1696/0x1730 [ 306.608485][ C0] ? __pfx_get_signal+0x10/0x10 [ 306.613339][ C0] arch_do_signal_or_restart+0x98/0x840 [ 306.618889][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 306.625078][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 306.630811][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 306.636357][ C0] do_syscall_64+0x100/0x230 [ 306.640949][ C0] ? clear_bhb_loop+0x45/0xa0 [ 306.645623][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.651527][ C0] RIP: 0033:0x7fcd5d38d169 [ 306.655946][ C0] RSP: 002b:00007fcd5e1610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.664355][ C0] RAX: fffffffffffffe00 RBX: 00007fcd5d5a5fa8 RCX: 00007fcd5d38d169 [ 306.672339][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd5d5a5fa8 [ 306.680302][ C0] RBP: 00007fcd5d5a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 306.688264][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd5d5a5fac [ 306.696226][ C0] R13: 0000000000000000 R14: 00007fcd5d6cf940 R15: 00007fcd5d6cfa28 [ 306.704202][ C0]