last executing test programs: 16.102518271s ago: executing program 0 (id=1416): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x3, @local, 0xfffffffd}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x3, @local, 0xfffffffd}, 0x1c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x14) 15.562553621s ago: executing program 0 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf16010073000000000000001000000010000000030000000e000000000000010000100074004363002e00"], &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000069105b000000000004000000000000e29500000000000000", @ANYRES32=r8], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x6d) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109023d2551a10000000704"], 0x0) 10.35016698s ago: executing program 4 (id=1430): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3}, 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 10.348146603s ago: executing program 0 (id=1431): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_connect$uac1(0x0, 0x101, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x7, 0x30, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x5, 0x2, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x2, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x3, 0x3, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x6, 0x4, 0xa, 0x4], 0x7f}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x6f46, 0x2, '+j'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x2, "ce55", '>'}, @as_header={0x7, 0x24, 0x1, 0x1a, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x27, 0x0, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x9, 0x8, "fa9f62"}, @as_header={0x7, 0x24, 0x1, 0x97, 0x6b, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x3e, 0x40, {0x7, 0x25, 0x1, 0x80, 0xb4, 0xf9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0xc, 0x19, "60a3c03bd285d90980"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x95, 0xff}, @as_header={0x7, 0x24, 0x1, 0x7, 0xd, 0x1001}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0x7, 0x9, "18"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x4, 0xafb}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x5b, 0x0, 0x10, 0x7}, 0xfb, &(0x7f00000004c0)={0x5, 0xf, 0xfb, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xff, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "317d465afb4686ed7e80da8625421c23"}, @ptm_cap={0x3}, @generic={0xd5, 0x10, 0x4, "324448c40bd8838a000f5aebaea0865b0b901375018a801634c3d7a94fa8d48389604d6c462a689a1654a5c89c703136e84d9301dd053eec9d900a487e7d85fc2ac16e8a58293307ed2eaf6535cb1d869584570fef0df65a1e6130bbbd48ab2466cb65a89ce4a2cfd4d0715a1bc3f04bdc9210d54a199b103396109795e88a6211759a4fb96bf403ab5284c1e6b4ac39c36bfad7c2961394cfcb4a1a8b90f6994b502b5597c57e7289c7d48212a90aae3dea07ca5ac38ff6a004b63553101b6c7ba31c3cc382a99ff631c215a09553037938"}]}, 0x3, [{0xb1, &(0x7f00000005c0)=@string={0xb1, 0x3, "d6621389475329f50175b7f870060dd6459abcadc0c1acbd798fc97aba3ef38cfe72dd80bb38d953eadaa6dfe1f4b827dc4b4041dd9a8a7e8e530997e6c4f5a8f9bb6d47480e50c38f0694ea62f5776d8fb1bc3cf7289e207f225aeccf671d53ac5684c8cc2106d129ac4efb6c51077866f4f24fa3c1c94fdf24218f274599e9bd9f4b842568bf4b22ed9893ebd8c635862bdf380560fe94327317890745fbc9eda8d630c7d4c847725acfcdf391b1"}}, {0x26, &(0x7f00000001c0)=@string={0x26, 0x3, "3f4c12e7c3b535d6223e45fd836570d8bcc74ea6ed73d992cd0fe3828973ac83ecb6d6c1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x7, 0x4, 0x12}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020}, 0x2020) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)) 10.347887056s ago: executing program 1 (id=1432): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x240000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000091414fdffffffffffffff0000"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_emit_vhci(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}]}}, 0x15) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80400) accept4(r5, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0) 10.346909038s ago: executing program 4 (id=1434): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x240000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000091414fdffffffffffffff0000"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_emit_vhci(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}]}}, 0x15) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80400) accept4(r5, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0) 10.343470489s ago: executing program 3 (id=1435): syz_open_dev$vim2m(0x0, 0x8000, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) quotactl$Q_GETQUOTA(0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 10.306554713s ago: executing program 3 (id=1438): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r1, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000280)=""/248) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setresuid(0x0, 0xee00, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000000c0)=0x7b, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000090a01040000000000008a000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000000140000001000010000000000000000000000000a"], 0x64}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) 9.087997334s ago: executing program 3 (id=1440): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) tkill(r0, 0x13) 8.938057071s ago: executing program 1 (id=1441): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 8.93630287s ago: executing program 0 (id=1442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf16010073000000000000001000000010000000030000000e000000000000010000100074004363002e00"], &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000069105b000000000004000000000000e29500000000000000", @ANYRES32=r8], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x6d) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109023d2551a10000000704"], 0x0) 8.353870696s ago: executing program 1 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, &(0x7f00000000c0)='\xda+\x9d\x14\r\n', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10, r4, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x2000000b) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) open_tree(r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002140011800c000100636f756e7465720004000280140000001000010000000000000000000000000a9749c015861d8326fe3ef181accbc82ce7"], 0x98}}, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) 7.630494945s ago: executing program 2 (id=1445): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3}, 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 6.620461167s ago: executing program 1 (id=1446): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3ff}}}}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x4d0b, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 6.550789892s ago: executing program 2 (id=1447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x6d, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x3f}, {0x4, 0x3f}, {0xe, 0x7fffffff}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x9}}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/81, 0x97, 0x51, 0x0, 0x78}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/214, 0xd6, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x45}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x2400e844) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0xb) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=r10, @ANYBLOB="c900fcbdca92d3bdbaa802ad774a2e9104f211a5ebbf4a0b894fd4a78ca1a8cbae716edbe53dff7f5a6577e9e048396afae6062cc3a348a612738c46de14d959c8c99fde15ecc677c8fb017df71f141c817b2340e1727861233e0ee2a0ac889155822f8a4630cedeaad04fded073aebe8e359b28ba242750c2802fbaba461503b9c76a909260327f701de84444d52d2085ed2c2636a4aa8e9c6d9dff9951564187a07318f4965421fdad520c6c1db0e90b15f8fd6320f284c5d5"], 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x11, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}, 0x1, 0xfb2d0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2044010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001740)=@ipv4_newnexthop={0x5c, 0x68, 0x0, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x10}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000850) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002c40), &(0x7f0000002c80)=r0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x1e, 0xfff, 0x2031, 0x0, 0x8, 0x1, 0x1f, '\x00', 0x0, r1, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xd, 0x13, &(0x7f0000001640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x0, 0x8, 0x6, 0x2, 0x7fff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f0000001580)='syzkaller\x00', 0x48c, 0x55, &(0x7f00000015c0)=""/85, 0x41000, 0x0, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000009c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x8e, 0x5, 0x9b64}, 0x10, 0x0, r2, 0x1, &(0x7f0000002d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, r12], &(0x7f0000002dc0)=[{0x1, 0x4, 0x5, 0x1}], 0x10, 0xffffffff}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x50, '\x00', r13, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, r0, 0x3, 0x0, &(0x7f0000000740)=[{0x2, 0x3, 0x8, 0x8}, {0x5, 0x3, 0x3, 0x5}, {0x3, 0x1, 0x8, 0x9}], 0x10, 0x400}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r15, 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r16, 0x0, 0x3e, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c100806d320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.380824856s ago: executing program 4 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x6a9a, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x15, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}}}, 0x1c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000400a1000085f400000000ac41def8199420d4cc508645677e48a7874fe7900081fb9077bb671211961d8b84d06edf48730374c265738c0b58dc6b640ac7d9"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000140), 0x9) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r8, &(0x7f0000000340)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {r9, r10/1000+10000}}, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x3000) r11 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r11, 0x10d, 0xbe, 0x0, &(0x7f0000000000)) r12 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002600000085000000500000cc1c76babc9c2a4449"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="9af297ea000f01d10f78140f01c4ba430066ed0f959ed2f3b885000f00d8c30f20c06635000000200f22c00f0d5b00", 0x2f}], 0x1, 0x0, 0x0, 0x0) 6.295083531s ago: executing program 2 (id=1449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 6.201449374s ago: executing program 2 (id=1450): syz_emit_ethernet(0x3b2, &(0x7f0000000400)={@multicast, @random="68d4e408348b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x3, '\x00', {0x8, 0x6, "2fac4b", 0x7, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [@fragment={0x33, 0x0, 0x3, 0x1, 0x0, 0x9, 0x67}, @srh={0x3a, 0xa, 0x4, 0x5, 0xbd, 0x60, 0x80, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, @private0, @local]}, @hopopts={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x3}]}, @hopopts={0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x36}]}, @srh={0x3b, 0x12, 0x4, 0x9, 0xb9, 0x20, 0xb, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x33, 0x2, 0x1, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x84, 0xc, 0x0, 0x5, 0x0, [@remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}]}, @srh={0x33, 0xc, 0x4, 0x6, 0x6, 0x20, 0x51, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2c, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x5, 0xbe, "3768f36b8d383660b25529ee198cbfe66f86d5bffcf36853236b40223fcdef550befb9e57125b8afbb7c9edc0910e1d5a66d7625fee8e3aa238e2c779370cf85ce8af936e967afc64b532d522b4ad5a2419e0ac46e58b28f929ff6caa4767ad36acc0de23566df87391a560b6333fdf921946334dc7721525cd665ccdd060ea8fc73a8342a941a86abd4f5dc9eb5d4dc42041eb778ebc66aee1cd858dc95f7a92ac3fb9d4b8b2ebb27937d7e764cafbaf9018091e5d2ea59b5c4ee2caf53"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x0, [0x7]}}, @jumbo={0xc2, 0x4, 0x9}]}], "0ae545152d66bee5de741d9c39391a06a657f0da82b0aaae78928577a087e7d383f6cc8167d431f35370b6e43b50c931802bce7274684a6b76c357b32b5de808e3d8cde0b78b5c5e88441fcd"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b2, &(0x7f0000000400)={@multicast, @random="68d4e408348b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x3, '\x00', {0x8, 0x6, "2fac4b", 0x7, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [@fragment={0x33, 0x0, 0x3, 0x1, 0x0, 0x9, 0x67}, @srh={0x3a, 0xa, 0x4, 0x5, 0xbd, 0x60, 0x80, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, @private0, @local]}, @hopopts={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x3}]}, @hopopts={0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x36}]}, @srh={0x3b, 0x12, 0x4, 0x9, 0xb9, 0x20, 0xb, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x33, 0x2, 0x1, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x84, 0xc, 0x0, 0x5, 0x0, [@remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}]}, @srh={0x33, 0xc, 0x4, 0x6, 0x6, 0x20, 0x51, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2c, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x5, 0xbe, "3768f36b8d383660b25529ee198cbfe66f86d5bffcf36853236b40223fcdef550befb9e57125b8afbb7c9edc0910e1d5a66d7625fee8e3aa238e2c779370cf85ce8af936e967afc64b532d522b4ad5a2419e0ac46e58b28f929ff6caa4767ad36acc0de23566df87391a560b6333fdf921946334dc7721525cd665ccdd060ea8fc73a8342a941a86abd4f5dc9eb5d4dc42041eb778ebc66aee1cd858dc95f7a92ac3fb9d4b8b2ebb27937d7e764cafbaf9018091e5d2ea59b5c4ee2caf53"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x0, [0x7]}}, @jumbo={0xc2, 0x4, 0x9}]}], "0ae545152d66bee5de741d9c39391a06a657f0da82b0aaae78928577a087e7d383f6cc8167d431f35370b6e43b50c931802bce7274684a6b76c357b32b5de808e3d8cde0b78b5c5e88441fcd"}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x200008, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x90) dup3(r3, r1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000"], 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0xfffd, 0x0, @loopback}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x4000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x4000) getpid() 5.959162139s ago: executing program 0 (id=1451): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x240000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000091414fdffffffffffffff0000"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_emit_vhci(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}]}}, 0x15) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80400) accept4(r5, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x0) 5.958636737s ago: executing program 4 (id=1452): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_connect$uac1(0x0, 0x101, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x7, 0x30, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x5, 0x2, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x2, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x3, 0x3, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x6, 0x4, 0xa, 0x4], 0x7f}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x6f46, 0x2, '+j'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x2, "ce55", '>'}, @as_header={0x7, 0x24, 0x1, 0x1a, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x27, 0x0, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x9, 0x8, "fa9f62"}, @as_header={0x7, 0x24, 0x1, 0x97, 0x6b, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x3e, 0x40, {0x7, 0x25, 0x1, 0x80, 0xb4, 0xf9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0xc, 0x19, "60a3c03bd285d90980"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x95, 0xff}, @as_header={0x7, 0x24, 0x1, 0x7, 0xd, 0x1001}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0x7, 0x9, "18"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x4, 0xafb}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x5b, 0x0, 0x10, 0x7}, 0xfb, &(0x7f00000004c0)={0x5, 0xf, 0xfb, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xff, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "317d465afb4686ed7e80da8625421c23"}, @ptm_cap={0x3}, @generic={0xd5, 0x10, 0x4, "324448c40bd8838a000f5aebaea0865b0b901375018a801634c3d7a94fa8d48389604d6c462a689a1654a5c89c703136e84d9301dd053eec9d900a487e7d85fc2ac16e8a58293307ed2eaf6535cb1d869584570fef0df65a1e6130bbbd48ab2466cb65a89ce4a2cfd4d0715a1bc3f04bdc9210d54a199b103396109795e88a6211759a4fb96bf403ab5284c1e6b4ac39c36bfad7c2961394cfcb4a1a8b90f6994b502b5597c57e7289c7d48212a90aae3dea07ca5ac38ff6a004b63553101b6c7ba31c3cc382a99ff631c215a09553037938"}]}, 0x3, [{0xb1, &(0x7f00000005c0)=@string={0xb1, 0x3, "d6621389475329f50175b7f870060dd6459abcadc0c1acbd798fc97aba3ef38cfe72dd80bb38d953eadaa6dfe1f4b827dc4b4041dd9a8a7e8e530997e6c4f5a8f9bb6d47480e50c38f0694ea62f5776d8fb1bc3cf7289e207f225aeccf671d53ac5684c8cc2106d129ac4efb6c51077866f4f24fa3c1c94fdf24218f274599e9bd9f4b842568bf4b22ed9893ebd8c635862bdf380560fe94327317890745fbc9eda8d630c7d4c847725acfcdf391b1"}}, {0x26, &(0x7f00000001c0)=@string={0x26, 0x3, "3f4c12e7c3b535d6223e45fd836570d8bcc74ea6ed73d992cd0fe3828973ac83ecb6d6c1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x7, 0x4, 0x12}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020}, 0x2020) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)) 2.934960935s ago: executing program 3 (id=1453): r0 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000680)={{0x0, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 2.928436553s ago: executing program 1 (id=1454): socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, &(0x7f0000000540)="5bdab4e6de229d9becbffe4acae6ff4b3990ea4310f77551c8e178bd7da4f0ec910f93350bcc09b9a2904e6b5980fc6ee4d0cad07473ea461389288936aa1a6f60239e4c6c86d34652cf747d454cf3c0b58a4ff19030ec2d15de1b798d86aa105426cd48822e26c84186f486d154ccc70fdc6d11f897496331acaf15013fc2994fce80a2a6468e4c684714202e40097d3e5355785aaea8f4cd54c5ecdf69482acda2a6954279d2c6c042", &(0x7f0000000600)=""/85}, 0x20) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{r1}, 0x7, 0xf5, 0x3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7e4968ab9f26f2da4149683f065714f8a000000008000000127cf0999459cff33a3a9ae50f1af9d51ef5bef3d63520d260804d02200", 0x3c}, 0x65, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x5, "533dbe"}]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(r1, &(0x7f0000000440)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x10000) inotify_add_watch(r6, &(0x7f0000000380)='./bus\x00', 0xc0000840) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 2.630485583s ago: executing program 2 (id=1455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40090}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r8, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x800}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) setsockopt$inet_int(r10, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000ac0)=""/140}, 0x90) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000a80)=ANY=[@ANYRES8=r6], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xb026e000) 2.309627904s ago: executing program 2 (id=1456): memfd_secret(0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df00090582", @ANYRES32], 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, 0xfffffffffffffffc) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x190180, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 1.953495354s ago: executing program 3 (id=1457): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3}, 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 778.53981ms ago: executing program 3 (id=1458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x40, 0xffffffffffffffff}, '.\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000680)=0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf2503000000500005801400028008000400040000000800030000ffffff0c00028008000200fb0b00002400028008000100120000000800020000180000080001000200000008000300e90a000008000100657468001c000980080002000100000008000100020000000800020000000000500006804b00040067636d286165732900000000000000000000000000000000000000000000000023000000e09c64e348bfb6c576ccdb9a384865d61e2a206653b3d1154c08586fb58d48ef21e01500"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) pipe(0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) 208.652553ms ago: executing program 4 (id=1459): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 102.588108ms ago: executing program 1 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x44}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) getsockname$packet(r6, &(0x7f0000000140), &(0x7f0000000640)=0x14) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat(r6, &(0x7f00000009c0)='./file0\x00', 0x20040, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}}, 0xfc00000000000000) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="4721f11eb5e2bffda2f89f70b91ba904103d78c0da17bd3e4f3d5d062d3984ac7aaacecf765cb9bb4c3ced4abfc579e40c3ff549a5229728199fe20d92e24bb9f662ce6c65757ae678e90fbbf1caf37d131fec59713e18eed99ee4de9ced1b2ed15c9a4bbe7813952691e142dfe42b71057786ebb6f815e3972026a8811923863332990127cf8b682c8274ba071dea0b6524ab5e09b842f786f2adfb4051a16988aa655cda", 0xa5}, {&(0x7f0000000240)="f3a06cebfcc0e17a9459f9c287d6844fa568965c844c74aa09194f1e1ed4a48d51c80ee6605201390ba02dd5ac6ebe9f3d66cf1c1e3ede3b984a0313a7b9805b2e39ca9376d98a9762ee68d12b9d9457abdffda7063caf14d35f1c9ffe866c306c9c9fc1fff75f63a64145f91fa38bb525e8a233c9db5e5a3ef5da236067f180fb3b8b5522cedcc43857f936fa48cbb097eb7c470ba14d925165b4e483b330490209d6cbd82c82c5763a40c43a3276d985b57259f918b0f0b693cb1ce947db208122d5846fd822ccbdbb9b626555613bc25de0f53d039e01565ece875f1baf16334718bd8f16709d6e2bfa", 0xeb}, {&(0x7f0000000340)="6c2d1769be4cf23329c85170d2320813c25b9b40caaefa1bc358ec1bf24f68eb682a844dc21d361b4ce9087e0d9637bbebc59ed4eecdf6e6ccf94e00788a95fa4cf644f8ec5d6a3165911de78cdcb1f276cb1dbc1269c57ffc4606c94cfd4f81f75038ebf1445adb350b5ba2a984b8a4fc14b5b27bab1894ca3172c46ba9f47d8bf4f3931fdedc0f95a518edd24b23724a3832222d3e2aab5f684f8c52d542f0238d76da5956654a7c78c6e2da1c7385214e6d5fc3e24e9b4694c9e141e3d5a684802d1fa43197c2d2ca", 0xca}, {&(0x7f0000000440)="f5a6fa2f18d225262c75a21dc02e2e54a633a7852b5ddf2902bef3849d768c8b11bf1f10ae77afa89fbbb7e8ab404ca773a9f643c8b51555aa9fdbd067003d9860efe2b1e5172725b017e5b03de73eca437120019cfa801f67", 0x59}, {&(0x7f00000004c0)="95b48767b0c87c808ebc6590a201628c52618f69c38e4c9e82e5c47d70e71a6dff2be802a05a20637878b9b2f47a553ccbb6c9459595f3eafcbecbb852ba66e885f16b26277b636ceb", 0x49}, {&(0x7f0000000540)="ed053b56ca655465305a3cf4a17c4c0ffff88d3fd34ac1e28a7d980bdcbd017a8030de49a14646c37fb9e112889f013e4c7c09e7f7b252a0f98ec24c52c7416dd030efe2de672fb406ba08ddcd2d6b07c91efdaf19f3e581406942d7f01ccde1a329f625790b2c61789932b055017458ef08d3fd5bb60951b50e25278166e8344cd09ab8bdf56fc3855a8ad0a799f4f6b341084a3911f5312b26da4046d28be02dd721a046a14001d29265bc369b8a801ec9c7d666d0b35ab48a4d4083becf048f3fbee2075150eacc0629b743eb9c5acda5a063e2b030", 0xd7}, {&(0x7f0000000700)="3e63d1cafd810d8657b7dc2b26626a6bc64e7ae23706a527a41d8e3c88fc4da9574f853d8879b36e7ebfd5a0e4bb8e13e38ef039b4c20d0851255e4872eb9deb450293766a1906e6c4868ed3c34c7884ca8f4fd4aa5ee5b196706789d223757130ad3045b16a04cb7950eec0ff4fef7a8613843eb885c8ac65fb3d8111b36dabb61c9380a916205ee82f22de5f8e75bdf536cb843cabbeb2bf9b3e66de7785ebe46ae2772eb3839b673c4de708de94a531b29e5bbf3e9a974c137ea0cf8b370b7cd93d075dd7454e889d131a53d806d1aa5a6e6576bd78f0a9eb87aefa36", 0xde}, {&(0x7f0000000800)="7e8e5cc1b7f6c1e688059525598e5b10789e62e8d1c382c45b5894dc62a9ec16d82ff2933c16858d4ba32f57a3bfc0220618e61fa820e856beb71ac386524c1cac65a107e81d8bd8e205cc06cb6d6eabf44a055cf015c9b714735d0894830b94714a55c956c36f95a386edb2357aea8ac8e857f3db002053c4b277d664a698e7420808879ed93bee622630ce68b8695c2c6bfbfe04256ab4ff415ae627ca53e672042915a68a03022f6092e7410eaa9f5899df8fa90ead9ebc7ae4c1e90c0ec8d1", 0xc1}], 0x9, 0xbc6aeccc5061cf74) 38.956197ms ago: executing program 0 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf16010073000000000000001000000010000000030000000e000000000000010000100074004363002e00"], &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000069105b000000000004000000000000e29500000000000000", @ANYRES32=r8], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x6d) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109023d2551a10000000704"], 0x0) 0s ago: executing program 4 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf16010073000000000000001000000010000000030000000e000000000000010000100074004363002e00"], &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000069105b000000000004000000000000e29500000000000000", @ANYRES32=r8], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x6d) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109023d2551a10000000704"], 0x0) kernel console output (not intermixed with test programs): 2 [ 277.616261][ T5099] Bluetooth: hci2: command tx timeout [ 277.626417][ T5137] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 277.635602][ T5137] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 277.713674][ T5137] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 277.766388][ T5137] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 277.802381][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.815120][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.935886][ T8609] veth0_vlan: entered promiscuous mode [ 277.974237][ T8609] veth1_vlan: entered promiscuous mode [ 278.029257][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 278.093652][ T5137] usb 5-1: USB disconnect, device number 22 [ 278.102087][ T8609] veth0_macvtap: entered promiscuous mode [ 278.126610][ T8609] veth1_macvtap: entered promiscuous mode [ 278.169070][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.190002][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.228599][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.263446][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.288420][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.309821][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.333745][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.361892][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.372926][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.399991][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.425896][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.481494][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.505496][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.526330][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.597027][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 278.705350][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.749668][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.771768][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.782101][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.792887][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.804772][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.805951][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 278.815241][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.817248][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.851704][ T8609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.864110][ T8609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.880120][ T8609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.907931][ T8609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.026370][ T5107] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 279.120358][ T5099] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 279.296737][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.304613][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.322924][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 279.326402][ T5107] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 279.361566][ T5107] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 279.416499][ T5107] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 279.458513][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.467481][ T5107] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 279.491826][ T5107] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 279.494653][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.533300][ T5107] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 279.562749][ T5107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.595727][ T8738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.726528][ T5099] Bluetooth: hci2: command tx timeout [ 279.765286][ T8738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.932987][ T5133] usb 3-1: USB disconnect, device number 21 [ 280.044704][ T8744] syz.3.959: attempt to access beyond end of device [ 280.044704][ T8744] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 281.029785][ T8753] 9pnet_fd: Insufficient options for proto=fd [ 281.094202][ T8755] netlink: 'syz.4.994': attribute type 2 has an invalid length. [ 281.138949][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 281.144833][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 281.248927][ T5099] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 281.418530][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 281.467892][ T8751] input: syz0 as /devices/virtual/input/input57 [ 281.857077][ T8769] 9pnet_fd: Insufficient options for proto=fd [ 281.944318][ T8773] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 282.059904][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 282.140411][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 283.197270][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 283.336591][ T5107] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 283.406520][ T8800] syz.0.1001: attempt to access beyond end of device [ 283.406520][ T8800] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 283.607806][ T5107] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 283.644311][ T5107] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 283.653432][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 283.695302][ T5107] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 283.713776][ T5107] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 283.725649][ T5107] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 283.802110][ T5107] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 283.829415][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.097970][ T785] usb 5-1: USB disconnect, device number 23 [ 284.736281][ T5133] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 284.948359][ T5133] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 284.976289][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.000681][ T5133] usb 3-1: config 0 descriptor?? [ 285.037619][ T5133] gspca_main: spca508-2.14.0 probing 8086:0110 [ 285.207900][ T5099] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 285.309489][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 285.417248][ T5099] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 285.440689][ T8815] input: syz0 as /devices/virtual/input/input58 [ 285.556459][ T5133] gspca_spca508: reg_read err -110 [ 285.566339][ T5133] gspca_spca508: reg_read err -32 [ 285.580530][ T5133] gspca_spca508: reg_read err -32 [ 285.591971][ T5133] gspca_spca508: reg_read err -32 [ 285.619345][ T5133] gspca_spca508: reg_read err -32 [ 285.640309][ T5133] gspca_spca508: reg write: error -32 [ 285.645795][ T5133] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 285.679032][ T8828] 9pnet_fd: Insufficient options for proto=fd [ 285.692888][ T8825] netlink: 684 bytes leftover after parsing attributes in process `syz.4.1012'. [ 285.754792][ T8831] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 285.875973][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 286.107000][ T5133] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 286.299478][ T8839] syz.3.1014: attempt to access beyond end of device [ 286.299478][ T8839] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 286.344607][ T5133] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 286.396043][ T8841] syz.1.1013: attempt to access beyond end of device [ 286.396043][ T8841] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 286.411088][ T5133] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 286.645204][ T785] usb 3-1: USB disconnect, device number 22 [ 286.746294][ T5133] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 286.755523][ T5133] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 286.775911][ T5133] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 286.785690][ T5133] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 286.794891][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.091974][ T5133] usb 5-1: USB disconnect, device number 24 [ 287.276631][ T5099] Bluetooth: hci0: command 0x0406 tx timeout [ 287.921538][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 288.400264][ T785] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 288.488388][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 288.621902][ T785] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 288.632573][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 288.657284][ T8863] input: syz0 as /devices/virtual/input/input59 [ 288.664290][ T785] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 288.719112][ T785] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 288.766825][ T785] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 288.812048][ T785] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 288.837506][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 288.855036][ T785] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 288.887674][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.154246][ T785] usb 2-1: USB disconnect, device number 21 [ 289.477532][ T8870] input: syz0 as /devices/virtual/input/input60 [ 289.847053][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 289.882324][ T8881] wg2: entered promiscuous mode [ 289.907615][ T8881] wg2: entered allmulticast mode [ 289.932510][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 290.022170][ T8883] wg2: left promiscuous mode [ 290.032018][ T8883] wg2: left allmulticast mode [ 290.466682][ T5137] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 290.532919][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 290.574428][ T8893] 9pnet_fd: Insufficient options for proto=fd [ 290.641847][ T8898] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 290.678897][ T5137] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 290.724057][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.761185][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 290.778953][ T5137] usb 1-1: config 0 descriptor?? [ 290.789912][ T5137] gspca_main: spca508-2.14.0 probing 8086:0110 [ 291.006573][ T785] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 291.118260][ T4481] Bluetooth: hci2: command tx timeout [ 291.235702][ T785] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 291.255088][ T785] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 291.265093][ T785] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 291.282697][ T785] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 291.307036][ T5137] gspca_spca508: reg_read err -110 [ 291.320942][ T785] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 291.335374][ T5137] gspca_spca508: reg_read err -32 [ 291.341010][ T5137] gspca_spca508: reg_read err -32 [ 291.349061][ T5137] gspca_spca508: reg_read err -32 [ 291.361039][ T5137] gspca_spca508: reg_read err -32 [ 291.369133][ T5137] gspca_spca508: reg write: error -32 [ 291.377480][ T5137] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 291.411806][ T785] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 291.482165][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.753101][ T5133] usb 4-1: USB disconnect, device number 27 [ 291.799995][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.921316][ T8915] syz.4.1032: attempt to access beyond end of device [ 291.921316][ T8915] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 291.998657][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 292.009329][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.031826][ T45] usb 3-1: config 0 descriptor?? [ 292.047519][ T45] gspca_main: spca508-2.14.0 probing 8086:0110 [ 292.170526][ T5133] usb 1-1: USB disconnect, device number 23 [ 292.577905][ T45] gspca_spca508: reg_read err -110 [ 292.587687][ T45] gspca_spca508: reg_read err -32 [ 292.593410][ T45] gspca_spca508: reg_read err -32 [ 292.608922][ T45] gspca_spca508: reg_read err -32 [ 292.623717][ T45] gspca_spca508: reg_read err -32 [ 292.630211][ T45] gspca_spca508: reg write: error -32 [ 292.636073][ T45] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 292.644238][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 293.196268][ T5133] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.214803][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 293.306932][ T784] usb 3-1: USB disconnect, device number 23 [ 293.409936][ T5133] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 293.438745][ T5133] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 293.470649][ T5133] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 293.490201][ T5133] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 293.515885][ T5133] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 293.527858][ T5137] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 293.543255][ T5133] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 293.561500][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.728239][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 293.739236][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 293.761926][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 293.777957][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 293.789549][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 293.808392][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 293.826711][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.883523][ T785] usb 4-1: USB disconnect, device number 28 [ 294.075668][ T5137] usb 1-1: USB disconnect, device number 24 [ 294.248720][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 294.284853][ T8939] bond_slave_0: entered promiscuous mode [ 294.290748][ T8939] bond_slave_1: entered promiscuous mode [ 294.301779][ T8939] macvtap4: entered promiscuous mode [ 294.308052][ T8939] bond0: entered promiscuous mode [ 294.314931][ T8939] macvtap4: entered allmulticast mode [ 294.331479][ T8939] bond0: entered allmulticast mode [ 294.339076][ T8939] bond_slave_0: entered allmulticast mode [ 294.351697][ T8939] bond_slave_1: entered allmulticast mode [ 294.359144][ T8939] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 294.385312][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 294.395104][ T8943] bond0: left allmulticast mode [ 294.406581][ T8943] bond_slave_0: left allmulticast mode [ 294.412100][ T8943] bond_slave_1: left allmulticast mode [ 294.425855][ T8943] bond0: left promiscuous mode [ 294.433794][ T8943] bond_slave_0: left promiscuous mode [ 294.439347][ T8943] bond_slave_1: left promiscuous mode [ 294.447364][ T8943] macvtap4: left promiscuous mode [ 294.452429][ T8943] macvtap4: left allmulticast mode [ 294.652881][ T8950] 9pnet_fd: Insufficient options for proto=fd [ 294.720847][ T8955] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 294.813420][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 295.052377][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.128493][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.157484][ T8965] input: syz0 as /devices/virtual/input/input61 [ 295.801337][ T8985] 9pnet_fd: Insufficient options for proto=fd [ 295.812672][ T8986] syz.3.1049: attempt to access beyond end of device [ 295.812672][ T8986] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.878266][ T8990] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 295.987430][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 296.007431][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 296.066216][ T8992] bond_slave_0: entered promiscuous mode [ 296.072124][ T8992] bond_slave_1: entered promiscuous mode [ 296.122755][ T8992] macvtap3: entered promiscuous mode [ 296.156636][ T8992] bond0: entered promiscuous mode [ 296.167138][ T8992] macvtap3: entered allmulticast mode [ 296.187893][ T8992] bond0: entered allmulticast mode [ 296.208203][ T8992] bond_slave_0: entered allmulticast mode [ 296.230221][ T8992] bond_slave_1: entered allmulticast mode [ 296.259367][ T8992] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 296.286841][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 296.321447][ T8995] bond0: left allmulticast mode [ 296.357294][ T8995] bond_slave_0: left allmulticast mode [ 296.395828][ T8995] bond_slave_1: left allmulticast mode [ 296.426445][ T8995] bond0: left promiscuous mode [ 296.446112][ T8995] bond_slave_0: left promiscuous mode [ 296.451700][ T8995] bond_slave_1: left promiscuous mode [ 296.491404][ T8995] macvtap3: left promiscuous mode [ 296.511147][ T8995] macvtap3: left allmulticast mode [ 297.146365][ T5107] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 297.362696][ T5107] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 297.386220][ T5107] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 297.427230][ T5107] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 297.451976][ T5107] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 297.485434][ T5107] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 297.508192][ T5107] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 297.531698][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.552855][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 297.633038][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 297.650277][ T9010] input: syz0 as /devices/virtual/input/input62 [ 297.881948][ T9016] 9pnet_fd: Insufficient options for proto=fd [ 297.896999][ T5107] usb 5-1: USB disconnect, device number 25 [ 297.960402][ T9019] netlink: 'syz.1.1060': attribute type 2 has an invalid length. [ 298.006148][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 298.024428][ T9022] hsr0: entered promiscuous mode [ 298.045423][ T9022] hsr0: entered allmulticast mode [ 298.052225][ T9022] hsr_slave_0: entered allmulticast mode [ 298.065285][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 298.075322][ T9022] hsr_slave_1: entered allmulticast mode [ 298.095321][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 298.107770][ T9025] hsr0: left promiscuous mode [ 298.112584][ T9025] hsr0: left allmulticast mode [ 298.117812][ T9025] hsr_slave_0: left allmulticast mode [ 298.123303][ T9025] hsr_slave_1: left allmulticast mode [ 298.433134][ T9030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.452533][ T9030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.736990][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 298.914929][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 298.982564][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 299.003864][ T9044] input: syz0 as /devices/virtual/input/input63 [ 299.006516][ T5107] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 299.126573][ T5137] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 299.298997][ T5107] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 299.321259][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.335265][ T5107] usb 5-1: config 0 descriptor?? [ 299.359078][ T5107] gspca_main: spca508-2.14.0 probing 8086:0110 [ 299.439344][ T9057] syz.2.1072: attempt to access beyond end of device [ 299.439344][ T9057] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 299.499144][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 299.591356][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 299.643113][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 299.682147][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 299.733401][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 299.767044][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 299.803037][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.855148][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 299.886590][ T5107] gspca_spca508: reg_read err -110 [ 299.902860][ T5107] gspca_spca508: reg_read err -32 [ 299.930370][ T5107] gspca_spca508: reg_read err -32 [ 299.948816][ T5107] gspca_spca508: reg_read err -32 [ 299.962217][ T5107] gspca_spca508: reg_read err -32 [ 299.986397][ T5107] gspca_spca508: reg write: error -32 [ 299.991907][ T5107] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 300.033671][ T9065] 9pnet_fd: Insufficient options for proto=fd [ 300.115028][ T9067] netlink: 'syz.1.1074': attribute type 2 has an invalid length. [ 300.205401][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 300.219224][ T5132] usb 1-1: USB disconnect, device number 25 [ 300.752498][ T5137] usb 5-1: USB disconnect, device number 26 [ 301.091922][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.147512][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.286529][ T5137] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 301.470335][ T5137] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 301.479220][ T5137] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 301.491404][ T5137] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 301.500562][ T5137] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 301.510932][ T5137] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 301.521813][ T5137] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 301.537326][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.844508][ T5107] usb 4-1: USB disconnect, device number 29 [ 302.028932][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 302.373925][ T9104] 9pnet_fd: Insufficient options for proto=fd [ 302.469015][ T9108] netlink: 'syz.2.1086': attribute type 2 has an invalid length. [ 302.552122][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 302.597978][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 302.881156][ T9122] 9pnet_fd: Insufficient options for proto=fd [ 302.967293][ T9126] netlink: 'syz.1.1091': attribute type 2 has an invalid length. [ 302.986306][ T785] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 303.166425][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 303.234759][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 303.245380][ T9130] bond_slave_0: entered promiscuous mode [ 303.251169][ T9130] bond_slave_1: entered promiscuous mode [ 303.265843][ T785] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 303.276508][ T785] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 303.286781][ T785] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 303.296092][ T785] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 303.307111][ T9130] macvtap4: entered promiscuous mode [ 303.313044][ T785] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 303.322610][ T9130] bond0: entered promiscuous mode [ 303.327869][ T785] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 303.339888][ T9130] macvtap4: entered allmulticast mode [ 303.357018][ T9136] syz.3.1092: attempt to access beyond end of device [ 303.357018][ T9136] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 303.369954][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.380327][ T9130] bond0: entered allmulticast mode [ 303.393025][ T9130] bond_slave_0: entered allmulticast mode [ 303.407570][ T9130] bond_slave_1: entered allmulticast mode [ 303.432616][ T9130] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 303.451179][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 303.514645][ T9133] bond0: left allmulticast mode [ 303.533529][ T9133] bond_slave_0: left allmulticast mode [ 303.544976][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.549453][ T9133] bond_slave_1: left allmulticast mode [ 303.583724][ T9133] bond0: left promiscuous mode [ 303.594735][ T9133] bond_slave_0: left promiscuous mode [ 303.600307][ T9133] bond_slave_1: left promiscuous mode [ 303.623935][ T9133] macvtap4: left promiscuous mode [ 303.632632][ T9133] macvtap4: left allmulticast mode [ 303.676842][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.688533][ T5107] usb 5-1: USB disconnect, device number 27 [ 304.116397][ T785] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 304.334545][ T785] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.376329][ T785] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 304.397796][ T785] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 304.413974][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.218732][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 305.238836][ T9145] input: syz0 as /devices/virtual/input/input65 [ 305.366620][ T785] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 305.413788][ T785] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input64 [ 305.471261][ T785] input: failed to attach handler kbd to device input64, error: -5 [ 305.510109][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.530037][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 305.552660][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.600640][ T785] usb 1-1: USB disconnect, device number 26 [ 306.060606][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 306.636338][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 306.647910][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.668750][ T9187] FAULT_INJECTION: forcing a failure. [ 306.668750][ T9187] name failslab, interval 1, probability 0, space 0, times 1 [ 306.681624][ T9187] CPU: 0 PID: 9187 Comm: syz.0.1106 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 306.691715][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 306.701813][ T9187] Call Trace: [ 306.705108][ T9187] [ 306.708052][ T9187] dump_stack_lvl+0x241/0x360 [ 306.712774][ T9187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.718005][ T9187] ? __pfx__printk+0x10/0x10 [ 306.722629][ T9187] ? __pfx___might_resched+0x10/0x10 [ 306.727954][ T9187] ? prepend_path+0x2f/0xbe0 [ 306.732566][ T9187] should_fail_ex+0x3b0/0x4e0 [ 306.737302][ T9187] ? tomoyo_encode+0x26f/0x540 [ 306.742094][ T9187] should_failslab+0x9/0x20 [ 306.746617][ T9187] __kmalloc_noprof+0xd8/0x400 [ 306.751409][ T9187] tomoyo_encode+0x26f/0x540 [ 306.756038][ T9187] tomoyo_realpath_from_path+0x59e/0x5e0 [ 306.761717][ T9187] tomoyo_path_number_perm+0x23a/0x880 [ 306.767306][ T9187] ? tomoyo_path_number_perm+0x208/0x880 [ 306.772970][ T9187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.779020][ T9187] ? __fget_files+0x29/0x470 [ 306.783642][ T9187] ? __fget_files+0x3f6/0x470 [ 306.788341][ T9187] ? __fget_files+0x29/0x470 [ 306.792961][ T9187] security_file_ioctl+0x75/0xb0 [ 306.797930][ T9187] __se_sys_ioctl+0x47/0x170 [ 306.802570][ T9187] do_syscall_64+0xf3/0x230 [ 306.807104][ T9187] ? clear_bhb_loop+0x35/0x90 [ 306.811831][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.817763][ T9187] RIP: 0033:0x7fc3aeb75bd9 [ 306.822210][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.841840][ T9187] RSP: 002b:00007fc3af935048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.850305][ T9187] RAX: ffffffffffffffda RBX: 00007fc3aed04110 RCX: 00007fc3aeb75bd9 [ 306.858324][ T9187] RDX: 0000000020000200 RSI: 00000000c018620c RDI: 0000000000000004 [ 306.866319][ T9187] RBP: 00007fc3af9350a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.874319][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.882308][ T9187] R13: 000000000000006e R14: 00007fc3aed04110 R15: 00007ffefa1c3a48 [ 306.890335][ T9187] [ 306.893395][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.900087][ T9187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.907190][ T9187] binder: 9182:9187 ioctl c018620c 20000200 returned -22 [ 307.380520][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.409674][ T45] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 307.592998][ T45] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 307.900033][ T45] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 307.919290][ T45] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 307.948732][ T45] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 307.969142][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 307.989319][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.136520][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 308.449407][ T784] usb 5-1: USB disconnect, device number 28 [ 308.725927][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 309.177040][ T784] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 309.400099][ T784] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 309.447613][ T784] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 309.475841][ T784] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 309.489623][ T784] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 309.500655][ T784] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 309.516320][ T784] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 309.530918][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.882831][ T784] usb 1-1: USB disconnect, device number 27 [ 309.997476][ T9214] syz.2.1115: attempt to access beyond end of device [ 309.997476][ T9214] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 310.175317][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 310.206842][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 310.815435][ T9227] batadv_slave_0: mtu less than device minimum [ 310.826439][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 310.904900][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 310.976777][ T9228] bond_slave_0: entered promiscuous mode [ 310.982606][ T9228] bond_slave_1: entered promiscuous mode [ 311.017865][ T9228] macvtap6: entered promiscuous mode [ 311.023528][ T9228] bond0: entered promiscuous mode [ 311.050283][ T9228] macvtap6: entered allmulticast mode [ 311.052587][ T45] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 311.076805][ T9228] bond0: entered allmulticast mode [ 311.084674][ T9228] bond_slave_0: entered allmulticast mode [ 311.094404][ T9228] bond_slave_1: entered allmulticast mode [ 311.109736][ T9228] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 311.118406][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 311.128366][ T45] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 311.147186][ T45] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 311.157053][ T9231] bond0: left allmulticast mode [ 311.161893][ T45] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 311.166278][ T9231] bond_slave_0: left allmulticast mode [ 311.173487][ T45] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 311.193880][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 311.198634][ T9231] bond_slave_1: left allmulticast mode [ 311.208069][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.216284][ T9231] bond0: left promiscuous mode [ 311.227205][ T9231] bond_slave_0: left promiscuous mode [ 311.232740][ T9231] bond_slave_1: left promiscuous mode [ 311.253463][ T9231] macvtap6: left promiscuous mode [ 311.258816][ T9231] macvtap6: left allmulticast mode [ 311.296437][ T785] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 311.586844][ T5137] usb 4-1: USB disconnect, device number 30 [ 311.865296][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 311.886516][ T785] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.914149][ T785] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 312.006616][ T785] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 312.015837][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.533775][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 312.936272][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 312.967457][ T785] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 312.982956][ T785] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input66 [ 313.008569][ T785] input: failed to attach handler kbd to device input66, error: -5 [ 313.023225][ T5137] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 313.127988][ T45] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 313.136841][ T45] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 313.151525][ T45] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 313.166257][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 313.226647][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.249672][ T45] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 313.268139][ T45] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 313.283520][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 313.283886][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.301993][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.326318][ T5137] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 313.335142][ T5137] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 313.349021][ T5137] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 313.373143][ T5137] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 313.410371][ T5137] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 313.442128][ T5137] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 313.485462][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.525768][ T45] usb 1-1: USB disconnect, device number 28 [ 313.704426][ T785] usb 3-1: USB disconnect, device number 24 [ 313.790422][ T5137] usb 5-1: USB disconnect, device number 29 [ 314.282446][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.404843][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.215437][ T9280] syz.2.1134: attempt to access beyond end of device [ 315.215437][ T9280] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 315.412523][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 315.770758][ T5137] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 315.806423][ T785] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 315.998455][ T785] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 315.998543][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 316.026515][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.047401][ T785] usb 5-1: config 0 descriptor?? [ 316.066352][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 316.079430][ T785] gspca_main: spca508-2.14.0 probing 8086:0110 [ 316.147097][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 316.181056][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 316.221989][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 316.284811][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 316.314950][ T785] gspca_spca508: reg_read err -71 [ 316.326951][ T785] gspca_spca508: reg_read err -71 [ 316.332513][ T785] gspca_spca508: reg_read err -71 [ 316.344864][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.351988][ T785] gspca_spca508: reg_read err -71 [ 316.372047][ T785] gspca_spca508: reg_read err -71 [ 316.378457][ T785] gspca_spca508: reg write: error -71 [ 316.384083][ T785] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 316.394716][ T785] usb 5-1: USB disconnect, device number 30 [ 316.621040][ T45] usb 1-1: USB disconnect, device number 29 [ 316.753016][ T9299] 9pnet_fd: Insufficient options for proto=fd [ 316.961504][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 316.977871][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 317.064241][ T9310] netlink: 'syz.4.1142': attribute type 2 has an invalid length. [ 317.077030][ T9308] 9pnet_fd: Insufficient options for proto=fd [ 317.145573][ T9315] netlink: 'syz.3.1143': attribute type 2 has an invalid length. [ 317.196569][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 317.370650][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.377427][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769253][ T61] bridge_slave_1: left allmulticast mode [ 317.796457][ T61] bridge_slave_1: left promiscuous mode [ 317.823206][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.846950][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 317.900167][ T61] bridge_slave_0: left allmulticast mode [ 317.929431][ T61] bridge_slave_0: left promiscuous mode [ 317.946556][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.051318][ T9336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.085792][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 319.202660][ T9341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.057636][ T784] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 320.228024][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.264685][ T784] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.279606][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.288552][ T784] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 320.302001][ T61] bond0 (unregistering): Released all slaves [ 320.309014][ T784] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 320.324317][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.537414][ T9357] warning: `syz.4.1154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 320.607926][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 320.678172][ T61] IPVS: stopping backup sync thread 5207 ... [ 320.711674][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 320.843760][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 320.965621][ T9363] input: syz0 as /devices/virtual/input/input68 [ 321.093505][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 321.113750][ T9378] 9pnet_fd: Insufficient options for proto=fd [ 321.203655][ T9382] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 321.333175][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.357670][ T9385] 9pnet_fd: Insufficient options for proto=fd [ 321.366491][ T4481] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 321.410440][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.424393][ T784] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 321.440821][ T784] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input67 [ 321.481122][ T9391] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 321.504088][ T784] input: failed to attach handler kbd to device input67, error: -5 [ 321.530739][ T61] hsr_slave_0: left promiscuous mode [ 321.563010][ T61] hsr_slave_1: left promiscuous mode [ 321.579688][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.597887][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.720340][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 321.761135][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.778935][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 321.786902][ T9] usb 4-1: USB disconnect, device number 31 [ 321.810264][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.927259][ T61] veth1_macvtap: left promiscuous mode [ 321.949421][ T61] veth0_macvtap: left promiscuous mode [ 321.977941][ T61] veth1_vlan: left promiscuous mode [ 321.983710][ T61] veth0_vlan: left promiscuous mode [ 322.131767][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 322.383083][ T932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 322.615196][ T932] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 322.648511][ T932] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 322.705502][ T932] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 322.716473][ T4481] Bluetooth: hci3: command 0x0406 tx timeout [ 322.747441][ T9412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.780832][ T932] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 322.838904][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 322.856394][ T932] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 322.962876][ T932] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 322.986991][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.222425][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.424923][ T61] team0 (unregistering): Port device team_slave_1 removed [ 324.494465][ T61] team0 (unregistering): Port device team_slave_0 removed [ 325.175904][ T932] usb 2-1: USB disconnect, device number 22 [ 325.279735][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 325.291597][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 325.330672][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 326.063663][ T9458] 9pnet_fd: Insufficient options for proto=fd [ 326.071026][ T9457] 9pnet_fd: Insufficient options for proto=fd [ 326.142884][ T9462] netlink: 'syz.1.1175': attribute type 2 has an invalid length. [ 326.152678][ T9463] netlink: 'syz.0.1176': attribute type 2 has an invalid length. [ 326.232128][ T9466] batadv_slave_0: mtu less than device minimum [ 326.360790][ T4481] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 326.369021][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 326.698729][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 327.282058][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.304472][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.560064][ T9498] tipc: Can't bind to reserved service type 0 [ 328.820854][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 328.915677][ T9505] FAULT_INJECTION: forcing a failure. [ 328.915677][ T9505] name failslab, interval 1, probability 0, space 0, times 0 [ 328.928508][ T9505] CPU: 0 PID: 9505 Comm: syz.4.1186 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 328.938590][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 328.948656][ T9505] Call Trace: [ 328.951954][ T9505] [ 328.954942][ T9505] dump_stack_lvl+0x241/0x360 [ 328.959650][ T9505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.964895][ T9505] ? __pfx__printk+0x10/0x10 [ 328.969532][ T9505] should_fail_ex+0x3b0/0x4e0 [ 328.974237][ T9505] ? __alloc_skb+0x1c3/0x440 [ 328.978839][ T9505] should_failslab+0x9/0x20 [ 328.983361][ T9505] kmem_cache_alloc_node_noprof+0x71/0x320 [ 328.989223][ T9505] __alloc_skb+0x1c3/0x440 [ 328.993672][ T9505] ? __pfx___alloc_skb+0x10/0x10 [ 328.998650][ T9505] ? netlink_sendmsg+0x4b0/0xcb0 [ 329.003617][ T9505] netlink_sendmsg+0x631/0xcb0 [ 329.008424][ T9505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.013748][ T9505] ? __pfx_bpf_lsm_socket_sendmsg+0x10/0x10 [ 329.019660][ T9505] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 329.026126][ T9505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.031445][ T9505] __sock_sendmsg+0x221/0x270 [ 329.036140][ T9505] ____sys_sendmsg+0x525/0x7d0 [ 329.040977][ T9505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.046298][ T9505] __sys_sendmsg+0x2b0/0x3a0 [ 329.050905][ T9505] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.056078][ T9505] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.062430][ T9505] ? do_syscall_64+0x100/0x230 [ 329.067240][ T9505] ? do_syscall_64+0xb6/0x230 [ 329.071937][ T9505] do_syscall_64+0xf3/0x230 [ 329.076476][ T9505] ? clear_bhb_loop+0x35/0x90 [ 329.081172][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.087097][ T9505] RIP: 0033:0x7f690c775bd9 [ 329.091520][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.111156][ T9505] RSP: 002b:00007f690d481048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.119587][ T9505] RAX: ffffffffffffffda RBX: 00007f690c904110 RCX: 00007f690c775bd9 [ 329.127572][ T9505] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 329.135553][ T9505] RBP: 00007f690d4810a0 R08: 0000000000000000 R09: 0000000000000000 [ 329.143542][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.151534][ T9505] R13: 000000000000006e R14: 00007f690c904110 R15: 00007ffc213ba4b8 [ 329.159536][ T9505] [ 329.162632][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.354515][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 330.513902][ T9529] 9pnet_fd: Insufficient options for proto=fd [ 330.558205][ T9534] vhci_hcd: invalid port number 0 [ 330.609715][ T9539] netlink: 'syz.2.1194': attribute type 2 has an invalid length. [ 330.633361][ T9534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1196'. [ 330.665234][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 330.688894][ T9534] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 330.714853][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 331.000263][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 331.456329][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 331.659054][ T9] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 331.689049][ T9] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 331.703548][ T9] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 331.716300][ T9] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 331.732468][ T9] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 331.745376][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 331.754581][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.090376][ T5137] usb 1-1: USB disconnect, device number 30 [ 332.459992][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 332.713268][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 332.760800][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 332.856364][ T5135] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 332.903395][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 333.003329][ T9582] vhci_hcd: invalid port number 0 [ 333.019867][ T9582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1209'. [ 333.029203][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 333.038504][ T9582] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 333.057449][ T5107] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 333.078127][ T5135] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 333.086838][ T5135] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 333.095636][ T5135] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 333.125353][ T5135] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 333.145541][ T5135] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 333.164482][ T9589] 9pnet_fd: Insufficient options for proto=fd [ 333.174470][ T5135] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 333.184869][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.248436][ T9593] netlink: 'syz.4.1212': attribute type 2 has an invalid length. [ 333.260900][ T5107] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 333.270095][ T5107] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 333.301603][ T5107] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 333.311274][ T5107] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 333.322201][ T5107] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 333.331833][ T5107] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 333.342235][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.354175][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 333.367081][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 333.428957][ T5107] usb 3-1: USB disconnect, device number 25 [ 333.587228][ T9] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 333.609339][ T5135] usb 2-1: USB disconnect, device number 23 [ 333.622266][ T9] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 333.646430][ T9] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 333.655611][ T9] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 333.681771][ T9] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 333.713655][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 333.723407][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.950453][ T9] usb 4-1: USB disconnect, device number 32 [ 334.428564][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 335.472126][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.530607][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.827749][ T9633] 9pnet_fd: Insufficient options for proto=fd [ 335.922166][ T9637] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 336.034810][ T4481] Bluetooth: Unexpected start frame (len 0) [ 336.356491][ T5135] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 336.541277][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 336.574453][ T5135] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 336.606679][ T5135] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 336.625433][ T5135] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 336.672318][ T5135] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 336.700743][ T5135] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 336.730630][ T5135] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 336.758656][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.853146][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 337.021038][ T5107] usb 3-1: USB disconnect, device number 26 [ 337.386327][ T5135] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 338.283180][ T4481] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 338.320290][ T5135] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 338.349658][ T5135] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 338.401146][ T5135] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 338.455074][ T5135] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 338.467328][ T5135] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 338.491427][ T5135] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 338.521849][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.596707][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 338.854178][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 338.879549][ T9676] input: syz0 as /devices/virtual/input/input69 [ 338.912706][ T9] usb 5-1: USB disconnect, device number 31 [ 340.680986][ T9726] netlink: 'syz.3.1248': attribute type 11 has an invalid length. [ 340.689393][ T9726] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1248'. [ 340.734427][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 340.886364][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 341.101203][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.129505][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 341.144131][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 341.246988][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 341.282896][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.604402][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 341.610099][ T9730] input: syz0 as /devices/virtual/input/input71 [ 342.039824][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 342.080534][ T9743] bond_slave_0: entered promiscuous mode [ 342.086310][ T9743] bond_slave_1: entered promiscuous mode [ 342.092511][ T9743] macvtap4: entered promiscuous mode [ 342.097883][ T9743] bond0: entered promiscuous mode [ 342.104613][ T9743] macvtap4: entered allmulticast mode [ 342.111124][ T9743] bond0: entered allmulticast mode [ 342.116586][ T9743] bond_slave_0: entered allmulticast mode [ 342.122334][ T9743] bond_slave_1: entered allmulticast mode [ 342.194156][ T9743] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 342.242633][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 342.305552][ T9744] bond0: left allmulticast mode [ 342.318793][ T9744] bond_slave_0: left allmulticast mode [ 342.321409][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 342.342423][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input70 [ 342.342640][ T9744] bond_slave_1: left allmulticast mode [ 342.357591][ T9] input: failed to attach handler kbd to device input70, error: -5 [ 342.388221][ T9744] bond0: left promiscuous mode [ 342.409845][ T9744] bond_slave_0: left promiscuous mode [ 342.415381][ T9744] bond_slave_1: left promiscuous mode [ 342.428893][ T9744] macvtap4: left promiscuous mode [ 342.434311][ T9744] macvtap4: left allmulticast mode [ 342.491047][ T9754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.524512][ T9754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.625495][ T9] usb 2-1: USB disconnect, device number 24 [ 342.666316][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 342.674816][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 342.740791][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 342.763937][ T9764] FAULT_INJECTION: forcing a failure. [ 342.763937][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 342.791602][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 342.800225][ T9764] CPU: 0 PID: 9764 Comm: syz.0.1258 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 342.810320][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 342.820392][ T9764] Call Trace: [ 342.823725][ T9764] [ 342.826694][ T9764] dump_stack_lvl+0x241/0x360 [ 342.831416][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.836650][ T9764] ? __pfx__printk+0x10/0x10 [ 342.841299][ T9764] ? __pfx_lock_release+0x10/0x10 [ 342.845430][ T9758] input: syz0 as /devices/virtual/input/input72 [ 342.846342][ T9764] should_fail_ex+0x3b0/0x4e0 [ 342.846380][ T9764] _copy_to_iter+0x43a/0x1960 [ 342.846419][ T9764] ? __virt_addr_valid+0x183/0x520 [ 342.846481][ T9764] ? __pfx__copy_to_iter+0x10/0x10 [ 342.846506][ T9764] ? __virt_addr_valid+0x183/0x520 [ 342.877407][ T9764] ? __virt_addr_valid+0x183/0x520 [ 342.878332][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 342.882542][ T9764] ? __virt_addr_valid+0x44e/0x520 [ 342.882597][ T9764] ? __check_object_size+0x49c/0x900 [ 342.882631][ T9764] __skb_datagram_iter+0x110/0x8c0 [ 342.882665][ T9764] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 342.882708][ T9764] skb_copy_datagram_iter+0xd1/0x250 [ 342.882746][ T9764] netlink_recvmsg+0x2d0/0x11d0 [ 342.882790][ T9764] ? __pfx_netlink_recvmsg+0x10/0x10 [ 342.882824][ T9764] ? iovec_from_user+0x87/0x240 [ 342.882849][ T9764] ? rcu_is_watching+0x15/0xb0 [ 342.882875][ T9764] ? iovec_from_user+0x87/0x240 [ 342.882898][ T9764] ? trace_kmalloc+0x1f/0xd0 [ 342.882924][ T9764] ? __kmalloc_noprof+0x217/0x400 [ 342.882959][ T9764] ? iovec_from_user+0x1b0/0x240 [ 342.882986][ T9764] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 342.883009][ T9764] ? security_socket_recvmsg+0x90/0xb0 [ 342.883043][ T9764] ? __pfx_netlink_recvmsg+0x10/0x10 [ 342.883078][ T9764] sock_recvmsg+0x22f/0x280 [ 342.883113][ T9764] ____sys_recvmsg+0x1db/0x470 [ 342.883155][ T9764] ? __pfx_____sys_recvmsg+0x10/0x10 [ 342.883211][ T9764] do_recvmmsg+0x474/0xae0 [ 342.883240][ T9764] ? mark_lock+0x9a/0x350 [ 342.883279][ T9764] ? __pfx_do_recvmmsg+0x10/0x10 [ 342.883341][ T9764] ? __pfx___might_resched+0x10/0x10 [ 342.883370][ T9764] ? __might_fault+0xaa/0x120 [ 342.883399][ T9764] ? __pfx_lock_release+0x10/0x10 [ 342.883421][ T9764] ? vfs_write+0x7c4/0xc90 [ 342.883475][ T9764] ? get_timespec64+0x19c/0x280 [ 342.883521][ T9764] __x64_sys_recvmmsg+0x1b8/0x250 [ 342.883557][ T9764] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 342.883591][ T9764] ? do_syscall_64+0x100/0x230 [ 342.883628][ T9764] ? do_syscall_64+0xb6/0x230 [ 342.883665][ T9764] do_syscall_64+0xf3/0x230 [ 342.883699][ T9764] ? clear_bhb_loop+0x35/0x90 [ 342.883736][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.061539][ T9764] RIP: 0033:0x7fc3aeb75bd9 [ 343.066000][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.085609][ T9764] RSP: 002b:00007fc3af977048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 343.094033][ T9764] RAX: ffffffffffffffda RBX: 00007fc3aed03f60 RCX: 00007fc3aeb75bd9 [ 343.102003][ T9764] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 343.109995][ T9764] RBP: 00007fc3af9770a0 R08: 0000000020003700 R09: 0000000000000000 [ 343.117963][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.125933][ T9764] R13: 000000000000000b R14: 00007fc3aed03f60 R15: 00007ffefa1c3a48 [ 343.133941][ T9764] [ 343.137067][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.138360][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.158466][ T45] usb 3-1: config 0 descriptor?? [ 343.167503][ T45] gspca_main: spca508-2.14.0 probing 8086:0110 [ 343.214556][ T4481] Bluetooth: Unexpected start frame (len 4) [ 343.583018][ T9780] FAULT_INJECTION: forcing a failure. [ 343.583018][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.600244][ T9780] CPU: 1 PID: 9780 Comm: syz.1.1263 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 343.610379][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 343.620454][ T9780] Call Trace: [ 343.623754][ T9780] [ 343.626698][ T9780] dump_stack_lvl+0x241/0x360 [ 343.631419][ T9780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.636659][ T9780] ? __pfx__printk+0x10/0x10 [ 343.641277][ T9780] ? __pfx_lock_release+0x10/0x10 [ 343.646332][ T9780] should_fail_ex+0x3b0/0x4e0 [ 343.651054][ T9780] _copy_from_user+0x2f/0xe0 [ 343.655663][ T9780] copy_msghdr_from_user+0xae/0x680 [ 343.660890][ T9780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 343.666757][ T9780] __sys_sendmsg+0x23d/0x3a0 [ 343.671377][ T9780] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.676506][ T9780] ? vfs_write+0x7c4/0xc90 [ 343.681020][ T9780] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.687350][ T9780] ? do_syscall_64+0x100/0x230 [ 343.692124][ T9780] ? do_syscall_64+0xb6/0x230 [ 343.696816][ T9780] do_syscall_64+0xf3/0x230 [ 343.701361][ T9780] ? clear_bhb_loop+0x35/0x90 [ 343.706073][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.712006][ T9780] RIP: 0033:0x7fc8fa975bd9 [ 343.716437][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.736044][ T9780] RSP: 002b:00007fc8fb79d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.744472][ T9780] RAX: ffffffffffffffda RBX: 00007fc8fab03f60 RCX: 00007fc8fa975bd9 [ 343.752476][ T9780] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 343.760472][ T9780] RBP: 00007fc8fb79d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.768460][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.776442][ T9780] R13: 000000000000000b R14: 00007fc8fab03f60 R15: 00007ffcfa7ceb68 [ 343.784447][ T9780] [ 343.790250][ T45] gspca_spca508: reg_read err -110 [ 343.796856][ T45] gspca_spca508: reg_read err -32 [ 343.811949][ T45] gspca_spca508: reg_read err -32 [ 343.824395][ T45] gspca_spca508: reg_read err -32 [ 343.846051][ T45] gspca_spca508: reg_read err -32 [ 343.858798][ T45] gspca_spca508: reg write: error -32 [ 343.865539][ T45] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 344.890734][ T4481] Bluetooth: hci0: command 0x0406 tx timeout [ 344.924877][ T5107] usb 3-1: USB disconnect, device number 27 [ 345.012795][ T9797] FAULT_INJECTION: forcing a failure. [ 345.012795][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.076443][ T9797] CPU: 1 PID: 9797 Comm: syz.1.1266 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 345.086561][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 345.096639][ T9797] Call Trace: [ 345.099955][ T9797] [ 345.103005][ T9797] dump_stack_lvl+0x241/0x360 [ 345.107751][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.112988][ T9797] ? __pfx__printk+0x10/0x10 [ 345.117612][ T9797] ? __pfx_lock_release+0x10/0x10 [ 345.122662][ T9797] ? __lock_acquire+0x1346/0x1fd0 [ 345.127733][ T9797] should_fail_ex+0x3b0/0x4e0 [ 345.132445][ T9797] _copy_from_user+0x2f/0xe0 [ 345.137070][ T9797] kstrtouint_from_user+0xc6/0x190 [ 345.142217][ T9797] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 345.147995][ T9797] ? __pfx_lock_acquire+0x10/0x10 [ 345.153072][ T9797] proc_fail_nth_write+0xaa/0x2d0 [ 345.158138][ T9797] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 345.164069][ T9797] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.169741][ T9797] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.175407][ T9797] vfs_write+0x2a2/0xc90 [ 345.179700][ T9797] ? __pfx_vfs_write+0x10/0x10 [ 345.184475][ T9797] ? __fget_files+0x29/0x470 [ 345.189080][ T9797] ? __fget_files+0x3f6/0x470 [ 345.193788][ T9797] ksys_write+0x1a0/0x2c0 [ 345.198143][ T9797] ? __pfx_ksys_write+0x10/0x10 [ 345.203032][ T9797] ? do_syscall_64+0x100/0x230 [ 345.207849][ T9797] ? do_syscall_64+0xb6/0x230 [ 345.212566][ T9797] do_syscall_64+0xf3/0x230 [ 345.217112][ T9797] ? clear_bhb_loop+0x35/0x90 [ 345.221838][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.227739][ T9797] RIP: 0033:0x7fc8fa97475f [ 345.232170][ T9797] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 345.251781][ T9797] RSP: 002b:00007fc8fb77c040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 345.260199][ T9797] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8fa97475f [ 345.268224][ T9797] RDX: 0000000000000001 RSI: 00007fc8fb77c0b0 RDI: 0000000000000004 [ 345.276205][ T9797] RBP: 00007fc8fb77c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.284211][ T9797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 345.292183][ T9797] R13: 000000000000006e R14: 00007fc8fab04038 R15: 00007ffcfa7ceb68 [ 345.300168][ T9797] [ 345.562956][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 345.604237][ T9804] bond_slave_0: entered promiscuous mode [ 345.610060][ T9804] bond_slave_1: entered promiscuous mode [ 345.616108][ T9804] macvtap1: entered promiscuous mode [ 345.622145][ T9804] bond0: entered promiscuous mode [ 345.628099][ T9804] macvtap1: entered allmulticast mode [ 345.633523][ T9804] bond0: entered allmulticast mode [ 345.640025][ T9804] bond_slave_0: entered allmulticast mode [ 345.650174][ T9804] bond_slave_1: entered allmulticast mode [ 345.663515][ T9804] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 345.671959][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 345.681991][ T9811] bond0: left allmulticast mode [ 345.692303][ T9811] bond_slave_0: left allmulticast mode [ 345.698074][ T9811] bond_slave_1: left allmulticast mode [ 345.703707][ T9811] bond0: left promiscuous mode [ 345.717290][ T9811] bond_slave_0: left promiscuous mode [ 345.722923][ T9811] bond_slave_1: left promiscuous mode [ 345.741628][ T9811] macvtap1: left promiscuous mode [ 345.747580][ T9811] macvtap1: left allmulticast mode [ 345.774284][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1272'. [ 345.786018][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 345.916716][ T785] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 346.098922][ T4481] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 346.110267][ T785] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 346.119692][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.131155][ T785] usb 5-1: config 0 descriptor?? [ 346.145573][ T785] gspca_main: spca508-2.14.0 probing 8086:0110 [ 346.376248][ T784] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 346.598117][ T784] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 346.624119][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.656642][ T785] gspca_spca508: reg_read err -110 [ 346.672218][ T784] usb 4-1: config 0 descriptor?? [ 346.683458][ T784] gspca_main: spca508-2.14.0 probing 8086:0110 [ 346.694102][ T785] gspca_spca508: reg_read err -32 [ 346.725741][ T785] gspca_spca508: reg_read err -32 [ 346.731386][ T9852] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1283'. [ 346.746373][ T785] gspca_spca508: reg_read err -32 [ 346.754226][ T785] gspca_spca508: reg_read err -32 [ 346.775745][ T785] gspca_spca508: reg write: error -32 [ 346.791136][ T785] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 346.831739][ T9854] ufs: You didn't specify the type of your ufs filesystem [ 346.831739][ T9854] [ 346.831739][ T9854] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 346.831739][ T9854] [ 346.831739][ T9854] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 346.865272][ T9854] syz.0.1284: attempt to access beyond end of device [ 346.865272][ T9854] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 347.131364][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1285'. [ 347.194331][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 347.216830][ T784] gspca_spca508: reg_read err -110 [ 347.240120][ T784] gspca_spca508: reg_read err -32 [ 347.253609][ T784] gspca_spca508: reg_read err -32 [ 347.274270][ T784] gspca_spca508: reg_read err -32 [ 347.293091][ T784] gspca_spca508: reg_read err -32 [ 347.304323][ T784] gspca_spca508: reg write: error -32 [ 347.338217][ T784] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 347.602866][ T45] usb 5-1: USB disconnect, device number 32 [ 347.716248][ T785] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 347.806905][ T5135] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 347.846268][ T5107] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 347.899857][ T785] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 347.909171][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.920751][ T785] usb 2-1: config 0 descriptor?? [ 347.929390][ T785] gspca_main: spca508-2.14.0 probing 8086:0110 [ 348.005425][ T5135] usb 3-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=ad.1a [ 348.014686][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.024784][ T5135] usb 3-1: Product: syz [ 348.029163][ T5107] usb 1-1: Using ep0 maxpacket: 8 [ 348.034395][ T5135] usb 3-1: Manufacturer: syz [ 348.039636][ T5135] usb 3-1: SerialNumber: syz [ 348.047066][ T5135] usb 3-1: config 0 descriptor?? [ 348.053313][ T5107] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 348.063369][ T5107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.073737][ T5107] usb 1-1: config 0 has no interface number 0 [ 348.096379][ T5107] usb 1-1: config 0 interface 52 has no altsetting 0 [ 348.110657][ T5107] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 348.120356][ T5107] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 348.128880][ T5107] usb 1-1: Product: syz [ 348.147853][ T5107] usb 1-1: SerialNumber: syz [ 348.157826][ T5107] usb 1-1: config 0 descriptor?? [ 348.158692][ T784] usb 4-1: USB disconnect, device number 33 [ 348.291055][ T5135] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 348.448922][ T785] gspca_spca508: reg_read err -110 [ 348.454389][ T785] gspca_spca508: reg_read err -32 [ 348.459823][ T785] gspca_spca508: reg_read err -32 [ 348.465195][ T785] gspca_spca508: reg_read err -32 [ 348.475157][ T785] gspca_spca508: reg_read err -32 [ 348.480875][ T785] gspca_spca508: reg write: error -32 [ 348.486584][ T785] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 348.511250][ T785] usb 3-1: USB disconnect, device number 28 [ 348.592088][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.601056][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.640479][ T9869] process 'syz.0.1288' launched './file1' with NULL argv: empty string added [ 348.727268][ T784] usb 1-1: USB disconnect, device number 31 [ 349.094447][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 349.131077][ T9887] bond_slave_0: entered promiscuous mode [ 349.137016][ T9887] bond_slave_1: entered promiscuous mode [ 349.155174][ T9887] macvtap2: entered promiscuous mode [ 349.178494][ T9887] bond0: entered promiscuous mode [ 349.184338][ T9887] macvtap2: entered allmulticast mode [ 349.204768][ T9887] bond0: entered allmulticast mode [ 349.210097][ T9887] bond_slave_0: entered allmulticast mode [ 349.215921][ T9887] bond_slave_1: entered allmulticast mode [ 349.225213][ T9890] FAULT_INJECTION: forcing a failure. [ 349.225213][ T9890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.241484][ T9887] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 349.255446][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 349.277862][ T9888] bond0: left allmulticast mode [ 349.280301][ T9890] CPU: 0 PID: 9890 Comm: syz.2.1294 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 349.292945][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.303030][ T9890] Call Trace: [ 349.306323][ T9890] [ 349.309259][ T9890] dump_stack_lvl+0x241/0x360 [ 349.313975][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.319190][ T9890] ? __pfx__printk+0x10/0x10 [ 349.323805][ T9890] ? vfs_write+0x7c4/0xc90 [ 349.328243][ T9890] should_fail_ex+0x3b0/0x4e0 [ 349.332973][ T9890] _copy_from_user+0x2f/0xe0 [ 349.337585][ T9890] move_addr_to_kernel+0x82/0x150 [ 349.342635][ T9890] __sys_connect+0xc1/0x310 [ 349.347159][ T9890] ? __pfx___sys_connect+0x10/0x10 [ 349.352288][ T9890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.358624][ T9890] ? do_syscall_64+0x100/0x230 [ 349.363426][ T9890] __x64_sys_connect+0x7a/0x90 [ 349.368200][ T9890] do_syscall_64+0xf3/0x230 [ 349.372728][ T9890] ? clear_bhb_loop+0x35/0x90 [ 349.377448][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.383358][ T9890] RIP: 0033:0x7fc656975bd9 [ 349.387781][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.407394][ T9890] RSP: 002b:00007fc65769e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 349.415815][ T9890] RAX: ffffffffffffffda RBX: 00007fc656b03f60 RCX: 00007fc656975bd9 [ 349.423814][ T9890] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000005 [ 349.431790][ T9890] RBP: 00007fc65769e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.439773][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.447767][ T9890] R13: 000000000000000b R14: 00007fc656b03f60 R15: 00007ffc42bb0688 [ 349.455759][ T9890] [ 349.458912][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.492022][ T9888] bond_slave_0: left allmulticast mode [ 349.514628][ T9888] bond_slave_1: left allmulticast mode [ 349.532416][ T9888] bond0: left promiscuous mode [ 349.544547][ T932] usb 2-1: USB disconnect, device number 25 [ 349.558802][ T9888] bond_slave_0: left promiscuous mode [ 349.564338][ T9888] bond_slave_1: left promiscuous mode [ 349.590290][ T9888] macvtap2: left promiscuous mode [ 349.615994][ T9888] macvtap2: left allmulticast mode [ 350.918164][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 350.960072][ T932] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 351.169364][ T932] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 351.193667][ T932] usb 5-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 351.203926][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 351.212382][ T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.222831][ T932] usb 5-1: Product: syz [ 351.227203][ T932] usb 5-1: Manufacturer: syz [ 351.231947][ T932] usb 5-1: SerialNumber: syz [ 351.420598][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 351.424397][ T5107] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 351.459601][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 351.469382][ T932] qmi_wwan 5-1:1.0: skipping garbage [ 351.476387][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.487136][ T5135] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 351.498406][ T9] usb 3-1: config 0 has no interface number 0 [ 351.505285][ T932] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 351.513937][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 351.527614][ T932] usb 5-1: USB disconnect, device number 33 [ 351.536453][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 351.552234][ T9] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 351.561211][ T9] usb 3-1: Product: syz [ 351.561720][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 351.565398][ T9] usb 3-1: SerialNumber: syz [ 351.584993][ T9] usb 3-1: config 0 descriptor?? [ 351.628578][ T5107] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 351.637185][ T5107] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 351.646383][ T5107] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 351.655615][ T5107] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 351.666422][ T5107] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 351.675694][ T5107] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 351.685933][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.697266][ T5135] usb 4-1: config 0 has no interfaces? [ 351.711537][ T5135] usb 4-1: string descriptor 0 read error: -22 [ 351.723053][ T5135] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.738411][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.752851][ T5135] usb 4-1: config 0 descriptor?? [ 351.955354][ T5135] usb 2-1: USB disconnect, device number 26 [ 351.972441][ T5107] usb 4-1: USB disconnect, device number 34 [ 352.113065][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.127574][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.289898][ T5135] usb 3-1: USB disconnect, device number 29 [ 354.050447][ T932] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 354.055805][ T9972] FAULT_INJECTION: forcing a failure. [ 354.055805][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.085138][ T9972] CPU: 1 PID: 9972 Comm: syz.0.1320 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 354.095256][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 354.105345][ T9972] Call Trace: [ 354.108655][ T9972] [ 354.111621][ T9972] dump_stack_lvl+0x241/0x360 [ 354.116353][ T9972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.121593][ T9972] ? __pfx__printk+0x10/0x10 [ 354.126267][ T9972] ? __pfx_lock_release+0x10/0x10 [ 354.131334][ T9972] ? vfs_write+0x7c4/0xc90 [ 354.135797][ T9972] should_fail_ex+0x3b0/0x4e0 [ 354.140518][ T9972] _copy_from_user+0x2f/0xe0 [ 354.145133][ T9972] __sys_bpf+0x1a4/0x810 [ 354.149415][ T9972] ? __pfx___sys_bpf+0x10/0x10 [ 354.154236][ T9972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.160247][ T9972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.166633][ T9972] ? do_syscall_64+0x100/0x230 [ 354.171440][ T9972] __x64_sys_bpf+0x7c/0x90 [ 354.175891][ T9972] do_syscall_64+0xf3/0x230 [ 354.180418][ T9972] ? clear_bhb_loop+0x35/0x90 [ 354.185145][ T9972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.191197][ T9972] RIP: 0033:0x7fc3aeb75bd9 [ 354.195659][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.215319][ T9972] RSP: 002b:00007fc3af977048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.223782][ T9972] RAX: ffffffffffffffda RBX: 00007fc3aed03f60 RCX: 00007fc3aeb75bd9 [ 354.231796][ T9972] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 354.239790][ T9972] RBP: 00007fc3af9770a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.247876][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.255971][ T9972] R13: 000000000000000b R14: 00007fc3aed03f60 R15: 00007ffefa1c3a48 [ 354.263990][ T9972] [ 354.267218][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.316253][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 354.337366][ T932] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 354.350557][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.366284][ T932] usb 4-1: SerialNumber: syz [ 354.376431][ T932] usb 4-1: config 0 descriptor?? [ 354.603511][ T5135] usb 4-1: USB disconnect, device number 35 [ 354.616360][ T5107] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 354.769025][ T9994] netlink: 'syz.2.1321': attribute type 14 has an invalid length. [ 354.777033][ T9994] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 354.797902][ T5107] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.815158][ T5107] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 354.832184][ T5107] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 354.847157][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.787860][ T932] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 355.940387][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.062589][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.320712][ T932] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 356.360419][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.390936][ T932] usb 4-1: config 0 descriptor?? [ 356.412677][ T932] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 356.487288][ T5107] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 356.497332][ T5107] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input73 [ 356.514579][ T5107] input: failed to attach handler kbd to device input73, error: -5 [ 356.623939][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.635849][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.764610][ T5135] usb 2-1: USB disconnect, device number 27 [ 356.974084][ T4481] Bluetooth: Unexpected start frame (len 12) [ 356.981641][ T4481] Bluetooth: hci2: link tx timeout [ 356.987261][ T4481] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 356.998983][ T4481] Bluetooth: hci2: link tx timeout [ 357.006591][ T4481] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.078286][ T932] gp8psk: usb in 128 operation failed. [ 357.085127][ T932] gp8psk: usb in 137 operation failed. [ 357.091124][ T932] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 357.101664][ T932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 357.113352][ T932] usb 4-1: USB disconnect, device number 36 [ 357.359415][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 357.375392][T10040] bond_slave_0: entered promiscuous mode [ 357.381340][T10040] bond_slave_1: entered promiscuous mode [ 357.387927][T10040] macvtap5: entered promiscuous mode [ 357.393340][T10040] bond0: entered promiscuous mode [ 357.398964][T10040] macvtap5: entered allmulticast mode [ 357.404469][T10040] bond0: entered allmulticast mode [ 357.412776][T10040] bond_slave_0: entered allmulticast mode [ 357.418742][T10040] bond_slave_1: entered allmulticast mode [ 357.438536][T10040] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 357.446460][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 357.462220][T10041] bond0: left allmulticast mode [ 357.470774][T10041] bond_slave_0: left allmulticast mode [ 357.476425][ T784] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 357.484278][T10041] bond_slave_1: left allmulticast mode [ 357.490853][T10041] bond0: left promiscuous mode [ 357.496383][T10041] bond_slave_0: left promiscuous mode [ 357.501947][T10041] bond_slave_1: left promiscuous mode [ 357.508687][T10041] macvtap5: left promiscuous mode [ 357.513854][T10041] macvtap5: left allmulticast mode [ 357.811226][ T784] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 357.819818][ T784] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 357.829650][ T784] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 357.844690][ T784] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 357.855253][ T784] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 357.865210][ T784] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 357.874946][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.985355][ T784] usb 5-1: USB disconnect, device number 34 [ 359.042221][ T4481] Bluetooth: hci2: command 0x0406 tx timeout [ 359.247669][T10075] FAULT_INJECTION: forcing a failure. [ 359.247669][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 359.261593][T10075] CPU: 1 PID: 10075 Comm: syz.2.1353 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 359.271778][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 359.281853][T10075] Call Trace: [ 359.285141][T10075] [ 359.288119][T10075] dump_stack_lvl+0x241/0x360 [ 359.292848][T10075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.298107][T10075] ? __wake_up_klogd+0xcc/0x110 [ 359.302998][T10075] should_fail_ex+0x3b0/0x4e0 [ 359.307715][T10075] ? kernfs_fop_write_iter+0x15b/0x500 [ 359.313202][T10075] should_failslab+0x9/0x20 [ 359.317730][T10075] __kmalloc_noprof+0xd8/0x400 [ 359.322651][T10075] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 359.328593][T10075] kernfs_fop_write_iter+0x15b/0x500 [ 359.333920][T10075] vfs_write+0xa72/0xc90 [ 359.338185][T10075] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 359.344019][T10075] ? __pfx_vfs_write+0x10/0x10 [ 359.348841][T10075] ksys_write+0x1a0/0x2c0 [ 359.353225][T10075] ? __pfx_ksys_write+0x10/0x10 [ 359.358115][T10075] ? do_syscall_64+0x100/0x230 [ 359.362910][T10075] ? do_syscall_64+0xb6/0x230 [ 359.367644][T10075] do_syscall_64+0xf3/0x230 [ 359.372193][T10075] ? clear_bhb_loop+0x35/0x90 [ 359.377008][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.382931][T10075] RIP: 0033:0x7fc656975bd9 [ 359.385137][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 359.387362][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.387420][T10075] RSP: 002b:00007fc65767d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.387449][T10075] RAX: ffffffffffffffda RBX: 00007fc656b04038 RCX: 00007fc656975bd9 [ 359.432351][T10075] RDX: 00000000ffffff4a RSI: 0000000020000300 RDI: 0000000000000009 [ 359.440375][T10075] RBP: 00007fc65767d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.448403][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.456411][T10075] R13: 000000000000006e R14: 00007fc656b04038 R15: 00007ffc42bb0688 [ 359.464444][T10075] [ 359.467637][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.482964][ T785] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 359.519730][T10075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.678273][ T785] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 359.705530][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.723035][ T785] usb 1-1: config 0 descriptor?? [ 359.731398][ T785] gspca_main: spca508-2.14.0 probing 8086:0110 [ 359.826508][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 359.841376][T10083] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 359.852493][ T5099] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 359.945802][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 359.945838][ T29] audit: type=1326 audit(1720506612.277:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10084 comm="syz.3.1356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e5d75bd9 code=0x0 [ 360.043945][ T9] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 360.056204][ T9] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 360.065016][ T9] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 360.109312][ T9] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 360.132364][ T9] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 360.190069][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 360.234421][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.259170][ T785] gspca_spca508: reg_read err -110 [ 360.272660][ T785] gspca_spca508: reg_read err -32 [ 360.279762][ T785] gspca_spca508: reg_read err -32 [ 360.299873][ T785] gspca_spca508: reg_read err -32 [ 360.315837][ T785] gspca_spca508: reg_read err -32 [ 360.328552][ T785] gspca_spca508: reg write: error -32 [ 360.340106][ T785] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 360.527922][ T9] usb 2-1: USB disconnect, device number 28 [ 361.052095][ T5107] usb 1-1: USB disconnect, device number 32 [ 361.333558][T10118] capability: warning: `syz.2.1364' uses deprecated v2 capabilities in a way that may be insecure [ 361.876747][ T4481] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 362.002816][ T5099] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 362.035443][T10136] ufs: You didn't specify the type of your ufs filesystem [ 362.035443][T10136] [ 362.035443][T10136] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 362.035443][T10136] [ 362.035443][T10136] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 362.066197][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.078750][T10136] syz.2.1367: attempt to access beyond end of device [ 362.078750][T10136] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 362.102742][T10139] input: syz0 as /devices/virtual/input/input74 [ 362.329227][ T4481] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 362.452146][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1370'. [ 362.464531][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 363.233566][T10165] ebt_among: dst integrity fail: 101 [ 363.276268][ T4481] Bluetooth: hci2: command tx timeout [ 364.655338][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.664176][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.673099][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.682897][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.693560][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 364.703001][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.179573][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 365.233296][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 365.264225][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 365.266603][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 365.286736][T10187] input: syz0 as /devices/virtual/input/input75 [ 365.357587][ T5099] Bluetooth: hci2: command tx timeout [ 365.429852][T10181] chnl_net:caif_netlink_parms(): no params data found [ 366.708200][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.715575][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.763328][T10181] bridge_slave_0: entered allmulticast mode [ 366.779630][T10181] bridge_slave_0: entered promiscuous mode [ 366.796421][ T5099] Bluetooth: hci0: command tx timeout [ 366.848898][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.876447][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.883741][T10181] bridge_slave_1: entered allmulticast mode [ 366.891755][T10181] bridge_slave_1: entered promiscuous mode [ 367.234734][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 367.269426][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.366909][T10238] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 367.366909][T10238] program syz.0.1390 not setting count and/or reply_len properly [ 368.049084][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.067559][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 368.110261][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 368.232585][T10181] team0: Port device team_slave_0 added [ 368.279860][T10245] ufs: You didn't specify the type of your ufs filesystem [ 368.279860][T10245] [ 368.279860][T10245] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 368.279860][T10245] [ 368.279860][T10245] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 368.314514][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.321414][T10245] syz.0.1395: attempt to access beyond end of device [ 368.321414][T10245] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 368.353756][T10181] team0: Port device team_slave_1 added [ 368.546321][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 368.638121][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.646494][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.726304][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.746342][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 368.766027][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 368.770694][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.824068][ T9] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 368.829746][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.843109][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.859229][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.876277][ T5099] Bluetooth: hci0: command tx timeout [ 368.923422][ T9] usb 3-1: config 0 descriptor?? [ 368.993462][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.007736][ T5099] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 369.140132][ T5099] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 369.179594][T10181] hsr_slave_0: entered promiscuous mode [ 369.188561][T10181] hsr_slave_1: entered promiscuous mode [ 369.207506][T10181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.221870][T10181] Cannot create hsr debugfs directory [ 369.231430][T10259] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1398'. [ 369.270353][T10259] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 369.281945][T10259] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 369.358543][T10261] input: syz0 as /devices/virtual/input/input76 [ 369.365866][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.379684][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.416882][ T9] hid (null): unknown global tag 0x83 [ 369.451342][ T9] hid (null): unknown global tag 0xc [ 369.511526][ T9] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 369.532104][ T9] hid-generic 0003:0158:0100.0001: unexpected long global item [ 369.565964][ T9] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 369.632793][ T785] usb 3-1: USB disconnect, device number 30 [ 370.103582][T10271] netlink: 'syz.3.1400': attribute type 14 has an invalid length. [ 370.113619][T10271] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 370.664162][T10181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.808037][T10273] autofs4:pid:10273:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 370.939884][T10181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.959870][ T5099] Bluetooth: hci0: command tx timeout [ 371.046345][ T5099] Bluetooth: hci2: command tx timeout [ 371.207812][T10181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.235656][T10278] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1404'. [ 371.397329][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 371.413235][T10181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.679351][ T5137] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 371.727066][T10181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.774858][T10181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.828671][T10181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.926415][ T932] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 371.928104][T10181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.936349][ T5137] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 371.991714][ T5137] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 372.031249][ T5137] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 372.051496][ T5137] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 372.082458][ T5137] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 372.123622][ T5137] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 372.147793][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.169002][ T932] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 372.176365][T10292] bridge0: entered promiscuous mode [ 372.185526][ T932] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 372.185624][T10292] bridge0: entered allmulticast mode [ 372.218965][ T932] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 372.238532][ T932] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 372.281603][ T932] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 372.311440][ T932] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 372.346228][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.408156][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.425631][ T932] usb 3-1: USB disconnect, device number 31 [ 372.544936][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.568158][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.575463][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.590376][ T9] usb 2-1: USB disconnect, device number 29 [ 372.632210][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.639448][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.736525][ T5132] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 372.950932][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.968723][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.997316][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.046287][ T5099] Bluetooth: hci0: command tx timeout [ 373.051879][ T5132] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.079833][ T5132] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.110268][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.131473][ T5132] usb 4-1: config 0 descriptor?? [ 373.296749][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 373.576305][ T5132] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 373.608229][ T5132] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 373.636779][ T5132] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 373.658497][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 373.776207][T10181] veth0_vlan: entered promiscuous mode [ 373.808819][T10181] veth1_vlan: entered promiscuous mode [ 373.864964][T10181] veth0_macvtap: entered promiscuous mode [ 373.873569][ T9] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 373.901144][T10181] veth1_macvtap: entered promiscuous mode [ 373.909949][ T9] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 373.941140][ T9] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 373.963267][ T9] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 373.982785][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.997163][ T9] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 374.012700][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.024622][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 374.036747][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.053957][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.062795][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.084800][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.099160][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.119465][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.141038][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.163579][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.174434][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.209541][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.227386][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1407'. [ 374.257857][T10294] vlan2: entered promiscuous mode [ 374.265947][T10294] erspan0: entered promiscuous mode [ 374.286449][ T784] usb 3-1: USB disconnect, device number 32 [ 374.307466][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.333032][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.347338][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.357950][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.369067][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.383613][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.394539][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.405326][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.415298][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.427876][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.439628][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.461883][T10181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.470721][T10181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.480080][T10181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.490140][T10181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.573621][ T9441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.581841][ T9441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.608058][ T5132] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 374.624278][ T9440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.633531][ T9440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.809545][ T5132] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 374.825750][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.845977][ T5132] usb 2-1: config 0 descriptor?? [ 374.858977][ T5132] gspca_main: spca508-2.14.0 probing 8086:0110 [ 375.088002][ T5107] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 375.190721][ T5099] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 375.377166][ T5132] gspca_spca508: reg_read err -110 [ 375.394421][ T5132] gspca_spca508: reg_read err -32 [ 375.409903][ T5132] gspca_spca508: reg_read err -32 [ 375.418100][ T5132] gspca_spca508: reg_read err -32 [ 375.429846][ T5132] gspca_spca508: reg_read err -32 [ 375.438141][ T5132] gspca_spca508: reg write: error -32 [ 375.443717][ T5132] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 376.064201][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 376.332315][ T5199] usb 2-1: USB disconnect, device number 30 [ 376.398309][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 376.429006][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.442093][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.508919][ T5132] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 376.699332][ T5132] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 376.707954][ T5132] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 376.719423][ T5132] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 376.729068][ T5132] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 376.739614][ T5132] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 376.749290][ T5132] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 376.763429][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.022275][ T5132] usb 1-1: USB disconnect, device number 33 [ 377.037779][T10356] netlink: 'syz.1.1420': attribute type 7 has an invalid length. [ 377.236966][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 377.250682][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 378.843232][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849750][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.015161][ T5099] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 379.627940][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 379.660629][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 379.879513][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.917376][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 379.977652][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 379.994615][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.271615][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 380.311559][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 380.327084][ T5107] usb 4-1: device descriptor read/64, error -110 [ 380.626367][ T5107] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 380.836339][ T5107] usb 4-1: device descriptor read/64, error -32 [ 380.874055][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 380.990402][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input77 [ 381.018706][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.036823][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.068696][ T9] input: failed to attach handler kbd to device input77, error: -5 [ 381.117397][ T5107] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 381.125591][ T9] usb 1-1: USB disconnect, device number 34 [ 381.202050][ T5107] usb 4-1: device descriptor read/8, error -32 [ 381.546409][ T5107] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 381.587419][ T5107] usb 4-1: device descriptor read/8, error -32 [ 382.466418][ T5107] raw-gadget.0 gadget.3: failed to queue suspend event [ 382.499792][ T5135] usb 4-1: USB disconnect, device number 37 [ 382.537788][T10436] FAULT_INJECTION: forcing a failure. [ 382.537788][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 382.564012][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 382.581087][T10436] CPU: 1 PID: 10436 Comm: syz.1.1441 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 382.591310][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 382.601457][T10436] Call Trace: [ 382.604768][T10436] [ 382.607724][T10436] dump_stack_lvl+0x241/0x360 [ 382.612454][T10436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.617700][T10436] ? __pfx__printk+0x10/0x10 [ 382.622330][T10436] ? __pfx___might_resched+0x10/0x10 [ 382.627658][T10436] should_fail_ex+0x3b0/0x4e0 [ 382.632381][T10436] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 382.638179][T10436] should_failslab+0x9/0x20 [ 382.642727][T10436] __kmalloc_noprof+0xd8/0x400 [ 382.647522][T10436] ? kfree+0x4e/0x360 [ 382.651515][T10436] tomoyo_realpath_from_path+0xcf/0x5e0 [ 382.657088][T10436] tomoyo_path_number_perm+0x23a/0x880 [ 382.662556][T10436] ? tomoyo_path_number_perm+0x208/0x880 [ 382.668210][T10436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 382.674264][T10436] ? __fget_files+0x29/0x470 [ 382.678884][T10436] ? __fget_files+0x3f6/0x470 [ 382.683603][T10436] ? __fget_files+0x29/0x470 [ 382.688217][T10436] security_file_ioctl+0x75/0xb0 [ 382.693180][T10436] __se_sys_ioctl+0x47/0x170 [ 382.697789][T10436] do_syscall_64+0xf3/0x230 [ 382.698635][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 382.702327][T10436] ? clear_bhb_loop+0x35/0x90 [ 382.715956][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.721884][T10436] RIP: 0033:0x7fc8fa975bd9 [ 382.726324][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.745972][T10436] RSP: 002b:00007fc8fb79d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.754444][T10436] RAX: ffffffffffffffda RBX: 00007fc8fab03f60 RCX: 00007fc8fa975bd9 [ 382.762472][T10436] RDX: 0000000020000040 RSI: 00000000c0185500 RDI: 0000000000000004 [ 382.770469][T10436] RBP: 00007fc8fb79d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.778468][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.786467][T10436] R13: 000000000000000b R14: 00007fc8fab03f60 R15: 00007ffcfa7ceb68 [ 382.794489][T10436] [ 382.952216][T10436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.047192][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 383.762008][ T5135] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 383.776721][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 383.786350][ T5137] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 383.787301][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 383.999417][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 384.153416][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 384.162534][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 384.171584][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 384.180855][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 384.191317][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 384.200904][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 384.210210][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.706617][ T9] usb 1-1: USB disconnect, device number 35 [ 384.869864][ T5135] usb 4-1: device descriptor read/64, error -32 [ 384.975906][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1447'. [ 385.006569][ T5135] raw-gadget.0 gadget.3: failed to queue suspend event [ 385.015494][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 385.023905][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 385.106578][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 385.125278][T10463] binder: 10460:10463 ioctl 541b 0 returned -22 [ 385.186307][ T5135] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 385.199011][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 385.206534][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 385.387405][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 388.360821][ T5135] usb 4-1: device descriptor read/64, error -32 [ 388.506520][ T5135] raw-gadget.0 gadget.3: failed to queue suspend event [ 388.528802][ T5135] usb usb4-port1: attempt power cycle [ 388.535195][ T5135] raw-gadget.0 gadget.3: failed to queue disconnect event [ 388.616553][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 388.642050][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 388.706272][ T932] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 388.726290][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 388.742207][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 388.809633][ T5137] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 388.836373][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 388.888631][ T932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.941392][ T932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 388.978996][ T932] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 389.000937][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 389.023621][ T932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.037656][ T5137] usb 2-1: Using ep0 maxpacket: 16 [ 389.066518][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 389.109588][ T5137] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 389.116375][ T5135] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 389.145554][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.167749][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 389.174925][ T5135] usb 4-1: device descriptor read/8, error -32 [ 389.187716][ T5137] usb 2-1: config 0 descriptor?? [ 389.296368][ T5135] raw-gadget.0 gadget.3: failed to queue suspend event [ 389.317773][ T5135] raw-gadget.0 gadget.3: failed to queue reset event [ 389.417355][ T5135] raw-gadget.0 gadget.3: failed to queue resume event [ 389.432451][ T5107] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 389.445420][T10474] overlayfs: missing 'workdir' [ 389.526938][ T5135] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 389.648510][ T5107] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 389.768901][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 389.785797][ T5135] usb 4-1: device descriptor read/8, error -32 [ 389.794718][ T5107] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 389.811750][ T5107] usb 3-1: config 0 has no interface number 0 [ 389.928830][ T932] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 390.003512][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.050139][ T932] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input78 [ 390.144579][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.198081][ T932] input: failed to attach handler kbd to device input78, error: -5 [ 390.226752][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.457745][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.489232][ T5137] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 390.519052][ T5137] hid-generic 0003:0158:0100.0003: unexpected long global item [ 390.558126][ T5137] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 390.600574][ T932] usb 5-1: USB disconnect, device number 35 [ 390.611870][ T5135] raw-gadget.0 gadget.3: failed to queue suspend event [ 390.627371][ T5135] usb usb4-port1: unable to enumerate USB device [ 390.651593][ T5107] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 390.662941][ T5107] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 390.672122][ T5107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.697324][ T5107] usb 3-1: config 0 descriptor?? [ 390.703440][ T9] usb 2-1: USB disconnect, device number 31 [ 390.715044][T10489] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 390.824947][T10497] autofs4:pid:10497:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 391.444005][ T5107] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input79 [ 391.598132][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 391.670748][ C1] ------------[ cut here ]------------ [ 391.676951][ C1] WARNING: CPU: 1 PID: 10503 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 391.680527][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 391.686007][ C1] Modules linked in: [ 391.698819][ C1] CPU: 1 PID: 10503 Comm: syz.4.1462 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 391.708996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 391.719088][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 391.724857][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 391.744511][ C1] RSP: 0018:ffffc90000a17530 EFLAGS: 00010002 [ 391.750649][ C1] RAX: 0000000080010101 RBX: ffff888020e45a00 RCX: 0000000000000002 [ 391.758624][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 391.766604][ C1] RBP: 0100000000000003 R08: ffffffff92f715ef R09: 1ffffffff25ee2bd [ 391.774597][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2be R12: ffffffff8196306e [ 391.782565][ C1] R13: ffff888029841600 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 391.790560][ C1] FS: 00007fb80449b6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 391.799492][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.806090][ C1] CR2: 00007fb80447ad58 CR3: 000000005ed10000 CR4: 00000000003506f0 [ 391.814058][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.822021][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.829994][ C1] Call Trace: [ 391.833278][ C1] [ 391.836128][ C1] ? __warn+0x163/0x4e0 [ 391.840329][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 391.845449][ C1] ? report_bug+0x2b3/0x500 [ 391.849962][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 391.855078][ C1] ? handle_bug+0x3e/0x70 [ 391.859411][ C1] ? exc_invalid_op+0x1a/0x50 [ 391.864091][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 391.869140][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 391.874198][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 391.879312][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 391.884187][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 391.889918][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 391.895315][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 391.901242][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 391.906484][ C1] dummy_timer+0x830/0x45d0 [ 391.910999][ C1] ? __pfx_lock_release+0x10/0x10 [ 391.916040][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.922377][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 391.927765][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 391.932987][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 391.937939][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 391.942894][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 391.948120][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 391.953853][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 391.959924][ C1] hrtimer_interrupt+0x396/0x990 [ 391.964926][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 391.970942][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 391.976590][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.982590][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 391.988857][ C1] Code: b5 76 00 e9 6a ff ff ff e8 0d 59 fb 09 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 [ 392.008479][ C1] RSP: 0018:ffffc90000a17cd8 EFLAGS: 00000282 [ 392.014587][ C1] RAX: 0000000000000002 RBX: ffffffff898e91a4 RCX: ffff888020e45a00 [ 392.022557][ C1] RDX: ffffc900022b2000 RSI: ffffffff898e91a4 RDI: ffffc90000a17dc0 [ 392.030549][ C1] RBP: ffffc90000a17d70 R08: ffffffff81376f12 R09: ffffffff8141095f [ 392.038533][ C1] R10: 0000000000000003 R11: ffffffff8181dca0 R12: ffff888020e45a00 [ 392.046506][ C1] R13: ffffffff8181dca0 R14: ffffc90000a17dc0 R15: ffffc90000a17ce0 [ 392.054479][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.060646][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 392.065322][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.071489][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 392.076806][ C1] ? arch_stack_walk+0x132/0x1b0 [ 392.081770][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 392.086457][ C1] arch_stack_walk+0x143/0x1b0 [ 392.091234][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 392.095934][ C1] stack_trace_save+0x118/0x1d0 [ 392.100810][ C1] ? mark_lock+0x9a/0x350 [ 392.105152][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 392.110570][ C1] kasan_save_track+0x3f/0x80 [ 392.115275][ C1] ? kasan_save_track+0x3f/0x80 [ 392.120141][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 392.124929][ C1] ? __kmalloc_noprof+0x1f9/0x400 [ 392.129975][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 392.136407][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 392.142264][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 392.148510][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 392.154327][ C1] ? ieee80211_scan_rx+0x526/0x9c0 [ 392.159457][ C1] ? ieee80211_rx_list+0x2b00/0x3780 [ 392.164752][ C1] ? ieee80211_rx_napi+0x18a/0x3c0 [ 392.169874][ C1] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 392.176048][ C1] ? tasklet_action_common+0x321/0x4d0 [ 392.181536][ C1] ? handle_softirqs+0x2c4/0x970 [ 392.186480][ C1] ? do_softirq+0x11b/0x1e0 [ 392.190978][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 392.196353][ C1] ? ieee80211_tx_skb_tid+0x264/0x420 [ 392.201723][ C1] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 392.207020][ C1] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 392.212568][ C1] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 392.217644][ C1] __kasan_kmalloc+0x98/0xb0 [ 392.222261][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 392.228689][ C1] __kmalloc_noprof+0x1f9/0x400 [ 392.233574][ C1] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 392.239852][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 392.246565][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 392.252413][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 392.258079][ C1] ? __pfx_validate_chain+0x10/0x10 [ 392.263339][ C1] ? validate_chain+0x11e/0x5900 [ 392.268324][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 392.274421][ C1] ? __pfx_validate_chain+0x10/0x10 [ 392.279645][ C1] ? mark_lock+0x9a/0x350 [ 392.283988][ C1] ? mark_lock+0x9a/0x350 [ 392.288342][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 392.293397][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 392.298451][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 392.304274][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 392.310359][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 392.316195][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 392.321847][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 392.328025][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.334372][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 392.340206][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 392.345179][ C1] ieee80211_rx_list+0x2b00/0x3780 [ 392.350305][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 392.355344][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 392.360846][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 392.365892][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 392.371878][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.378222][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 392.383357][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 392.388309][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.394657][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 392.400169][ C1] ? skb_dequeue+0x113/0x150 [ 392.404792][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 392.410795][ C1] tasklet_action_common+0x321/0x4d0 [ 392.416097][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 392.421945][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.428294][ C1] ? workqueue_softirq_action+0xca/0x140 [ 392.433954][ C1] handle_softirqs+0x2c4/0x970 [ 392.438728][ C1] ? do_softirq+0x11b/0x1e0 [ 392.443244][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 392.448555][ C1] do_softirq+0x11b/0x1e0 [ 392.452897][ C1] [ 392.455843][ C1] [ 392.458778][ C1] ? __pfx_do_softirq+0x10/0x10 [ 392.463643][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 392.469285][ C1] ? rcu_is_watching+0x15/0xb0 [ 392.474059][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 392.479266][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 392.484139][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 392.490160][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.495889][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 392.501886][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 392.507183][ C1] ieee80211_tx_skb_tid+0x264/0x420 [ 392.512393][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 392.517694][ C1] ieee80211_mgmt_tx+0x1b46/0x2170 [ 392.522822][ C1] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 392.528036][ C1] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 392.533429][ C1] nl80211_tx_mgmt+0xb0d/0x1190 [ 392.538296][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 392.543586][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 392.548909][ C1] genl_rcv_msg+0xb14/0xec0 [ 392.553421][ C1] ? mark_lock+0x9a/0x350 [ 392.557776][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.562837][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 392.567867][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 392.573262][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 392.578553][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 392.584046][ C1] ? __pfx___might_resched+0x10/0x10 [ 392.589345][ C1] netlink_rcv_skb+0x1e3/0x430 [ 392.594120][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.599148][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.604452][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 392.609940][ C1] genl_rcv+0x28/0x40 [ 392.613948][ C1] netlink_unicast+0x7ea/0x980 [ 392.618730][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 392.624024][ C1] ? __virt_addr_valid+0x183/0x520 [ 392.629155][ C1] ? __check_object_size+0x49c/0x900 [ 392.634448][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 392.639581][ C1] netlink_sendmsg+0x8db/0xcb0 [ 392.644418][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.649718][ C1] ? __import_iovec+0x536/0x820 [ 392.654602][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 392.659888][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 392.665365][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.670662][ C1] __sock_sendmsg+0x221/0x270 [ 392.675352][ C1] ____sys_sendmsg+0x525/0x7d0 [ 392.680307][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.685613][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 392.690245][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.695401][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.701780][ C1] ? do_syscall_64+0x100/0x230 [ 392.706559][ C1] ? do_syscall_64+0xb6/0x230 [ 392.711292][ C1] do_syscall_64+0xf3/0x230 [ 392.715824][ C1] ? clear_bhb_loop+0x35/0x90 [ 392.720545][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.726446][ C1] RIP: 0033:0x7fb803775bd9 [ 392.730880][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.750493][ C1] RSP: 002b:00007fb80449b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.758921][ C1] RAX: ffffffffffffffda RBX: 00007fb803903f60 RCX: 00007fb803775bd9 [ 392.766899][ C1] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000008 [ 392.774872][ C1] RBP: 00007fb8037e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 392.782846][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.790821][ C1] R13: 000000000000000b R14: 00007fb803903f60 R15: 00007ffecfeb66b8 [ 392.798816][ C1] [ 392.801836][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.809110][ C1] CPU: 1 PID: 10503 Comm: syz.4.1462 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 392.819261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 392.829325][ C1] Call Trace: [ 392.832626][ C1] [ 392.835472][ C1] dump_stack_lvl+0x241/0x360 [ 392.840168][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.845420][ C1] ? __pfx__printk+0x10/0x10 [ 392.850020][ C1] ? _printk+0xd5/0x120 [ 392.854191][ C1] ? vscnprintf+0x5d/0x90 [ 392.858529][ C1] panic+0x349/0x860 [ 392.862435][ C1] ? __warn+0x172/0x4e0 [ 392.866599][ C1] ? __pfx_panic+0x10/0x10 [ 392.871024][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 392.876263][ C1] __warn+0x346/0x4e0 [ 392.880260][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 392.885378][ C1] report_bug+0x2b3/0x500 [ 392.889740][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 392.894858][ C1] handle_bug+0x3e/0x70 [ 392.899014][ C1] exc_invalid_op+0x1a/0x50 [ 392.903524][ C1] asm_exc_invalid_op+0x1a/0x20 [ 392.908388][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 392.914112][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 392.933721][ C1] RSP: 0018:ffffc90000a17530 EFLAGS: 00010002 [ 392.939813][ C1] RAX: 0000000080010101 RBX: ffff888020e45a00 RCX: 0000000000000002 [ 392.947821][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 392.955802][ C1] RBP: 0100000000000003 R08: ffffffff92f715ef R09: 1ffffffff25ee2bd [ 392.963788][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2be R12: ffffffff8196306e [ 392.971820][ C1] R13: ffff888029841600 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 392.979816][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 392.984862][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 392.989725][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 392.995477][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 393.000861][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 393.006767][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 393.011983][ C1] dummy_timer+0x830/0x45d0 [ 393.016527][ C1] ? __pfx_lock_release+0x10/0x10 [ 393.021571][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.027915][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 393.033308][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 393.038546][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 393.043520][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 393.048479][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 393.053730][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 393.059492][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 393.065576][ C1] hrtimer_interrupt+0x396/0x990 [ 393.070551][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 393.076551][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 393.082200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.088207][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 393.094479][ C1] Code: b5 76 00 e9 6a ff ff ff e8 0d 59 fb 09 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 [ 393.114092][ C1] RSP: 0018:ffffc90000a17cd8 EFLAGS: 00000282 [ 393.120167][ C1] RAX: 0000000000000002 RBX: ffffffff898e91a4 RCX: ffff888020e45a00 [ 393.128150][ C1] RDX: ffffc900022b2000 RSI: ffffffff898e91a4 RDI: ffffc90000a17dc0 [ 393.136144][ C1] RBP: ffffc90000a17d70 R08: ffffffff81376f12 R09: ffffffff8141095f [ 393.144128][ C1] R10: 0000000000000003 R11: ffffffff8181dca0 R12: ffff888020e45a00 [ 393.152142][ C1] R13: ffffffff8181dca0 R14: ffffc90000a17dc0 R15: ffffc90000a17ce0 [ 393.160124][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.166308][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 393.170991][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.177160][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 393.182462][ C1] ? arch_stack_walk+0x132/0x1b0 [ 393.187441][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 393.192130][ C1] arch_stack_walk+0x143/0x1b0 [ 393.196912][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 393.201601][ C1] stack_trace_save+0x118/0x1d0 [ 393.207118][ C1] ? mark_lock+0x9a/0x350 [ 393.211459][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 393.216871][ C1] kasan_save_track+0x3f/0x80 [ 393.221572][ C1] ? kasan_save_track+0x3f/0x80 [ 393.226432][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 393.231225][ C1] ? __kmalloc_noprof+0x1f9/0x400 [ 393.236272][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 393.242725][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 393.248601][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 393.254872][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 393.260879][ C1] ? ieee80211_scan_rx+0x526/0x9c0 [ 393.266036][ C1] ? ieee80211_rx_list+0x2b00/0x3780 [ 393.271379][ C1] ? ieee80211_rx_napi+0x18a/0x3c0 [ 393.276501][ C1] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 393.282681][ C1] ? tasklet_action_common+0x321/0x4d0 [ 393.288158][ C1] ? handle_softirqs+0x2c4/0x970 [ 393.293104][ C1] ? do_softirq+0x11b/0x1e0 [ 393.297608][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 393.302981][ C1] ? ieee80211_tx_skb_tid+0x264/0x420 [ 393.308391][ C1] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 393.313676][ C1] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 393.319244][ C1] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 393.324315][ C1] __kasan_kmalloc+0x98/0xb0 [ 393.328914][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 393.335333][ C1] __kmalloc_noprof+0x1f9/0x400 [ 393.340198][ C1] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 393.346450][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 393.353155][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 393.358975][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 393.364636][ C1] ? __pfx_validate_chain+0x10/0x10 [ 393.369882][ C1] ? validate_chain+0x11e/0x5900 [ 393.374854][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 393.380926][ C1] ? __pfx_validate_chain+0x10/0x10 [ 393.386130][ C1] ? mark_lock+0x9a/0x350 [ 393.390475][ C1] ? mark_lock+0x9a/0x350 [ 393.394808][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 393.399852][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 393.404878][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 393.410703][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 393.416810][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 393.422660][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 393.428313][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 393.434513][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.440843][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 393.446686][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 393.451697][ C1] ieee80211_rx_list+0x2b00/0x3780 [ 393.456841][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 393.461901][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 393.467396][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 393.472435][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 393.478426][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.484773][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 393.489846][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 393.494799][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.501162][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 393.506636][ C1] ? skb_dequeue+0x113/0x150 [ 393.511235][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 393.517229][ C1] tasklet_action_common+0x321/0x4d0 [ 393.522538][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 393.528405][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.534751][ C1] ? workqueue_softirq_action+0xca/0x140 [ 393.540415][ C1] handle_softirqs+0x2c4/0x970 [ 393.545188][ C1] ? do_softirq+0x11b/0x1e0 [ 393.549710][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 393.555014][ C1] do_softirq+0x11b/0x1e0 [ 393.559357][ C1] [ 393.562291][ C1] [ 393.565270][ C1] ? __pfx_do_softirq+0x10/0x10 [ 393.570143][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 393.575792][ C1] ? rcu_is_watching+0x15/0xb0 [ 393.580566][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 393.585780][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 393.590633][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 393.596630][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 393.602356][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 393.608344][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 393.613638][ C1] ieee80211_tx_skb_tid+0x264/0x420 [ 393.618911][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 393.624214][ C1] ieee80211_mgmt_tx+0x1b46/0x2170 [ 393.629334][ C1] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 393.634548][ C1] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 393.639947][ C1] nl80211_tx_mgmt+0xb0d/0x1190 [ 393.644836][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 393.650128][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 393.655434][ C1] genl_rcv_msg+0xb14/0xec0 [ 393.659950][ C1] ? mark_lock+0x9a/0x350 [ 393.664342][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.669411][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 393.674454][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 393.679848][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 393.685141][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 393.690613][ C1] ? __pfx___might_resched+0x10/0x10 [ 393.695908][ C1] netlink_rcv_skb+0x1e3/0x430 [ 393.700683][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.705713][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.711019][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 393.716496][ C1] genl_rcv+0x28/0x40 [ 393.720506][ C1] netlink_unicast+0x7ea/0x980 [ 393.725285][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 393.730621][ C1] ? __virt_addr_valid+0x183/0x520 [ 393.735743][ C1] ? __check_object_size+0x49c/0x900 [ 393.741031][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 393.746152][ C1] netlink_sendmsg+0x8db/0xcb0 [ 393.750940][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.756254][ C1] ? __import_iovec+0x536/0x820 [ 393.761105][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.766386][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 393.771859][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.777175][ C1] __sock_sendmsg+0x221/0x270 [ 393.781853][ C1] ____sys_sendmsg+0x525/0x7d0 [ 393.786663][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.791964][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 393.796588][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.801736][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.808426][ C1] ? do_syscall_64+0x100/0x230 [ 393.813217][ C1] ? do_syscall_64+0xb6/0x230 [ 393.817911][ C1] do_syscall_64+0xf3/0x230 [ 393.822425][ C1] ? clear_bhb_loop+0x35/0x90 [ 393.827113][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.833014][ C1] RIP: 0033:0x7fb803775bd9 [ 393.837464][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.857086][ C1] RSP: 002b:00007fb80449b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.865510][ C1] RAX: ffffffffffffffda RBX: 00007fb803903f60 RCX: 00007fb803775bd9 [ 393.873488][ C1] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000008 [ 393.881463][ C1] RBP: 00007fb8037e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 393.889440][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.897417][ C1] R13: 000000000000000b R14: 00007fb803903f60 R15: 00007ffecfeb66b8 [ 393.905401][ C1] [ 393.908729][ C1] Kernel Offset: disabled [ 393.913135][ C1] Rebooting in 86400 seconds..