last executing test programs: 21m28.063384426s ago: executing program 1 (id=524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r5, &(0x7f00000000c0)=[@l={0x92, 0x0, 0xe0, 0x11, 0xe7, 0xf7, 0x8}], 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r2, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 21m27.263434197s ago: executing program 1 (id=525): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (fail_nth: 15) 21m26.434468698s ago: executing program 1 (id=527): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xfff0}, {}, {0x3, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x4c, 0x8, 0x0, {0x6, 0x2, 0x4, 0x1, 0x8, 0x9}, {0x3, 0x0, 0x4, 0x3, 0x1, 0x2}, 0x7, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e80, 0x6f1, 0x7f, 0x3, 0x4, 0x80000000, 0x0, 0x3, 0x4, 0xfffffff9, 0x9, 0x8, 0x2, 0x6, 0x4, 0x1, 0x4, 0x9, 0x6, 0x43, 0x800, 0x4, 0x7, 0x2, 0xfffffff9, 0x2, 0x9, 0xfffe000, 0x2, 0x101, 0x40, 0x74, 0x2, 0xffffffff, 0xfffffff8, 0xb, 0x7, 0x4, 0xffff, 0xca, 0x4, 0x2, 0x0, 0x626, 0xa, 0x4, 0x7, 0x1a7, 0x9, 0x6, 0x9, 0x8, 0x400, 0x40, 0x6, 0xffffffff, 0x3, 0xfffffffa, 0x5d90, 0x256, 0x3ff, 0x3, 0x8, 0x8, 0x5, 0x8001, 0x3cd2427b, 0x0, 0xdf, 0x9, 0x9, 0x1, 0x5, 0x6, 0x10000, 0xffffffff, 0x8, 0x800, 0x3, 0x5, 0x10001, 0x1, 0x1, 0xa12, 0x1, 0xdca, 0x80000001, 0x8, 0x1, 0xc79, 0x1000, 0x9e, 0x8, 0x5, 0xffffffff, 0x9, 0xfffffff8, 0x8, 0x2, 0xd, 0x10000, 0x8, 0x3ff, 0x7fff, 0xa8, 0x4, 0x7, 0xffffffff, 0x8000, 0x86a, 0x8, 0xfffffff7, 0x4, 0x2, 0x2, 0x7fff, 0x1, 0x4, 0x10000, 0x6, 0x2cf, 0x9, 0x2, 0xfff, 0x8, 0x9, 0x595, 0x2, 0x9, 0x800, 0x6, 0x7f, 0x3ff, 0x8, 0x5f, 0x7, 0x3, 0x1200000, 0x2, 0x0, 0x4, 0x5, 0x5, 0xe000000, 0x8, 0x4, 0x7, 0x8, 0x4, 0x5, 0x101, 0x6be0, 0x0, 0xfa22, 0x2, 0x32, 0x2, 0x0, 0x1ff, 0xffffffff, 0x6, 0x3, 0x73, 0x6, 0x3, 0x8, 0x2, 0xd, 0x1000, 0x8, 0x1, 0x10000, 0x9ed, 0x1000, 0x6, 0x3, 0xffff, 0x727, 0x4800, 0x7f, 0x80000000, 0x6, 0xfffffff9, 0x100, 0x2b, 0x3, 0x5268, 0x5, 0xffffffff, 0x79e, 0x6, 0x7fff, 0x7d, 0x4, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x3, 0x5b0, 0x10, 0x6, 0x0, 0x5967, 0x81, 0x1, 0xd4, 0xa, 0x3, 0x3, 0x4, 0xffffffff, 0x82, 0x48b2, 0x6, 0x0, 0x6, 0x20e9fbc1, 0x8, 0x1, 0x6, 0x1, 0x4b7, 0x1, 0x1, 0x1000000, 0x4a7c4598, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x3, 0x28e3, 0x400, 0x1ff, 0xfffffffe, 0x4, 0x1, 0x0, 0x240, 0x5, 0x9, 0x7, 0x6, 0x5, 0x7fffffff, 0x80000001, 0xcd, 0xfff, 0x5, 0x0, 0xfffffffc, 0xa, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x9, 0x6, 0x5, 0x8000, 0x0, 0xfffffffb, 0x9, 0x1000, 0xfffffff0, 0x1, 0x4, 0x5, 0x4, 0x101, 0x2, 0x3, 0x65, 0x5, 0x0, 0x5, 0xfe6, 0x7, 0x2, 0x5, 0x5, 0xa4, 0x9, 0x8, 0x1, 0xfffffffc, 0x9, 0x7, 0x100, 0x2, 0x1, 0x4000, 0x3, 0x0, 0x1, 0x1, 0xa1ab, 0x3, 0x7ff, 0xe, 0x6, 0x4, 0x9, 0x0, 0xc4f, 0x4, 0x7, 0x3, 0x0, 0x3, 0x5, 0x200, 0x9, 0x9, 0x5, 0x1, 0x2, 0x85, 0x3, 0x3, 0xf, 0x94, 0x5, 0x5, 0xf4a, 0x7, 0x400, 0x18, 0x7, 0x6, 0x3, 0x2, 0x4, 0xfff, 0xaee4, 0x8001, 0x180000, 0x4, 0x16e, 0x7, 0x6d, 0x400000, 0x122f, 0x1, 0x6, 0x1b295cdf, 0x0, 0x9605, 0xa6e, 0x800, 0x20, 0x5, 0x800, 0x6, 0x3, 0x400, 0xfffff001, 0xc, 0xfffffffe, 0x3, 0x3, 0x9, 0x2ede, 0x6, 0x1, 0xffff, 0x3, 0x800, 0x1000, 0x8000, 0x9, 0x541d, 0x7, 0xd, 0x82a5, 0x47b, 0x3, 0x3, 0xfff, 0x7ff, 0x9, 0x6, 0x53, 0x7fffffff, 0xfffffffa, 0x38b, 0xe, 0x100, 0x2a1c, 0x6, 0xfffffffc, 0xfffffffc, 0xa5f5, 0x9, 0x1001, 0x1, 0x1bb, 0x1, 0x7, 0x2, 0xfffffff7, 0x3, 0x10001, 0x5, 0x1, 0x9, 0x1, 0x8, 0x3, 0x6b90, 0x4, 0x40, 0x1, 0x6, 0x4, 0x800, 0xff, 0x1, 0xf, 0x10, 0x0, 0x8, 0x9, 0x80000000, 0x4, 0x1, 0x2, 0x2fb, 0x8, 0x0, 0xffffffff, 0x2, 0x6, 0x6, 0x0, 0x1aed, 0x10001, 0xfffffffd, 0x10001, 0x3, 0x0, 0x2, 0xb, 0x4, 0x2, 0x0, 0x7, 0x0, 0x7, 0x9e4, 0xb2, 0x5, 0x7, 0x401, 0x5, 0xffff8000, 0x2, 0x8, 0x5, 0x5, 0xe, 0xfffffce7, 0x7, 0x3, 0x0, 0x6, 0x1, 0x3339, 0x401, 0x2000000, 0x4, 0x7fff, 0xffffffb0, 0x7, 0xa, 0xfffffff7, 0xb27b, 0xff, 0x3, 0x401, 0xb8e, 0x3, 0x7fff, 0x401, 0xf0, 0x10, 0x8, 0x5, 0x4, 0x77a, 0x5252, 0x5, 0x4, 0x9, 0x7fff, 0x3, 0x5, 0x0, 0xab3a, 0x7fff, 0x4, 0x4d8, 0x7fff, 0x6ba9, 0x4, 0x4, 0x100, 0x7ff, 0xe81, 0x7, 0x10001]}]}, @TCA_BPF_FD={0x8}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c8884) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, &(0x7f0000001400)=""/4076, 0xfffffeea) 21m21.633863693s ago: executing program 1 (id=534): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000017000b63d25a80648c2594f91341a3c9", 0x14}], 0x1}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fsmount(r2, 0x1, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, &(0x7f0000001ac0)=""/4096, 0x1000) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2d490d9b7751c9d0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'netpci0\x00', {}, 0x7f}) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) openat$kvm(0xffffffffffffff9c, 0x0, 0x20500, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 21m17.780751619s ago: executing program 1 (id=544): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = getpgrp(0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0) 21m17.034324612s ago: executing program 1 (id=547): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xfff0}, {}, {0x3, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x4c, 0x8, 0x0, {0x6, 0x2, 0x4, 0x1, 0x8, 0x9}, {0x3, 0x0, 0x4, 0x3, 0x1, 0x2}, 0x7, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e80, 0x6f1, 0x7f, 0x3, 0x4, 0x80000000, 0x0, 0x3, 0x4, 0xfffffff9, 0x9, 0x8, 0x2, 0x6, 0x4, 0x1, 0x4, 0x9, 0x6, 0x43, 0x800, 0x4, 0x7, 0x2, 0xfffffff9, 0x2, 0x9, 0xfffe000, 0x2, 0x101, 0x40, 0x74, 0x2, 0xffffffff, 0xfffffff8, 0xb, 0x7, 0x4, 0xffff, 0xca, 0x4, 0x2, 0x0, 0x626, 0xa, 0x4, 0x7, 0x1a7, 0x9, 0x6, 0x9, 0x8, 0x400, 0x40, 0x6, 0xffffffff, 0x3, 0xfffffffa, 0x5d90, 0x256, 0x3ff, 0x3, 0x8, 0x8, 0x5, 0x8001, 0x3cd2427b, 0x0, 0xdf, 0x9, 0x9, 0x1, 0x5, 0x6, 0x10000, 0xffffffff, 0x8, 0x800, 0x3, 0x5, 0x10001, 0x1, 0x1, 0xa12, 0x1, 0xdca, 0x80000001, 0x8, 0x1, 0xc79, 0x1000, 0x9e, 0x8, 0x5, 0xffffffff, 0x9, 0xfffffff8, 0x8, 0x2, 0xd, 0x10000, 0x8, 0x3ff, 0x7fff, 0xa8, 0x4, 0x7, 0xffffffff, 0x8000, 0x86a, 0x8, 0xfffffff7, 0x4, 0x2, 0x2, 0x7fff, 0x1, 0x4, 0x10000, 0x6, 0x2cf, 0x9, 0x2, 0xfff, 0x8, 0x9, 0x595, 0x2, 0x9, 0x800, 0x6, 0x7f, 0x3ff, 0x8, 0x5f, 0x7, 0x3, 0x1200000, 0x2, 0x0, 0x4, 0x5, 0x5, 0xe000000, 0x8, 0x4, 0x7, 0x8, 0x4, 0x5, 0x101, 0x6be0, 0x0, 0xfa22, 0x2, 0x32, 0x2, 0x0, 0x1ff, 0xffffffff, 0x6, 0x3, 0x73, 0x6, 0x3, 0x8, 0x2, 0xd, 0x1000, 0x8, 0x1, 0x10000, 0x9ed, 0x1000, 0x6, 0x3, 0xffff, 0x727, 0x4800, 0x7f, 0x80000000, 0x6, 0xfffffff9, 0x100, 0x2b, 0x3, 0x5268, 0x5, 0xffffffff, 0x79e, 0x6, 0x7fff, 0x7d, 0x4, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x3, 0x5b0, 0x10, 0x6, 0x0, 0x5967, 0x81, 0x1, 0xd4, 0xa, 0x3, 0x3, 0x4, 0xffffffff, 0x82, 0x48b2, 0x6, 0x0, 0x6, 0x20e9fbc1, 0x8, 0x1, 0x6, 0x1, 0x4b7, 0x1, 0x1, 0x1000000, 0x4a7c4598, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x3, 0x28e3, 0x400, 0x1ff, 0xfffffffe, 0x4, 0x1, 0x0, 0x240, 0x5, 0x9, 0x7, 0x6, 0x5, 0x7fffffff, 0x80000001, 0xcd, 0xfff, 0x5, 0x0, 0xfffffffc, 0xa, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x9, 0x6, 0x5, 0x8000, 0x0, 0xfffffffb, 0x9, 0x1000, 0xfffffff0, 0x1, 0x4, 0x5, 0x4, 0x101, 0x2, 0x3, 0x65, 0x5, 0x0, 0x5, 0xfe6, 0x7, 0x2, 0x5, 0x5, 0xa4, 0x9, 0x8, 0x1, 0xfffffffc, 0x9, 0x7, 0x100, 0x2, 0x1, 0x4000, 0x3, 0x0, 0x1, 0x1, 0xa1ab, 0x3, 0x7ff, 0xe, 0x6, 0x4, 0x9, 0x0, 0xc4f, 0x4, 0x7, 0x3, 0x0, 0x3, 0x5, 0x200, 0x9, 0x9, 0x5, 0x1, 0x2, 0x85, 0x3, 0x3, 0xf, 0x94, 0x5, 0x5, 0xf4a, 0x7, 0x400, 0x18, 0x7, 0x6, 0x3, 0x2, 0x4, 0xfff, 0xaee4, 0x8001, 0x180000, 0x4, 0x16e, 0x7, 0x6d, 0x400000, 0x122f, 0x1, 0x6, 0x1b295cdf, 0x0, 0x9605, 0xa6e, 0x800, 0x20, 0x5, 0x800, 0x6, 0x3, 0x400, 0xfffff001, 0xc, 0xfffffffe, 0x3, 0x3, 0x9, 0x2ede, 0x6, 0x1, 0xffff, 0x3, 0x800, 0x1000, 0x8000, 0x9, 0x541d, 0x7, 0xd, 0x82a5, 0x47b, 0x3, 0x3, 0xfff, 0x7ff, 0x9, 0x6, 0x53, 0x7fffffff, 0xfffffffa, 0x38b, 0xe, 0x100, 0x2a1c, 0x6, 0xfffffffc, 0xfffffffc, 0xa5f5, 0x9, 0x1001, 0x1, 0x1bb, 0x1, 0x7, 0x2, 0xfffffff7, 0x3, 0x10001, 0x5, 0x1, 0x9, 0x1, 0x8, 0x3, 0x6b90, 0x4, 0x40, 0x1, 0x6, 0x4, 0x800, 0xff, 0x1, 0xf, 0x10, 0x0, 0x8, 0x9, 0x80000000, 0x4, 0x1, 0x2, 0x2fb, 0x8, 0x0, 0xffffffff, 0x2, 0x6, 0x6, 0x0, 0x1aed, 0x10001, 0xfffffffd, 0x10001, 0x3, 0x0, 0x2, 0xb, 0x4, 0x2, 0x0, 0x7, 0x0, 0x7, 0x9e4, 0xb2, 0x5, 0x7, 0x401, 0x5, 0xffff8000, 0x2, 0x8, 0x5, 0x5, 0xe, 0xfffffce7, 0x7, 0x3, 0x0, 0x6, 0x1, 0x3339, 0x401, 0x2000000, 0x4, 0x7fff, 0xffffffb0, 0x7, 0xa, 0xfffffff7, 0xb27b, 0xff, 0x3, 0x401, 0xb8e, 0x3, 0x7fff, 0x401, 0xf0, 0x10, 0x8, 0x5, 0x4, 0x77a, 0x5252, 0x5, 0x4, 0x9, 0x7fff, 0x3, 0x5, 0x0, 0xab3a, 0x7fff, 0x4, 0x4d8, 0x7fff, 0x6ba9, 0x4, 0x4, 0x100, 0x7ff, 0xe81, 0x7, 0x10001]}]}, @TCA_BPF_FD={0x8}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c8884) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, &(0x7f0000001400)=""/4076, 0xfffffeea) 21m16.071369618s ago: executing program 32 (id=547): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xfff0}, {}, {0x3, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x4c, 0x8, 0x0, {0x6, 0x2, 0x4, 0x1, 0x8, 0x9}, {0x3, 0x0, 0x4, 0x3, 0x1, 0x2}, 0x7, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e80, 0x6f1, 0x7f, 0x3, 0x4, 0x80000000, 0x0, 0x3, 0x4, 0xfffffff9, 0x9, 0x8, 0x2, 0x6, 0x4, 0x1, 0x4, 0x9, 0x6, 0x43, 0x800, 0x4, 0x7, 0x2, 0xfffffff9, 0x2, 0x9, 0xfffe000, 0x2, 0x101, 0x40, 0x74, 0x2, 0xffffffff, 0xfffffff8, 0xb, 0x7, 0x4, 0xffff, 0xca, 0x4, 0x2, 0x0, 0x626, 0xa, 0x4, 0x7, 0x1a7, 0x9, 0x6, 0x9, 0x8, 0x400, 0x40, 0x6, 0xffffffff, 0x3, 0xfffffffa, 0x5d90, 0x256, 0x3ff, 0x3, 0x8, 0x8, 0x5, 0x8001, 0x3cd2427b, 0x0, 0xdf, 0x9, 0x9, 0x1, 0x5, 0x6, 0x10000, 0xffffffff, 0x8, 0x800, 0x3, 0x5, 0x10001, 0x1, 0x1, 0xa12, 0x1, 0xdca, 0x80000001, 0x8, 0x1, 0xc79, 0x1000, 0x9e, 0x8, 0x5, 0xffffffff, 0x9, 0xfffffff8, 0x8, 0x2, 0xd, 0x10000, 0x8, 0x3ff, 0x7fff, 0xa8, 0x4, 0x7, 0xffffffff, 0x8000, 0x86a, 0x8, 0xfffffff7, 0x4, 0x2, 0x2, 0x7fff, 0x1, 0x4, 0x10000, 0x6, 0x2cf, 0x9, 0x2, 0xfff, 0x8, 0x9, 0x595, 0x2, 0x9, 0x800, 0x6, 0x7f, 0x3ff, 0x8, 0x5f, 0x7, 0x3, 0x1200000, 0x2, 0x0, 0x4, 0x5, 0x5, 0xe000000, 0x8, 0x4, 0x7, 0x8, 0x4, 0x5, 0x101, 0x6be0, 0x0, 0xfa22, 0x2, 0x32, 0x2, 0x0, 0x1ff, 0xffffffff, 0x6, 0x3, 0x73, 0x6, 0x3, 0x8, 0x2, 0xd, 0x1000, 0x8, 0x1, 0x10000, 0x9ed, 0x1000, 0x6, 0x3, 0xffff, 0x727, 0x4800, 0x7f, 0x80000000, 0x6, 0xfffffff9, 0x100, 0x2b, 0x3, 0x5268, 0x5, 0xffffffff, 0x79e, 0x6, 0x7fff, 0x7d, 0x4, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x3, 0x5b0, 0x10, 0x6, 0x0, 0x5967, 0x81, 0x1, 0xd4, 0xa, 0x3, 0x3, 0x4, 0xffffffff, 0x82, 0x48b2, 0x6, 0x0, 0x6, 0x20e9fbc1, 0x8, 0x1, 0x6, 0x1, 0x4b7, 0x1, 0x1, 0x1000000, 0x4a7c4598, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x3, 0x28e3, 0x400, 0x1ff, 0xfffffffe, 0x4, 0x1, 0x0, 0x240, 0x5, 0x9, 0x7, 0x6, 0x5, 0x7fffffff, 0x80000001, 0xcd, 0xfff, 0x5, 0x0, 0xfffffffc, 0xa, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x9, 0x6, 0x5, 0x8000, 0x0, 0xfffffffb, 0x9, 0x1000, 0xfffffff0, 0x1, 0x4, 0x5, 0x4, 0x101, 0x2, 0x3, 0x65, 0x5, 0x0, 0x5, 0xfe6, 0x7, 0x2, 0x5, 0x5, 0xa4, 0x9, 0x8, 0x1, 0xfffffffc, 0x9, 0x7, 0x100, 0x2, 0x1, 0x4000, 0x3, 0x0, 0x1, 0x1, 0xa1ab, 0x3, 0x7ff, 0xe, 0x6, 0x4, 0x9, 0x0, 0xc4f, 0x4, 0x7, 0x3, 0x0, 0x3, 0x5, 0x200, 0x9, 0x9, 0x5, 0x1, 0x2, 0x85, 0x3, 0x3, 0xf, 0x94, 0x5, 0x5, 0xf4a, 0x7, 0x400, 0x18, 0x7, 0x6, 0x3, 0x2, 0x4, 0xfff, 0xaee4, 0x8001, 0x180000, 0x4, 0x16e, 0x7, 0x6d, 0x400000, 0x122f, 0x1, 0x6, 0x1b295cdf, 0x0, 0x9605, 0xa6e, 0x800, 0x20, 0x5, 0x800, 0x6, 0x3, 0x400, 0xfffff001, 0xc, 0xfffffffe, 0x3, 0x3, 0x9, 0x2ede, 0x6, 0x1, 0xffff, 0x3, 0x800, 0x1000, 0x8000, 0x9, 0x541d, 0x7, 0xd, 0x82a5, 0x47b, 0x3, 0x3, 0xfff, 0x7ff, 0x9, 0x6, 0x53, 0x7fffffff, 0xfffffffa, 0x38b, 0xe, 0x100, 0x2a1c, 0x6, 0xfffffffc, 0xfffffffc, 0xa5f5, 0x9, 0x1001, 0x1, 0x1bb, 0x1, 0x7, 0x2, 0xfffffff7, 0x3, 0x10001, 0x5, 0x1, 0x9, 0x1, 0x8, 0x3, 0x6b90, 0x4, 0x40, 0x1, 0x6, 0x4, 0x800, 0xff, 0x1, 0xf, 0x10, 0x0, 0x8, 0x9, 0x80000000, 0x4, 0x1, 0x2, 0x2fb, 0x8, 0x0, 0xffffffff, 0x2, 0x6, 0x6, 0x0, 0x1aed, 0x10001, 0xfffffffd, 0x10001, 0x3, 0x0, 0x2, 0xb, 0x4, 0x2, 0x0, 0x7, 0x0, 0x7, 0x9e4, 0xb2, 0x5, 0x7, 0x401, 0x5, 0xffff8000, 0x2, 0x8, 0x5, 0x5, 0xe, 0xfffffce7, 0x7, 0x3, 0x0, 0x6, 0x1, 0x3339, 0x401, 0x2000000, 0x4, 0x7fff, 0xffffffb0, 0x7, 0xa, 0xfffffff7, 0xb27b, 0xff, 0x3, 0x401, 0xb8e, 0x3, 0x7fff, 0x401, 0xf0, 0x10, 0x8, 0x5, 0x4, 0x77a, 0x5252, 0x5, 0x4, 0x9, 0x7fff, 0x3, 0x5, 0x0, 0xab3a, 0x7fff, 0x4, 0x4d8, 0x7fff, 0x6ba9, 0x4, 0x4, 0x100, 0x7ff, 0xe81, 0x7, 0x10001]}]}, @TCA_BPF_FD={0x8}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c8884) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, &(0x7f0000001400)=""/4076, 0xfffffeea) 2m52.631546972s ago: executing program 3 (id=3725): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') gettid() pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2m49.802707611s ago: executing program 3 (id=3734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (fail_nth: 2) 2m45.989768296s ago: executing program 3 (id=3743): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="0bc3", 0x2}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x66040, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef000000000000000008"], 0x78) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01020000000000000000000000001400000011000100000a00"/60], 0x3c}, 0x1, 0x1200}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', r8, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2, {[@generic={0x82, 0x2}, @lsrr={0x83, 0xb, 0xbd, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1]}, @cipso={0x86, 0x39, 0x3, [{0x6, 0xb, "7b128914f5e6e75e23"}, {0x0, 0xb, "e69ad4e20b5dca8862"}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x8, "a83f1d4f76fe"}, {0x2, 0x2}, {0x1, 0xf, "f51b976721657ad7e0724d6c76"}]}, @lsrr={0x83, 0x27, 0x2f, [@multicast1, @remote, @broadcast, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @remote, @multicast1, @broadcast]}]}}}}}) setns(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') 2m43.005060177s ago: executing program 3 (id=3750): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e21, @local}], 0x20) (async, rerun: 32) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) (rerun: 32) listen(r3, 0x4) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e904a20000000180c20000000800451600240000e0000011"], 0x0) (async, rerun: 64) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe48, 0x1}, 0x8070) (rerun: 64) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000001180)='n', 0x1}], 0x1}, 0x20000801) (async) r4 = socket(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x90102) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, 0x0) syncfs(0xffffffffffffffff) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xfffffffffffffe30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\f\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 2m42.342684917s ago: executing program 3 (id=3752): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2m42.02567658s ago: executing program 3 (id=3754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r1 = syz_clone(0xc2024500, &(0x7f0000000600)="896ea0a1a499ac2a74340f8d7dfc264fd4c5f2f73ed7f7e3f7540c3fa934e387dcc11699af5bfe23a5f6a350bbba6b02f234859370a32a787a82cc53551de4e89142b0f0934f1fa3639a5ccade7015c4004ed8578c70000f8d384653229810dbf8ea4ecb307ac18a8cf702c28a074d41a7b32381ed3519578ab46c8c8d0ace1668949fa77c318d611be35ce5b472cb124ebd089a02d00085af94f16c0115a02533968a47781f5f1856d4b1a44f685421e0ccda16b45b21f049afc950b7a3079f1af61748c96cf62d1caaaaf1e81819c9990b2a31577b66efb6e7", 0xda, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000700)="9af8eda44d6a33e77d8d604262f3853288a04ec2dc03991834c284d42bc994d9b033f06a12083858a33eae69bf3736cd143bfdee3256fece75ee5990d854bafaf7e0f6eb508b07f564ba64874e549b600b361e6c49dcec4d6efd0ad0db8dca13a683b2f4816b810e1ffde7647757e2fa028f5cd77d322f2c8352c4b60669556589ee25a933e3fccc146f0d394663be6eb9f8ff630f75") syz_open_procfs$pagemap(r1, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x81, 0xffffffff, 0x7ff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) landlock_create_ruleset(0x0, 0x0, 0x0) io_uring_enter(r2, 0x20af, 0x6d82, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x3, 0x1}}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000005500e95f25bd7000fedbdf2507000000", @ANYRESDEC=r1, @ANYBLOB="200001fec31d1d96fad53e8083fc18e3e29f6827f674b1eb47f9b8dbb747b187be1f8be1b099ba14bcfbaa0d251113530e116a85651e5394ba4671b88b5c47936721b0d93771c109cd4602ef483755f21a18e27e5a8f88e26cc142772e25c35637376cc378bd1e82aafcdad283987ad5c4d2fe7d49ce066d7ecf99836f5e3f281f2f08b317f3311382067c016ce681d6748bc328aed81b8207beb365348dcd48981c4cbb199cd301becd171742"], 0x38}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_open_procfs(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/215, 0xd7}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) 2m26.899788417s ago: executing program 33 (id=3754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r1 = syz_clone(0xc2024500, &(0x7f0000000600)="896ea0a1a499ac2a74340f8d7dfc264fd4c5f2f73ed7f7e3f7540c3fa934e387dcc11699af5bfe23a5f6a350bbba6b02f234859370a32a787a82cc53551de4e89142b0f0934f1fa3639a5ccade7015c4004ed8578c70000f8d384653229810dbf8ea4ecb307ac18a8cf702c28a074d41a7b32381ed3519578ab46c8c8d0ace1668949fa77c318d611be35ce5b472cb124ebd089a02d00085af94f16c0115a02533968a47781f5f1856d4b1a44f685421e0ccda16b45b21f049afc950b7a3079f1af61748c96cf62d1caaaaf1e81819c9990b2a31577b66efb6e7", 0xda, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000700)="9af8eda44d6a33e77d8d604262f3853288a04ec2dc03991834c284d42bc994d9b033f06a12083858a33eae69bf3736cd143bfdee3256fece75ee5990d854bafaf7e0f6eb508b07f564ba64874e549b600b361e6c49dcec4d6efd0ad0db8dca13a683b2f4816b810e1ffde7647757e2fa028f5cd77d322f2c8352c4b60669556589ee25a933e3fccc146f0d394663be6eb9f8ff630f75") syz_open_procfs$pagemap(r1, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x81, 0xffffffff, 0x7ff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) landlock_create_ruleset(0x0, 0x0, 0x0) io_uring_enter(r2, 0x20af, 0x6d82, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x3, 0x1}}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000005500e95f25bd7000fedbdf2507000000", @ANYRESDEC=r1, @ANYBLOB="200001fec31d1d96fad53e8083fc18e3e29f6827f674b1eb47f9b8dbb747b187be1f8be1b099ba14bcfbaa0d251113530e116a85651e5394ba4671b88b5c47936721b0d93771c109cd4602ef483755f21a18e27e5a8f88e26cc142772e25c35637376cc378bd1e82aafcdad283987ad5c4d2fe7d49ce066d7ecf99836f5e3f281f2f08b317f3311382067c016ce681d6748bc328aed81b8207beb365348dcd48981c4cbb199cd301becd171742"], 0x38}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_open_procfs(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/215, 0xd7}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) 17.414191463s ago: executing program 6 (id=4091): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x1, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000000), 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, r7, 0x5, 0x6, 0xa, 0x8, {0xa, 0x7, 0x8, 0x476b, 0x476b, 0x6, 0x0, 0x6, 0x82, 0x2, 0x400, 0x7, 0x6, 0x6a, "ea82c1605e8ace9d088195d6f06e8b71e911fbefe9c0c9311c5d8ce2a6251314"}}) r9 = socket$netlink(0x10, 0x3, 0xa) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r11, 0x200004) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) dup(0xffffffffffffffff) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688a2", 0x11) sendfile(r10, r11, 0x0, 0x80001d00c0d1) 13.913032928s ago: executing program 6 (id=4097): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffa}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x2000000008, 0xfffffffc, 0x3}, 0x0) r4 = socket(0x8, 0x3, 0x3) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket(0x10, 0x80000, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d30f91b23310987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000000)) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000280)="bcba7296d8596d3007dc308cbfd827d86b228d24b3442d0df0ac7cc6ce4f9a425ab7fc574fbcf360570e1ba3e5663d9f8accb0aaf990425a83574d94ba1fc60fb35a959257a7dcc97a906296f1edf2db20993d9773872661a597c6a3a5b328af9b0fdcc0bb4d5d1714aca07001c187c85cb161220a616770a0a4839172c8081bfe8dadb569f44e18b24e8e0a571c02aff803a446148eaa05ab0df7a77edbb94f2e42cb54a9fe360fe7c60f8e72d87ccd20287ad88d", &(0x7f0000000040)=@udp=r9, 0x1}, 0x20) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 13.602376583s ago: executing program 0 (id=4098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r6 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@gettaction={0x1e8, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xffffff5e, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa1d}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4b5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0xa0}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffffff}}, {0xc, 0x411, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x1e8}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x209}, {0xffffff7e, 0x5461d6e7}]}}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8001002, 0x9, 0x6, 0xb}}) 11.97240891s ago: executing program 4 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r5}, 0x38) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206010100000000000000000a00000005000400020000000900020073798c3000000000000000000300000005000100060000000d000300686173683a6e657400000000"], 0x48}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) 11.698340404s ago: executing program 2 (id=4102): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0xe0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x16, r4, 0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r6, 0x267a4e37}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 11.332667788s ago: executing program 2 (id=4103): r0 = socket$inet(0x2, 0xa, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/4, 0x4}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000740)={@local, @private=0xa010100, 0x0, 0x6}}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@RTM_DELMDB={0x38, 0x55, 0x63837ba875575fe9, 0x70bd25, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x8, {@ip4=@local}}}]}, 0x38}}, 0x4008000) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)=':,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r11 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000440)={r13, @in6={{0xa, 0x4e21, 0x6, @local, 0x6}}}, &(0x7f0000000500)=0x84) syz_usb_control_io(r11, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="40179575eebf5ceb88210b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x30, 0x7a, {0x7a, 0x9, "bbd1ce19b57f2e995fd5310e96f4cf0a09f3139eaac0b30566893a38f402ef76f3150c75762e1e0975333717cc77bb19784b6fda4770b8ec01d13c2d0c2e41a24fa582d01eb58fd2eef9f2c7e07eaf5aac96723ecb0a60f480fc7a1dd351d9dd26bd9a20b0071884e54663f36f5a00"/120}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "6db6155600dcff6661a5aba56d2923d09ee4d3fa5c99fd29cd20a38a9335d1503c0161ac9dfdfae9b8f063cf5afc1fc2a983dc6a17477667fba46ab3306e41e6c6a05725d23881cd41f09c3703b98f2e261c21b1ddb4254ef6ff00fcdf2fea2b15f5c279e7fb23b293898fe4e5bd72317622a0a756b09850"}}, &(0x7f0000000100)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x73, 0xf000, 0xffff, [0xc0f0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x8, 0x3, "44e205bf", "29fd8ea6"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x3, 0x65, 0x8, 0x400, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="400db3000000862b41ac199c0ecc0505cabe05664b30f74d086b19ab510b1cb275534c3316ce4294f3f95059fc59f240bca970d99c7c09d9ebda759d956e8c5f556ab4e6923aa72340b009908fbd98ea6fadbe35a84d07170b2c75bcc9f9ed635d3f7299c62c8fe57563f8b76d7568f52cea877bbf0d5b1b6a91193828858f53fcdc95ddc9e01a03564eae6fa0b1256c7d39f45b154684f66f04b0806a7597bdb6fc67765e546bd4b160f0c8dfc491e8fbc6"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x10, 0x80, [0x780f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a945"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xa8}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="00bed2ba6359"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "a506"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io(r11, 0x0, 0x0) 10.899754245s ago: executing program 6 (id=4104): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="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", 0x480}], 0x1, &(0x7f0000000480)=[{0xf0, 0x11f, 0x1ff, "c808ee372a94707075d17650211de32d9bee9805417644c9d7c8a346b8064d98ae9cfde00f28199dbf6d709d63cc90ab5c03d47875fdf4561bd29c0db1a31024958a5b381200174c4025543f1db906f0fe9ce2cb75f5ee48ace3a76131926d4b00185d88b2e3b391de9a6d2dfedd9a026ab043fe6775fcb4c6ffd5e6bec88e1d484ed34f43924ecceb72df61beec3a8d9ce2ada5027eb59455eb9ab8593ed61835a3c2d31fd5156186af8a1d619cc542532e3a9738bd00a23aac230366fbe31a1fc87acf755067d1d440c099c4e6c65543b3eac82eede7c4a1152fec0f65"}], 0xf0}}], 0x1, 0x4000000) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 9.521800423s ago: executing program 5 (id=4105): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x80806, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)={0x4}, 0x8) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 9.08761845s ago: executing program 0 (id=4106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf2ff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.790912583s ago: executing program 6 (id=4107): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x1, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000000), 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, r7, 0x5, 0x6, 0xa, 0x8, {0xa, 0x7, 0x8, 0x476b, 0x476b, 0x6, 0x0, 0x6, 0x82, 0x2, 0x400, 0x7, 0x6, 0x6a, "ea82c1605e8ace9d088195d6f06e8b71e911fbefe9c0c9311c5d8ce2a6251314"}}) r9 = socket$netlink(0x10, 0x3, 0xa) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r11, 0x200004) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) dup(0xffffffffffffffff) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688a2", 0x11) sendfile(r10, r11, 0x0, 0x80001d00c0d1) 8.719334626s ago: executing program 4 (id=4108): socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYBLOB="b88b1a353b338d075f6b4c0f16c1e68d05654574f695c63f4ce81f38d033377be0eaa363f51610fd994c5f74ff26024c35d894d745bd14bac63d8e0fb0c9b70d0fa54d326f4ba94ddf28387b4767ba9887c15c172d084328d68bd5829c88791aee99a725608371f964003662e66f3c4c8d26cc7e3b0a130674ae897e5e9f0e77bf92782eee2430f89d8e1ddafcab9af5f736491c2cb5fa9674ac39a5d83694ab618819cf2f4b3269e869f8f116f4529115f1ed0066b89e5c2242e1e1a3e3220d", @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000177b7bff936f75ebff9fd16400ffffffffffffffff0fde00004c114955afe30174251f48b46d79b3e562f6bc10f63d5d591d01b0127a82d7491c01698e6ebd48e1cd86a85ba761c043b3e9d18dbea140c61db30ec78266"], 0xb8}}, 0x4004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000780)={0x0, 0x45, @pic={0x81, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a00010071"], 0xb0}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x2, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x48010) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8080) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x401, {0xffffffffffffffff}, {0xee01}, 0x401, 0x3ff}) socket$netlink(0x10, 0x3, 0x0) 8.548422994s ago: executing program 0 (id=4109): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a40)) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x7, 0x0) ioctl$sock_ifreq(r8, 0x8948, &(0x7f0000000140)={'vlan1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711}}) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000010000), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010080)=ANY=[@ANYRES16=0x0, @ANYBLOB="cb9844066ad45bb5418b440cccbb89e262c32fa8040076771373b0f0807ceabe2d3698be821b7b43e801c0b128a086a62d44b608683bb4d9df63800d852445d73f6d19723dec8ab20000000000000023e9f216f436959e4abc479eec5ca9bb2990da65d8db70217c433f9d5a539a0cd992ae91403ed0e83f1f494525d1ee0a"], 0x18}, 0x1, 0x0, 0x0, 0x800808d}, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.330573445s ago: executing program 2 (id=4110): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) syz_usb_disconnect(r0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 6.336491803s ago: executing program 5 (id=4111): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2d}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200f7ffff7f000029"], 0x18}, 0x40c0) 6.010238286s ago: executing program 5 (id=4112): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) (fail_nth: 2) 5.874511547s ago: executing program 6 (id=4113): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)={0x3, 'veth0_to_team\x00', {}, 0x1}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) ioctl$FIONCLEX(r2, 0x5450) 5.374022686s ago: executing program 5 (id=4114): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000240)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000800) (async) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2, &(0x7f00000002c0)=""/23, 0x17}, 0x7fff}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/27, 0x1b}], 0x1, &(0x7f0000000500)=""/113, 0x71}, 0xce}], 0x2, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x0, 0x0}) (async) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) connect$unix(r2, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) (async) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) (async) madvise(&(0x7f00004d9000/0x4000)=nil, 0x4000, 0x3) (async) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.081708123s ago: executing program 0 (id=4115): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0xffffffff, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}], 0x2}}], 0x1, 0xc0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf24010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r5, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="2000508011000a004abee339084eeef16f4cbd2af480599ec8f6d30000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 5.045239702s ago: executing program 4 (id=4116): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000011140103400000000000000008004b"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r4}, 0xc) r5 = socket$inet_sctp(0x2, 0x4, 0x84) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x50, r5, 0x500ac000) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.010739271s ago: executing program 2 (id=4117): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[], 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073797a300000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002"], 0xf8}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="cbcad215ed370ab2b079783a703926e455", 0x11}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="04000000050000000300000000000000000000000000000000000800"], 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000007c0)={0x6, r1, 'id1\x00'}) 3.503285923s ago: executing program 4 (id=4118): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x75c6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x400, 0x2, 0x2, "330a8ecb63bba5a929931d9b1c2797ddd610356182a1feaabffe625f8d66476e", 0x31364d59}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, r5, 0x39}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27}, 0xfffffffffffffdad}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0xc0a85320, &(0x7f00000000c0)={0x1080}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xf4}}]}, 0x38}}, 0x1) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8, 0x5, 0xa}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xd}}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4) 2.2369575s ago: executing program 5 (id=4119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {0x7, 0x328, 0x0, 0xfffffffffffffffd, 0x6, 0x6, 0x13, 0x8}, {0x4, 0xffffffffc, 0x100, 0x200000000020}, 0xfffffff7, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x2b}, 0x2, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0xfffffffd, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7000000, @empty}, 0x1c) 1.838467266s ago: executing program 5 (id=4120): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffa}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x2000000008, 0xfffffffc, 0x3}, 0x0) r4 = socket(0x8, 0x3, 0x3) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket(0x10, 0x80000, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000000)) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000280)="bcba7296d8596d3007dc308cbfd827d86b228d24b3442d0df0ac7cc6ce4f9a425ab7fc574fbcf360570e1ba3e5663d9f8accb0aaf990425a83574d94ba1fc60fb35a959257a7dcc97a906296f1edf2db20993d9773872661a597c6a3a5b328af9b0fdcc0bb4d5d1714aca07001c187c85cb161220a616770a0a4839172c8081bfe8dadb569f44e18b24e8e0a571c02aff803a446148eaa05ab0df7a77edbb94f2e42cb54a9fe360fe7c60f8e72d87ccd20287ad88d", &(0x7f0000000040)=@udp=r9, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 1.744219074s ago: executing program 0 (id=4121): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x3, 0xeaddb0ce1851e778, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x600000000000000) 1.125172732s ago: executing program 0 (id=4122): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x1e) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x3b}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_usb_connect$uac1(0x5, 0x8d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027b0003010280080904000000010100000a24012505040201020924030502030403090a240701050004ca78b20924030204030504060904010000010200000904010101010200000905010940000e0f0707250180100000090402000001020000090402010101020000090582091000d4080107250182060700c8225adde3d5b60a33eaf5f72d4753d78ce1133fb2c2190b9a6c56cb828ca9aa6f74f74172c3a310c219507c38d910e93a1254a4c4612bb16d69e0335592702bbffb478cc18366a8b8985c9a42d391785773ea"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xc, 0xa0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "49cca12964e1"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x4e7d, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x14}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x4fc, 0xfffc, 0x0, 0x5, 0xfff, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0x4, 0x5, 0x53}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf8, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0x9, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x80, 0x51, 0x7, 0x40, 0x8}, 0xf1, &(0x7f0000000500)={0x5, 0xf, 0xf1, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x17ff, 0xf, 0x5, [0x30, 0xc0, 0xc000, 0xc0, 0xff0f, 0xe04f]}, @generic={0xb3, 0x10, 0x2, "4bb2ddc283cbbc20e8bf6467af0dc625eba9b3c961d14e2f3c49a99b2f3e04854b0fc0b24c73fe7f3e9063005dde8de0a084d50f32a97e07d7d595d5ee1e63d724fdf9504371432307573e4e2adb7f7886eeeaeebcc14f1412013eedc8f5804581f06fe55f814c0d34ab98ecca9d5eae8932acbff78a3325d718daa0abe6ebe636b1f3dedc051ce1d96a269abd8b27890f96c593db8d85ee4cb7a985aa935fe0d36513ddbb4dff663883430764f7decb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x77, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0xb}]}, 0x1, [{0x91, &(0x7f0000000600)=ANY=[@ANYBLOB="9103556de121ae3ea03a86b0c79c6d3c08f9cb6a34bab4672c866925d4c75a0501d9fb91cb2ef60fd6f9f71e471d280200000000000000f12faef50b140aca7eed832c6dedfbd1909e6b9de906d64186faf1fdef8e64dc089c524a4153ab73d54a18d746b434815aa5982946fab162f5614888ca732be8dfbbd1e51c47b4803fb30ec55b41fe85716e436f4480ba4e7491"]}]}) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) waitid(0x0, r8, &(0x7f0000000380), 0x2, 0x0) 798.510935ms ago: executing program 6 (id=4123): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000002c0), 0x1, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000000), 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, r7, 0x5, 0x6, 0xa, 0x8, {0xa, 0x7, 0x8, 0x476b, 0x476b, 0x6, 0x0, 0x6, 0x82, 0x2, 0x400, 0x7, 0x6, 0x6a, "ea82c1605e8ace9d088195d6f06e8b71e911fbefe9c0c9311c5d8ce2a6251314"}}) r9 = socket$netlink(0x10, 0x3, 0xa) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r11, 0x200004) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) dup(0xffffffffffffffff) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688a2", 0x11) sendfile(r10, r11, 0x0, 0x80001d00c0d1) 443.942001ms ago: executing program 2 (id=4124): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000106b1d010040000102030109025f0003010030050904000000010100000a2401d2000802010209040100000102edff08040101010102000009050109ff030706050725018205fdff09040200000102000009040201010102000009058209ff030805080725010508e8607c85ac3396bf3066fa186ca48fd693e807b927297b71d8ebc8f28898abf80debcdbfcd1dff64e823a522b73589ee2e149546ae02c4962b4ba5a70efed698386f6f8b18c746e8c4a978fbd0cee9f89dd34c0730b1ec5fa82646dfdc60de4cf331903e164d92c9f34b60921ec6e3283b1adf91cd90aa2ce5f23949488743a6e10c691b230935dbb7fd0049eda6ab"], 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000"], 0xc0}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6deffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893eebfc606ada0600ec82e63da23f6fe97d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000040), 0xcfa, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0xfffffff5, 0x40]}, {0x80000000, 0x0, 0x0, [0x404, 0x10000000]}, 0x2, [0x5, 0x200000]}) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f00000004c0)="e0"}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='1cpu'], 0x5) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000080)='Q\x9bo\xe1O8\n|Q@\a\x00\x00', 0x0) 254.780536ms ago: executing program 4 (id=4125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}}], 0x1, 0x4004804) 104.136333ms ago: executing program 2 (id=4126): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a40)) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x7, 0x0) ioctl$sock_ifreq(r8, 0x8948, &(0x7f0000000140)={'vlan1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711}}) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000010000), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010080)=ANY=[@ANYRES16=0x0, @ANYBLOB="cb9844066ad45bb5418b440cccbb89e262c32fa8040076771373b0f0807ceabe2d3698be821b7b43e801c0b128a086a62d44b608683bb4d9df63800d852445d73f6d19723dec8ab20000000000000023e9f216f436959e4abc479eec5ca9bb2990da65d8db70217c433f9d5a539a0cd992ae91403ed0e83f1f494525d1ee0a"], 0x18}, 0x1, 0x0, 0x0, 0x800808d}, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 4 (id=4127): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000080)={0x0}}, 0x11) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100), 0x79}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/105, 0x69}, 0x91}], 0x1, 0x102, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)='blake2b-160\x00', r3) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={'blake2b-160\x00'}}) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.259735][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.300567][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1384.324721][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.384883][ T10] usb 5-1: config 0 descriptor?? [ 1384.403490][ T10] hub 5-1:0.0: USB hub found [ 1384.618573][ T10] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 1384.691469][T20975] input: syz0 as /devices/virtual/input/input111 [ 1384.833384][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1384.840103][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1384.886209][ T10] usb 5-1: USB disconnect, device number 49 [ 1386.615269][T12307] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1386.785492][T12307] usb 6-1: Using ep0 maxpacket: 16 [ 1389.434445][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1389.464298][T18406] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1389.521980][T12307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1389.530725][T12307] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1389.571620][T12307] usb 6-1: can't read configurations, error -71 [ 1389.608064][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1389.716761][T18406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.748084][T18406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.758609][T18406] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.775561][T18406] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.793433][T18406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.054204][T18406] usb 4-1: config 0 descriptor?? [ 1390.215795][T21024] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1390.576153][T18406] plantronics 0003:047F:FFFF.004D: reserved main item tag 0xd [ 1390.685186][T18406] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1390.843048][T18406] usb 4-1: USB disconnect, device number 31 [ 1390.884214][T12307] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1391.046406][T12307] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1391.057865][T12307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1391.092749][T12307] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1391.108690][T12307] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1391.122520][T21027] fido_id[21027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1391.143912][T12307] usb 5-1: Product: syz [ 1391.153945][T12307] usb 5-1: Manufacturer: syz [ 1391.172192][T12307] usb 5-1: SerialNumber: syz [ 1391.250874][T12307] usb 5-1: config 0 descriptor?? [ 1391.507334][T12307] usb 5-1: selecting invalid altsetting 0 [ 1391.677209][T12307] usb 5-1: USB disconnect, device number 50 [ 1391.910372][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.822862][ T5920] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1393.336998][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1393.360185][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1393.386599][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1393.413534][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1393.502893][T21048] input: syz0 as /devices/virtual/input/input113 [ 1393.694091][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1395.034040][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1395.089354][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1395.188492][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.201545][ T5920] usb usb3-port1: attempt power cycle [ 1395.207640][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.208087][ T10] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 1395.228227][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.379749][ T10] usb 1-1: chopping to 0 config(s) [ 1395.492618][ T10] usb 1-1: can't read configurations, error -32 [ 1395.629672][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.644322][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.654887][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1395.992176][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1396.013999][ T5953] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1396.645293][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 1399.647640][T21083] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1399.714041][T21083] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1400.684435][T18447] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1400.894617][T18447] usb 1-1: device descriptor read/64, error -71 [ 1400.925151][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1400.954702][ T5953] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1401.013991][ T5953] usb 6-1: can't read configurations, error -71 [ 1401.133991][T18447] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1401.315953][T18447] usb 1-1: device descriptor read/64, error -71 [ 1401.430347][T18447] usb usb1-port1: attempt power cycle [ 1401.544579][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1401.715718][ T10] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 1401.746347][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1401.758279][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.764017][T19153] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1401.767263][ T10] usb 5-1: Product: syz [ 1401.778667][T18447] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1401.787910][ T10] usb 5-1: Manufacturer: syz [ 1401.833642][T18447] usb 1-1: device descriptor read/8, error -71 [ 1401.844253][ T10] usb 5-1: SerialNumber: syz [ 1401.870205][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1401.909433][ T9603] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1401.928157][T19153] usb 3-1: config 0 has no interfaces? [ 1401.936508][T19153] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1401.951393][T19153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.996418][T19153] usb 3-1: Product: syz [ 1402.011021][T19153] usb 3-1: Manufacturer: syz [ 1402.028288][T19153] usb 3-1: SerialNumber: syz [ 1402.074542][T18447] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1402.098738][T19153] usb 3-1: config 0 descriptor?? [ 1402.107861][T18447] usb 1-1: device descriptor read/8, error -71 [ 1402.160999][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.171034][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.183158][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.234547][T18447] usb usb1-port1: unable to enumerate USB device [ 1402.351558][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1402.381924][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.391431][ T30] audit: type=1326 audit(1754589873.528:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.397236][T19153] usb 5-1: USB disconnect, device number 51 [ 1402.420151][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.426309][ T30] audit: type=1326 audit(1754589873.538:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.449238][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1402.460848][ T30] audit: type=1326 audit(1754589873.538:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.486835][T21113] netlink: 5652 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1402.517436][ T30] audit: type=1326 audit(1754589873.538:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.555618][T12307] usb 3-1: USB disconnect, device number 25 [ 1402.595912][ T30] audit: type=1326 audit(1754589873.538:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.733328][ T30] audit: type=1326 audit(1754589873.538:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.802418][ T30] audit: type=1326 audit(1754589873.538:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.872295][ T30] audit: type=1326 audit(1754589873.538:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1402.966723][ T30] audit: type=1326 audit(1754589873.538:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1403.042895][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1403.130158][ T30] audit: type=1326 audit(1754589873.538:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21096 comm="syz.4.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1403.176819][ T9603] usb 5-1: Service connection timeout for: 256 [ 1403.219162][ T9603] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1403.244827][ T9603] ath9k_htc: Failed to initialize the device [ 1403.280582][T19153] usb 5-1: ath9k_htc: USB layer deinitialized [ 1403.396789][T21124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.508720][T21126] vxcan3: entered promiscuous mode [ 1403.508746][T21126] vxcan3: entered allmulticast mode [ 1404.155750][ T9603] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1404.164821][ T5953] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1404.334059][ T9603] usb 6-1: Using ep0 maxpacket: 32 [ 1404.340779][ T5953] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1404.354372][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.366626][ T9603] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1404.374531][ T9603] usb 6-1: can't read configurations, error -61 [ 1404.383659][ T5953] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1404.397963][ T5953] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1404.411631][ T5953] usb 3-1: Manufacturer: syz [ 1404.491712][ T5953] usb 3-1: config 0 descriptor?? [ 1404.515032][ T9603] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1404.614257][ T5953] rc_core: IR keymap rc-hauppauge not found [ 1404.635387][ T5953] Registered IR keymap rc-empty [ 1404.645928][ T5953] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1404.677366][ T5953] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input114 [ 1404.694239][ T9603] usb 6-1: Using ep0 maxpacket: 32 [ 1404.706575][ T9603] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1404.717245][ T9603] usb 6-1: can't read configurations, error -61 [ 1404.738748][ T9603] usb usb6-port1: attempt power cycle [ 1404.753717][T21139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.062415][T21139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.264031][ T9603] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1405.327938][ T9603] usb 6-1: Using ep0 maxpacket: 32 [ 1405.474638][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 187 [ 1405.504521][ T9603] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1405.514024][ T9603] usb 6-1: can't read configurations, error -61 [ 1405.690095][T19153] usb 3-1: USB disconnect, device number 26 [ 1405.734387][ T9603] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1405.775020][ T9603] usb 6-1: Using ep0 maxpacket: 32 [ 1405.786429][ T9603] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1405.799954][ T9603] usb 6-1: can't read configurations, error -61 [ 1405.854177][ T9603] usb usb6-port1: unable to enumerate USB device [ 1406.816151][T21166] program syz.0.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.923949][T19153] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1407.064115][ T9603] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1407.103286][T19153] usb 5-1: config 0 has no interfaces? [ 1407.112102][T19153] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1407.134263][T19153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.160531][T19153] usb 5-1: Product: syz [ 1407.202554][T19153] usb 5-1: Manufacturer: syz [ 1407.214398][T19153] usb 5-1: SerialNumber: syz [ 1407.235024][ T9603] usb 1-1: Using ep0 maxpacket: 8 [ 1407.241499][T19153] usb 5-1: config 0 descriptor?? [ 1407.243284][ T9603] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1407.294064][ T9603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.350190][ T9603] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1407.374611][ T9603] pvrusb2: ********** [ 1407.378746][ T9603] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1407.418265][ T9603] pvrusb2: Important functionality might not be entirely working. [ 1407.434314][ T9603] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1407.464374][ T9603] pvrusb2: ********** [ 1407.504344][T21160] __nla_validate_parse: 5 callbacks suppressed [ 1407.504364][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3728'. [ 1407.564063][ T2345] pvrusb2: Invalid write control endpoint [ 1407.570052][ T9603] usb 1-1: USB disconnect, device number 26 [ 1407.634762][T21181] netlink: 5652 bytes leftover after parsing attributes in process `syz.4.3728'. [ 1407.683080][ T5953] usb 5-1: USB disconnect, device number 52 [ 1407.778933][ T2345] pvrusb2: Invalid write control endpoint [ 1407.807142][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1407.846585][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1407.884200][T18447] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1407.913264][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1407.948477][ T2345] pvrusb2: Device being rendered inoperable [ 1407.964240][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1407.981730][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1408.009301][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1408.068000][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1408.095971][T18447] usb 3-1: Using ep0 maxpacket: 16 [ 1408.172405][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1408.199664][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 1409.006140][T21179] FAULT_INJECTION: forcing a failure. [ 1409.006140][T21179] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.068668][T21179] CPU: 1 UID: 0 PID: 21179 Comm: syz.3.3734 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1409.068699][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1409.068714][T21179] Call Trace: [ 1409.068723][T21179] [ 1409.068732][T21179] dump_stack_lvl+0x189/0x250 [ 1409.068766][T21179] ? __pfx____ratelimit+0x10/0x10 [ 1409.068795][T21179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.068821][T21179] ? __pfx__printk+0x10/0x10 [ 1409.068858][T21179] ? __pfx___might_resched+0x10/0x10 [ 1409.068885][T21179] should_fail_ex+0x414/0x560 [ 1409.068914][T21179] should_failslab+0xa8/0x100 [ 1409.068950][T21179] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1409.068981][T21179] ? __alloc_skb+0x112/0x2d0 [ 1409.069015][T21179] __alloc_skb+0x112/0x2d0 [ 1409.069050][T21179] netlink_sendmsg+0x5c6/0xb30 [ 1409.069090][T21179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.069122][T21179] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1409.069155][T21179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1409.069178][T21179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.069208][T21179] __sock_sendmsg+0x219/0x270 [ 1409.069237][T21179] ____sys_sendmsg+0x505/0x830 [ 1409.069276][T21179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1409.069326][T21179] ? import_iovec+0x74/0xa0 [ 1409.069351][T21179] ___sys_sendmsg+0x21f/0x2a0 [ 1409.069387][T21179] ? __pfx____sys_sendmsg+0x10/0x10 [ 1409.069457][T21179] ? __fget_files+0x2a/0x420 [ 1409.069490][T21179] ? __fget_files+0x3a0/0x420 [ 1409.069534][T21179] __x64_sys_sendmsg+0x19b/0x260 [ 1409.069573][T21179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1409.069616][T21179] ? __pfx_ksys_write+0x10/0x10 [ 1409.069644][T21179] ? rcu_is_watching+0x15/0xb0 [ 1409.069671][T21179] ? do_syscall_64+0xbe/0x3b0 [ 1409.069704][T21179] do_syscall_64+0xfa/0x3b0 [ 1409.069730][T21179] ? lockdep_hardirqs_on+0x9c/0x150 [ 1409.069757][T21179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.069780][T21179] ? clear_bhb_loop+0x60/0xb0 [ 1409.069807][T21179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.069829][T21179] RIP: 0033:0x7f5c6dd8ebe9 [ 1409.069849][T21179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.069868][T21179] RSP: 002b:00007f5c6ebb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.069890][T21179] RAX: ffffffffffffffda RBX: 00007f5c6dfb6090 RCX: 00007f5c6dd8ebe9 [ 1409.069925][T21179] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000012 [ 1409.069939][T21179] RBP: 00007f5c6ebb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.069952][T21179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.069965][T21179] R13: 00007f5c6dfb6128 R14: 00007f5c6dfb6090 R15: 00007f5c6e0dfa28 [ 1409.069999][T21179] [ 1410.463996][ T5949] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1410.720688][T18447] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1410.786279][T18447] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1410.816291][T21208] tipc: Started in network mode [ 1410.821206][T21208] tipc: Node identity 2, cluster identity 2 [ 1410.837413][T21208] tipc: Node number set to 2 [ 1410.856818][T18447] usb 3-1: can't read configurations, error -71 [ 1410.906166][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.936512][ T5949] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1410.983875][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.021553][ T5949] usb 6-1: config 0 descriptor?? [ 1411.026257][T21210] input: syz1 as /devices/virtual/input/input115 [ 1411.080876][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 1411.105087][T21215] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1411.302999][T21214] bridge1: entered promiscuous mode [ 1411.517160][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1413.285345][T21239] netlink: 'syz.0.3747': attribute type 5 has an invalid length. [ 1413.520669][ T5949] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1413.532910][ T5949] pwc: recv_control_msg error -71 req 04 val 1000 [ 1413.568442][ T5949] pwc: recv_control_msg error -71 req 04 val 1300 [ 1413.746971][ T5949] pwc: recv_control_msg error -71 req 04 val 1400 [ 1413.778615][ T5949] pwc: recv_control_msg error -71 req 02 val 2000 [ 1413.805802][ T5949] pwc: recv_control_msg error -71 req 02 val 2100 [ 1413.839970][ T5949] pwc: recv_control_msg error -71 req 04 val 1500 [ 1413.878504][ T5949] pwc: recv_control_msg error -71 req 02 val 2500 [ 1413.909982][ T5949] pwc: recv_control_msg error -71 req 02 val 2400 [ 1413.933719][ T5949] pwc: recv_control_msg error -71 req 02 val 2600 [ 1413.966575][ T5949] pwc: recv_control_msg error -71 req 02 val 2900 [ 1414.002613][ T5949] pwc: recv_control_msg error -71 req 02 val 2800 [ 1414.028584][ T5949] pwc: recv_control_msg error -71 req 04 val 1100 [ 1414.180016][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 1414.222285][ T5949] pwc: Registered as video103. [ 1414.275467][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input116 [ 1414.467151][ T5949] usb 6-1: USB disconnect, device number 89 [ 1414.485808][T21243] binder: binder_mmap: 21242 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 1415.640526][T21270] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3755'. [ 1415.774697][T21270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1417.724388][T18447] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1418.239897][T18447] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.272322][T18447] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1418.349166][T18447] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1418.398449][T18447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1418.450983][T18447] usb 1-1: SerialNumber: syz [ 1418.584812][T21299] netlink: 'syz.4.3761': attribute type 5 has an invalid length. [ 1418.703057][T18447] usb 1-1: 0:2 : does not exist [ 1418.708580][T18447] usb 1-1: unit 5: unexpected type 0x09 [ 1418.770735][T18447] usb 1-1: USB disconnect, device number 27 [ 1418.914859][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.160124][T21320] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1421.256397][T21320] team0: Port device batadv6 added [ 1421.341994][T21321] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1422.596426][T21341] input: syz0 as /devices/virtual/input/input118 [ 1423.219267][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.230853][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.857300][T21349] FAULT_INJECTION: forcing a failure. [ 1423.857300][T21349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1423.920317][T21349] CPU: 1 UID: 0 PID: 21349 Comm: syz.2.3774 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1423.920339][T21349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1423.920349][T21349] Call Trace: [ 1423.920355][T21349] [ 1423.920363][T21349] dump_stack_lvl+0x189/0x250 [ 1423.920389][T21349] ? __pfx____ratelimit+0x10/0x10 [ 1423.920409][T21349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.920428][T21349] ? __pfx__printk+0x10/0x10 [ 1423.920450][T21349] ? __might_fault+0xb0/0x130 [ 1423.920480][T21349] should_fail_ex+0x414/0x560 [ 1423.920502][T21349] _copy_from_user+0x2d/0xb0 [ 1423.920517][T21349] ___sys_sendmsg+0x158/0x2a0 [ 1423.920548][T21349] ? __pfx____sys_sendmsg+0x10/0x10 [ 1423.920596][T21349] ? __fget_files+0x2a/0x420 [ 1423.920619][T21349] ? __fget_files+0x3a0/0x420 [ 1423.920650][T21349] __x64_sys_sendmsg+0x19b/0x260 [ 1423.920675][T21349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1423.920705][T21349] ? __pfx_ksys_write+0x10/0x10 [ 1423.920725][T21349] ? rcu_is_watching+0x15/0xb0 [ 1423.920744][T21349] ? do_syscall_64+0xbe/0x3b0 [ 1423.920767][T21349] do_syscall_64+0xfa/0x3b0 [ 1423.920788][T21349] ? lockdep_hardirqs_on+0x9c/0x150 [ 1423.920806][T21349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.920822][T21349] ? clear_bhb_loop+0x60/0xb0 [ 1423.920841][T21349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.920857][T21349] RIP: 0033:0x7f7240d8ebe9 [ 1423.920871][T21349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.920886][T21349] RSP: 002b:00007f7241baa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.920903][T21349] RAX: ffffffffffffffda RBX: 00007f7240fb5fa0 RCX: 00007f7240d8ebe9 [ 1423.920914][T21349] RDX: 0000000024000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1423.920924][T21349] RBP: 00007f7241baa090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.920934][T21349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.920943][T21349] R13: 00007f7240fb6038 R14: 00007f7240fb5fa0 R15: 00007f72410dfa28 [ 1423.920966][T21349] [ 1425.088960][T21357] libceph: resolve '4..' (ret=-3): failed [ 1425.398586][T21363] ipip0: entered promiscuous mode [ 1425.497229][ T9603] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1425.801622][ T9603] usb 1-1: Using ep0 maxpacket: 16 [ 1425.839894][ T9603] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.872720][ T9603] usb 1-1: config 0 has no interface number 0 [ 1425.900996][ T9603] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.969459][ T9603] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.020663][ T9603] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1426.060268][ T9603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.065590][ T5920] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1426.145441][ T9603] usb 1-1: config 0 descriptor?? [ 1426.233322][T21366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.242411][T21366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.258413][T21366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.267521][T21366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.296271][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1426.376164][ T5920] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1426.420279][ T5920] usb 6-1: can't read configurations, error -71 [ 1426.804382][ T9603] uclogic 0003:28BD:0071.004E: pen parameters not found [ 1426.857895][ T9603] uclogic 0003:28BD:0071.004E: interface is invalid, ignoring [ 1427.049038][T21374] netlink: 'syz.5.3782': attribute type 1 has an invalid length. [ 1428.407369][T10098] macsec0: left allmulticast mode [ 1428.412531][T10098] veth1_macvtap: left allmulticast mode [ 1428.429621][T10098] macsec0: left promiscuous mode [ 1428.468487][T10098] bridge0: port 4(macsec0) entered disabled state [ 1428.504353][T10098] dummy0: left allmulticast mode [ 1428.528149][T10098] bridge0: port 3(dummy0) entered disabled state [ 1428.726313][T10098] bridge_slave_1: left allmulticast mode [ 1428.742284][T10098] bridge_slave_1: left promiscuous mode [ 1428.793525][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.840007][T12307] usb 1-1: USB disconnect, device number 28 [ 1428.882741][T10098] : left allmulticast mode [ 1428.918167][T10098] : left promiscuous mode [ 1428.950414][T10098] bridge0: port 1() entered disabled state [ 1430.384000][T21398] Bluetooth: hci5: command 0x0406 tx timeout [ 1430.808112][T21414] input: syz1 as /devices/virtual/input/input119 [ 1431.587364][T21398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.597706][T21398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.610388][T21398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.619594][T21398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.628073][T21398] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1432.125950][T12307] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1432.364041][T12307] usb 6-1: Using ep0 maxpacket: 16 [ 1432.372781][T12307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1432.502755][T12307] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1432.564911][T12307] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1432.582477][T12307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.594234][T12307] usb 6-1: Product: syz [ 1432.598476][T12307] usb 6-1: Manufacturer: syz [ 1432.613113][T12307] usb 6-1: SerialNumber: syz [ 1432.641824][T12307] usb 6-1: config 0 descriptor?? [ 1432.659794][T12307] mcba_usb 6-1:0.0: Can't find endpoints [ 1432.766137][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.797208][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.900361][T21428] netlink: 'syz.5.3792': attribute type 5 has an invalid length. [ 1432.911012][T10098] bond0 (unregistering): Released all slaves [ 1433.695310][T10098] bond1 (unregistering): Released all slaves [ 1433.735272][T17706] Bluetooth: hci3: command tx timeout [ 1433.833547][T10098] bond2 (unregistering): Released all slaves [ 1434.516337][T21428] ip6erspan0: entered promiscuous mode [ 1434.526975][T21429] bridge0: port 3(macsec0) entered blocking state [ 1434.533656][T21429] bridge0: port 3(macsec0) entered disabled state [ 1434.544199][T21429] macsec0: entered allmulticast mode [ 1434.557295][T21429] veth1_macvtap: entered allmulticast mode [ 1434.618156][T21429] macsec0: entered promiscuous mode [ 1434.683572][T21429] bridge0: port 3(macsec0) entered blocking state [ 1434.690306][T21429] bridge0: port 3(macsec0) entered forwarding state [ 1434.742090][T10098] tipc: Left network mode [ 1434.898501][T21446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1435.624462][ T5949] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1435.795645][ T5949] usb 1-1: config 0 has no interfaces? [ 1435.811735][ T5949] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1435.814321][T17706] Bluetooth: hci3: command tx timeout [ 1435.844288][T12307] usb 6-1: USB disconnect, device number 92 [ 1435.927815][T21458] input: syz0 as /devices/virtual/input/input120 [ 1435.948897][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.100695][ T5949] usb 1-1: config 0 descriptor?? [ 1436.236317][T21464] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1436.725909][T10098] hsr_slave_0: left promiscuous mode [ 1436.758969][T10098] hsr_slave_1: left promiscuous mode [ 1436.772799][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.791038][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.851199][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.121058][T10098] veth0_macvtap: left promiscuous mode [ 1437.135839][T10098] veth1_vlan: left promiscuous mode [ 1437.834038][ T9603] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1437.910021][T17706] Bluetooth: hci3: command tx timeout [ 1437.983952][ T9603] usb 5-1: Using ep0 maxpacket: 16 [ 1438.046571][T10098] team0 (unregistering): Port device batadv7 removed [ 1438.134355][T10098] team0 (unregistering): Port device batadv6 removed [ 1438.334199][T10098] team0 (unregistering): Port device batadv5 removed [ 1438.412237][ T5949] usb 1-1: USB disconnect, device number 29 [ 1438.472694][T10098] team0 (unregistering): Port device batadv4 removed [ 1438.593973][T10098] team0 (unregistering): Port device batadv3 removed [ 1438.715897][T10098] team0 (unregistering): Port device batadv2 removed [ 1438.869851][ T5949] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1439.039819][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.059605][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1439.067786][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.087556][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.097440][ T5949] usb 1-1: not running at top speed; connect to a high speed hub [ 1439.139574][ T5949] usb 1-1: config 7 has an invalid interface number: 205 but max is 0 [ 1439.192025][ T5949] usb 1-1: config 7 has no interface number 0 [ 1439.234105][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.247491][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.264751][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.284486][ T5949] usb 1-1: config 7 interface 205 has no altsetting 0 [ 1439.369435][ T5949] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=30.fb [ 1439.405101][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.472581][ T5949] usb 1-1: Product: syz [ 1439.491265][ T5949] usb 1-1: Manufacturer: syz [ 1439.502282][ T5949] usb 1-1: SerialNumber: syz [ 1439.772908][T21482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.794824][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.822961][T21482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.845535][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.929727][T21486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1439.974688][T17706] Bluetooth: hci3: command tx timeout [ 1441.135146][T10098] team0 (unregistering): Port device team_slave_1 removed [ 1441.389439][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1441.389459][ T30] audit: type=1326 audit(1754589912.538:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.423096][ T30] audit: type=1326 audit(1754589912.568:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.512978][ T30] audit: type=1326 audit(1754589912.598:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.534176][ T5949] usb 1-1: USB disconnect, device number 30 [ 1441.627444][ T30] audit: type=1326 audit(1754589912.598:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.705246][ T30] audit: type=1326 audit(1754589912.598:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.774027][ T30] audit: type=1326 audit(1754589912.628:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.828317][T10098] team0 (unregistering): Port device team_slave_0 removed [ 1441.859060][ T30] audit: type=1326 audit(1754589912.628:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.885381][ T30] audit: type=1326 audit(1754589912.628:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.909155][ T30] audit: type=1326 audit(1754589912.628:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1441.961585][ T30] audit: type=1326 audit(1754589912.628:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7240d8ebe9 code=0x7ffc0000 [ 1442.344106][T21504] kAFS: unparsable volume name [ 1442.365232][T21504] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 1442.521600][T21509] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1443.017767][ T9603] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1443.053428][ T9603] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 1443.094695][ T9603] usb 5-1: chopping to 0 config(s) [ 1443.122391][ T9603] usb 5-1: can't read configurations, error -32 [ 1443.263960][ T9603] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1443.414073][ T9603] usb 5-1: device descriptor read/64, error -32 [ 1443.546852][ T9603] usb usb5-port1: attempt power cycle [ 1443.933978][ T9603] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1443.954262][ T9603] usb 5-1: device descriptor read/8, error -32 [ 1443.998481][T21427] chnl_net:caif_netlink_parms(): no params data found [ 1444.028011][T21504] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1444.195206][ T9603] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1444.327755][T21520] trusted_key: encrypted_key: insufficient parameters specified [ 1444.443914][ T9603] usb 5-1: device not accepting address 56, error -71 [ 1444.470136][ T9603] usb usb5-port1: unable to enumerate USB device [ 1444.725324][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1444.810752][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1444.838334][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1444.902027][T21427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.001284][T21427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.024103][ T5920] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1445.073393][T21427] bridge_slave_0: entered allmulticast mode [ 1445.097769][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.113022][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.118437][T21427] bridge_slave_0: entered promiscuous mode [ 1445.142690][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.280451][T21427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.288890][T21427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.406791][T21427] bridge_slave_1: entered allmulticast mode [ 1445.443991][ T9603] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1445.504972][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.519279][T21427] bridge_slave_1: entered promiscuous mode [ 1445.525653][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.545195][T21553] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1445.580123][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1445.596062][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 1445.684122][ T9603] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.756512][ T9603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1445.785808][ T9603] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1445.806037][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.824262][ T9603] usb 3-1: Product: syz [ 1445.831919][ T9603] usb 3-1: Manufacturer: syz [ 1445.891124][T21427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.929566][T21427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.964813][ T9603] usb 3-1: SerialNumber: syz [ 1446.015222][T10098] IPVS: stop unused estimator thread 0... [ 1446.103987][ T5949] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1446.176417][T21427] team0: Port device team_slave_0 added [ 1446.213741][ T9603] usb 3-1: 0:2 : does not exist [ 1446.224497][ T9603] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1446.251534][ T9603] usb 3-1: USB disconnect, device number 29 [ 1446.254085][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 1446.286128][T21427] team0: Port device team_slave_1 added [ 1446.396888][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1446.442904][T21427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.464211][T21427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.578839][T21427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.620707][T21427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.652592][T21427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.678581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.760078][T21427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.044623][T21427] hsr_slave_0: entered promiscuous mode [ 1447.087412][T21427] hsr_slave_1: entered promiscuous mode [ 1448.898720][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1448.910716][T21427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1448.977547][ T5949] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1449.003443][ T5949] usb 1-1: can't read configurations, error -71 [ 1449.085498][T21427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.170335][T21427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1449.302936][T21427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1449.769955][T21585] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1449.918319][T21585] batadv2: entered promiscuous mode [ 1449.924122][T21585] batadv2: entered allmulticast mode [ 1449.931157][T21585] team0: Port device batadv2 added [ 1450.135122][T21590] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1450.152035][ T37] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1450.161334][ T37] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1450.183129][T21590] team0: Port device batadv2 added [ 1451.085679][T21427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.147488][T21595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1451.297701][T21427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.378320][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.385544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.567038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.574218][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.843933][ T5949] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1452.025606][ T5949] usb 6-1: config 0 has no interfaces? [ 1452.052124][ T5949] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1452.091932][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.134371][ T5949] usb 6-1: Product: syz [ 1452.138584][ T5949] usb 6-1: Manufacturer: syz [ 1452.143180][ T5949] usb 6-1: SerialNumber: syz [ 1452.204900][ T5949] usb 6-1: config 0 descriptor?? [ 1452.363253][T21427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.529587][T21427] veth0_vlan: entered promiscuous mode [ 1452.637291][T21427] veth1_vlan: entered promiscuous mode [ 1452.763586][T21427] veth0_macvtap: entered promiscuous mode [ 1453.081640][T21427] veth1_macvtap: entered promiscuous mode [ 1453.311744][ T5920] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1453.460141][T21427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.478903][T21427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.497916][ T5920] usb 3-1: config 0 has no interfaces? [ 1453.600383][ T5920] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1453.609740][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.622642][ T5920] usb 3-1: Product: syz [ 1453.627061][ T5920] usb 3-1: Manufacturer: syz [ 1453.631690][ T5920] usb 3-1: SerialNumber: syz [ 1453.657263][T16123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.785171][ T5920] usb 3-1: config 0 descriptor?? [ 1453.795925][T16123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.868170][T16123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.881813][T16123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.155357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.185371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.489698][T21618] sit1: entered allmulticast mode [ 1454.628977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.654392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.693501][T18406] usb 6-1: USB disconnect, device number 93 [ 1455.583994][T18406] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1455.802158][T12307] usb 3-1: USB disconnect, device number 30 [ 1455.814930][T18406] usb 5-1: Using ep0 maxpacket: 16 [ 1458.359163][T18406] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1458.410332][T18406] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1458.451921][T18406] usb 5-1: can't read configurations, error -71 [ 1458.667981][T21659] vlan0: entered promiscuous mode [ 1458.863564][T21664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1459.058421][T21665] batadv_slave_0: entered promiscuous mode [ 1459.784852][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3849'. [ 1459.979857][T21678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3849'. [ 1460.306865][T21677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1460.316584][T21677] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1460.355294][T21678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1461.024419][T18447] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1461.283889][T18447] usb 5-1: Using ep0 maxpacket: 16 [ 1463.724112][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3863'. [ 1464.741494][T18447] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1464.860471][T18447] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1464.887216][T18447] usb 5-1: can't read configurations, error -71 [ 1465.344004][T18447] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1465.533929][T18447] usb 5-1: Using ep0 maxpacket: 32 [ 1465.565625][T18447] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1465.593925][T18447] usb 5-1: config 0 has no interface number 0 [ 1465.633986][T18447] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1465.703983][T18447] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1465.786200][T18447] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1465.833990][T18447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.875373][T18447] usb 5-1: Product: syz [ 1465.879616][T18447] usb 5-1: Manufacturer: syz [ 1465.934618][T12307] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1465.974308][T18447] usb 5-1: SerialNumber: syz [ 1466.005073][T18447] usb 5-1: config 0 descriptor?? [ 1466.105931][T21747] netlink: 1048 bytes leftover after parsing attributes in process `syz.5.3870'. [ 1466.114294][T12307] usb 3-1: config 0 has no interfaces? [ 1466.147682][T12307] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1466.170650][T21747] bridge0: port 3(macsec0) entered disabled state [ 1466.177490][T12307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.179564][T21747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.194836][T21747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.204521][T12307] usb 3-1: Product: syz [ 1466.232074][T12307] usb 3-1: Manufacturer: syz [ 1466.244251][T18447] radio-si470x 5-1:0.35: this is not a si470x device. [ 1466.257194][T21751] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3871'. [ 1466.311544][T12307] usb 3-1: SerialNumber: syz [ 1466.356496][T12307] usb 3-1: config 0 descriptor?? [ 1466.647513][T21753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.656164][T21753] batadv_slave_0: entered promiscuous mode [ 1466.686590][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'. [ 1466.809971][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 1466.881679][T18447] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1466.885341][T21757] netlink: 5652 bytes leftover after parsing attributes in process `syz.2.3869'. [ 1467.185715][T18447] usb 3-1: USB disconnect, device number 31 [ 1467.384065][ T5920] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1467.613950][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 1467.631618][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.663705][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.697630][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1467.724344][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.795248][ T5920] usb 6-1: config 0 descriptor?? [ 1467.853638][ T5920] hub 6-1:0.0: USB hub found [ 1467.864289][T12307] usb 5-1: USB disconnect, device number 61 [ 1468.033566][T21760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.052686][T21760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.743946][T18406] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1468.829132][T21776] FAULT_INJECTION: forcing a failure. [ 1468.829132][T21776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.888929][T21776] CPU: 1 UID: 0 PID: 21776 Comm: syz.4.3879 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1468.888961][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1468.888978][T21776] Call Trace: [ 1468.888987][T21776] [ 1468.888997][T21776] dump_stack_lvl+0x189/0x250 [ 1468.889029][T21776] ? __pfx____ratelimit+0x10/0x10 [ 1468.889056][T21776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1468.889082][T21776] ? __pfx__printk+0x10/0x10 [ 1468.889112][T21776] ? __might_fault+0xb0/0x130 [ 1468.889154][T21776] should_fail_ex+0x414/0x560 [ 1468.889184][T21776] _copy_from_user+0x2d/0xb0 [ 1468.889206][T21776] do_sys_poll+0x242/0x1070 [ 1468.889247][T21776] ? __lock_acquire+0xab9/0xd20 [ 1468.889283][T21776] ? __pfx_do_sys_poll+0x10/0x10 [ 1468.889321][T21776] ? __lock_acquire+0xab9/0xd20 [ 1468.889422][T21776] ? ktime_get_ts64+0xa2/0x3d0 [ 1468.889456][T21776] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1468.889512][T21776] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1468.889555][T21776] __se_sys_poll+0x128/0x320 [ 1468.889588][T21776] ? __pfx___se_sys_poll+0x10/0x10 [ 1468.889615][T21776] ? rcu_is_watching+0x15/0xb0 [ 1468.889642][T21776] ? do_syscall_64+0xbe/0x3b0 [ 1468.889674][T21776] do_syscall_64+0xfa/0x3b0 [ 1468.889701][T21776] ? lockdep_hardirqs_on+0x9c/0x150 [ 1468.889726][T21776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.889748][T21776] ? clear_bhb_loop+0x60/0xb0 [ 1468.889774][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.889796][T21776] RIP: 0033:0x7f98c7f8ebe9 [ 1468.889815][T21776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.889834][T21776] RSP: 002b:00007f98c8d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1468.889856][T21776] RAX: ffffffffffffffda RBX: 00007f98c81b5fa0 RCX: 00007f98c7f8ebe9 [ 1468.889872][T21776] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1468.889886][T21776] RBP: 00007f98c8d82090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.889899][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.889911][T21776] R13: 00007f98c81b6038 R14: 00007f98c81b5fa0 R15: 00007f98c82dfa28 [ 1468.889944][T21776] [ 1469.114999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.149947][ T5920] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1469.201681][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 1469.208210][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1469.245244][ T5920] usb 6-1: USB disconnect, device number 94 [ 1469.358679][T18406] usb 3-1: Using ep0 maxpacket: 16 [ 1469.854039][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1470.027003][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1470.042796][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1470.114287][ T5920] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1470.274163][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1470.295811][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.314480][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1470.358365][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.382291][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1470.393678][ T5920] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1470.404734][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1470.431713][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.436307][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.477292][ T5920] usb 7-1: config 0 descriptor?? [ 1470.570185][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1470.614402][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1470.686195][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.736993][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1470.792293][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1470.872234][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.906630][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1470.915994][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1470.968032][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1471.027591][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1471.046182][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1471.099952][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1471.143033][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1471.493528][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1471.683660][T18406] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1471.717180][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1471.724193][T18406] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1471.793027][T18406] usb 3-1: can't read configurations, error -71 [ 1471.802021][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1471.827756][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1471.843239][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1471.877535][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1471.905515][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1471.910716][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 1471.938368][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1471.955960][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1471.974547][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1471.977243][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1472.004008][T12307] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1472.048807][ T5920] usb 7-1: USB disconnect, device number 2 [ 1472.094148][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1472.138501][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1472.183244][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1472.185162][T12307] usb 6-1: Using ep0 maxpacket: 32 [ 1472.227680][T12307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1472.243698][ T10] usb 1-1: Product: syz [ 1472.253680][T12307] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1472.291642][ T10] usb 1-1: Manufacturer: syz [ 1472.297555][ T10] usb 1-1: SerialNumber: syz [ 1472.310774][T12307] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.336158][ T10] usb 1-1: config 0 descriptor?? [ 1472.348011][T12307] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1472.387996][T12307] usb 6-1: config 128 has no interface number 0 [ 1472.390795][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1472.412051][T21810] netlink: 'syz.2.3889': attribute type 4 has an invalid length. [ 1472.419160][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1472.429264][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1472.447636][T12307] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 139, changing to 11 [ 1472.463320][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1472.537890][T12307] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 18351, setting to 1024 [ 1472.589379][T12307] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1472.640290][T12307] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1472.681609][T12307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.727889][T12307] usb 6-1: Product: syz [ 1472.741713][T12307] usb 6-1: Manufacturer: syz [ 1472.770145][T12307] usb 6-1: SerialNumber: syz [ 1472.810257][T21798] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1472.922910][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 1472.930631][T18406] usb 1-1: USB disconnect, device number 33 [ 1472.939817][T18406] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1473.094474][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1473.215122][T12307] usb 6-1: USB disconnect, device number 95 [ 1473.264225][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1473.287241][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1473.328117][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.346893][ T10] usb 7-1: config 0 has no interface number 0 [ 1473.381962][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1473.433849][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.535674][ T10] usb 7-1: Product: syz [ 1473.553598][ T10] usb 7-1: Manufacturer: syz [ 1473.563853][ T10] usb 7-1: SerialNumber: syz [ 1473.583196][ T10] usb 7-1: config 0 descriptor?? [ 1473.610190][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1473.937871][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1473.981396][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1474.277260][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1474.574182][T12307] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1474.724148][T12307] usb 5-1: Using ep0 maxpacket: 32 [ 1474.760664][T12307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.801812][T21817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.815804][T21817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.921025][T12307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.931267][T12307] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1474.977430][T12307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.006044][T12307] usb 5-1: config 0 descriptor?? [ 1475.070249][T12307] hub 5-1:0.0: USB hub found [ 1475.487492][T21823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.530915][T21823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.653882][T12307] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1476.692635][T12307] usbhid 5-1:0.0: can't add hid device: -71 [ 1476.734891][T12307] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1476.829111][T12307] usb 5-1: USB disconnect, device number 62 [ 1477.104775][ T9603] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1477.306396][ T9603] usb 6-1: Using ep0 maxpacket: 16 [ 1477.452981][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1477.461114][T12307] usb 7-1: USB disconnect, device number 3 [ 1477.662418][T12307] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1477.724627][T12307] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1477.785813][T12307] quatech2 7-1:0.51: device disconnected [ 1477.874321][T21849] netlink: 'syz.2.3899': attribute type 4 has an invalid length. [ 1478.022242][T18406] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1478.068525][T21858] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3901'. [ 1478.164694][T21860] fuse: Unknown parameter 'mGN‡8o«ad' [ 1478.316036][T18406] usb 5-1: Using ep0 maxpacket: 16 [ 1478.893636][T18406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.905424][T18406] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1478.944142][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.998640][T18406] usb 5-1: config 0 descriptor?? [ 1479.701691][T18406] usbhid 5-1:0.0: can't add hid device: -71 [ 1479.714736][T18406] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1479.731723][T18406] usb 5-1: USB disconnect, device number 63 [ 1481.217795][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.234022][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.243103][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.695499][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.706589][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.741974][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1481.951701][T21879] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1481.959508][T21879] netlink: 'syz.0.3906': attribute type 28 has an invalid length. [ 1482.313427][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1482.322982][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1482.384247][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1482.454537][ T9603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1482.488085][ T9603] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 1482.538172][ T9603] usb 6-1: chopping to 0 config(s) [ 1482.543401][ T9603] usb 6-1: can't read configurations, error -32 [ 1483.243925][ T9603] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1483.413877][ T9603] usb 6-1: Using ep0 maxpacket: 32 [ 1483.439992][ T9603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.478105][ T9603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.492099][T21892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1483.508051][ T9603] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1483.540210][ T9603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.710897][ T9603] usb 6-1: config 0 descriptor?? [ 1483.730085][ T9603] hub 6-1:0.0: USB hub found [ 1483.958265][T21890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.984543][T21890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.173926][ T5949] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1484.356559][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 1484.373040][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3913'. [ 1484.425425][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.462562][ T5949] usb 1-1: config 0 has no interfaces? [ 1484.489277][ T5949] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1484.569839][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.620637][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.627352][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.656158][ T5949] usb 1-1: config 0 descriptor?? [ 1485.018638][T21895] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1485.018932][ T9603] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1485.069583][ T9603] usbhid 6-1:0.0: can't add hid device: -71 [ 1485.730741][ T9603] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1485.762784][T18447] usb 1-1: USB disconnect, device number 34 [ 1485.784883][ T9603] usb 6-1: USB disconnect, device number 97 [ 1485.902202][T21907] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3915'. [ 1486.536664][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.545947][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.593158][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.634393][T18447] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1486.658655][T21927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1486.746757][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.758613][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.792323][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1486.794057][T18447] usb 7-1: Using ep0 maxpacket: 16 [ 1486.821644][ T5920] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1486.878446][T18447] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1486.899166][T18447] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1486.929976][T18447] usb 7-1: can't read configurations, error -71 [ 1486.965332][T21930] syzkaller1: entered promiscuous mode [ 1486.975957][T21930] syzkaller1: entered allmulticast mode [ 1487.050348][ T5920] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1487.070978][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.101284][T21922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1487.140841][ T5920] usb 6-1: Product: syz [ 1487.145580][ T5920] usb 6-1: Manufacturer: syz [ 1487.156742][ T5920] usb 6-1: SerialNumber: syz [ 1487.194926][ T5920] usb 6-1: config 0 descriptor?? [ 1487.402627][ T5920] usb 6-1: ignoring: probably an ADSL modem [ 1487.804328][ T5920] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1487.994306][T18447] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1488.184015][T18447] usb 7-1: Using ep0 maxpacket: 32 [ 1488.192376][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.248625][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.320167][T18447] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1488.368530][T18447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.411760][T18447] usb 7-1: config 0 descriptor?? [ 1488.454466][T18447] hub 7-1:0.0: USB hub found [ 1488.790539][T21938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.816684][T21938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.461560][T18447] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1489.520929][T18447] usbhid 7-1:0.0: can't add hid device: -71 [ 1489.551678][T18447] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1489.564581][T21954] __nla_validate_parse: 4 callbacks suppressed [ 1489.564651][T21954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1489.582362][T21954] batadv_slave_0: entered promiscuous mode [ 1489.674919][T18447] usb 7-1: USB disconnect, device number 5 [ 1489.724382][ T5920] usb 6-1: USB disconnect, device number 98 [ 1490.261943][T21961] tipc: Started in network mode [ 1490.268412][T21961] tipc: Node identity , cluster identity 4711 [ 1490.311949][T21961] tipc: Failed to obtain node identity [ 1490.320917][T21961] tipc: Enabling of bearer rejected, failed to enable media [ 1490.382600][ T5920] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1490.459562][T21962] syzkaller0: entered promiscuous mode [ 1490.465257][T21962] syzkaller0: entered allmulticast mode [ 1490.473582][T21958] veth1_vlan: mtu less than device minimum [ 1490.565595][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.696085][ T5920] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1490.729508][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.810686][ T5920] usb 1-1: config 0 descriptor?? [ 1491.291761][ T5920] uclogic 0003:145F:0212.004F: interface is invalid, ignoring [ 1491.314722][T12307] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1491.488079][T12307] usb 7-1: Using ep0 maxpacket: 8 [ 1491.529971][ T5920] usb 1-1: USB disconnect, device number 35 [ 1491.552806][T12307] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1491.597087][T12307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.632036][T12307] usb 7-1: Product: syz [ 1491.644004][T12307] usb 7-1: Manufacturer: syz [ 1491.660445][T12307] usb 7-1: SerialNumber: syz [ 1491.681670][T12307] usb 7-1: config 0 descriptor?? [ 1491.966518][T12307] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1492.013976][T18406] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1492.197391][T18406] usb 3-1: Using ep0 maxpacket: 16 [ 1492.872479][T12307] usb write operation failed. (-71) [ 1492.896243][T12307] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1493.069703][T12307] dvbdev: DVB: registering new adapter (Terratec H7) [ 1493.093699][T12307] usb 7-1: media controller created [ 1493.116221][T12307] usb read operation failed. (-71) [ 1493.152856][T12307] usb write operation failed. (-71) [ 1493.196735][T12307] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1493.235771][T12307] usb 7-1: USB disconnect, device number 6 [ 1495.563048][T21987] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 1495.719981][T21989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1497.275398][T18406] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1497.314514][T18406] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 1497.350424][T18406] usb 3-1: chopping to 0 config(s) [ 1497.367402][T18406] usb 3-1: can't read configurations, error -32 [ 1497.654036][T18406] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1497.824250][T18406] usb 3-1: device descriptor read/64, error -32 [ 1497.944491][T18406] usb usb3-port1: attempt power cycle [ 1498.394034][T18406] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1498.414277][T18406] usb 3-1: device descriptor read/8, error -32 [ 1498.673944][T18406] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1498.751048][T18406] usb 3-1: device descriptor read/8, error -32 [ 1498.910371][T18406] usb usb3-port1: unable to enumerate USB device [ 1499.915301][T21987] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1500.393877][T18406] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1500.469428][T22011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3947'. [ 1500.734208][T18406] usb 3-1: Using ep0 maxpacket: 32 [ 1500.777642][T18406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.798950][T18406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.850187][T18406] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1500.882817][T18406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.942791][T18406] usb 3-1: config 0 descriptor?? [ 1500.996246][T18406] hub 3-1:0.0: USB hub found [ 1501.238683][T22005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.277626][T22005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.381746][T18406] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1502.440241][T18406] usbhid 3-1:0.0: can't add hid device: -71 [ 1502.454428][T18406] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1502.535262][T18406] usb 3-1: USB disconnect, device number 38 [ 1503.631460][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1503.931250][T22041] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1503.942601][T22041] batadv3: entered promiscuous mode [ 1503.949016][T22041] batadv3: entered allmulticast mode [ 1503.957880][T22041] team0: Port device batadv3 added [ 1504.563911][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1504.573269][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1505.053961][T12307] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1505.280299][T12307] usb 5-1: config 0 has no interfaces? [ 1505.336025][T12307] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1505.370126][T12307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.469753][T12307] usb 5-1: Product: syz [ 1505.523002][T12307] usb 5-1: Manufacturer: syz [ 1505.543218][T12307] usb 5-1: SerialNumber: syz [ 1505.664368][T12307] usb 5-1: config 0 descriptor?? [ 1506.114912][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1506.255445][T22055] netlink: 5652 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1506.267381][ T5920] usb 5-1: USB disconnect, device number 64 [ 1506.917998][T22067] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1507.187652][T22073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1507.259333][T22073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.282984][T22073] batadv_slave_0: entered promiscuous mode [ 1507.414369][ T9603] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1507.591724][ T9603] usb 5-1: Using ep0 maxpacket: 32 [ 1507.629488][ T9603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.701959][ T9603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.785763][ T9603] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1507.929375][ T9603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.049840][ T9603] usb 5-1: config 0 descriptor?? [ 1508.152596][ T9603] hub 5-1:0.0: USB hub found [ 1508.397384][T22071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.424465][T22071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.497686][ T9603] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1509.510343][ T9603] usbhid 5-1:0.0: can't add hid device: -71 [ 1509.531931][ T9603] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1509.637667][ T9603] usb 5-1: USB disconnect, device number 65 [ 1510.311761][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1510.320041][ T30] audit: type=1326 audit(1754589981.448:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1510.490295][ T30] audit: type=1326 audit(1754589981.498:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1511.226944][ T30] audit: type=1326 audit(1754589981.498:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1511.249412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1511.276913][T22103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1511.504252][T22108] program syz.0.3971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.588739][ T30] audit: type=1326 audit(1754589981.498:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1511.734227][ T30] audit: type=1326 audit(1754589981.498:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1511.863722][ T30] audit: type=1326 audit(1754589981.498:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1511.886297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.070553][ T30] audit: type=1326 audit(1754589981.498:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22094 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f98c7f8ebe9 code=0x7ffc0000 [ 1513.483901][T18406] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1513.715365][T18406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.726713][T18406] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1513.776937][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.920140][T18406] usb 5-1: config 0 descriptor?? [ 1514.151560][T22140] input: syz0 as /devices/virtual/input/input125 [ 1514.185690][T18406] usbhid 5-1:0.0: can't add hid device: -71 [ 1514.212030][T18406] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1514.253083][T18406] usb 5-1: USB disconnect, device number 66 [ 1514.803868][T18406] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1515.045719][T18406] usb 5-1: Using ep0 maxpacket: 16 [ 1515.132694][T18406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.154201][T18406] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1515.198880][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.234932][T18406] usb 5-1: config 0 descriptor?? [ 1515.682589][T18406] mcp2221 0003:04D8:00DD.0050: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1515.704004][ T9603] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1515.927975][ T9603] usb 1-1: Using ep0 maxpacket: 32 [ 1515.944167][ T9603] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1515.979244][ T9603] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1515.992998][ T9603] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1516.021790][ T9603] usb 1-1: Product: syz [ 1516.036872][ T9603] usb 1-1: Manufacturer: syz [ 1516.041582][ T9603] usb 1-1: SerialNumber: syz [ 1516.084690][T22127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.094909][T22127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.120094][T12307] usb 5-1: USB disconnect, device number 67 [ 1516.156658][ T9603] usb 1-1: config 0 descriptor?? [ 1516.164357][T22145] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1516.187128][ T9603] hub 1-1:0.0: bad descriptor, ignoring hub [ 1516.213542][ T9603] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1516.484254][ T9603] usb 1-1: USB disconnect, device number 36 [ 1516.824138][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 1516.903872][ T9603] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1516.984944][T22158] netlink: 'syz.6.3988': attribute type 4 has an invalid length. [ 1517.066081][ T9603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.068859][T22159] netlink: 'syz.6.3988': attribute type 4 has an invalid length. [ 1517.139913][ T9603] usb 1-1: config 0 has no interfaces? [ 1517.180968][ T9603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.238892][ T9603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.297773][ T9603] usb 1-1: Product: syz [ 1517.322624][ T9603] usb 1-1: Manufacturer: syz [ 1517.344937][ T9603] usb 1-1: SerialNumber: syz [ 1517.385484][ T9603] usb 1-1: config 0 descriptor?? [ 1517.611367][T22145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.624206][T22145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.906086][T12307] usb 1-1: USB disconnect, device number 37 [ 1517.914446][T22175] syz.2.3992: attempt to access beyond end of device [ 1517.914446][T22175] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1518.587094][T22182] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3991'. [ 1518.893144][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1519.153275][T22192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3996'. [ 1519.343991][T12307] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1519.506327][T12307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1519.515239][T12307] usb 1-1: not running at top speed; connect to a high speed hub [ 1519.572358][T12307] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 1519.638363][T12307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.674275][T12307] usb 1-1: config 1 has no interface number 0 [ 1519.691068][T12307] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 1519.717655][T12307] usb 1-1: config 1 interface 138 has no altsetting 0 [ 1519.778401][T12307] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1519.789257][T12307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.809569][T12307] usb 1-1: Product: syz [ 1519.843941][T12307] usb 1-1: Manufacturer: syz [ 1519.868996][T12307] usb 1-1: SerialNumber: syz [ 1520.229202][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1520.264303][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1520.274139][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1520.777415][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1520.787186][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1520.822172][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1521.028195][T12307] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1521.155929][T12307] usb 1-1: USB disconnect, device number 38 [ 1521.905223][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1521.933708][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1521.984635][T22211] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1522.020933][T22198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3997'. [ 1522.693998][ T9603] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1523.269455][T22230] input: syz0 as /devices/virtual/input/input126 [ 1523.289342][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 1523.366661][T18406] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1523.441597][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.701895][ T9603] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1523.753950][T18406] usb 7-1: Using ep0 maxpacket: 16 [ 1523.773538][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.789998][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'. [ 1523.908875][T22232] block device autoloading is deprecated and will be removed. [ 1523.921266][ T9603] usb 3-1: config 0 descriptor?? [ 1524.731853][ T9603] usbhid 3-1:0.0: can't add hid device: -71 [ 1524.745431][ T9603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1524.768453][ T9603] usb 3-1: USB disconnect, device number 39 [ 1525.061767][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1525.824126][ T9603] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1526.003839][ T9603] usb 3-1: Using ep0 maxpacket: 8 [ 1526.057985][ T9603] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1526.090528][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.129291][ T9603] usb 3-1: Product: syz [ 1526.133503][ T9603] usb 3-1: Manufacturer: syz [ 1526.173954][ T9603] usb 3-1: SerialNumber: syz [ 1526.216994][ T9603] usb 3-1: config 0 descriptor?? [ 1526.313361][T18406] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1526.334785][T18406] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1526.387267][T18406] usb 7-1: can't read configurations, error -71 [ 1526.469333][ T9603] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1527.531378][T22248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.566108][T22248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.135901][T22279] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1528.149942][T22279] batadv4: entered promiscuous mode [ 1528.160159][T22279] batadv4: entered allmulticast mode [ 1528.166767][T22279] team0: Port device batadv4 added [ 1528.444218][ T9603] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1528.478490][ T9603] usb 3-1: USB disconnect, device number 40 [ 1528.868587][T16123] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 1528.878175][T16123] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 1529.189642][T22286] binder: 22284:22286 ioctl 4018620d 0 returned -22 [ 1529.246459][T22286] binder: 22284:22286 ioctl c018620c 0 returned -14 [ 1529.342612][T22290] Lens A: ================= START STATUS ================= [ 1529.356654][T22288] FAULT_INJECTION: forcing a failure. [ 1529.356654][T22288] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.405062][T22290] Lens A: Focus, Absolute: 0 [ 1529.411695][T22290] Lens A: ================== END STATUS ================== [ 1529.454540][T22288] CPU: 1 UID: 0 PID: 22288 Comm: syz.2.4017 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1529.454571][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1529.454586][T22288] Call Trace: [ 1529.454595][T22288] [ 1529.454606][T22288] dump_stack_lvl+0x189/0x250 [ 1529.454641][T22288] ? __pfx____ratelimit+0x10/0x10 [ 1529.454670][T22288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1529.454698][T22288] ? __pfx__printk+0x10/0x10 [ 1529.454736][T22288] ? __pfx___might_resched+0x10/0x10 [ 1529.454756][T22288] ? fs_reclaim_acquire+0x7d/0x100 [ 1529.454797][T22288] should_fail_ex+0x414/0x560 [ 1529.454828][T22288] ? traverse+0xd9/0x570 [ 1529.454852][T22288] should_failslab+0xa8/0x100 [ 1529.454886][T22288] __kvmalloc_node_noprof+0x161/0x5f0 [ 1529.454919][T22288] ? traverse+0xd9/0x570 [ 1529.454951][T22288] traverse+0xd9/0x570 [ 1529.454977][T22288] ? __debugfs_file_get+0x5dd/0x710 [ 1529.455021][T22288] seq_lseek+0x134/0x260 [ 1529.455053][T22288] full_proxy_llseek+0x116/0x1e0 [ 1529.455092][T22288] __x64_sys_lseek+0x14c/0x1e0 [ 1529.455124][T22288] do_syscall_64+0xfa/0x3b0 [ 1529.455152][T22288] ? lockdep_hardirqs_on+0x9c/0x150 [ 1529.455178][T22288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.455199][T22288] ? clear_bhb_loop+0x60/0xb0 [ 1529.455227][T22288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.455249][T22288] RIP: 0033:0x7f7240d8ebe9 [ 1529.455269][T22288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.455290][T22288] RSP: 002b:00007f7241b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1529.455313][T22288] RAX: ffffffffffffffda RBX: 00007f7240fb6090 RCX: 00007f7240d8ebe9 [ 1529.455329][T22288] RDX: 0000000000000000 RSI: 0000000000000851 RDI: 0000000000000004 [ 1529.455342][T22288] RBP: 00007f7241b89090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.455357][T22288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.455370][T22288] R13: 00007f7240fb6128 R14: 00007f7240fb6090 R15: 00007f72410dfa28 [ 1529.455405][T22288] [ 1529.669893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.694771][ T9603] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1530.884412][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 1530.898267][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.911025][ T9603] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1530.951584][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.963979][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1531.000247][ T9603] usb 3-1: config 0 descriptor?? [ 1531.115456][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1531.145576][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4021'. [ 1531.318824][T22308] input: syz0 as /devices/virtual/input/input127 [ 1531.778222][ T9603] usbhid 3-1:0.0: can't add hid device: -71 [ 1531.785958][ T9603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1531.809000][ T9603] usb 3-1: USB disconnect, device number 41 [ 1532.519963][T22317] fuse: Unknown parameter 'mGN‡8o«ad' [ 1533.036536][T22319] fuse: Unknown parameter 'mGN‡8o«ad' [ 1533.284042][ T5920] IPVS: starting estimator thread 0... [ 1533.423998][T22324] IPVS: using max 26 ests per chain, 62400 per kthread [ 1534.317077][T22334] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1534.346174][T22334] team0: Port device batadv3 added [ 1535.816499][ T5880] kworker/1:3 (5880) used greatest stack depth: 14216 bytes left [ 1535.894680][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1535.956309][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1535.986898][ T10] usb 7-1: can't read configurations, error -71 [ 1536.127822][T22337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1536.664392][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1536.825969][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1536.849790][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.955275][T18447] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1536.985796][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.072970][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1537.124027][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1537.133208][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.155752][ T10] usb 7-1: config 0 descriptor?? [ 1537.196330][T18447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1537.214190][T18447] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1537.223352][T18447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.319503][T18447] usb 6-1: config 0 descriptor?? [ 1537.328414][T22344] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1537.364668][ T9603] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1537.534182][ T9603] usb 3-1: Using ep0 maxpacket: 8 [ 1537.548407][ T9603] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 1537.558312][ T9603] usb 3-1: config 0 has no interface number 0 [ 1537.569385][ T9603] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 1537.589466][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.632801][ T9603] usb 3-1: Product: syz [ 1537.640364][ T9603] usb 3-1: Manufacturer: syz [ 1537.650494][ T9603] usb 3-1: SerialNumber: syz [ 1537.673345][ T9603] usb 3-1: config 0 descriptor?? [ 1537.752414][T18447] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1537.759685][T18447] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1537.767320][T18447] elan 0003:04F3:0755.0051: item fetching failed at offset 3/5 [ 1537.790965][T18447] elan 0003:04F3:0755.0051: Hid Parse failed [ 1537.810543][T18447] elan 0003:04F3:0755.0051: probe with driver elan failed with error -22 [ 1537.853977][T18406] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1537.898122][ T9603] pcwd_usb: This driver only supports 1 device [ 1538.143121][ T9603] usbhid 3-1:0.78: couldn't find an input interrupt endpoint [ 1538.156573][ T9603] usb 3-1: USB disconnect, device number 42 [ 1538.162238][T12307] usb 6-1: USB disconnect, device number 99 [ 1538.203910][T18406] usb 1-1: Using ep0 maxpacket: 16 [ 1538.212251][T18406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.223807][T18406] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1538.240259][T18406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.290582][T18406] usb 1-1: config 0 descriptor?? [ 1539.157263][T18406] usbhid 1-1:0.0: can't add hid device: -71 [ 1539.177529][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1539.183648][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1539.191959][T18406] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1539.249028][ T10] usb 7-1: USB disconnect, device number 10 [ 1539.271869][T18406] usb 1-1: USB disconnect, device number 39 [ 1539.745723][T22380] input: syz0 as /devices/virtual/input/input128 [ 1542.783865][ T5920] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1542.931039][T22408] binder: 22407:22408 ioctl 4018620d 0 returned -22 [ 1542.988636][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 1543.015427][T22411] binder: 22407:22411 ioctl c018620c 0 returned -14 [ 1543.033493][ T5920] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1543.072901][ T5920] usb 5-1: config 0 has no interface number 0 [ 1543.095619][ T5920] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1543.133095][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.163473][ T5920] usb 5-1: Product: syz [ 1543.181836][ T5920] usb 5-1: Manufacturer: syz [ 1543.197141][ T5920] usb 5-1: SerialNumber: syz [ 1543.229062][ T5920] usb 5-1: config 0 descriptor?? [ 1543.467342][ T5920] usb 5-1: selecting invalid altsetting 1 [ 1543.473305][ T5920] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1543.491764][ T5920] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1543.531199][ T5920] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1543.570629][ T5920] usb 5-1: USB disconnect, device number 68 [ 1544.797193][T22403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1545.029786][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1546.058460][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.068045][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.493667][T22461] openvswitch: netlink: IP tunnel dst address not specified [ 1548.644185][T22474] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1548.689000][T22474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1548.973997][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1549.146833][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1549.187127][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1549.301737][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4067'. [ 1549.385732][T22479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1549.484177][T22479] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1549.511694][T22479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1549.519411][T22486] fuse: Bad value for 'fd' [ 1549.528790][T22479] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1549.649683][T22479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1549.654512][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.659795][T22479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1549.673825][ T10] usb 3-1: Product: syz [ 1549.703596][ T10] usb 3-1: Manufacturer: syz [ 1549.726847][ T10] usb 3-1: SerialNumber: syz [ 1549.733065][T22479] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1549.750004][T22479] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1549.769202][ T10] usb 3-1: config 0 descriptor?? [ 1549.781299][T22479] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1549.804242][T22479] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1549.882766][T22479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1549.889989][T22479] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1549.931406][T22479] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1550.022713][T22493] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1550.102507][T22493] team0: Port device batadv1 added [ 1550.277446][T22475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.324536][T22475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.359718][T19153] usb 3-1: USB disconnect, device number 43 [ 1550.579002][T11742] udevd[11742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.015708][T17706] Bluetooth: hci2: command 0x0406 tx timeout [ 1551.554743][T22511] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1551.575485][T17706] Bluetooth: hci0: command 0x0406 tx timeout [ 1551.654418][T17706] Bluetooth: hci1: command 0x0406 tx timeout [ 1551.734036][T17706] Bluetooth: hci4: command 0x0406 tx timeout [ 1551.814449][T17706] Bluetooth: hci5: command 0x0406 tx timeout [ 1551.894038][T17706] Bluetooth: hci3: command 0x0c1a tx timeout [ 1553.063911][T18447] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1553.108847][T17706] Bluetooth: hci2: command 0x0406 tx timeout [ 1553.214187][T18447] usb 7-1: Using ep0 maxpacket: 32 [ 1553.221625][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.237498][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.283100][T18447] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1553.317974][T18447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.389429][T18447] usb 7-1: config 0 descriptor?? [ 1553.436556][T18447] hub 7-1:0.0: USB hub found [ 1553.640383][T22521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.655399][T17706] Bluetooth: hci0: command 0x0406 tx timeout [ 1553.678192][T22521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.734635][T17706] Bluetooth: hci1: command 0x0406 tx timeout [ 1553.814610][T17706] Bluetooth: hci4: command 0x0406 tx timeout [ 1553.893961][T17706] Bluetooth: hci5: command 0x0406 tx timeout [ 1553.974184][T17706] Bluetooth: hci3: command 0x0c1a tx timeout [ 1554.957655][T18447] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1555.014915][T18447] usbhid 7-1:0.0: can't add hid device: -71 [ 1555.024020][T18447] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1555.095092][T18447] usb 7-1: USB disconnect, device number 11 [ 1556.063929][T17706] Bluetooth: hci3: command 0x0c1a tx timeout [ 1556.082615][T22548] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4081'. [ 1557.835361][T22560] FAULT_INJECTION: forcing a failure. [ 1557.835361][T22560] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.889502][T22560] CPU: 0 UID: 0 PID: 22560 Comm: syz.4.4085 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1557.889526][T22560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1557.889536][T22560] Call Trace: [ 1557.889544][T22560] [ 1557.889554][T22560] dump_stack_lvl+0x189/0x250 [ 1557.889581][T22560] ? __pfx____ratelimit+0x10/0x10 [ 1557.889602][T22560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1557.889625][T22560] ? __pfx__printk+0x10/0x10 [ 1557.889653][T22560] ? __pfx___might_resched+0x10/0x10 [ 1557.889669][T22560] ? fs_reclaim_acquire+0x7d/0x100 [ 1557.889698][T22560] should_fail_ex+0x414/0x560 [ 1557.889721][T22560] should_failslab+0xa8/0x100 [ 1557.889746][T22560] __kmalloc_cache_noprof+0x70/0x3d0 [ 1557.889770][T22560] ? nfnetlink_rcv+0xeff/0x2520 [ 1557.889791][T22560] nfnetlink_rcv+0xeff/0x2520 [ 1557.889833][T22560] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1557.889864][T22560] ? ref_tracker_free+0x63a/0x7d0 [ 1557.889906][T22560] ? __netlink_deliver_tap+0x807/0x850 [ 1557.889927][T22560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1557.889961][T22560] netlink_unicast+0x82c/0x9e0 [ 1557.889987][T22560] ? __pfx_netlink_unicast+0x10/0x10 [ 1557.890007][T22560] ? netlink_sendmsg+0x642/0xb30 [ 1557.890027][T22560] ? skb_put+0x11b/0x210 [ 1557.890052][T22560] netlink_sendmsg+0x805/0xb30 [ 1557.890081][T22560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.890107][T22560] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1557.890132][T22560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1557.890151][T22560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.890173][T22560] __sock_sendmsg+0x219/0x270 [ 1557.890194][T22560] ____sys_sendmsg+0x505/0x830 [ 1557.890224][T22560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.890267][T22560] ? import_iovec+0x74/0xa0 [ 1557.890290][T22560] ___sys_sendmsg+0x21f/0x2a0 [ 1557.890317][T22560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.890378][T22560] ? __fget_files+0x2a/0x420 [ 1557.890402][T22560] ? __fget_files+0x3a0/0x420 [ 1557.890435][T22560] __x64_sys_sendmsg+0x19b/0x260 [ 1557.890461][T22560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1557.890498][T22560] ? __pfx_ksys_write+0x10/0x10 [ 1557.890518][T22560] ? rcu_is_watching+0x15/0xb0 [ 1557.890538][T22560] ? do_syscall_64+0xbe/0x3b0 [ 1557.890563][T22560] do_syscall_64+0xfa/0x3b0 [ 1557.890583][T22560] ? lockdep_hardirqs_on+0x9c/0x150 [ 1557.890602][T22560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.890619][T22560] ? clear_bhb_loop+0x60/0xb0 [ 1557.890640][T22560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.890657][T22560] RIP: 0033:0x7f98c7f8ebe9 [ 1557.890671][T22560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.890686][T22560] RSP: 002b:00007f98c8d82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.890703][T22560] RAX: ffffffffffffffda RBX: 00007f98c81b5fa0 RCX: 00007f98c7f8ebe9 [ 1557.890714][T22560] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 1557.890724][T22560] RBP: 00007f98c8d82090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.890734][T22560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.890743][T22560] R13: 00007f98c81b6038 R14: 00007f98c81b5fa0 R15: 00007f98c82dfa28 [ 1557.890767][T22560] [ 1558.965606][T22566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'. [ 1559.904025][T19153] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1560.079283][T19153] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.089914][T19153] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1560.137762][T19153] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1560.356285][T19153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.443892][T18447] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1560.523096][T19153] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1560.594329][T18447] usb 7-1: Using ep0 maxpacket: 32 [ 1560.619282][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.660973][T18447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.775247][T18447] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1560.864563][T22577] delete_channel: no stack [ 1560.894579][T18447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.902616][T19153] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1560.925987][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1560.946613][T18447] usb 7-1: config 0 descriptor?? [ 1560.979475][T18447] hub 7-1:0.0: USB hub found [ 1561.015244][T19153] usb 1-1: USB disconnect, device number 40 [ 1561.194711][T22582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.204476][T22582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.136697][T18447] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1563.159322][T18447] usbhid 7-1:0.0: can't add hid device: -71 [ 1563.232022][T18447] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1563.414775][T18447] usb 7-1: USB disconnect, device number 12 [ 1564.610774][ T5920] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1564.816993][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 1565.437981][T22627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1565.644487][T22629] sit0: entered allmulticast mode [ 1565.655582][T22629] macvlan0: entered allmulticast mode [ 1565.710277][T22629] macvlan0 (unregistering): left allmulticast mode [ 1566.363904][T12307] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1566.519696][T12307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.552925][T12307] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1566.575677][T19153] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1566.659683][T12307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.707521][T12307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.765082][T12307] usb 3-1: Product: syz [ 1566.826006][T19153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.839626][T12307] usb 3-1: Manufacturer: syz [ 1566.866854][T12307] usb 3-1: SerialNumber: syz [ 1566.871850][T19153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.904036][T12307] cdc_mbim 3-1:1.0: skipping garbage [ 1566.917413][T19153] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1566.965491][T19153] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1566.992799][T19153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.023042][T19153] usb 7-1: config 0 descriptor?? [ 1567.104195][T22631] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1567.522160][T19153] plantronics 0003:047F:FFFF.0052: reserved main item tag 0xd [ 1567.617576][T19153] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1567.787454][T22631] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1567.795782][ T10] usb 7-1: USB disconnect, device number 13 [ 1567.847140][T12307] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1567.865257][T12307] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1567.910016][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1567.921600][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1567.975887][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1567.985449][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1567.996819][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.010749][T22636] fido_id[22636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1568.051818][ T5920] usb 1-1: can't read configurations, error -71 [ 1568.065706][T12307] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1568.158643][T12307] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1568.186777][T12307] wwan wwan0: port wwan0mbim0 attached [ 1568.256857][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.266303][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.266481][T12307] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 46:2a:a4:7d:64:f0 [ 1568.300202][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.833869][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1568.855267][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.869783][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1568.886657][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1569.105217][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1569.130364][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.184656][T12307] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1569.209640][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.340704][T19153] usb 3-1: USB disconnect, device number 44 [ 1569.347774][T19153] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1569.368583][T12307] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 1569.376231][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1569.400673][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.424012][T12307] usb 5-1: config 0 has no interface number 0 [ 1569.506501][T12307] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1569.544558][ T10] usb 7-1: config 0 descriptor?? [ 1569.561011][T12307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.566372][ T10] hub 7-1:0.0: USB hub found [ 1569.707315][T12307] usb 5-1: config 0 descriptor?? [ 1569.735181][T22633] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1569.808540][T22647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.879230][T22647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.898791][T19153] wwan wwan0: port wwan0mbim0 disconnected [ 1570.403981][T19153] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1570.482112][ T10] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1570.564607][T19153] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1570.585914][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1570.597697][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1570.641969][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1570.652516][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1570.676335][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1570.690069][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1570.730399][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1570.773398][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1570.792624][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1570.859241][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1570.888462][ T10] usb 7-1: USB disconnect, device number 14 [ 1571.099922][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1571.225525][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1571.373223][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1571.387334][T22676] FAULT_INJECTION: forcing a failure. [ 1571.387334][T22676] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.445443][T22676] CPU: 0 UID: 0 PID: 22676 Comm: syz.5.4112 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1571.445475][T22676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.445489][T22676] Call Trace: [ 1571.445499][T22676] [ 1571.445509][T22676] dump_stack_lvl+0x189/0x250 [ 1571.445542][T22676] ? __pfx____ratelimit+0x10/0x10 [ 1571.445570][T22676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1571.445597][T22676] ? __pfx__printk+0x10/0x10 [ 1571.445635][T22676] ? __pfx___might_resched+0x10/0x10 [ 1571.445662][T22676] should_fail_ex+0x414/0x560 [ 1571.445693][T22676] should_failslab+0xa8/0x100 [ 1571.445728][T22676] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1571.445760][T22676] ? __alloc_skb+0x112/0x2d0 [ 1571.445794][T22676] __alloc_skb+0x112/0x2d0 [ 1571.445828][T22676] netlink_sendmsg+0x5c6/0xb30 [ 1571.445868][T22676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1571.445901][T22676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1571.445935][T22676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1571.445959][T22676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1571.445990][T22676] __sock_sendmsg+0x219/0x270 [ 1571.446019][T22676] ____sys_sendmsg+0x505/0x830 [ 1571.446058][T22676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1571.446101][T22676] ? import_iovec+0x74/0xa0 [ 1571.446134][T22676] ___sys_sendmsg+0x21f/0x2a0 [ 1571.446180][T22676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1571.446259][T22676] ? __fget_files+0x2a/0x420 [ 1571.446287][T22676] ? __fget_files+0x3a0/0x420 [ 1571.446327][T22676] __x64_sys_sendmsg+0x19b/0x260 [ 1571.446360][T22676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1571.446400][T22676] ? __pfx_ksys_write+0x10/0x10 [ 1571.446426][T22676] ? rcu_is_watching+0x15/0xb0 [ 1571.446451][T22676] ? do_syscall_64+0xbe/0x3b0 [ 1571.446480][T22676] do_syscall_64+0xfa/0x3b0 [ 1571.446504][T22676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1571.446528][T22676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.446549][T22676] ? clear_bhb_loop+0x60/0xb0 [ 1571.446573][T22676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.446593][T22676] RIP: 0033:0x7f480618ebe9 [ 1571.446611][T22676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.446628][T22676] RSP: 002b:00007f4806fea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1571.446669][T22676] RAX: ffffffffffffffda RBX: 00007f48063b5fa0 RCX: 00007f480618ebe9 [ 1571.446684][T22676] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 1571.446698][T22676] RBP: 00007f4806fea090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.446712][T22676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.446724][T22676] R13: 00007f48063b6038 R14: 00007f48063b5fa0 R15: 00007f48064dfa28 [ 1571.446757][T22676] [ 1571.753880][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1571.768605][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1571.938618][ T10] usb 5-1: USB disconnect, device number 69 [ 1572.072054][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1572.131130][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1572.214263][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1572.226314][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1572.243876][T18406] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1572.266751][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1572.309497][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1572.323248][T22688] bridge0: entered allmulticast mode [ 1572.356051][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1572.414518][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1572.438246][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1572.451494][T18406] usb 6-1: device descriptor read/64, error -71 [ 1572.456215][T19153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1572.458065][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1572.498625][T22688] macsec0: left allmulticast mode [ 1572.503702][T22688] veth1_macvtap: left allmulticast mode [ 1572.523896][T22688] macsec0: left promiscuous mode [ 1572.529320][T22688] bridge0: port 3(macsec0) entered disabled state [ 1572.581018][T22688] bridge_slave_1: left allmulticast mode [ 1572.586963][T19153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1572.586998][T19153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1572.596583][T19153] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1572.660009][T22688] bridge_slave_1: left promiscuous mode [ 1572.694655][T22688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.703165][ T10] usb 7-1: config 0 has no interfaces? [ 1572.715175][T19153] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1572.719519][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1572.735573][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.744171][T19153] usb 3-1: Product: syz [ 1572.748364][T19153] usb 3-1: Manufacturer: syz [ 1572.763853][T18406] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1572.763939][T19153] usb 3-1: SerialNumber: syz [ 1572.795913][ T10] usb 7-1: Product: syz [ 1572.807424][T22688] bridge_slave_0: left allmulticast mode [ 1572.813255][T22688] bridge_slave_0: left promiscuous mode [ 1572.847600][T19153] usb 3-1: config 0 descriptor?? [ 1572.854530][T22688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.893404][ T10] usb 7-1: Manufacturer: syz [ 1572.899874][ T10] usb 7-1: SerialNumber: syz [ 1572.934244][T18406] usb 6-1: device descriptor read/64, error -71 [ 1572.941086][ T10] usb 7-1: config 0 descriptor?? [ 1573.030977][T19153] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1573.074318][T18406] usb usb6-port1: attempt power cycle [ 1573.133282][T19153] usb 3-1: USB disconnect, device number 45 [ 1573.160650][T22688] bridge0 (unregistering): left allmulticast mode [ 1573.179769][T19153] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1573.222960][T22684] program syz.6.4113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1573.234932][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.247241][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.643918][T18406] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1573.682110][T18406] usb 6-1: device descriptor read/8, error -71 [ 1573.962994][T18406] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1574.203891][T19153] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1574.333947][T19153] usb 5-1: device descriptor read/64, error -71 [ 1574.397098][T18406] usb 6-1: device descriptor read/8, error -71 [ 1574.574055][T19153] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1574.694115][T18406] usb usb6-port1: unable to enumerate USB device [ 1574.744282][T19153] usb 5-1: device descriptor read/64, error -71 [ 1574.855038][T19153] usb usb5-port1: attempt power cycle [ 1575.233878][T19153] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1575.318985][T19153] usb 5-1: device descriptor read/8, error -71 [ 1576.083900][T19153] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1576.320827][ T3096] usb 7-1: USB disconnect, device number 15 [ 1576.335489][T19153] usb 5-1: device descriptor read/8, error -71 [ 1576.455388][T19153] usb usb5-port1: unable to enumerate USB device [ 1576.583940][T12307] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1576.737881][T12307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1576.770307][T12307] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 1576.790019][ T3096] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1576.836683][T12307] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1576.866535][T12307] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1576.896617][T12307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.922772][T12307] usb 1-1: Product: syz [ 1576.956367][T12307] usb 1-1: Manufacturer: syz [ 1576.961354][T12307] usb 1-1: SerialNumber: syz [ 1576.974621][ T3096] usb 7-1: Using ep0 maxpacket: 32 [ 1576.995360][ T3096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.013898][ T3096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.056235][ T3096] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1577.111924][ T3096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.141725][ T3096] usb 7-1: config 0 descriptor?? [ 1577.165414][ T3096] hub 7-1:0.0: USB hub found [ 1577.418684][ T31] INFO: task syz.3.3754:21272 blocked for more than 143 seconds. [ 1577.478860][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 1577.494966][T22736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.529850][T22736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.586389][ T30] audit: type=1326 audit(1754590048.678:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.4.4127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98c7f8ebe9 code=0x0 [ 1577.647831][ T31] Blocked by coredump. [ 1577.671594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1577.729789][ T31] task:syz.3.3754 state:D stack:25032 pid:21272 tgid:21266 ppid:18785 task_flags:0x400548 flags:0x00024000 [ 1577.824754][ T31] Call Trace: [ 1577.839806][ T31] [ 1577.854454][ T31] __schedule+0x1798/0x4cc0 [ 1577.883042][ T31] ? __pfx___schedule+0x10/0x10 [ 1578.028826][ T31] ? schedule+0x91/0x360 [ 1578.051357][ T31] schedule+0x165/0x360 [ 1578.066958][ T31] schedule_timeout+0x9a/0x270 [ 1578.081223][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1578.190793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1578.212522][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1578.229878][ T31] ? wait_for_completion+0x267/0x5d0 [ 1578.261824][ T31] wait_for_completion+0x2bf/0x5d0 [ 1578.272221][ T3096] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1578.329542][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1578.336568][ T3096] usbhid 7-1:0.0: can't add hid device: -71 [ 1578.352563][ T3096] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1578.374504][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 1578.379895][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 1578.385647][ T31] io_wq_put_and_exit+0x316/0x650 [ 1578.393113][ T31] io_uring_clean_tctx+0x11f/0x1a0 [ 1578.402906][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1578.416459][ T31] ? io_uring_drop_tctx_refs+0x131/0x1c0 [ 1578.428001][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 1578.458264][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1578.464122][ T3096] usb 7-1: USB disconnect, device number 16 [ 1578.489659][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1578.539071][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1578.562757][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 1578.592299][ T31] do_exit+0x345/0x2300 [ 1578.608080][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1578.629715][ T31] ? __pfx_do_exit+0x10/0x10 [ 1578.643887][ T31] do_group_exit+0x21c/0x2d0 [ 1578.660083][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1578.717690][ T31] get_signal+0x1286/0x1340 [ 1578.726263][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1578.869704][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1579.188425][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1579.210709][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1579.226410][ T31] do_syscall_64+0x2bd/0x3b0 [ 1579.240147][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.282207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.582438][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1579.612870][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.635030][T12307] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1579.648882][ T31] RIP: 0033:0x7f5c6dd8ebe9 [ 1579.714680][T12307] usb 1-1: USB disconnect, device number 43 [ 1579.722747][ T31] RSP: 002b:00007f5c6ebb50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1579.789713][ T31] RAX: fffffffffffffe00 RBX: 00007f5c6dfb6098 RCX: 00007f5c6dd8ebe9 [ 1579.796603][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1579.848255][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c6dfb6098 [ 1579.881326][ T31] RBP: 00007f5c6dfb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.926716][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.957698][ T31] R13: 00007f5c6dfb6128 R14: 00007f5c6e0df940 R15: 00007f5c6e0dfa28 [ 1580.010379][ T31] [ 1580.022918][ T31] [ 1580.022918][ T31] Showing all locks held in the system: [ 1580.065963][ T31] 1 lock held by khungtaskd/31: [ 1580.081101][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1580.103798][ T31] 2 locks held by getty/5618: [ 1580.109570][ T31] #0: ffff88814e05e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1580.120698][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1580.138620][ T31] 2 locks held by kworker/u8:8/7457: [ 1580.145371][ T31] 2 locks held by kworker/0:5/9603: [ 1580.151810][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1580.163219][ T31] #1: ffffc90003e1fbc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1580.181883][ T31] 1 lock held by iou-wrk-21272/21275: [ 1580.187601][ T31] 2 locks held by dhcpcd/22759: [ 1580.192609][ T31] #0: ffff888043242608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1580.203860][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1580.216373][ T31] [ 1580.219269][ T31] ============================================= [ 1580.219269][ T31] [ 1580.252676][ T31] NMI backtrace for cpu 0 [ 1580.252694][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1580.252713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.252723][ T31] Call Trace: [ 1580.252731][ T31] [ 1580.252738][ T31] dump_stack_lvl+0x189/0x250 [ 1580.252764][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1580.252785][ T31] ? __pfx__printk+0x10/0x10 [ 1580.252817][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1580.252836][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1580.252855][ T31] ? __pfx__printk+0x10/0x10 [ 1580.252881][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1580.252909][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1580.252928][ T31] watchdog+0xf93/0xfe0 [ 1580.252954][ T31] ? watchdog+0x1de/0xfe0 [ 1580.252980][ T31] kthread+0x70e/0x8a0 [ 1580.253004][ T31] ? __pfx_watchdog+0x10/0x10 [ 1580.253025][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.253047][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1580.253065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1580.253083][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.253104][ T31] ret_from_fork+0x3fc/0x770 [ 1580.253123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1580.253144][ T31] ? __switch_to_asm+0x39/0x70 [ 1580.253164][ T31] ? __switch_to_asm+0x33/0x70 [ 1580.253184][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.253205][ T31] ret_from_fork_asm+0x1a/0x30 [ 1580.253239][ T31] [ 1580.253245][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1580.403221][ C1] NMI backtrace for cpu 1 [ 1580.403239][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1580.403258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.403270][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1580.403296][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1580.403312][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1580.403327][ C1] RAX: 4d16ec34fe67fc00 RBX: ffffffff81968308 RCX: 4d16ec34fe67fc00 [ 1580.403340][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b4766 RDI: ffffffff8be32600 [ 1580.403352][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1580.403364][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa34530 [ 1580.403377][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 1580.403388][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 1580.403403][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1580.403415][ C1] CR2: 000055c158e0d660 CR3: 0000000077486000 CR4: 00000000003526f0 [ 1580.403430][ C1] Call Trace: [ 1580.403437][ C1] [ 1580.403444][ C1] default_idle+0x13/0x20 [ 1580.403469][ C1] default_idle_call+0x74/0xb0 [ 1580.403493][ C1] do_idle+0x1e8/0x510 [ 1580.403514][ C1] ? __pfx_do_idle+0x10/0x10 [ 1580.403539][ C1] cpu_startup_entry+0x44/0x60 [ 1580.403555][ C1] start_secondary+0x101/0x110 [ 1580.403582][ C1] common_startup_64+0x13e/0x147 [ 1580.403613][ C1] [ 1580.565725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.577554][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1580.584478][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1580.595952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.606039][ T31] Call Trace: [ 1580.609342][ T31] [ 1580.612301][ T31] dump_stack_lvl+0x99/0x250 [ 1580.616930][ T31] ? __asan_memcpy+0x40/0x70 [ 1580.621555][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1580.626782][ T31] ? __pfx__printk+0x10/0x10 [ 1580.631427][ T31] vpanic+0x281/0x750 [ 1580.635452][ T31] ? __pfx_vpanic+0x10/0x10 [ 1580.639989][ T31] ? preempt_schedule+0xae/0xc0 [ 1580.644886][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1580.650561][ T31] panic+0xb9/0xc0 [ 1580.654317][ T31] ? __pfx_panic+0x10/0x10 [ 1580.658772][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1580.664190][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1580.670383][ T31] watchdog+0xfd2/0xfe0 [ 1580.674584][ T31] ? watchdog+0x1de/0xfe0 [ 1580.678953][ T31] kthread+0x70e/0x8a0 [ 1580.683058][ T31] ? __pfx_watchdog+0x10/0x10 [ 1580.687777][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.692403][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1580.697627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1580.702867][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.707485][ T31] ret_from_fork+0x3fc/0x770 [ 1580.712112][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1580.717263][ T31] ? __switch_to_asm+0x39/0x70 [ 1580.722057][ T31] ? __switch_to_asm+0x33/0x70 [ 1580.726855][ T31] ? __pfx_kthread+0x10/0x10 [ 1580.731479][ T31] ret_from_fork_asm+0x1a/0x30 [ 1580.736286][ T31] [ 1580.739674][ T31] Kernel Offset: disabled [ 1580.744023][ T31] Rebooting in 86400 seconds..