last executing test programs: 9.92801153s ago: executing program 4 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x143, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x851) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r5, &(0x7f0000000440)=""/237, 0xed) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x10c6, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd604410b41090060000000000000000000000ffff00000000ff020000000000000000000000000001020402f500000000fc020000000000000000000000000001fc0000000000000000000000000000010c000000000000000001000001000000d700000000000000050206d3000000004e234e22", @ANYRES64=r2, @ANYRESDEC=r6, @ANYRES32=r3], 0x0) fsopen(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0a0825bd7000fbdbdf2587000000c11c2df20000000029000000"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004000) 8.783651877s ago: executing program 4 (id=1675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000010c0)={0xc98, r2, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0xc1c, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @rand_addr=0x64010100}}]}, {0x748, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8}]}, 0xc98}}, 0x0) 8.493967847s ago: executing program 4 (id=1677): syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x181}, {r2, 0x8024}, {r3, 0x80c0}, {r4, 0x2000}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000320000000c0042010000000000000000"], 0x20}}, 0x0) socket$inet6(0xa, 0x6, 0x0) (async) r7 = socket$inet6(0xa, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r7, 0x5) (async) listen(r7, 0x5) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301060010000500000002000020d3"]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000900)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x17ba, &(0x7f00000002c0)) (async) io_uring_setup(0x17ba, &(0x7f00000002c0)) 8.19302521s ago: executing program 4 (id=1679): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000af00)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x40, 0x7a0, 0x401, 0x9642, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x64, 0x0, 0x4c, 0x29, 0x0, @private=0xa010101, @multicast2, {[@noop, @cipso={0x86, 0xd, 0x1, [{0x0, 0x5, 'yBx'}, {0x0, 0x2}]}, @rr={0x7, 0xf, 0x9d, [@multicast1, @multicast1, @multicast2]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000b9b746fc0ff8ca593f8bccada161b10300000800000085000d00690000009500000000000000"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) readv(r5, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/15, 0xf}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@hyper}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper}, @my=0x1, 0x0, 0x0, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x18603}) close_range(r4, 0xffffffffffffffff, 0x0) 7.176035521s ago: executing program 2 (id=1686): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010009050000000000000003001700000000000200fffcac1414000000ad84d67ae676"], 0x28}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 7.17351385s ago: executing program 4 (id=1687): syz_io_uring_setup(0x16d2, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0xe}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0xffffffed) setreuid(0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020}, 0x209d) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.969350972s ago: executing program 2 (id=1690): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffffc, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@deltclass={0x5c, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0x5, 0xd}, {0x3, 0xb23a643561b0ecd4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x3, 0xffff, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x0, 0x401}}]}}]}, 0x5c}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0xa, 0x20}]}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) io_uring_setup(0x354a, &(0x7f0000000080)={0x0, 0xbcb, 0x8, 0xfffffffd, 0x232, 0x0, r2}) r6 = socket(0x10, 0x2, 0xc) write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) 6.717196936s ago: executing program 4 (id=1691): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) userfaultfd(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=00000000000000000120000,user_i', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75cfc54bf6d88bf71746bf7440fe1ebdfc8231b1d4eacb6e661c545af52ad04b6aaa5150d4b8b5b70d0425c594a8654386778fd701fbf1bafc7a85abd48836f87fff21216517d4c071ab3922a2bd5777791e9d153e3f79dbecbe8f1a3379a7651bf25146ba86b3eb7f11c57a3bdb90a147ed34dc14784ad3df8ee638b8399f662389f26dd933d997b6f6f00c25ea7f1c7cf1dde583d16e73fff3941bd23728d95ae53e2307ff098eea023159981d56b8f0df1caf479a97660d9b9333ac873b13d663505b709cfdac0186dd3ac20585f87e2e487c46649badb4a38a73059077256eb03df5bfcd253a499c", @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dc3b5ded9fceeef01e56a0020a3294304264ea1e69cdc38c01c2aa5edadbe3263fce6daa189694da7891a2b39b1ccb6c8dfe184b556f9bca1a509a231f2f47d447bbaae737ba4aec54fda739555a73dc400f9d225dbcfa7f84cce396509bb2c3b7c7ba6c5a76ca7f8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 5.85727785s ago: executing program 0 (id=1697): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) connect$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x3, @remote, 0x6fb, 0x4}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @default, @random="ce80209cb06d", @broadcast}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000905275000e0300050200000000000000000002d58838068b91000000"], 0x4e) 4.996081246s ago: executing program 0 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x20000000}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 4.748984659s ago: executing program 0 (id=1701): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4.50728822s ago: executing program 1 (id=1702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x20000000}, 0x14}}, 0x0) 4.394204555s ago: executing program 0 (id=1704): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x101042) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/4096) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xffffc025}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4e479b03c28c7298, 0x0) recvmmsg(r6, &(0x7f0000008440)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/208, 0xd0}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/60, 0x3c}], 0x6, &(0x7f0000001800)=""/151, 0x97}, 0x8001}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/27, 0x1b}, {&(0x7f0000001980)=""/34, 0x22}, {&(0x7f00000019c0)=""/6, 0x6}], 0x3}, 0x2e5}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/65, 0x41}, {&(0x7f0000001c80)=""/121, 0x79}], 0x3, &(0x7f0000001d40)=""/161, 0xa1}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/159, 0x9f}], 0x1, &(0x7f0000001f00)=""/6, 0x6}, 0xffff}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000002040)=""/137, 0x89}, {&(0x7f0000002100)=""/236, 0xec}, {&(0x7f0000002200)=""/130, 0x82}], 0x3, &(0x7f00000022c0)=""/206, 0xce}, 0x5}, {{&(0x7f00000023c0)=@caif=@rfm, 0x80, &(0x7f0000003580)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/130, 0x82}, {&(0x7f0000003540)=""/44, 0x2c}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000035c0)=""/217, 0xd9}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004800)=""/119, 0x77}], 0x5, &(0x7f0000004900)=""/173, 0xad}}, {{&(0x7f00000049c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/138, 0x8a}, {&(0x7f0000006b00)=""/202, 0xca}], 0x4, &(0x7f0000006c40)=""/172, 0xac}, 0x80000000}, {{0x0, 0x0, &(0x7f0000008280)=[{&(0x7f0000006d80)=""/158, 0x9e}, {&(0x7f0000006e40)=""/169, 0xa9}, {&(0x7f0000006f00)=""/133, 0x85}, {&(0x7f0000006fc0)=""/241, 0xf1}, {&(0x7f00000070c0)=""/75, 0x4b}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/137, 0x89}, {&(0x7f0000008200)=""/1, 0x1}, {&(0x7f0000008240)=""/21, 0x15}], 0x9, &(0x7f0000008340)=""/225, 0xe1}, 0xd7}], 0xa, 0x23, &(0x7f00000086c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600), 0x3b, 0x0, &(0x7f0000001800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000780)="3f030e00031b12000000000089e9aaa911d7c2ff0700810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="0300"}, 0x14) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000003440)=0x1000, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff62, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="0900f2ff0f00000000e2ffeeb3000000000000007e08973fd26ac453d4635628ff277100d9f6418e65bc8bbc4467691ebe8c8381b379154c32faefe23f0a55f0cc9623a34d49f881d590f38c816aee6ce9084912ac8ab46b101dbba1df29c0d027ef2d0f1e504eee2a7c51d708057c3f49364e3645c58c23ca789f477abd678d198fedece6ec42c38ccf8f620da70ce53d139995257ed6457805d553b1eae2b585ca8e8f0a6adaa88290d174ac93788954dd7b62701b5629bc81dac2090000002e0c89e552d8542a17d49b3e9dbff6d8a078a13bfa963f314e208b60ef082e1983114463264cb3ed7e3d6516f2c78e06299879a69d556723df15c9ce5e63156b2c5e", @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000000000008000a", @ANYRESHEX=r11], 0x44}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) 4.133056709s ago: executing program 1 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x140) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x2c0482, 0x0, 0x3d}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r8], 0x4c}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x6440, 0x0) getdents64(r5, &(0x7f00000024c0)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f00000d9000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000003740)={{0x0, 0x0, 0x80}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 3.883521787s ago: executing program 2 (id=1706): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r0 = socket(0x1e, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x3}}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.583789745s ago: executing program 2 (id=1707): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x1000000, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0xd6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 3.45541619s ago: executing program 3 (id=1708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x3, 0xd, 0xe5, 0x10, 0x10d2, 0x1175, 0xf4c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0x60, 0xb3}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x10000, @remote}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x18, 0x1e, 0x323, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000003c0), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000340)}) 3.001020553s ago: executing program 1 (id=1709): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) socket(0x18, 0x5, 0xfffffffc) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8000c000800010003c0040000000000"], 0x11) syz_emit_vhci(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="3d4c3a93864f52c49fe402b3f23d5e82334ba88133f41f659bc3120980cf51e8d2e418dc2a2aff9bc38fc17dea1c53b5717d266c3f05792dce2e8d747875d0732b6074b9d21a3609efa55cf0c145e9e098e34b56ff25b6d0e1426fd785c4f33595fd6027217b39f019e861b302d37f94f3e6ce51d366a95b33638c182ca22ba0ef3d2d820eeb2e549964e88c2a47c4d828e761e077a3348d78a79a9872fa14", 0x9f, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="16000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xf000}) syz_emit_ethernet(0xa6, &(0x7f0000000640)={@broadcast, @remote, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @dev, {[@cipso={0x86, 0x63, 0x0, [{0x0, 0x10, "e200b28c599da0eb9cf1bd838019"}, {0x0, 0x8, "743495437356"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0x2}, {0x0, 0x6, "cfa11cab"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x2}, {0x0, 0x10, "73bc2300ad9d19a3000000000000"}, {0x0, 0x12, "c8f46972e79e3fc7a95e8d40b154c12f"}]}]}}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0xcd5, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) 2.079537934s ago: executing program 1 (id=1710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="270300300000000000000000000008000100", @ANYRES32=r10], 0x1c}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r4, 0x0, 0x8, 0x9c77d, 0x1, &(0x7f0000000000)='E', 0x10000}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x487, 0x0, &(0x7f0000000d80)=0x30) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xc}, 0x1c) 1.974724158s ago: executing program 3 (id=1711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x1000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.612177627s ago: executing program 3 (id=1712): syz_io_uring_setup(0x16d2, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0xe}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0xffffffed) setreuid(0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.425306421s ago: executing program 3 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, 0x0}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x1000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.195418973s ago: executing program 0 (id=1714): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x10, 0x7, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote, 0x1}}}, 0x48) open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000400)=ANY=[], 0xfffffecc) r5 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x2e2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000380)={0x3}, r3}) io_uring_enter(r5, 0x1ffe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0b028008001300930a0000"], 0x3c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, 0x0) socket(0x10, 0x3, 0x0) 1.143151451s ago: executing program 3 (id=1715): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000003c0)={0x0, 0x0, 0x1ff}) r1 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x48bf, &(0x7f0000000280), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x6) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10021) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000200)={0x1}) read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) r5 = gettid() gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x200000a, 0x4018831, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000500)='y', 0xcd8c}], 0x1) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) 773.040289ms ago: executing program 2 (id=1716): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 761.79835ms ago: executing program 1 (id=1717): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) capset(0x0, &(0x7f00000003c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000540)=""/102386, 0x18ff2}], 0x1, 0xfffffffd, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) madvise(&(0x7f0000dba000/0x4000)=nil, 0x4000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002500)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="663c00301e2460d6f5beb6585d0903853fb0a70a539d132591710d3ea7ad1a06f4d12bf6cd21500359da5edbee5c0f65fb4783c3e7da682e46fa3c1538e2082a60af8ffa67c5fb8b734c556eadf64f95c1e50b12b4aa3214a91203a4dbb141", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f000000b080)="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", 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 211.34671ms ago: executing program 3 (id=1718): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aafb1e4d3aaaaaaaaaaabbbbbbbbbbbb08004500001c000000020011907800000000000000000000000000089078"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe01c, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x40, 0x1, 0xb, 0xa9}, {0xfffd, 0x10, 0xd, 0x5}, {0x1000, 0x8, 0x5, 0x2800}, {0x2, 0x2, 0x96, 0x200}, {0x3, 0x10, 0xb7, 0x2}, {0xbe11, 0x40, 0x7, 0x4}, {0x9, 0xc1, 0xf, 0x1}, {0x2f1, 0x7, 0x3, 0xffff}, {0x1, 0x2, 0x5, 0x3}, {0xc, 0x7f, 0x7, 0x5}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = syz_open_dev$evdev(&(0x7f00000003c0), 0x800000000, 0x4101) ioctl$EVIOCGREP(r8, 0x80084503, &(0x7f0000000480)=""/9) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) r9 = eventfd(0x5) io_submit(r3, 0x3, &(0x7f0000000400)=[&(0x7f0000000440)={0x18, 0x7000000, 0x10, 0x1, 0xd, r2, 0x0, 0xfffffffffffffed5, 0x1000000000000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000000240)="1d1e88bb09b8bc315664cd046d0e92426e39d297af0d8e1f7e5a2c1e00d23b11c19061620c7651dfb686a13cc141b59a4e918ebbce1ced864cb4914f99c8b09214d45a09d1802cf7bcc3d95dbb882e20fff4fc4eae891012944871590ccb6686d5244cd81a2d60a3802676df17ef259328409823753d5f6dfbcb4d692d1c2ec0a1e138cde27cda584dde3ef1ed17ef13", 0x90, 0x10, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000300)="314e56b1f79ba07c7dfd3cd10b7ab6df022fcd7ba58d68d8d1799d29e407a4741519da6ebb9d697f9469eb08006e9fee8bcabe823888b1598eee6084fbef7bb5d48d3fb21f38e6fad91730c0fa4295803a3f1627359d3d0d79e72ee8174ffd0ba1f5242cd76cba8c280377917125f07ba21b9465212379de3441f208636cb4948e4b595e73ad7ecf3f3e377c9e4708907b934ef92a42c6000000000000", 0xdd, 0xd680, 0x0, 0x1, r9}]) 76.939881ms ago: executing program 1 (id=1719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x4100000000000000) 3.639752ms ago: executing program 2 (id=1720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072000103"], 0x20}, 0x1, 0xf00}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7fff, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000580)={0x0, 0x100004, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) 0s ago: executing program 0 (id=1721): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x8851}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x8, 0x28840) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) kernel console output (not intermixed with test programs): 8][ T47] usb 3-1: config 0 descriptor?? [ 418.152688][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.164597][ T47] usblcd 3-1:0.0: USBLCD model not supported. [ 418.183564][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.196944][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.224660][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.241741][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.284140][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.310339][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 418.348766][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 418.363434][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 418.399359][T11490] syzkaller1: entered promiscuous mode [ 418.411781][T11490] syzkaller1: entered allmulticast mode [ 418.420695][ T47] usb 3-1: USB disconnect, device number 69 [ 418.444073][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.456599][T11257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.486324][T11257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.502942][T11257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.524465][T11257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.599770][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.606966][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.646326][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.653503][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.941767][ T2544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.983032][ T2544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.054515][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 419.070953][T11305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.119998][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.164862][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.167748][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.411000][T11529] FAULT_INJECTION: forcing a failure. [ 419.411000][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 419.419377][T11305] veth0_vlan: entered promiscuous mode [ 419.457183][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.4.1229 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 419.467984][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 419.477266][T11305] veth1_vlan: entered promiscuous mode [ 419.478032][T11529] Call Trace: [ 419.486796][T11529] [ 419.489740][T11529] dump_stack_lvl+0x241/0x360 [ 419.494441][T11529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.499670][T11529] ? __pfx__printk+0x10/0x10 [ 419.504280][T11529] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 419.510191][T11529] ? __pfx___might_resched+0x10/0x10 [ 419.515495][T11529] ? process_measurement+0x1af3/0x1fb0 [ 419.520975][T11529] should_fail_ex+0x3b0/0x4e0 [ 419.525672][T11529] ? sock_alloc_inode+0x28/0xc0 [ 419.530540][T11529] should_failslab+0xac/0x100 [ 419.535240][T11529] ? sock_alloc_inode+0x28/0xc0 [ 419.540111][T11529] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 419.543461][T11305] veth0_macvtap: entered promiscuous mode [ 419.545834][T11529] sock_alloc_inode+0x28/0xc0 [ 419.545863][T11529] ? __pfx_sock_alloc_inode+0x10/0x10 [ 419.560197][T11305] veth1_macvtap: entered promiscuous mode [ 419.561551][T11529] new_inode_pseudo+0x69/0x1a0 [ 419.561585][T11529] __sock_create+0x123/0x920 [ 419.576701][T11529] ? __lock_acquire+0x137a/0x2040 [ 419.581726][T11529] mptcp_subflow_create_socket+0x132/0xdf0 [ 419.587535][T11529] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 419.593855][T11529] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.599876][T11529] __mptcp_nmpc_sk+0x178/0x800 [ 419.604638][T11529] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 419.609912][T11529] ? __local_bh_enable_ip+0x168/0x200 [ 419.615276][T11529] ? mptcp_sendmsg+0x153/0x1b10 [ 419.620118][T11529] mptcp_sendmsg_fastopen+0xc3/0x530 [ 419.625400][T11529] mptcp_sendmsg+0x1884/0x1b10 [ 419.630161][T11529] ? aa_sk_perm+0x96d/0xab0 [ 419.634658][T11529] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.639494][T11529] ? iovec_from_user+0x61/0x240 [ 419.644335][T11529] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 419.649436][T11529] ? sock_rps_record_flow+0x1a/0x400 [ 419.654722][T11529] ? inet_sendmsg+0x330/0x390 [ 419.659393][T11529] __sock_sendmsg+0x1a6/0x270 [ 419.664077][T11529] ____sys_sendmsg+0x525/0x7d0 [ 419.668841][T11529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.674130][T11529] __sys_sendmsg+0x2b0/0x3a0 [ 419.678713][T11529] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.683815][T11529] ? vfs_write+0x7c4/0xc90 [ 419.688250][T11529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.694657][T11529] ? do_syscall_64+0x100/0x230 [ 419.699411][T11529] ? do_syscall_64+0xb6/0x230 [ 419.704081][T11529] do_syscall_64+0xf3/0x230 [ 419.708573][T11529] ? clear_bhb_loop+0x35/0x90 [ 419.713242][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.719125][T11529] RIP: 0033:0x7ff70397def9 [ 419.723529][T11529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.743122][T11529] RSP: 002b:00007ff70471d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.751526][T11529] RAX: ffffffffffffffda RBX: 00007ff703b35f80 RCX: 00007ff70397def9 [ 419.759487][T11529] RDX: 0000000030004001 RSI: 0000000020000080 RDI: 0000000000000003 [ 419.767450][T11529] RBP: 00007ff70471d090 R08: 0000000000000000 R09: 0000000000000000 [ 419.775415][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.783379][T11529] R13: 0000000000000000 R14: 00007ff703b35f80 R15: 00007ff703c5fa28 [ 419.791349][T11529] [ 419.794458][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.811464][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 419.860889][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 419.871786][T11529] socket: no more sockets [ 419.904050][ T5286] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 419.914643][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.956066][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.985610][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.008930][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.019546][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.072575][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.102482][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.115011][ T5286] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.134253][ T5286] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 420.148743][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.163001][T11549] fuse: Bad value for 'fd' [ 420.166665][ T5286] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.181642][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.183381][T11549] fuse: Bad value for 'fd' [ 420.202539][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.212321][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.242942][T11524] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.263775][ T5286] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.276793][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.319522][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.372397][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.408283][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.434565][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.448331][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 420.468975][T11536] syzkaller1: entered promiscuous mode [ 420.486875][T11536] syzkaller1: entered allmulticast mode [ 420.578754][ T5286] usb 4-1: USB disconnect, device number 43 [ 420.621132][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.669455][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.719434][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.764738][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.808569][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.852759][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.879605][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.916056][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.952775][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.980783][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.994731][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.005865][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.055401][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.067396][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.088099][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.205231][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 421.248270][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'. [ 421.353936][T11305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.391847][T11305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.414938][T11305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.442341][T11305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.604519][T11581] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1299'. [ 421.705433][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.722900][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.794008][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.841036][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.492639][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 422.736056][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.786786][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.849230][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 422.871402][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.892827][ T8] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 422.913047][ T9] usb 4-1: config 0 descriptor?? [ 423.124954][ T8] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 423.155747][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.227651][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.279901][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 423.316028][T11605] team_slave_1: entered promiscuous mode [ 423.333231][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.344742][T11605] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 423.373862][ T8] usb 5-1: config 0 descriptor?? [ 423.385849][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.393360][T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.404570][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 423.429014][ T8] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 423.490491][T11605] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.497766][T11605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.505341][T11605] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.512505][T11605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.569744][T11605] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 423.587110][T11651] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 423.614477][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.622755][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.712883][ T5286] usb 5-1: USB disconnect, device number 57 [ 423.750577][ T5286] ftdi_sio 5-1:0.0: device disconnected [ 424.356094][ T5286] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 424.522652][ T5286] usb 3-1: device descriptor read/64, error -71 [ 424.752537][ T5282] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 424.832499][ T5286] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 424.952445][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 424.964797][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.983792][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.995653][ T5286] usb 3-1: device descriptor read/64, error -71 [ 425.002011][ T5282] usb 5-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 425.003219][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 425.011258][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.016502][ T5282] usb 5-1: config 0 descriptor?? [ 425.112630][ T5286] usb usb3-port1: attempt power cycle [ 425.198397][ T9] usb 4-1: string descriptor 0 read error: -71 [ 425.211100][T11689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.225020][ T8] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 425.234566][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 425.240569][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 425.253865][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.273775][ T8] usb 2-1: config 0 has no interface number 0 [ 425.281782][ T9] usb 4-1: USB disconnect, device number 44 [ 425.289314][ T8] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 425.304853][ T8] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.324850][ T8] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 425.334590][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.349323][ T8] usb 2-1: Product: syz [ 425.357294][ T8] usb 2-1: Manufacturer: syz [ 425.365732][ T8] usb 2-1: SerialNumber: syz [ 425.378617][ T8] usb 2-1: config 0 descriptor?? [ 425.542612][ T5286] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 425.584124][ T5286] usb 3-1: device descriptor read/8, error -71 [ 425.638710][ T8] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 425.693070][ T8] usb 2-1: USB disconnect, device number 42 [ 425.743053][T11703] __nla_validate_parse: 1 callbacks suppressed [ 425.743072][T11703] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1324'. [ 425.872581][ T5286] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 425.923168][ T5286] usb 3-1: device descriptor read/8, error -71 [ 426.053348][ T5286] usb usb3-port1: unable to enumerate USB device [ 426.491556][T11712] FAULT_INJECTION: forcing a failure. [ 426.491556][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 426.504739][T11712] CPU: 1 UID: 0 PID: 11712 Comm: syz.3.1328 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 426.515622][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.525709][T11712] Call Trace: [ 426.529050][T11712] [ 426.532009][T11712] dump_stack_lvl+0x241/0x360 [ 426.536721][T11712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.540653][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 426.541917][T11712] ? __pfx__printk+0x10/0x10 [ 426.555353][T11712] ? __pfx_lock_acquire+0x10/0x10 [ 426.556834][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 426.560385][T11712] should_fail_ex+0x3b0/0x4e0 [ 426.573901][T11712] should_failslab+0xac/0x100 [ 426.578613][T11712] ? tipc_nametbl_lookup_mcast_sockets+0x62f/0xd70 [ 426.585132][T11712] __kmalloc_cache_noprof+0x6c/0x2c0 [ 426.590420][T11712] tipc_nametbl_lookup_mcast_sockets+0x62f/0xd70 [ 426.596749][T11712] ? tipc_nametbl_lookup_mcast_sockets+0x56/0xd70 [ 426.603169][T11712] tipc_sk_mcast_rcv+0x6ce/0x1400 [ 426.608209][T11712] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 426.613687][T11712] ? __raw_spin_lock_init+0x45/0x100 [ 426.618969][T11712] tipc_mcast_xmit+0x12ad/0x19c0 [ 426.623910][T11712] ? __might_fault+0xc6/0x120 [ 426.628587][T11712] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 426.633866][T11712] ? _copy_from_iter+0x337/0x1960 [ 426.638882][T11712] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 426.644254][T11712] ? __build_skb_around+0x245/0x3d0 [ 426.649452][T11712] ? __alloc_skb+0x2d5/0x440 [ 426.654031][T11712] ? __pfx__copy_from_iter+0x10/0x10 [ 426.659311][T11712] ? __pfx___alloc_skb+0x10/0x10 [ 426.664243][T11712] ? tipc_msg_build+0x42a/0x1070 [ 426.669170][T11712] ? __check_object_size+0x98/0x900 [ 426.674364][T11712] ? tipc_msg_build+0x4b3/0x1070 [ 426.679301][T11712] ? __pfx_lock_release+0x10/0x10 [ 426.684335][T11712] tipc_send_group_bcast+0x8bd/0xbd0 [ 426.689626][T11712] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 426.695431][T11712] ? __pfx_woken_wake_function+0x10/0x10 [ 426.701068][T11712] __tipc_sendmsg+0x24c7/0x35f0 [ 426.705922][T11712] ? __pfx___tipc_sendmsg+0x10/0x10 [ 426.711106][T11712] ? validate_chain+0x11e/0x5900 [ 426.716038][T11712] ? validate_chain+0x11e/0x5900 [ 426.720965][T11712] ? __pfx_lock_acquire+0x10/0x10 [ 426.725991][T11712] ? __pfx_validate_chain+0x10/0x10 [ 426.731180][T11712] ? __pfx_validate_chain+0x10/0x10 [ 426.736366][T11712] ? aa_label_sk_perm+0x4f0/0x6d0 [ 426.741384][T11712] ? mark_lock+0x9a/0x350 [ 426.745710][T11712] ? __lock_acquire+0x137a/0x2040 [ 426.750741][T11712] ? mark_lock+0x9a/0x350 [ 426.755065][T11712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.761043][T11712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.767373][T11712] ? __local_bh_enable_ip+0x168/0x200 [ 426.772737][T11712] ? tipc_sendmsg+0x47/0x70 [ 426.777228][T11712] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 426.782936][T11712] ? do_raw_spin_unlock+0x13c/0x8b0 [ 426.788132][T11712] ? __pfx_tipc_sendmsg+0x10/0x10 [ 426.793145][T11712] tipc_sendmsg+0x55/0x70 [ 426.797465][T11712] __sock_sendmsg+0x221/0x270 [ 426.802138][T11712] ____sys_sendmsg+0x525/0x7d0 [ 426.806898][T11712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.812184][T11712] __sys_sendmsg+0x2b0/0x3a0 [ 426.816778][T11712] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.821881][T11712] ? vfs_write+0x7c4/0xc90 [ 426.826322][T11712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.832656][T11712] ? do_syscall_64+0x100/0x230 [ 426.837428][T11712] ? do_syscall_64+0xb6/0x230 [ 426.842097][T11712] do_syscall_64+0xf3/0x230 [ 426.846589][T11712] ? clear_bhb_loop+0x35/0x90 [ 426.851262][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.857145][T11712] RIP: 0033:0x7f688fd7def9 [ 426.861547][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.881140][T11712] RSP: 002b:00007f6890c21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.889543][T11712] RAX: ffffffffffffffda RBX: 00007f688ff35f80 RCX: 00007f688fd7def9 [ 426.897502][T11712] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 426.905460][T11712] RBP: 00007f6890c21090 R08: 0000000000000000 R09: 0000000000000000 [ 426.913420][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.921378][T11712] R13: 0000000000000000 R14: 00007f688ff35f80 R15: 00007f689005fa28 [ 426.929349][T11712] [ 426.964103][T11713] netlink: 792 bytes leftover after parsing attributes in process `syz.0.1327'. [ 426.985464][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 427.028068][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.072029][T11715] syzkaller1: entered promiscuous mode [ 427.079818][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.092822][T11715] syzkaller1: entered allmulticast mode [ 427.098626][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.126253][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.157311][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.218947][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.252489][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.280996][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.292482][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.321168][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.322431][ T47] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 427.347989][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.364814][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.392609][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.436571][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.453479][ T5284] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 427.481410][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.501188][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 427.512815][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 427.515753][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.536758][ T47] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.562893][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.581032][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.591475][ T5282] usb 5-1: USB disconnect, device number 58 [ 427.597871][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.628723][ T47] usb 1-1: Product: syz [ 427.632318][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.640481][ T47] usb 1-1: Manufacturer: syz [ 427.656265][ T47] usb 1-1: SerialNumber: syz [ 427.664092][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.683870][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 427.696297][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 427.709000][ T47] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.712279][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.725702][ T5284] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 427.755794][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.764808][ T5286] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.785395][ T5284] usb 4-1: config 0 descriptor?? [ 427.787686][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.841969][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.870477][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.883927][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.891781][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.917765][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.935388][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 427.967352][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 428.008213][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 428.019909][T11713] qrtr: Invalid version 18 [ 428.043171][ T8] hid-generic 0000:0001:00BE.0017: unknown main item tag 0x0 [ 428.068829][ T5281] usb 1-1: USB disconnect, device number 49 [ 428.084038][ T8] hid-generic 0000:0001:00BE.0017: hidraw0: HID v2000.00 Device [syz0] on syz0 [ 428.172958][ T5282] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 428.201720][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.215176][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.233085][ T5284] hid (null): bogus close delimiter [ 428.240597][ T5284] hid (null): bogus close delimiter [ 428.256213][ T5284] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 428.273831][ T5284] hid-generic 0003:0158:0100.0018: unexpected long global item [ 428.317720][ T5284] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 428.376066][ T5282] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 428.389350][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.400170][ T5282] usb 5-1: Product: syz [ 428.406932][ T5282] usb 5-1: Manufacturer: syz [ 428.411759][ T5282] usb 5-1: SerialNumber: syz [ 428.428710][ T5282] usb 5-1: config 0 descriptor?? [ 428.446636][ T5282] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 428.454973][ T5284] usb 4-1: USB disconnect, device number 45 [ 428.713216][T11741] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1338'. [ 428.742374][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 428.804979][ T5286] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 428.815912][ T5286] ath9k_htc: Failed to initialize the device [ 428.825831][ T5281] usb 1-1: ath9k_htc: USB layer deinitialized [ 428.982534][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 428.982554][ T5282] gspca_vc032x: reg_r err -110 [ 428.982570][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.001901][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.019172][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 429.026014][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.053896][ T8] usb 3-1: config 127 has an invalid interface number: 72 but max is 1 [ 429.055096][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.091208][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.101449][ T8] usb 3-1: config 127 has an invalid interface number: 105 but max is 1 [ 429.117172][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.142539][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.148154][ T8] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 429.173601][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.179253][ T8] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 429.204228][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.213830][ T8] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 429.221172][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.252002][ T8] usb 3-1: config 127 has no interface number 0 [ 429.270626][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.293331][ T8] usb 3-1: config 127 has no interface number 1 [ 429.300896][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.320793][ T8] usb 3-1: config 127 interface 72 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 429.323075][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.347183][ T8] usb 3-1: config 127 interface 72 altsetting 9 endpoint 0x2 has invalid maxpacket 88, setting to 64 [ 429.393216][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.412124][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.438069][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.444772][ T8] usb 3-1: config 127 interface 72 altsetting 9 endpoint 0x9 has an invalid bInterval 250, changing to 7 [ 429.451349][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.470110][ T5282] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.476470][ T5282] gspca_vc032x: Unknown sensor... [ 429.481606][ T5282] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 429.509141][ T8] usb 3-1: config 127 interface 72 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 429.598516][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 429.617454][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 429.627733][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 429.636583][ T8] usb 3-1: config 127 interface 105 altsetting 101 has an invalid descriptor for endpoint zero, skipping [ 429.655149][T11763] syzkaller1: entered promiscuous mode [ 429.662000][T11763] syzkaller1: entered allmulticast mode [ 429.708507][ T8] usb 3-1: config 127 interface 105 altsetting 101 has an invalid descriptor for endpoint zero, skipping [ 429.768805][ T8] usb 3-1: config 127 interface 105 altsetting 101 has 7 endpoint descriptors, different from the interface descriptor's value: 0 [ 429.842444][ T5238] Bluetooth: hci1: command tx timeout [ 429.850571][ T8] usb 3-1: config 127 interface 72 has no altsetting 0 [ 429.912261][ T8] usb 3-1: config 127 interface 105 has no altsetting 0 [ 429.948666][ T8] usb 3-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=9c.be [ 430.009571][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.035615][ T8] usb 3-1: Product: syz [ 430.044438][ T8] usb 3-1: Manufacturer: syz [ 430.054497][ T8] usb 3-1: SerialNumber: syz [ 430.164153][T11773] netlink: 'syz.0.1348': attribute type 4 has an invalid length. [ 430.280457][ T8] usb 3-1: bad CDC descriptors [ 430.291512][ T8] cdc_acm 3-1:127.72: Zero length descriptor references [ 430.329489][ T8] cdc_acm 3-1:127.72: probe with driver cdc_acm failed with error -22 [ 430.385512][ T8] usb 3-1: USB disconnect, device number 74 [ 430.707855][ T8] usb 5-1: USB disconnect, device number 59 [ 430.825837][T11790] openvswitch: netlink: Message has 8 unknown bytes. [ 430.862445][ T944] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 430.963765][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 430.963783][ T29] audit: type=1326 audit(1726237492.467:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.089742][ T944] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.098443][ T29] audit: type=1326 audit(1726237492.497:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.123260][ T944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.170573][ T944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.192478][ T29] audit: type=1326 audit(1726237492.497:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.239847][ T944] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.351332][ T944] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.365355][ T5286] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 431.376157][ T29] audit: type=1326 audit(1726237492.497:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.407691][ T29] audit: type=1326 audit(1726237492.497:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.430020][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.478955][ T944] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 431.478989][ T29] audit: type=1326 audit(1726237492.497:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.509580][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.560822][ T944] usb 1-1: Product: syz [ 431.567080][ T29] audit: type=1326 audit(1726237492.497:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.592989][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.603667][ T944] usb 1-1: Manufacturer: syz [ 431.615900][ T29] audit: type=1326 audit(1726237492.497:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.639087][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 431.653479][ T5286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 431.678729][ T29] audit: type=1326 audit(1726237492.497:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.707376][ T5286] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 431.726581][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 431.741323][ T5286] usb 2-1: Product: syz [ 431.753234][ T29] audit: type=1326 audit(1726237492.497:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.4.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff70397def9 code=0x7ffc0000 [ 431.784112][ T944] cdc_wdm 1-1:1.0: skipping garbage [ 431.789346][ T944] cdc_wdm 1-1:1.0: skipping garbage [ 431.797582][ T5286] usb 2-1: Manufacturer: syz [ 431.802772][ T944] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 431.812351][ T5286] usb 2-1: SerialNumber: syz [ 431.833020][ T5286] usb 2-1: config 0 descriptor?? [ 431.863671][T11795] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 431.932508][ T5282] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 432.075521][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 432.094615][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 432.109704][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 432.133985][ T5282] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.157120][T11803] syzkaller1: entered promiscuous mode [ 432.164029][ T5282] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 432.164075][T11803] syzkaller1: entered allmulticast mode [ 432.188358][ T8] usb 1-1: USB disconnect, device number 50 [ 432.194539][ T944] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 432.202339][ T5282] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.231072][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.267397][T11799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 432.277666][ T5282] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.365847][ T9] usb 2-1: USB disconnect, device number 43 [ 432.417813][ T944] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.441500][ T944] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 432.482404][ T944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.501648][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.574458][T11801] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 432.655842][ T944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.680785][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 432.715148][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 432.796277][ T5284] usb 4-1: USB disconnect, device number 46 [ 432.968608][T11810] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 433.148333][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 433.209451][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 433.314078][ T944] usb 3-1: USB disconnect, device number 75 [ 433.337369][T11819] ptrace attach of "./syz-executor exec"[11257] was attempted by "./syz-executor exec"[11819] [ 433.367954][T11818] fuse: Bad value for 'fd' [ 433.922589][ T5238] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 433.931394][ T5238] Bluetooth: hci4: Injecting HCI hardware error event [ 433.940374][ T5238] Bluetooth: hci4: hardware error 0x00 [ 433.973916][T11832] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1364'. [ 434.285314][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 434.538986][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 434.572459][T11842] tc_dump_action: action bad kind [ 434.628042][T11841] sctp: [Deprecated]: syz.4.1368 (pid 11841) Use of int in max_burst socket option deprecated. [ 434.628042][T11841] Use struct sctp_assoc_value instead [ 434.651979][T11848] @: renamed from vlan0 (while UP) [ 434.688752][T11841] x_tables: duplicate underflow at hook 3 [ 435.112500][ T5284] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 435.216504][T11845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 435.233104][T11845] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 435.240844][T11845] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 435.251350][T11845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.257642][T11845] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 435.267856][T11845] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 435.277125][T11845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.283912][T11845] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 435.301857][T11845] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 435.318350][T11845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.335377][ T5284] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.352550][T11845] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 435.390702][T11845] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 435.391653][ T5284] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.410429][ T5284] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.419841][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.445779][T11852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 435.460649][ T5284] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.774687][ T944] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 435.776711][ T5284] usb 4-1: USB disconnect, device number 47 [ 435.982143][ T944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.002425][ T5238] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 436.004529][ T5281] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 436.022563][ T944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 436.059083][ T944] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 436.091598][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.131441][ T944] usb 5-1: config 0 descriptor?? [ 436.167556][ T944] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 436.182677][ T944] dvb-usb: bulk message failed: -22 (3/0) [ 436.200496][ T944] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 436.270091][ T944] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 436.278895][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 436.290958][ T944] usb 5-1: media controller created [ 436.299836][ T5281] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 436.318453][ T944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.327016][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.375350][ T5281] usb 2-1: Product: syz [ 436.390332][ T5281] usb 2-1: Manufacturer: syz [ 436.405909][ T5281] usb 2-1: SerialNumber: syz [ 436.408906][ T944] dvb-usb: bulk message failed: -22 (6/0) [ 436.427046][ T5281] usb 2-1: config 0 descriptor?? [ 436.443266][ T944] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 436.452497][ T5284] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 436.458370][ T5281] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 436.474616][ T944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 436.531000][ T944] dvb-usb: schedule remote query interval to 150 msecs. [ 436.551536][ T944] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 436.601443][ T944] usb 5-1: USB disconnect, device number 60 [ 436.662375][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 436.679863][ T5284] usb 3-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 436.734572][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.751893][ T5284] usb 3-1: Product: syz [ 436.756698][ T944] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 436.757696][ T5284] usb 3-1: Manufacturer: syz [ 436.784787][ T5284] usb 3-1: SerialNumber: syz [ 436.801700][ T5284] usb 3-1: config 0 descriptor?? [ 436.807051][ T5282] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 436.827791][ T5284] usblcd 3-1:0.0: USBLCD model not supported. [ 437.013301][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 437.139207][ T5284] usb 3-1: USB disconnect, device number 76 [ 437.203877][ T5281] gspca_stk1135: reg_w 0x0 err -110 [ 437.204940][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.204955][ T5281] gspca_stk1135: Sensor write failed [ 437.204982][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.204994][ T5281] gspca_stk1135: Sensor write failed [ 437.205021][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205033][ T5281] gspca_stk1135: Sensor read failed [ 437.205058][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205069][ T5281] gspca_stk1135: Sensor read failed [ 437.205078][ T5281] gspca_stk1135: Detected sensor type unknown (0x0) [ 437.205108][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205120][ T5281] gspca_stk1135: Sensor read failed [ 437.205145][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205156][ T5281] gspca_stk1135: Sensor read failed [ 437.205182][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205193][ T5281] gspca_stk1135: Sensor write failed [ 437.205219][ T5281] gspca_stk1135: serial bus timeout: status=0x00 [ 437.205230][ T5281] gspca_stk1135: Sensor write failed [ 437.205300][ T5281] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 437.212318][ T5282] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 437.282983][T11256] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.283159][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.283285][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 437.329421][T11893] FAULT_INJECTION: forcing a failure. [ 437.329421][T11893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.329443][T11893] CPU: 1 UID: 0 PID: 11893 Comm: syz.0.1384 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 437.329457][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 437.329465][T11893] Call Trace: [ 437.329470][T11893] [ 437.329475][T11893] dump_stack_lvl+0x241/0x360 [ 437.329494][T11893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.329506][T11893] ? __pfx__printk+0x10/0x10 [ 437.329519][T11893] ? __pfx_lock_release+0x10/0x10 [ 437.329539][T11893] should_fail_ex+0x3b0/0x4e0 [ 437.329558][T11893] _copy_to_user+0x2f/0xb0 [ 437.329573][T11893] inet_gifconf+0x2fc/0x4d0 [ 437.329590][T11893] ? __pfx_inet_gifconf+0x10/0x10 [ 437.329607][T11893] ? __might_fault+0xc6/0x120 [ 437.329626][T11893] dev_ifconf+0x2c6/0x420 [ 437.329642][T11893] ? __pfx_dev_ifconf+0x10/0x10 [ 437.329663][T11893] sock_ioctl+0x44f/0x8e0 [ 437.329680][T11893] ? __pfx_sock_ioctl+0x10/0x10 [ 437.329694][T11893] ? __fget_files+0x29/0x470 [ 437.329709][T11893] ? __fget_files+0x3f6/0x470 [ 437.329720][T11893] ? __fget_files+0x29/0x470 [ 437.329736][T11893] ? bpf_lsm_file_ioctl+0x9/0x10 [ 437.329751][T11893] ? security_file_ioctl+0x87/0xb0 [ 437.329768][T11893] ? __pfx_sock_ioctl+0x10/0x10 [ 437.329785][T11893] __se_sys_ioctl+0xfc/0x170 [ 437.329798][T11893] do_syscall_64+0xf3/0x230 [ 437.329810][T11893] ? clear_bhb_loop+0x35/0x90 [ 437.329826][T11893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.329840][T11893] RIP: 0033:0x7fe51677def9 [ 437.329851][T11893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.329861][T11893] RSP: 002b:00007fe517556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.329875][T11893] RAX: ffffffffffffffda RBX: 00007fe516935f80 RCX: 00007fe51677def9 [ 437.329884][T11893] RDX: 0000000020000340 RSI: 0000000000008912 RDI: 0000000000000003 [ 437.329891][T11893] RBP: 00007fe517556090 R08: 0000000000000000 R09: 0000000000000000 [ 437.329899][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.329906][T11893] R13: 0000000000000000 R14: 00007fe516935f80 R15: 00007fe516a5fa28 [ 437.329923][T11893] [ 437.362560][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.396704][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 437.396993][ T5282] usb usb4-port1: attempt power cycle [ 437.491202][T11894] __nla_validate_parse: 3 callbacks suppressed [ 437.492077][T11894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 437.802371][ T5282] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 438.263453][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 438.308275][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 438.349208][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 438.367897][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 438.393226][ T5285] usb 2-1: USB disconnect, device number 44 [ 438.403501][T11899] syzkaller1: entered promiscuous mode [ 438.412798][ T5282] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 438.423425][T11899] syzkaller1: entered allmulticast mode [ 438.443044][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 438.448746][ T5282] usb usb4-port1: unable to enumerate USB device [ 438.719487][T11912] FAULT_INJECTION: forcing a failure. [ 438.719487][T11912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.734946][T11912] CPU: 0 UID: 0 PID: 11912 Comm: syz.4.1391 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 438.745717][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 438.755777][T11912] Call Trace: [ 438.759040][T11912] [ 438.761963][T11912] dump_stack_lvl+0x241/0x360 [ 438.766740][T11912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.771926][T11912] ? __pfx__printk+0x10/0x10 [ 438.776507][T11912] ? snprintf+0xda/0x120 [ 438.780739][T11912] should_fail_ex+0x3b0/0x4e0 [ 438.785418][T11912] _copy_to_user+0x2f/0xb0 [ 438.789850][T11912] simple_read_from_buffer+0xca/0x150 [ 438.795228][T11912] proc_fail_nth_read+0x1ec/0x260 [ 438.800242][T11912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.805782][T11912] ? rw_verify_area+0x520/0x6b0 [ 438.810639][T11912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.816269][T11912] vfs_read+0x204/0xbc0 [ 438.820415][T11912] ? __pfx_lock_release+0x10/0x10 [ 438.825437][T11912] ? __pfx_vfs_read+0x10/0x10 [ 438.830106][T11912] ? __fget_files+0x29/0x470 [ 438.834691][T11912] ? __fget_files+0x3f6/0x470 [ 438.839365][T11912] ksys_read+0x1a0/0x2c0 [ 438.843601][T11912] ? __pfx_ksys_read+0x10/0x10 [ 438.848357][T11912] ? do_syscall_64+0x100/0x230 [ 438.853113][T11912] ? do_syscall_64+0xb6/0x230 [ 438.857781][T11912] do_syscall_64+0xf3/0x230 [ 438.862271][T11912] ? clear_bhb_loop+0x35/0x90 [ 438.866939][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.872824][T11912] RIP: 0033:0x7ff70397c93c [ 438.877227][T11912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 438.896823][T11912] RSP: 002b:00007ff7046fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.905236][T11912] RAX: ffffffffffffffda RBX: 00007ff703b36058 RCX: 00007ff70397c93c [ 438.913200][T11912] RDX: 000000000000000f RSI: 00007ff7046fc0a0 RDI: 0000000000000004 [ 438.921163][T11912] RBP: 00007ff7046fc090 R08: 0000000000000000 R09: 0000000000000000 [ 438.929120][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.937077][T11912] R13: 0000000000000001 R14: 00007ff703b36058 R15: 00007ff703c5fa28 [ 438.945050][T11912] [ 438.951652][ T5282] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 439.143535][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 439.168707][ T5282] usb 3-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 439.188197][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.203790][ T5282] usb 3-1: Product: syz [ 439.208014][ T5282] usb 3-1: Manufacturer: syz [ 439.232382][ T5282] usb 3-1: SerialNumber: syz [ 439.256219][ T5282] usb 3-1: config 0 descriptor?? [ 439.277185][ T5282] usblcd 3-1:0.0: USBLCD model not supported. [ 439.292574][ T5283] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 439.362702][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.368776][T11256] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.375682][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.442439][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.470245][T11920] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 439.497803][ T5283] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.518308][ T5283] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.536007][ T5283] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.545651][ T5241] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 439.546299][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.561226][ T5285] usb 3-1: USB disconnect, device number 77 [ 439.565339][T11914] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 439.578809][ T5283] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.724729][T11930] Cannot find add_set index 0 as target [ 439.869132][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 439.878468][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 439.970214][ T944] usb 5-1: USB disconnect, device number 61 [ 440.247054][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.253452][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.471711][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 440.508606][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 440.543732][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 440.609242][T11943] syzkaller1: entered promiscuous mode [ 440.624338][T11943] syzkaller1: entered allmulticast mode [ 441.169664][ T5241] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 441.399710][ T9] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 441.442530][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.448649][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.454709][T11256] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.524692][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.575118][ T9] usb 2-1: device descriptor read/64, error -71 [ 441.892402][ T9] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 441.921121][T11977] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 441.930720][T11977] macvtap1: entered promiscuous mode [ 441.958099][T11977] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 442.069400][ T9] usb 2-1: device descriptor read/64, error -71 [ 442.212786][ T9] usb usb2-port1: attempt power cycle [ 442.283347][T11987] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1415'. [ 442.370643][T11991] syzkaller1: entered promiscuous mode [ 442.381528][ T944] IPVS: starting estimator thread 0... [ 442.394525][T11991] syzkaller1: entered allmulticast mode [ 442.502387][T11993] IPVS: using max 19 ests per chain, 45600 per kthread [ 442.503200][T11996] libceph: resolve '400' (ret=-3): failed [ 442.632489][ T9] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 442.673713][ T9] usb 2-1: device descriptor read/8, error -71 [ 442.957990][T12014] block device autoloading is deprecated and will be removed. [ 442.972611][ T9] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 442.981365][T12014] syz.4.1421: attempt to access beyond end of device [ 442.981365][T12014] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 443.004077][ T9] usb 2-1: device descriptor read/8, error -71 [ 443.139465][ T9] usb usb2-port1: unable to enumerate USB device [ 443.605752][T12026] __nla_validate_parse: 3 callbacks suppressed [ 443.605771][T12026] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1425'. [ 443.833031][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 444.365065][T12038] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 444.374483][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 444.402689][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 444.414968][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 444.477954][T12040] syzkaller1: entered promiscuous mode [ 444.491052][T12040] syzkaller1: entered allmulticast mode [ 444.702449][ T5286] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 444.763177][ T944] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 444.941226][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 444.963584][ T5286] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 444.982554][ T944] usb 4-1: Using ep0 maxpacket: 16 [ 444.987288][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.993136][T12060] netlink: 'syz.0.1440': attribute type 29 has an invalid length. [ 445.012288][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.012399][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.068090][ T5286] usb 3-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 445.076338][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.092090][ T944] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 445.117923][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.121495][T12060] netlink: 'syz.0.1440': attribute type 29 has an invalid length. [ 445.132283][ T5286] usb 3-1: Product: syz [ 445.138077][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.148246][ T5286] usb 3-1: Manufacturer: syz [ 445.153046][ T5286] usb 3-1: SerialNumber: syz [ 445.172841][T12061] netlink: 'syz.0.1440': attribute type 29 has an invalid length. [ 445.182686][ T944] usb 4-1: config 0 descriptor?? [ 445.184269][ T5286] usb 3-1: config 0 descriptor?? [ 445.496647][ T5286] usb 3-1: USB disconnect, device number 78 [ 445.503525][ T5285] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 445.727008][ T944] usbhid 4-1:0.0: can't add hid device: -71 [ 445.740736][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 445.746192][ T944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.767266][ T5285] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 445.782664][ T944] usb 4-1: USB disconnect, device number 52 [ 445.792291][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.812902][ T5285] usb 1-1: Product: syz [ 445.817104][ T5285] usb 1-1: Manufacturer: syz [ 445.839456][ T5285] usb 1-1: SerialNumber: syz [ 445.863649][ T5285] usb 1-1: config 0 descriptor?? [ 445.901716][ T5285] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 446.192651][ T5284] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 446.281135][T12072] program syz.1.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.314040][ T5285] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 446.423238][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 446.440850][ T5284] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 446.452728][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.461377][ T5284] usb 5-1: Product: syz [ 446.466205][ T5284] usb 5-1: Manufacturer: syz [ 446.470853][ T5284] usb 5-1: SerialNumber: syz [ 446.480803][ T5284] usb 5-1: config 0 descriptor?? [ 446.525994][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 446.546600][ T5285] usb 1-1: USB disconnect, device number 51 [ 446.560171][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 446.566063][ T5285] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 446.583449][ T5285] visor 1-1:0.0: device disconnected [ 446.612904][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 446.639085][T12088] syzkaller1: entered promiscuous mode [ 446.658185][T12088] syzkaller1: entered allmulticast mode [ 446.924545][T12093] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1450'. [ 447.101293][ T5284] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:36:9e:3e:8d:a6 [ 447.153973][ T5284] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 447.355212][ T5285] usb 5-1: USB disconnect, device number 62 [ 447.883491][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 448.122288][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 448.161343][ T9] usb 1-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 448.200467][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.233750][ T9] usb 1-1: Product: syz [ 448.248806][ T9] usb 1-1: Manufacturer: syz [ 448.263339][ T9] usb 1-1: SerialNumber: syz [ 448.287248][ T9] usb 1-1: config 0 descriptor?? [ 448.313449][ T9] usblcd 1-1:0.0: USBLCD model not supported. [ 448.526722][ T9] usb 1-1: USB disconnect, device number 52 [ 448.872316][ T5285] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 449.085724][ T5285] usb 2-1: config 0 has no interfaces? [ 449.105416][ T5285] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 449.127909][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.164145][ T5285] usb 2-1: Product: syz [ 449.176280][ T5285] usb 2-1: Manufacturer: syz [ 449.190130][ T5285] usb 2-1: SerialNumber: syz [ 449.211600][ T5285] usb 2-1: config 0 descriptor?? [ 449.245783][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1467'. [ 449.841608][T12181] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1469'. [ 449.902423][ T5284] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 449.966068][T12184] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1464'. [ 450.662548][ T944] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 450.755016][ T5284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.793158][ T5284] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 450.822401][ T5284] usb 1-1: can't read configurations, error -71 [ 450.869274][T11256] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 450.951151][ T944] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 450.980235][ T944] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 451.010203][ T944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.044501][ T944] usb 4-1: New USB device found, idVendor=856b, idProduct=0099, bcdDevice= 0.00 [ 451.079184][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.532975][ T944] usb 4-1: 0:2 : does not exist [ 451.625739][ T944] usb 2-1: USB disconnect, device number 49 [ 451.963033][ T5284] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 452.163370][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 452.174749][ T5284] usb 1-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 452.174780][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.174802][ T5284] usb 1-1: Product: syz [ 452.174817][ T5284] usb 1-1: Manufacturer: syz [ 452.174833][ T5284] usb 1-1: SerialNumber: syz [ 452.179625][ T5284] usb 1-1: config 0 descriptor?? [ 452.182412][ T5284] usblcd 1-1:0.0: USBLCD model not supported. [ 452.394020][ T5286] usb 1-1: USB disconnect, device number 54 [ 452.462018][T11256] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 452.522348][ T944] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 452.738111][ T944] usb 3-1: config 0 has no interfaces? [ 452.768225][ T944] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 452.792080][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.816078][ T944] usb 3-1: Product: syz [ 452.822889][ T944] usb 3-1: Manufacturer: syz [ 452.827811][ T944] usb 3-1: SerialNumber: syz [ 452.848100][ T944] usb 3-1: config 0 descriptor?? [ 453.322902][ T9] usb 4-1: USB disconnect, device number 53 [ 453.363151][ T944] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 453.515410][T12267] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1489'. [ 453.592359][ T944] usb 5-1: Using ep0 maxpacket: 8 [ 453.618616][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 453.707001][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 453.738500][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 453.765240][ T944] usb 5-1: New USB device found, idVendor=0f11, idProduct=2070, bcdDevice=df.81 [ 453.794365][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.811464][ T944] usb 5-1: Product: syz [ 453.821341][ T944] usb 5-1: Manufacturer: syz [ 453.828564][ T944] usb 5-1: SerialNumber: syz [ 453.845526][ T944] usb 5-1: config 0 descriptor?? [ 453.858859][ T944] ldusb 5-1:0.0: Interrupt in endpoint not found [ 453.952588][ T5284] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 454.003043][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 454.153895][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.184442][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.202428][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 454.205322][ T5284] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 454.234261][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.235948][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.278090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.293291][ T5284] usb 2-1: config 0 descriptor?? [ 454.310664][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 454.362031][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.396949][ T9] usb 4-1: config 0 descriptor?? [ 454.631939][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.653441][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.662545][ T5284] usbhid 2-1:0.0: can't add hid device: -71 [ 454.666628][T12265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 454.677908][ T5284] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 454.688803][ T5284] usb 2-1: USB disconnect, device number 50 [ 455.066255][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 455.077134][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 455.118131][ T9] usb 4-1: USB disconnect, device number 54 [ 455.300824][ T944] usb 3-1: USB disconnect, device number 79 [ 455.454841][T12293] dvmrp1: entered allmulticast mode [ 455.480325][T12293] dvmrp1: left allmulticast mode [ 455.969272][T11256] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 456.078801][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1494'. [ 456.376331][T12320] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1513'. [ 457.371404][ T5285] usb 5-1: USB disconnect, device number 63 [ 457.479081][T12340] vlan2: entered promiscuous mode [ 457.505713][T12346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1518'. [ 457.519377][T12340] syz_tun: entered promiscuous mode [ 457.521475][T12348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1519'. [ 457.552330][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 457.552347][ T29] audit: type=1326 audit(1726237519.017:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.4.1522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70397def9 code=0x0 [ 457.583811][T12340] vlan2: entered allmulticast mode [ 457.608904][T12340] syz_tun: entered allmulticast mode [ 457.639640][T12340] syz_tun: left allmulticast mode [ 457.665122][T12340] syz_tun: left promiscuous mode [ 458.222829][ T5284] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 458.425779][ T5284] usb 4-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 458.442374][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.477518][ T5284] usb 4-1: config 0 descriptor?? [ 458.521405][ T5284] pwc: Samsung MPC-C30 USB webcam detected. [ 458.678423][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.699324][ T5284] pwc: send_video_command error -71 [ 458.719379][ T5284] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 458.747138][ T5284] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 458.786187][T12372] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1531'. [ 458.810349][ T5284] usb 4-1: USB disconnect, device number 55 [ 458.996010][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.239814][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.336139][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.351928][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.360218][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.371810][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.422903][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 459.443075][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.496168][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.622559][ T5285] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 459.824807][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 459.839855][T12380] chnl_net:caif_netlink_parms(): no params data found [ 459.867774][ T5285] usb 1-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 459.892346][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.947572][ T5285] usb 1-1: Product: syz [ 459.971208][ T5285] usb 1-1: Manufacturer: syz [ 460.000114][ T5285] usb 1-1: SerialNumber: syz [ 460.037458][ T5285] usb 1-1: config 0 descriptor?? [ 460.060966][ T12] bridge_slave_1: left allmulticast mode [ 460.072317][ T5285] usblcd 1-1:0.0: USBLCD model not supported. [ 460.072713][T12397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1538'. [ 460.122475][ T12] bridge_slave_1: left promiscuous mode [ 460.150293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.195787][ T12] bridge_slave_0: left allmulticast mode [ 460.218373][ T12] bridge_slave_0: left promiscuous mode [ 460.252861][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.527259][ T5241] Bluetooth: hci2: command tx timeout [ 461.552114][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.586762][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.601776][ T12] bond0 (unregistering): Released all slaves [ 461.713019][ T5284] usb 1-1: USB disconnect, device number 55 [ 461.845680][T12380] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.855203][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.862739][T12380] bridge_slave_0: entered allmulticast mode [ 461.874488][T12380] bridge_slave_0: entered promiscuous mode [ 461.884443][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.895944][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.903555][T12380] bridge_slave_1: entered allmulticast mode [ 461.917140][T12380] bridge_slave_1: entered promiscuous mode [ 462.038445][T12434] @: renamed from vlan0 (while UP) [ 462.161361][T12380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.212001][T12380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.344243][ T12] hsr_slave_0: left promiscuous mode [ 462.359510][ T12] hsr_slave_1: left promiscuous mode [ 462.373342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.391560][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.415844][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.430509][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.500323][ T12] veth1_macvtap: left promiscuous mode [ 462.507452][ T12] veth0_macvtap: left promiscuous mode [ 462.513321][ T12] veth1_vlan: left promiscuous mode [ 462.519724][ T12] veth0_vlan: left promiscuous mode [ 463.427700][T12466] usb usb8: usbfs: process 12466 (syz.3.1553) did not claim interface 0 before use [ 463.602706][ T5241] Bluetooth: hci2: command tx timeout [ 463.825810][ T12] team0 (unregistering): Port device team_slave_1 removed [ 463.880057][ T12] team0 (unregistering): Port device team_slave_0 removed [ 464.582530][T12468] netlink: 'syz.3.1554': attribute type 4 has an invalid length. [ 464.664320][T12480] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 464.730961][T12480] batman_adv: batadv0: Adding interface: team0 [ 464.750240][T12480] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.775483][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.806835][T12480] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 464.826623][T12481] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 464.858068][T12481] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1556'. [ 464.889516][T12481] team0: entered promiscuous mode [ 464.951776][T12481] team_slave_0: entered promiscuous mode [ 464.970562][T12481] team_slave_1: entered promiscuous mode [ 464.985847][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.999323][T12481] batman_adv: batadv0: Interface activated: team0 [ 465.013875][T12481] batman_adv: batadv0: Interface deactivated: team0 [ 465.027174][T12481] batman_adv: batadv0: Removing interface: team0 [ 465.046996][T12481] bridge0: port 3(team0) entered blocking state [ 465.062833][T12481] bridge0: port 3(team0) entered disabled state [ 465.077413][T12481] team0: entered allmulticast mode [ 465.089331][T12481] team_slave_0: entered allmulticast mode [ 465.103177][T12481] team_slave_1: entered allmulticast mode [ 465.131559][T12481] bridge0: port 3(team0) entered blocking state [ 465.137920][T12481] bridge0: port 3(team0) entered forwarding state [ 465.184563][T12380] team0: Port device team_slave_0 added [ 465.210934][T12380] team0: Port device team_slave_1 added [ 465.487928][T12380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.520681][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.616033][T12380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.661446][T12380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.682672][ T5241] Bluetooth: hci2: command tx timeout [ 465.685241][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.832355][T12380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.870587][T12515] FAULT_INJECTION: forcing a failure. [ 465.870587][T12515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.905609][ T5284] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 465.930408][T12515] CPU: 1 UID: 0 PID: 12515 Comm: syz.3.1564 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 465.941205][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.951275][T12515] Call Trace: [ 465.954571][T12515] [ 465.957518][T12515] dump_stack_lvl+0x241/0x360 [ 465.962223][T12515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.967436][T12515] ? __pfx__printk+0x10/0x10 [ 465.972024][T12515] ? __pfx_lock_release+0x10/0x10 [ 465.977138][T12515] ? __lock_acquire+0x137a/0x2040 [ 465.982164][T12515] should_fail_ex+0x3b0/0x4e0 [ 465.986838][T12515] _copy_from_user+0x2f/0xe0 [ 465.991427][T12515] kstrtouint_from_user+0xc6/0x190 [ 465.996533][T12515] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 466.002248][T12515] ? __pfx_lock_acquire+0x10/0x10 [ 466.007274][T12515] proc_fail_nth_write+0xaa/0x2d0 [ 466.012290][T12515] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 466.018189][T12515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 466.023816][T12515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 466.029439][T12515] vfs_write+0x2a2/0xc90 [ 466.033682][T12515] ? __pfx_vfs_write+0x10/0x10 [ 466.038439][T12515] ? __fget_files+0x29/0x470 [ 466.043023][T12515] ? __fget_files+0x3f6/0x470 [ 466.047710][T12515] ksys_write+0x1a0/0x2c0 [ 466.052043][T12515] ? __pfx_ksys_write+0x10/0x10 [ 466.056888][T12515] ? do_syscall_64+0x100/0x230 [ 466.061647][T12515] ? do_syscall_64+0xb6/0x230 [ 466.066317][T12515] do_syscall_64+0xf3/0x230 [ 466.070811][T12515] ? clear_bhb_loop+0x35/0x90 [ 466.075485][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.081390][T12515] RIP: 0033:0x7f688fd7c9df [ 466.085815][T12515] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 466.105431][T12515] RSP: 002b:00007f6890c00030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 466.113858][T12515] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f688fd7c9df [ 466.121832][T12515] RDX: 0000000000000001 RSI: 00007f6890c000a0 RDI: 0000000000000009 [ 466.129803][T12515] RBP: 00007f6890c00090 R08: 0000000000000000 R09: 0000000000000000 [ 466.137771][T12515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 466.145737][T12515] R13: 0000000000000001 R14: 00007f688ff36058 R15: 00007f689005fa28 [ 466.153721][T12515] [ 466.156831][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.347059][T12380] hsr_slave_0: entered promiscuous mode [ 466.363923][ T5284] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 466.365523][T12380] hsr_slave_1: entered promiscuous mode [ 466.373925][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.412339][ T5284] usb 1-1: Product: syz [ 466.416650][T12380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.422580][ T5284] usb 1-1: Manufacturer: syz [ 466.430575][ T5284] usb 1-1: SerialNumber: syz [ 466.432258][T12380] Cannot create hsr debugfs directory [ 466.461554][ T5284] usb 1-1: config 0 descriptor?? [ 466.472730][T12533] wireguard: wg0: Could not create IPv4 socket [ 466.485149][ T5284] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 466.884526][T12508] usb usb8: usbfs: process 12508 (syz.0.1563) did not claim interface 0 before use [ 466.902645][T12508] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 467.168421][ T5284] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 467.191517][ T5284] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 467.235380][ T5284] usb 1-1: USB disconnect, device number 56 [ 467.763259][ T5241] Bluetooth: hci2: command tx timeout [ 468.183853][T12380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.209516][T12380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.241540][T12380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.262510][T12380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.314993][ T5282] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 468.469151][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.507901][ T5282] usb 1-1: config 0 has no interfaces? [ 468.524096][ T5282] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 468.555927][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.602679][ T5282] usb 1-1: Product: syz [ 468.609261][ T5282] usb 1-1: Manufacturer: syz [ 468.632372][ T5282] usb 1-1: SerialNumber: syz [ 468.649892][ T5282] usb 1-1: config 0 descriptor?? [ 468.650842][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.830953][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.010274][T12595] FAULT_INJECTION: forcing a failure. [ 469.010274][T12595] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 469.024279][T12595] CPU: 0 UID: 0 PID: 12595 Comm: syz.3.1584 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 469.035066][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 469.045138][T12595] Call Trace: [ 469.048430][T12595] [ 469.051374][T12595] dump_stack_lvl+0x241/0x360 [ 469.056077][T12595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.061297][T12595] ? __pfx__printk+0x10/0x10 [ 469.065906][T12595] ? do_raw_spin_lock+0x14f/0x370 [ 469.070958][T12595] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.076354][T12595] should_fail_ex+0x3b0/0x4e0 [ 469.081053][T12595] pages_to_xarray+0x20e/0x590 [ 469.085947][T12595] ? __pfx_pages_to_xarray+0x10/0x10 [ 469.091279][T12595] ? pfn_reader_user_pin+0x5dd/0x850 [ 469.096617][T12595] iopt_pages_fill_xarray+0xdac/0x1760 [ 469.102121][T12595] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 469.108073][T12595] ? __kasan_kmalloc+0x98/0xb0 [ 469.112861][T12595] ? iopt_area_add_access+0x20c/0x430 [ 469.118343][T12595] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 469.123914][T12595] iopt_area_add_access+0x22a/0x430 [ 469.129153][T12595] iommufd_access_pin_pages+0x786/0xd40 [ 469.134743][T12595] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 469.140826][T12595] ? __kmalloc_node_noprof+0x247/0x440 [ 469.146277][T12595] ? __kvmalloc_node_noprof+0x72/0x190 [ 469.151739][T12595] iommufd_test+0x2cfe/0x3e40 [ 469.156412][T12595] ? __pfx_iommufd_test+0x10/0x10 [ 469.161429][T12595] ? __pfx___might_resched+0x10/0x10 [ 469.166706][T12595] ? __might_fault+0xaa/0x120 [ 469.171374][T12595] ? __pfx_lock_release+0x10/0x10 [ 469.176393][T12595] ? __might_fault+0xc6/0x120 [ 469.181080][T12595] iommufd_fops_ioctl+0x4d9/0x5a0 [ 469.186134][T12595] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 469.191706][T12595] ? bpf_lsm_file_ioctl+0x9/0x10 [ 469.196647][T12595] ? security_file_ioctl+0x87/0xb0 [ 469.201750][T12595] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 469.207288][T12595] __se_sys_ioctl+0xfc/0x170 [ 469.211868][T12595] do_syscall_64+0xf3/0x230 [ 469.216621][T12595] ? clear_bhb_loop+0x35/0x90 [ 469.221302][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.227205][T12595] RIP: 0033:0x7f688fd7def9 [ 469.231625][T12595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.251246][T12595] RSP: 002b:00007f6890c21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.259679][T12595] RAX: ffffffffffffffda RBX: 00007f688ff35f80 RCX: 00007f688fd7def9 [ 469.267684][T12595] RDX: 0000000020000680 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 469.275675][T12595] RBP: 00007f6890c21090 R08: 0000000000000000 R09: 0000000000000000 [ 469.283792][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.291782][T12595] R13: 0000000000000000 R14: 00007f688ff35f80 R15: 00007f689005fa28 [ 469.299793][T12595] [ 469.306903][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.346430][T11256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.363036][T11256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.372759][T11256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.386064][T11256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.399834][T11256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 469.410800][T11256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.485189][T12380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.517856][T12380] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.544821][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.551954][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.609377][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.616529][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.675643][T12380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.692425][T12380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.711659][T12597] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1577'. [ 470.040086][ T71] team0: left allmulticast mode [ 470.053120][ T71] team_slave_0: left allmulticast mode [ 470.067425][ T71] team_slave_1: left allmulticast mode [ 470.075935][ T71] bridge0: port 3(team0) entered disabled state [ 470.098714][ T71] bridge_slave_1: left allmulticast mode [ 470.105472][ T71] bridge_slave_1: left promiscuous mode [ 470.111745][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.128177][ T71] bridge_slave_0: left allmulticast mode [ 470.134706][ T71] bridge_slave_0: left promiscuous mode [ 470.140573][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.353132][ T5284] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 470.568301][ T5284] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.609426][ T5284] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.629898][ T5284] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.660076][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.699385][T12612] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 470.722140][ T5284] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.104809][ T5285] usb 4-1: USB disconnect, device number 56 [ 471.131467][ T5281] usb 1-1: USB disconnect, device number 57 [ 471.251214][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.268273][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.288295][ T71] bond0 (unregistering): Released all slaves [ 471.439823][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 471.450283][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 471.522440][T11256] Bluetooth: hci1: command tx timeout [ 471.695767][T12380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.891889][T12603] chnl_net:caif_netlink_parms(): no params data found [ 472.089986][ T71] hsr_slave_0: left promiscuous mode [ 472.111524][ T71] hsr_slave_1: left promiscuous mode [ 472.130049][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.140931][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.157938][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.165828][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.212946][ T71] veth1_macvtap: left promiscuous mode [ 472.223976][ T71] veth0_macvtap: left promiscuous mode [ 472.237700][ T71] veth1_vlan: left promiscuous mode [ 472.251492][ T71] veth0_vlan: left promiscuous mode [ 473.353303][ T71] team_slave_1 (unregistering): left promiscuous mode [ 473.367749][ T71] team0 (unregistering): Port device team_slave_1 removed [ 473.441177][ T71] team_slave_0 (unregistering): left promiscuous mode [ 473.455117][ T71] team0 (unregistering): Port device team_slave_0 removed [ 473.612892][T11256] Bluetooth: hci1: command tx timeout [ 474.806820][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.830180][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.844338][ T944] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 474.864606][T12603] bridge_slave_0: entered allmulticast mode [ 474.881114][T12730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1598'. [ 474.882900][T12603] bridge_slave_0: entered promiscuous mode [ 474.939689][T12380] veth0_vlan: entered promiscuous mode [ 474.963353][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.000895][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.021404][T12603] bridge_slave_1: entered allmulticast mode [ 475.036057][T12603] bridge_slave_1: entered promiscuous mode [ 475.055811][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.089531][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.105441][ T944] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 475.132156][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.177337][ T944] usb 2-1: config 0 descriptor?? [ 475.183377][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.250917][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.332322][T12380] veth1_vlan: entered promiscuous mode [ 475.391471][T12603] team0: Port device team_slave_0 added [ 475.440629][T12603] team0: Port device team_slave_1 added [ 475.563342][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.579420][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.616715][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.664755][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.681858][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.714418][T11256] Bluetooth: hci1: command tx timeout [ 475.738099][ T944] cougar 0003:060B:700A.0019: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.1-1/input0 [ 475.799575][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.857555][ T944] usb 2-1: USB disconnect, device number 51 [ 476.070597][T12603] hsr_slave_0: entered promiscuous mode [ 476.135327][T12603] hsr_slave_1: entered promiscuous mode [ 476.149267][T12603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.157368][T12603] Cannot create hsr debugfs directory [ 476.178199][T12380] veth0_macvtap: entered promiscuous mode [ 476.220463][ T2544] macvlan1: left allmulticast mode [ 476.236239][ T2544] veth1_vlan: left allmulticast mode [ 476.246539][ T2544] macvlan1: left promiscuous mode [ 476.252002][ T2544] bridge0: port 3(macvlan1) entered disabled state [ 476.260730][ T5285] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 476.271488][ T2544] bridge_slave_1: left allmulticast mode [ 476.282340][ T2544] bridge_slave_1: left promiscuous mode [ 476.290564][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.300096][ T2544] bridge_slave_0: left allmulticast mode [ 476.310514][ T2544] bridge_slave_0: left promiscuous mode [ 476.317726][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.445054][ T5285] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.470217][ T5285] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.551697][ T5285] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.577457][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.613910][T12739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.640803][ T5285] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.653918][T11256] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 477.034842][ T5283] usb 4-1: USB disconnect, device number 57 [ 477.350937][ T2544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.366892][ T2544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.389559][ T2544] bond0 (unregistering): Released all slaves [ 477.480789][T12380] veth1_macvtap: entered promiscuous mode [ 477.574935][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 477.617439][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 477.633313][T12772] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 477.764422][T11256] Bluetooth: hci1: command tx timeout [ 477.957721][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.985606][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.064748][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.100849][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.130360][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.159604][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.184473][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.226555][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.262129][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.279226][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.299472][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.360866][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.411875][T12380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.703902][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.725326][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.757027][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.773350][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.786674][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.798465][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.809237][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.820711][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.836526][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.848017][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.859071][ T5284] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 478.866814][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.882716][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.894536][T12380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.910787][ T2544] hsr_slave_0: left promiscuous mode [ 478.912326][ T5283] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 478.926477][ T2544] hsr_slave_1: left promiscuous mode [ 478.939300][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.946879][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.955577][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.963265][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.988651][ T2544] veth1_macvtap: left promiscuous mode [ 478.994395][ T2544] veth0_macvtap: left promiscuous mode [ 479.000035][ T2544] veth1_vlan: left promiscuous mode [ 479.005753][ T2544] veth0_vlan: left promiscuous mode [ 479.069146][ T5284] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 479.088406][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.102679][ T5284] usb 2-1: Product: syz [ 479.107279][ T5284] usb 2-1: Manufacturer: syz [ 479.112726][ T5284] usb 2-1: SerialNumber: syz [ 479.119111][ T5283] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.132703][ T5284] usb 2-1: config 0 descriptor?? [ 479.142312][ T5283] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.164286][ T5283] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.173533][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.199914][T12790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 479.225704][ T5283] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.456275][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.477640][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.738169][ T9] usb 4-1: USB disconnect, device number 58 [ 480.151318][ T2544] team0 (unregistering): Port device team_slave_1 removed [ 480.166824][ T5284] usb 2-1: Firmware version (0.0) predates our first public release. [ 480.204569][ T5284] usb 2-1: Please update to version 0.2 or newer [ 480.261893][ T2544] team0 (unregistering): Port device team_slave_0 removed [ 481.046551][T12796] tipc: Started in network mode [ 481.051450][T12796] tipc: Node identity 00000000004003000000000000000001, cluster identity 4711 [ 481.082485][T12796] tipc: Enabling of bearer rejected, failed to enable media [ 481.155295][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 481.182654][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 481.405857][T12380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.448962][T12380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.469455][T12809] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1611'. [ 481.479597][T12380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.490485][T12380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.635783][ T5285] usb 2-1: USB disconnect, device number 52 [ 482.065867][ T2544] IPVS: stop unused estimator thread 0... [ 482.207024][T12603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 482.276685][T12603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 482.292701][ T5285] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 482.299431][T12603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 482.358565][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.366723][T12603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 482.395909][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.499342][ T5285] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.518732][ T5285] usb 2-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 482.531481][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 482.533751][ T2544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.569499][ T5285] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.589259][ T2544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.594665][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 482.599664][ T5285] usb 2-1: config 1 interface 0 has no altsetting 0 [ 482.624242][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 482.649468][ T5285] usb 2-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 482.674527][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.686517][ T5285] usb 2-1: Product: syz [ 482.703533][T12824] syzkaller1: entered promiscuous mode [ 482.709016][T12824] syzkaller1: entered allmulticast mode [ 482.719566][ T5285] usb 2-1: Manufacturer: syz [ 482.733792][ T5285] usb 2-1: SerialNumber: syz [ 482.904615][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.992577][ T5285] cdc_ether 2-1:1.0: skipping garbage [ 482.997991][ T5285] usb 2-1: bad CDC descriptors [ 483.027686][T12603] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.068800][ T5285] usb 2-1: USB disconnect, device number 53 [ 483.099264][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.106425][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.227214][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 483.247381][T12812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.256215][T12812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.291955][T12812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.304086][T12812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.467365][ T2544] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.474551][ T2544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.750974][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.941692][T12603] veth0_vlan: entered promiscuous mode [ 484.054928][T12603] veth1_vlan: entered promiscuous mode [ 484.321419][T12885] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1624'. [ 484.338518][T12603] veth0_macvtap: entered promiscuous mode [ 484.353969][T12603] veth1_macvtap: entered promiscuous mode [ 484.411696][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.536633][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.561535][T12890] vivid-004: disconnect [ 484.583284][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.621985][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.639006][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.669356][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.692368][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.703757][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.715423][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.750609][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.770300][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.789481][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.850842][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.881331][T12887] vivid-004: reconnect [ 484.900068][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.932174][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.950006][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.966173][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.991525][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.003146][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.013489][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.026264][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.061844][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.077036][T12898] program syz.2.1629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.097154][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 485.149496][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 485.186319][T12603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.217327][T12603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.246538][T12603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.277575][T12603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.308793][T12893] syzkaller1: entered promiscuous mode [ 485.328777][T12893] syzkaller1: entered allmulticast mode [ 485.664136][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.696438][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.733323][T12912] program syz.3.1633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.740982][ T2544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.757111][ T2544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.848819][ T5286] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 486.043076][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 486.091859][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50094, setting to 1024 [ 486.120583][ T5286] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.145532][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.173296][ T5286] usb 3-1: config 0 descriptor?? [ 486.206725][ T5286] hub 3-1:0.0: USB hub found [ 486.366516][T12927] __nla_validate_parse: 3 callbacks suppressed [ 486.366535][T12927] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1637'. [ 486.407932][ T5286] hub 3-1:0.0: 1 port detected [ 487.012376][ T5282] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 487.217193][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 487.241907][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 487.256643][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.291192][ T5282] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.301666][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.316968][ T5282] usb 4-1: config 0 descriptor?? [ 487.323300][T12932] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.340343][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 487.371419][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 487.396994][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 487.432641][ T5284] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 487.463344][T12938] syzkaller1: entered promiscuous mode [ 487.470605][T12938] syzkaller1: entered allmulticast mode [ 487.543505][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.559293][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.634718][ T5284] usb 5-1: config 0 has no interfaces? [ 487.663597][ T5284] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 487.677586][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.686571][ T5284] usb 5-1: Product: syz [ 487.690875][ T5284] usb 5-1: Manufacturer: syz [ 487.697563][ T5284] usb 5-1: SerialNumber: syz [ 487.716059][ T5284] usb 5-1: config 0 descriptor?? [ 487.788721][ T5282] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 487.815852][ T5282] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 487.837542][ T5282] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 488.007937][ T5286] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 488.064208][ T5282] usb 3-1: USB disconnect, device number 80 [ 488.071327][ T944] usb 4-1: USB disconnect, device number 59 [ 488.402602][T12947] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1640'. [ 489.002396][ T5285] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 489.040227][T12961] fuse: blksize only supported for fuseblk [ 489.227862][ T5285] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 489.249121][ T5285] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 489.343484][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 489.383707][ T5285] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 489.422392][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.448786][ T5285] usb 3-1: Product: syz [ 489.465213][ T5285] usb 3-1: Manufacturer: syz [ 489.486201][ T5285] usb 3-1: SerialNumber: syz [ 489.515985][ T5285] usb 3-1: config 0 descriptor?? [ 489.802377][ T5282] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 490.032423][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 490.048239][ T5282] usb 1-1: config 0 has no interfaces? [ 490.104666][ T5282] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 490.127002][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.134356][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1654'. [ 490.139888][ T5282] usb 1-1: Product: syz [ 490.151942][ T5282] usb 1-1: Manufacturer: syz [ 490.159825][ T5282] usb 1-1: SerialNumber: syz [ 490.172175][ T5282] usb 1-1: config 0 descriptor?? [ 490.279867][ T5282] usb 5-1: USB disconnect, device number 64 [ 490.398133][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.442085][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.475466][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.515362][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.560497][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.586105][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.607079][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.639777][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.681110][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.693932][T12986] geneve0: entered promiscuous mode [ 490.699623][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.717586][T12986] geneve0: left promiscuous mode [ 490.778111][ T5286] usb 1-1: USB disconnect, device number 58 [ 490.926407][T12990] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1657'. [ 491.147424][T11256] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 491.164720][T12996] fuse: Unknown parameter 'user_i00000000000000000000' [ 491.184998][T12996] fuse: Bad value for 'fd' [ 491.848291][ T5285] ch341 3-1:0.0: ch341-uart converter detected [ 491.940678][ T5285] usb 3-1: failed to receive control message: -71 [ 491.974593][ T5285] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 492.034999][ T5285] usb 3-1: USB disconnect, device number 81 [ 492.059485][ T5285] ch341 3-1:0.0: device disconnected [ 492.541608][T13028] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1669'. [ 492.613788][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 493.432557][ T944] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 493.522556][T13046] fuse: Unknown parameter 'user_i00000000000000000000' [ 493.592162][ T29] audit: type=1326 audit(1726237555.087:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90617def9 code=0x7fc00000 [ 493.616648][T13046] fuse: Bad value for 'fd' [ 493.672370][ T944] usb 4-1: Using ep0 maxpacket: 16 [ 493.680596][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 493.718828][ T944] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.739174][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.748658][ T944] usb 4-1: Product: syz [ 493.753396][ T944] usb 4-1: Manufacturer: syz [ 493.758378][ T944] usb 4-1: SerialNumber: syz [ 493.774910][ T944] usb 4-1: config 0 descriptor?? [ 493.789269][ T944] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 493.806054][ T944] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 493.922487][ T5285] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 494.012080][T13056] FAULT_INJECTION: forcing a failure. [ 494.012080][T13056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.044403][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.2.1678 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 494.055198][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 494.065244][T13056] Call Trace: [ 494.068511][T13056] [ 494.071439][T13056] dump_stack_lvl+0x241/0x360 [ 494.076112][T13056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.081301][T13056] ? __pfx__printk+0x10/0x10 [ 494.085893][T13056] ? __pfx_lock_release+0x10/0x10 [ 494.090907][T13056] ? __lock_acquire+0x137a/0x2040 [ 494.095923][T13056] should_fail_ex+0x3b0/0x4e0 [ 494.100588][T13056] _copy_from_user+0x2f/0xe0 [ 494.105169][T13056] kstrtouint_from_user+0xc6/0x190 [ 494.110272][T13056] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 494.115980][T13056] ? __pfx_lock_acquire+0x10/0x10 [ 494.120997][T13056] proc_fail_nth_write+0xaa/0x2d0 [ 494.126005][T13056] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 494.131886][T13056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 494.137507][T13056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 494.143136][T13056] vfs_write+0x2a2/0xc90 [ 494.147371][T13056] ? __pfx_vfs_write+0x10/0x10 [ 494.152125][T13056] ? __fget_files+0x29/0x470 [ 494.156702][T13056] ? __fget_files+0x3f6/0x470 [ 494.161376][T13056] ksys_write+0x1a0/0x2c0 [ 494.165695][T13056] ? __pfx_ksys_write+0x10/0x10 [ 494.170528][T13056] ? do_syscall_64+0x100/0x230 [ 494.175279][T13056] ? do_syscall_64+0xb6/0x230 [ 494.179938][T13056] do_syscall_64+0xf3/0x230 [ 494.184425][T13056] ? clear_bhb_loop+0x35/0x90 [ 494.189097][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.194990][T13056] RIP: 0033:0x7fe90617c9df [ 494.199393][T13056] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 494.218987][T13056] RSP: 002b:00007fe906f05030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 494.227388][T13056] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe90617c9df [ 494.235366][T13056] RDX: 0000000000000001 RSI: 00007fe906f050a0 RDI: 0000000000000004 [ 494.243334][T13056] RBP: 00007fe906f05090 R08: 0000000000000000 R09: 0000000000000000 [ 494.251284][T13056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 494.259236][T13056] R13: 0000000000000000 R14: 00007fe906335f80 R15: 00007fe90645fa28 [ 494.267203][T13056] [ 494.322730][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 494.334931][ T5285] usb 2-1: config 0 has no interfaces? [ 494.342943][ T5285] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 494.352187][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.374619][ T5285] usb 2-1: Product: syz [ 494.390503][ T5285] usb 2-1: Manufacturer: syz [ 494.404841][ T5285] usb 2-1: SerialNumber: syz [ 494.451603][ T944] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 494.471919][ T5285] usb 2-1: config 0 descriptor?? [ 494.558155][ T944] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 494.572317][ T944] em28xx 4-1:0.0: board has no eeprom [ 494.687731][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.696320][ T944] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 494.710465][ T944] em28xx 4-1:0.0: dvb set to bulk mode. [ 494.716283][ T5285] em28xx 4-1:0.0: Binding DVB extension [ 494.723638][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.769182][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.777716][ T944] usb 4-1: USB disconnect, device number 60 [ 494.796965][ T944] em28xx 4-1:0.0: Disconnecting em28xx [ 494.842461][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.911324][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.913865][ T5285] em28xx 4-1:0.0: Registering input extension [ 494.939730][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.980994][ T944] em28xx 4-1:0.0: Closing input extension [ 494.986903][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.010827][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.030196][ T944] em28xx 4-1:0.0: Freeing device [ 495.040957][ T5282] usb 2-1: USB disconnect, device number 54 [ 495.393933][T13089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.420582][T13066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.422372][ T944] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 495.452332][ T47] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 495.580433][T13066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.642662][ T944] usb 4-1: Using ep0 maxpacket: 16 [ 495.649578][ T47] usb 3-1: config 0 has no interfaces? [ 495.653087][ T944] usb 4-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 495.665690][ T47] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 495.683646][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.696811][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.700209][ T944] usb 4-1: Product: syz [ 495.717415][T13096] binder: BINDER_SET_CONTEXT_MGR already set [ 495.724684][ T944] usb 4-1: Manufacturer: syz [ 495.729389][ T944] usb 4-1: SerialNumber: syz [ 495.729731][ T47] usb 3-1: Product: syz [ 495.735817][T13096] binder: 13095:13096 ioctl 4018620d 20000100 returned -16 [ 495.761546][ T944] usb 4-1: config 0 descriptor?? [ 495.767475][ T47] usb 3-1: Manufacturer: syz [ 495.772100][ T47] usb 3-1: SerialNumber: syz [ 495.772429][T13096] binder: BINDER_SET_CONTEXT_MGR already set [ 495.788249][ T944] usblcd 4-1:0.0: USBLCD model not supported. [ 495.800488][ T47] usb 3-1: config 0 descriptor?? [ 495.815039][T13066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.821054][T13096] binder: 13095:13096 ioctl 4018620d 20000100 returned -16 [ 495.984876][T13066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.016190][T11256] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 496.077787][ T9] usb 4-1: USB disconnect, device number 61 [ 496.284586][T13108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.303107][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.314883][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.323412][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.333468][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.342861][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.350265][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.542089][T13066] bridge_slave_1: left allmulticast mode [ 496.556176][T13066] bridge_slave_1: left promiscuous mode [ 496.595113][T13115] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1690'. [ 496.602546][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.638955][T13066] bridge_slave_0: left allmulticast mode [ 496.652449][T13066] bridge_slave_0: left promiscuous mode [ 496.661585][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.685914][T13116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1696'. [ 497.519241][T13066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.531233][T13066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.545060][T13066] bond0 (unregistering): Released all slaves [ 498.014608][T13137] fuse: Unknown parameter 'user_i00000000000000000000' [ 498.046308][T13137] fuse: Bad value for 'fd' [ 498.236477][ T5285] usb 3-1: USB disconnect, device number 82 [ 498.246403][T13144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1705'. [ 498.402635][ T5241] Bluetooth: hci1: command tx timeout [ 498.459095][T13113] chnl_net:caif_netlink_parms(): no params data found [ 498.526982][T13066] hsr_slave_0: left promiscuous mode [ 498.557303][T13066] hsr_slave_1: left promiscuous mode [ 498.589846][T13066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.620027][T13066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.671118][T13066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.710989][T13066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.816421][T13066] veth1_macvtap: left promiscuous mode [ 498.827324][T13066] veth0_macvtap: left promiscuous mode [ 498.839009][T13066] veth1_vlan: left promiscuous mode [ 498.846441][T13066] veth0_vlan: left promiscuous mode [ 499.013063][ T5285] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 499.191334][ T5241] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 499.212330][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 499.243257][ T5285] usb 4-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 499.265691][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.289237][ T5285] usb 4-1: Product: syz [ 499.294476][ T5285] usb 4-1: Manufacturer: syz [ 499.299233][ T5285] usb 4-1: SerialNumber: syz [ 499.306690][ T5285] usb 4-1: config 0 descriptor?? [ 499.324630][ T5285] usblcd 4-1:0.0: USBLCD model not supported. [ 499.584432][ T5282] usb 4-1: USB disconnect, device number 62 [ 500.059414][T13066] team0 (unregistering): Port device team_slave_1 removed [ 500.244601][T13066] team0 (unregistering): Port device team_slave_0 removed [ 500.288959][T13172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 500.324422][T13172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 500.492440][ T5241] Bluetooth: hci1: command tx timeout [ 500.798288][T13178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 500.850002][T13178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.250048][T13159] bridge_slave_0: default FDB implementation only supports local addresses [ 501.277316][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 501.591064][T13195] input: syz0 as /devices/virtual/input/input36 [ 501.675236][T13113] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.696972][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.716649][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.790896][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.828392][T13113] bridge_slave_0: entered allmulticast mode [ 501.902407][T13113] bridge_slave_0: entered promiscuous mode [ 501.923470][T13195] usb usb8: usbfs: process 13195 (syz.2.1716) did not claim interface 0 before use [ 501.939397][T13113] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.973433][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.980585][T13113] bridge_slave_1: entered allmulticast mode [ 502.023896][T13113] bridge_slave_1: entered promiscuous mode [ 502.195657][ C0] ------------[ cut here ]------------ [ 502.201909][ C0] WARNING: CPU: 0 PID: 13208 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 502.212982][ C0] Modules linked in: [ 502.216901][ C0] CPU: 0 UID: 0 PID: 13208 Comm: syz.1.1719 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 502.227748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 502.237876][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 502.245055][ C0] Code: 0f b6 dc 31 ff 89 de e8 75 e9 f1 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 58 e6 f1 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 4a e6 f1 f5 90 0f 0b 90 e9 99 e0 ff ff [ 502.264762][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 502.270866][ C0] RAX: ffffffff8ba1a658 RBX: 00000000000055f0 RCX: ffff88802f951e00 [ 502.278955][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 502.287003][ C0] RBP: 1ffff11009c8b63e R08: ffffffff8ba19652 R09: 1ffff11009c8b648 [ 502.295077][ C0] R10: dffffc0000000000 R11: ffffed1009c8b649 R12: 0000000000000000 [ 502.303156][ C0] R13: dffffc0000000000 R14: 0000000014ee47ce R15: 00000000000081e5 [ 502.311190][ C0] FS: 00007fc2c2c3e6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 502.320297][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.326965][ C0] CR2: 0000000020010000 CR3: 0000000071c32000 CR4: 00000000003526f0 [ 502.335029][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.343069][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.351094][ C0] Call Trace: [ 502.354453][ C0] [ 502.357321][ C0] ? __warn+0x163/0x4e0 [ 502.361539][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 502.368029][ C0] ? report_bug+0x2b3/0x500 [ 502.372615][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 502.379112][ C0] ? handle_bug+0x3e/0x70 [ 502.383515][ C0] ? exc_invalid_op+0x1a/0x50 [ 502.388213][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 502.393337][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 502.399778][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 502.406288][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 502.412810][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 502.419309][ C0] mptcp_data_ready+0x29c/0xa90 [ 502.424252][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 502.430127][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 502.435580][ C0] subflow_data_ready+0x34a/0x920 [ 502.440652][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 502.446303][ C0] ? tcp_grow_window+0x161/0xb00 [ 502.451280][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 502.456224][ C0] tcp_data_queue+0x20fd/0x76c0 [ 502.461141][ C0] ? tcp_urg+0x100/0x450 [ 502.465450][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 502.470678][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 502.474156][T13220] ALSA: seq fatal error: cannot create timer (-22) [ 502.475321][ C0] ? ktime_get+0x9b/0xb0 [ 502.486488][ C0] tcp_rcv_established+0xfba/0x2020 [ 502.491738][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 502.497447][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 502.502510][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 502.507104][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 502.511632][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 502.516490][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 502.521328][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 502.526188][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 502.531648][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 502.537287][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 502.542774][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 502.548771][ C0] NF_HOOK+0x3a4/0x450 [ 502.552872][ C0] ? NF_HOOK+0x9a/0x450 [ 502.557020][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 502.561614][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 502.567646][ C0] ? ip_rcv_finish+0x406/0x560 [ 502.572425][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 502.577548][ C0] NF_HOOK+0x3a4/0x450 [ 502.581604][ C0] ? NF_HOOK+0x9a/0x450 [ 502.585760][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 502.590333][ C0] ? ip_rcv_core+0x801/0xd10 [ 502.594937][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 502.600051][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 502.604583][ C0] __netif_receive_skb+0x2bf/0x650 [ 502.609689][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 502.614747][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 502.620372][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.626368][ C0] ? __pfx_lock_release+0x10/0x10 [ 502.631398][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 502.636536][ C0] process_backlog+0x662/0x15b0 [ 502.641383][ C0] ? process_backlog+0x33b/0x15b0 [ 502.646430][ C0] ? __pfx_process_backlog+0x10/0x10 [ 502.651698][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.657687][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 502.664051][ C0] __napi_poll+0xcb/0x490 [ 502.668368][ C0] net_rx_action+0x89b/0x1240 [ 502.673064][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 502.678178][ C0] ? sched_clock+0x4a/0x70 [ 502.682624][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 502.688952][ C0] handle_softirqs+0x2c4/0x970 [ 502.693729][ C0] ? do_softirq+0x11b/0x1e0 [ 502.698218][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 502.703512][ C0] do_softirq+0x11b/0x1e0 [ 502.707841][ C0] [ 502.710768][ C0] [ 502.713701][ C0] ? __pfx_do_softirq+0x10/0x10 [ 502.718538][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 502.724177][ C0] ? rcu_is_watching+0x15/0xb0 [ 502.728939][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 502.734139][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 502.739406][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 502.744535][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 502.750240][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 502.755353][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 502.760382][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 502.765497][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 502.770868][ C0] ? mark_lock+0x9a/0x350 [ 502.775219][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.781200][ C0] ? ip_finish_output2+0xa14/0x1390 [ 502.786407][ C0] ? ip_finish_output2+0x45f/0x1390 [ 502.791592][ C0] ip_finish_output2+0xd41/0x1390 [ 502.796634][ C0] ? ip_finish_output2+0x45f/0x1390 [ 502.801823][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 502.807291][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 502.812144][ C0] ? __ip_finish_output+0x349/0x400 [ 502.817351][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 502.822304][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 502.827960][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 502.832910][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 502.838016][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 502.843241][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 502.848796][ C0] ? __pskb_trim_head+0x814/0x9a0 [ 502.853828][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 502.858837][ C0] tcp_write_xmit+0x6249/0x6a10 [ 502.863712][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 502.868641][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 502.873843][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 502.879385][ C0] ? ktime_get+0x9b/0xb0 [ 502.883634][ C0] tcp_rcv_established+0x1026/0x2020 [ 502.888907][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 502.895248][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 502.900871][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 502.905468][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 502.910573][ C0] __release_sock+0x214/0x350 [ 502.915262][ C0] release_sock+0x61/0x1f0 [ 502.919660][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 502.924863][ C0] ? __mptcp_push_pending+0x3a1/0x9f0 [ 502.930236][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 502.935958][ C0] ? __virt_addr_valid+0x183/0x530 [ 502.941051][ C0] ? __virt_addr_valid+0x183/0x530 [ 502.946166][ C0] ? __virt_addr_valid+0x45f/0x530 [ 502.951257][ C0] ? __check_object_size+0x49c/0x900 [ 502.956550][ C0] mptcp_sendmsg+0x1738/0x1b10 [ 502.961328][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 502.966459][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 502.971729][ C0] ? inet_sendmsg+0x330/0x390 [ 502.976419][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.981686][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 502.987167][ C0] __sock_sendmsg+0x1a6/0x270 [ 502.991831][ C0] __sys_sendto+0x3a4/0x4f0 [ 502.996348][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 503.001354][ C0] ? do_futex+0x33b/0x560 [ 503.005701][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.011682][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.018017][ C0] __x64_sys_sendto+0xde/0x100 [ 503.022797][ C0] do_syscall_64+0xf3/0x230 [ 503.027308][ C0] ? clear_bhb_loop+0x35/0x90 [ 503.031970][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.037866][ C0] RIP: 0033:0x7fc2c1d7def9 [ 503.042292][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.061878][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.067886][ C0] RSP: 002b:00007fc2c2c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 503.076305][ C0] RAX: ffffffffffffffda RBX: 00007fc2c1f35f80 RCX: 00007fc2c1d7def9 [ 503.084288][ C0] RDX: 0000000000010002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 503.092271][ C0] RBP: 00007fc2c1df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 503.100245][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.108221][ C0] R13: 0000000000000000 R14: 00007fc2c1f35f80 R15: 00007fc2c205fa28 [ 503.116215][ C0] [ 503.119220][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 503.126476][ C0] CPU: 0 UID: 0 PID: 13208 Comm: syz.1.1719 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 503.137229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.147271][ C0] Call Trace: [ 503.150537][ C0] [ 503.153366][ C0] dump_stack_lvl+0x241/0x360 [ 503.158032][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.163214][ C0] ? __pfx__printk+0x10/0x10 [ 503.167786][ C0] ? _printk+0xd5/0x120 [ 503.171926][ C0] ? vscnprintf+0x5d/0x90 [ 503.176243][ C0] panic+0x349/0x860 [ 503.180118][ C0] ? __warn+0x172/0x4e0 [ 503.184255][ C0] ? __pfx_panic+0x10/0x10 [ 503.188647][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 503.193840][ C0] __warn+0x346/0x4e0 [ 503.197800][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 503.204210][ C0] report_bug+0x2b3/0x500 [ 503.208523][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 503.214941][ C0] handle_bug+0x3e/0x70 [ 503.219084][ C0] exc_invalid_op+0x1a/0x50 [ 503.223574][ C0] asm_exc_invalid_op+0x1a/0x20 [ 503.228413][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 503.235428][ C0] Code: 0f b6 dc 31 ff 89 de e8 75 e9 f1 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 58 e6 f1 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 4a e6 f1 f5 90 0f 0b 90 e9 99 e0 ff ff [ 503.255040][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 503.261107][ C0] RAX: ffffffff8ba1a658 RBX: 00000000000055f0 RCX: ffff88802f951e00 [ 503.269072][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 503.277025][ C0] RBP: 1ffff11009c8b63e R08: ffffffff8ba19652 R09: 1ffff11009c8b648 [ 503.284983][ C0] R10: dffffc0000000000 R11: ffffed1009c8b649 R12: 0000000000000000 [ 503.292942][ C0] R13: dffffc0000000000 R14: 0000000014ee47ce R15: 00000000000081e5 [ 503.300911][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 503.307315][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 503.313717][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 503.320242][ C0] mptcp_data_ready+0x29c/0xa90 [ 503.325126][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 503.330930][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 503.336292][ C0] subflow_data_ready+0x34a/0x920 [ 503.341299][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 503.346825][ C0] ? tcp_grow_window+0x161/0xb00 [ 503.351743][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 503.356579][ C0] tcp_data_queue+0x20fd/0x76c0 [ 503.361418][ C0] ? tcp_urg+0x100/0x450 [ 503.365645][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 503.370819][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 503.375387][ C0] ? ktime_get+0x9b/0xb0 [ 503.379614][ C0] tcp_rcv_established+0xfba/0x2020 [ 503.384806][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 503.390418][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 503.395428][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 503.400007][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 503.404518][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 503.409354][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 503.414187][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 503.419017][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 503.424481][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 503.430090][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 503.435529][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 503.441486][ C0] NF_HOOK+0x3a4/0x450 [ 503.445538][ C0] ? NF_HOOK+0x9a/0x450 [ 503.449672][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 503.454241][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 503.460202][ C0] ? ip_rcv_finish+0x406/0x560 [ 503.464944][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 503.470031][ C0] NF_HOOK+0x3a4/0x450 [ 503.474083][ C0] ? NF_HOOK+0x9a/0x450 [ 503.478215][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 503.482786][ C0] ? ip_rcv_core+0x801/0xd10 [ 503.487361][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 503.492463][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 503.496955][ C0] __netif_receive_skb+0x2bf/0x650 [ 503.502046][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 503.507049][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 503.512666][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.518636][ C0] ? __pfx_lock_release+0x10/0x10 [ 503.523642][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 503.528742][ C0] process_backlog+0x662/0x15b0 [ 503.533578][ C0] ? process_backlog+0x33b/0x15b0 [ 503.538586][ C0] ? __pfx_process_backlog+0x10/0x10 [ 503.543849][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.549809][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.556119][ C0] __napi_poll+0xcb/0x490 [ 503.560431][ C0] net_rx_action+0x89b/0x1240 [ 503.565105][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 503.570199][ C0] ? sched_clock+0x4a/0x70 [ 503.574605][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.580920][ C0] handle_softirqs+0x2c4/0x970 [ 503.585665][ C0] ? do_softirq+0x11b/0x1e0 [ 503.590147][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 503.595414][ C0] do_softirq+0x11b/0x1e0 [ 503.599725][ C0] [ 503.602642][ C0] [ 503.605558][ C0] ? __pfx_do_softirq+0x10/0x10 [ 503.610387][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 503.616002][ C0] ? rcu_is_watching+0x15/0xb0 [ 503.620747][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 503.625924][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 503.631187][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 503.636276][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.641978][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 503.647069][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 503.652082][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 503.657175][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 503.662548][ C0] ? mark_lock+0x9a/0x350 [ 503.666870][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.672841][ C0] ? ip_finish_output2+0xa14/0x1390 [ 503.678033][ C0] ? ip_finish_output2+0x45f/0x1390 [ 503.683209][ C0] ip_finish_output2+0xd41/0x1390 [ 503.688212][ C0] ? ip_finish_output2+0x45f/0x1390 [ 503.693397][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 503.698834][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 503.703667][ C0] ? __ip_finish_output+0x349/0x400 [ 503.708849][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 503.713767][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 503.719384][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 503.724302][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 503.729394][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 503.734589][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 503.740123][ C0] ? __pskb_trim_head+0x814/0x9a0 [ 503.745131][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 503.750137][ C0] tcp_write_xmit+0x6249/0x6a10 [ 503.754977][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 503.759900][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 503.765077][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 503.770599][ C0] ? ktime_get+0x9b/0xb0 [ 503.774824][ C0] tcp_rcv_established+0x1026/0x2020 [ 503.780093][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.786405][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 503.792029][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 503.796603][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 503.801688][ C0] __release_sock+0x214/0x350 [ 503.806349][ C0] release_sock+0x61/0x1f0 [ 503.810743][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 503.815926][ C0] ? __mptcp_push_pending+0x3a1/0x9f0 [ 503.821278][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 503.826978][ C0] ? __virt_addr_valid+0x183/0x530 [ 503.832066][ C0] ? __virt_addr_valid+0x183/0x530 [ 503.837153][ C0] ? __virt_addr_valid+0x45f/0x530 [ 503.842248][ C0] ? __check_object_size+0x49c/0x900 [ 503.847526][ C0] mptcp_sendmsg+0x1738/0x1b10 [ 503.852293][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 503.857387][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 503.862661][ C0] ? inet_sendmsg+0x330/0x390 [ 503.867326][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.872594][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 503.878045][ C0] __sock_sendmsg+0x1a6/0x270 [ 503.882712][ C0] __sys_sendto+0x3a4/0x4f0 [ 503.887204][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 503.892209][ C0] ? do_futex+0x33b/0x560 [ 503.896548][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.902514][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.908832][ C0] __x64_sys_sendto+0xde/0x100 [ 503.913577][ C0] do_syscall_64+0xf3/0x230 [ 503.918058][ C0] ? clear_bhb_loop+0x35/0x90 [ 503.922719][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.928601][ C0] RIP: 0033:0x7fc2c1d7def9 [ 503.933001][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.952588][ C0] RSP: 002b:00007fc2c2c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 503.960991][ C0] RAX: ffffffffffffffda RBX: 00007fc2c1f35f80 RCX: 00007fc2c1d7def9 [ 503.968941][ C0] RDX: 0000000000010002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 503.976889][ C0] RBP: 00007fc2c1df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 503.984837][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.992790][ C0] R13: 0000000000000000 R14: 00007fc2c1f35f80 R15: 00007fc2c205fa28 [ 504.000756][ C0] [ 504.003994][ C0] Kernel Offset: disabled [ 504.008434][ C0] Rebooting in 86400 seconds..