last executing test programs: 1m22.888339362s ago: executing program 0 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (fail_nth: 14) 1m22.667007056s ago: executing program 0 (id=101): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x840) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000103) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1m20.019493896s ago: executing program 0 (id=116): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000a00)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="23f40000010078", 0x7) 1m19.755377133s ago: executing program 0 (id=119): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(0xca, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4050000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m19.325239969s ago: executing program 0 (id=121): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "9b5c71933905edf3f5ea1248501bc91cf5020777437219951e6a04558c48b1ba19c62c491fd0b8ebeba7e656a8c51c8f9f6b68437e03e0b6a159ffe59f6acb255b1464e6ee2d71f3314d484c34469d88e332c4706bb43b42ec594b16a904fbeea3db8803cb156c71b8af802c2cad8a335e3fb458bab9d930eef1da416665c4738d2a794a24f1ab8ccffde9b46b10012f29e733d57b"}, 0xa0) r0 = socket$packet(0x11, 0x3, 0x300) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x80001) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x207f, r2, &(0x7f0000000040)="6f03eb178d8d5909", 0x8, 0x8001, 0x0, 0x0, r2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x4, r2, 0x0, 0x0, 0x7, 0x0, 0x2}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000640)="1b4fc2f0623b3d9c", 0x8}], 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m18.59589605s ago: executing program 0 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) fdatasync(r1) sendfile(r2, r2, 0x0, 0x1000000201005) 1m18.137460151s ago: executing program 32 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) fdatasync(r1) sendfile(r2, r2, 0x0, 0x1000000201005) 56.675594857s ago: executing program 4 (id=204): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0xc0384707, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x2, @vbi={0x8, 0xeedd, 0xfffffffd, 0x32525942, [0x80000001, 0xe1], [0xeb1, 0x1], 0x1}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000380)="652b2ff0376b3c5a86739a0e3e20a41d1f371233e204921866ecbe4a45454a3a31a03eda2520fe2a770eeda090066ae75d6d38e4cccab9a9bd7944af6b42b7ee0c78244dcff58ed467bd437120151d335bdad69b4d98b26034b268abb298a4af5a96767a403f398dbd5165b1efee64fc7ee62ce51ab4745d7a5b7b7abf7210066995438b4207f2fedf6ec6a421b7f4608d01294b9c3992e2b5fae60772a2ac0c458d0d3fb51bb6328400297dacd4911239dae3c91cbc1087b61900617aafa7a4bce9fbe817019ecc4ac73b305f424f1db62ad454e37eb4a2efc9225289c563fff932d79a48080a9efd5c5795f897033abaea456a22d36e7b480647dbe8193ddcf3348a6e3495d69089a53b12157364ab82968b46d5", 0x115) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4f20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') getdents64(r3, &(0x7f0000000f80)=""/4082, 0xff2) syz_usb_connect(0x1, 0x40, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @link_local}, 0x10) statx(r3, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=@polexpire={0x1ac, 0x1b, 0x300, 0x70bd29, 0x25dfdbff, {{{@in=@rand_addr=0x64010102, @in6=@private0, 0x4e22, 0x3, 0x4e22, 0x1, 0x2, 0x0, 0xa0, 0x67, r5, r6}, {0x5, 0xc219, 0x8001, 0xab7, 0xfffffffffffffff9, 0x4, 0x8, 0xffffffff7fffffff}, {0x6, 0xa, 0x4, 0x80000001}, 0x7fff, 0x6e6bb5, 0x2, 0x1, 0x2}, 0x5}, [@algo_crypt={0xc2, 0x2, {{'cbc(camellia)\x00'}, 0x3d0, "23bc160c94049747b2e282653738776c1516aa2eb4a8d88fc5b4db5e224092f8167630855fe6a0670c1f4a035ea86bf991ac8f53a0aeb372ab9d055d0051664f228954dbabdc54fd76e5e0126e2907c4d319b758ca1ba5953fc0ae3492118bf999aa498f1ea7310f0e7b263cb7c7c7fb45089b23c7ee264c2601"}}, @iptfs_init_delay={0x8, 0x27, 0x8}, @tfcpad={0x8, 0x16, 0xddff}, @iptfs_pkt_size={0x8, 0x29, 0x9}, @extra_flags={0x8, 0x18, 0x9}, @iptfs_pkt_size={0x8, 0x29, 0x1}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004001}, 0x20044800) 53.564325816s ago: executing program 4 (id=227): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0xa900) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x44, {"0dbad96fff010000ebff002084800100", "0303fd00f97700", "a7c947420000000000000000ff4a70f3"}, 0x1, 0x5}) 53.405333501s ago: executing program 4 (id=230): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4044810) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 53.33368159s ago: executing program 4 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) recvmmsg(r0, &(0x7f000000a1c0)=[{{0x0, 0xfffffffffffffd6c, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f00000006c0)=""/17, 0x11}], 0x3}, 0x6}], 0x300, 0x2202, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f217c2", 0x10) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) syz_clone(0x40000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0x7f, 0x1, 0x8, 0xfa6a, 0x13, "0100f5000000000000000000800000e4018780"}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd61925946b0c911fdea95b46c95df787000fedbdf250a"], 0x20}}, 0x20044880) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 52.705423529s ago: executing program 4 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000", 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f00000001c0)={0x4ca0, 0x2}) (async) write(r2, &(0x7f0000000240)='1', 0x1) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$cont(0x7, r3, 0x0, 0x0) (async) wait4(r3, 0x0, 0x0, 0x0) 51.673161976s ago: executing program 4 (id=241): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000000b40)=""/4082, 0xff2}, {0x0}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000a80)=""/163, 0xa3}, {&(0x7f00000000c0)=""/207, 0xcf}], 0x6}, 0x12100) 51.414559009s ago: executing program 33 (id=241): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000000b40)=""/4082, 0xff2}, {0x0}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000a80)=""/163, 0xa3}, {&(0x7f00000000c0)=""/207, 0xcf}], 0x6}, 0x12100) 7.669207799s ago: executing program 3 (id=478): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000020901"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x8001000000) 7.012200787s ago: executing program 3 (id=481): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="000000000000ea4400000012be5e8ba027ff5b00000000000000008000000000010000000000000009000000000000000a0080ffffffffffaf2da6818f50438f01000000020000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3, 0x401, 0x0, 'queue1\x00', 0x1ff}) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) connect$x25(r2, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x1) ioctl$BLKSECDISCARD(r3, 0x127d, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, r4) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000601"], 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0xe, 0x60, {0xd34d, 0x114}, 0x3, 0x68}) 3.903855403s ago: executing program 1 (id=504): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38fff400010001", 0x7) 3.833584864s ago: executing program 1 (id=505): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x100, 0x5, 0x2, 0xc, 0x10, 0x5, 0x79, 0x0, 0xb, 0x4, 0x2, 0x1, 0x7, 0x8, 0x40, 0xfd, 0xfffffffb, 0xdd, 0x4000003, 0x7fff, 0xffffffff, 0xca9d, 0x7, 0x5, 0xfffffffb, 0xf39e, 0xffff010f, 0x8, 0x7, 0x0, 0xfffffff8]}) 3.721540891s ago: executing program 1 (id=506): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = fanotify_init(0xf00, 0x8000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) 3.69111734s ago: executing program 1 (id=507): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0xfdf9, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.55768774s ago: executing program 1 (id=509): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) (async) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/28, 0x1c}], 0x2}, 0x20) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000240)={0x5, 0x4}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/62, 0x3e}], 0x1}, 0x60010002) (async) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/62, 0x3e}], 0x1}, 0x60010002) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009404, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c240201"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c240201"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f00000004c0)={0x0, 0x1, @status={[0x1, 0x40, 0x3, 0x4, 0x9, 0x7]}, [0x8, 0x1, 0x3, 0x382a, 0x1, 0x2, 0x7, 0x8, 0x101, 0x0, 0xaf79, 0x8000, 0x7, 0x3597, 0x6, 0xfffffffffffffffa, 0xffffffffffffffc0, 0x413b6fae, 0x9, 0x80, 0xfff, 0x8, 0x670, 0xfffffffffffffffa, 0x7, 0x1, 0x0, 0x7, 0xfffffffffffffa36, 0xffffffffffffff1e, 0x0, 0x2, 0x10001, 0x0, 0x1, 0x3, 0x7, 0x0, 0x3, 0x80000001, 0x1, 0xd0, 0xfffffffffffffffc, 0x6, 0x2, 0x6, 0x7, 0xc05, 0x8, 0x3, 0x10, 0x9, 0x7f, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xf66, 0xd, 0x4]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f00000004c0)={0x0, 0x1, @status={[0x1, 0x40, 0x3, 0x4, 0x9, 0x7]}, [0x8, 0x1, 0x3, 0x382a, 0x1, 0x2, 0x7, 0x8, 0x101, 0x0, 0xaf79, 0x8000, 0x7, 0x3597, 0x6, 0xfffffffffffffffa, 0xffffffffffffffc0, 0x413b6fae, 0x9, 0x80, 0xfff, 0x8, 0x670, 0xfffffffffffffffa, 0x7, 0x1, 0x0, 0x7, 0xfffffffffffffa36, 0xffffffffffffff1e, 0x0, 0x2, 0x10001, 0x0, 0x1, 0x3, 0x7, 0x0, 0x3, 0x80000001, 0x1, 0xd0, 0xfffffffffffffffc, 0x6, 0x2, 0x6, 0x7, 0xc05, 0x8, 0x3, 0x10, 0x9, 0x7f, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xf66, 0xd, 0x4]}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532332c63616368657461673d002c63616368f5716d6d61702c63616368653d6c6f6f73652c6e6f657874656e642c64666c747569643d", @ANYRESHEX=r6, @ANYBLOB=',debug=0x0000000000000005,appraise_type=imasig,fsmagic=0x0000000000000003,measure,measure,\x00']) (async) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532332c63616368657461673d002c63616368f5716d6d61702c63616368653d6c6f6f73652c6e6f657874656e642c64666c747569643d", @ANYRESHEX=r6, @ANYBLOB=',debug=0x0000000000000005,appraise_type=imasig,fsmagic=0x0000000000000003,measure,measure,\x00']) 3.028750253s ago: executing program 3 (id=512): r0 = syz_usb_connect(0x5, 0x3d3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x82, 0x85, 0x1f, 0x10, 0x499, 0x500a, 0x2bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c1, 0x1, 0x4, 0x5, 0x50, 0x7, "", [{{0x9, 0x4, 0x8b, 0x80, 0xf, 0x14, 0x1d, 0xaa, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x1c}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x4, 0xe9, "aab3098c"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x7, "1ddb"}]}], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x30, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6b}, @generic={0x7d, 0x0, "ca947a5643ed8efbd9cec8faeea198e701e013c7792113d5c275d2b17849ac1ee78ea26f7662d6022d7d5943c3f34705e8e8472108db64669059527eb9cf8774a32ffd9e0592654840a4a2c8a0449a5f793d827c72f0b61a07cb030cc2bfad48d37b0651682006bc72c304ff773bf68e8860f3b0bb81baeaada562"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x28, 0xff, 0x2, 0x8, [@generic={0x80, 0x11, "444602df45172b39d770b949e0a9b03ab2520cbee2b2686996a390ac85e8f2376cb337ed33161b4152740056791843e0945ff81f38c4db61159a6817d865f9b2aa83f61c898eb0501cd338bd06e5e1b9cbc08b45d58f05052260dcb5bcc8ba49ddcfeecf3eced8abb22d4a9f7948c69170bb6718cfc7dc20dbb6026c3a01"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x6, 0x1, 0xbb}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x10, 0x8, 0xc}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x9, 0x0, 0xb, [@generic={0x50, 0x2, "8fdde22a69385816bb7c6ee48a8eed1b47ed800cf3a0a14cf9e881d5a46b5c8ddf9650798dee91de78ef5bc45780d65982d15e1d5dc9f0b25848ffc5ff86012b1e6fe9526307432893bf94220d19"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xf, 0x6, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xb88}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x42}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xa7, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x76, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x18, 0x3, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xd1, 0x3, 0xe7, [@generic={0x9e, 0x23, "d4c8d624d9da809e4d6033d90869b9b17fb7b815d275531f49ae68b508f16a6e1b7017c8d63229c7bbc1e505c263fee4f4855a14b36901cf40132899f4ded4ccb1a22ee72ed19bbff37726537d367f8f8cb7054c42e7cf163eb22adce8a4d6d6540384a0487a53c1a3a7085c6592c6c80c6ccc87350fae4ac05b67a2662f8f6d4c3fc1017c746cf13ca90f2021388873ea2a6c76f527cd99d887603e"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0xa, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x18, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf65b}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x8, 0x2, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x9}]}}, {{0x9, 0x5, 0x5, 0x11, 0x8, 0x2, 0xed, 0x1, [@generic={0xbf, 0x7, "d6fa284c9a5c22ccec564fd6e666e496c8fbba02394d83cc5b4bd96284fdba7d0a27390acb5279028361e9c83e4db67b6bb81488829da8ad9fc952fdb43861b11195fd29f5f0ce53da9dffd6ae26d243c412af6ebe9f837b02805405dc58593b8c907dd0f1029d8d5339a766d11241b373f3db5aa8200462e37b02b1a57fde8ab45f74e36f66f399cbdd3840e5cf4aa3c67d4d9c8ad3e296212349c994636515372be5db0f4e8f156886a78557f26eca492735ada91ec35646f5cea779"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xa, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1f, 0x9}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x8, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x6}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x5, 0x3, 0x10, 0x10, 0x7}, 0x11c, &(0x7f0000000440)={0x5, 0xf, 0x11c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3189a4968b385c0262bf28f13ed01797"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ffb1828af8f553274cc04e7abf338d63"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6, 0x0, 0x646a}, @generic={0xe5, 0x10, 0x1, "207095cefc94d97b752ede5327a23e205afad076d152c2c66f78db1912835f0c15c44434c3b67b7d5a8754a41c1ee83fc51837d8e948a6a33153b8765a848716264a5a13cc75aae43f12f0fddcbac44dbed2956c9bb26d03f84fde818eb71825d73807aca7669b823b6e31a0f10bc0ae567380af54f816ff54cb1a3e07cd63f0f209c28ad14831770332ad5cc8d26d65cbd2439c6880e6b528cd3c927a7d18c99c58952442cf231ed6323d707ca7191f30d6c02ece614dc1a488f2cc62b82833c3f1195893a7dcc44326acbbda3ed1da0c4f54651b464cc8f0cf4173600c3bd543ec"}]}, 0x4, [{0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "bd1b002ddabab316d381cefbbd5d9414eace0127cdb3d93db838a1887cab8ea155377975f4206d9e8a220e2322363b404c887092c71b7e98c97bff32594d55736bef5665ce72f8437c7bb7dd00a0eebb622ad2f86b996b84ca99fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3409}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "75da6f7c531c2f3b3280ba4603f0"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x141c}}]}) (async) r1 = syz_usb_connect(0x4, 0x75e, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xf, 0xae, 0xac, 0x20, 0x58f, 0x9720, 0x32e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74c, 0x2, 0x3, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0xd5, 0x2f, 0xf, 0x21, 0x94, 0x23, 0x9, [@generic={0xdb, 0x10, "3c66f3d672e20b1ace0a7e63193000251dcc55dbd719cf9ecb9efabb3c690653602c63710fa6049c23f5e5055b994c856d74d48c76dac1707601c1ad1dad502db33663d9f8a81cb5232168bd95fe3d7ed44371fd8bdf6bb7939408910dc4616a79edbaf28721e8beca457dc4b913dbcc1289ae8c96a6563812e7b87b1bbb508842245e77723ddc96ea463273213a9304a2d71426079686719072fb49bd7c1f8ad3bb44d70355ce925d1a85a85d85244b6cc753673f7556f08d582f4e63d5bce536580e42d3e2ee8eac6dc7575fb2b33ea5692418793064e645"}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x47}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x0, 0x5, 'pG'}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x4, 0x3, "b5"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x2fa, 0x6, 0xc, 0x2, 0x2, 0xff}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x5, 0xa], 0x8e}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x9, "9f6db9cd"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x44, 0x9, 0x80, 0x7}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x80, 0xff, 0x8, [@generic={0xb4, 0x22, "dd5c95b80edc70527f547694c7f67f048ef0190418fb99f21916f15c23f76e018970992e74fdb3e9104f6ce9612cdb877fdc838a612b12eea00883793619628f165771c8a9e263c511cda8f5ea1de1e8c897ecda3ecb1062a16edadaa0be9b712b99cf7027e414d5c2dd29cc0dac1ab4afc0dea60ae8f74ad615476037cabb7808fa76e350ccc5c8731f7406704dd7fb8c4bd732ff991d3e617d3d700dcd731114771d7a56938dc16e5ca4be671515c03241"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0x0, 0x1, [@generic={0xbf, 0xd, "9766d36688f5fd605f979266609fa8307775f890530bcdfca89860daba10e45a5dbf65a84cbf598897ecf2876c85cfd955ebc73eb5ad7d320d764798597b208bc9204756d42208f2e17c286114146571df4e00318f6ce2ea7c27bd645e2d7e64cc0cf5bdf23efb96cff333e7318fc130ca4f2b68d16c69bf434839ba6b3fd85e8ce5651f77596bf43364cd115ab90add443196d3e914bc0dc1d15b3ae9f9f3a5f38df20d8825336d536282bfaef0be8ac7fe3f195ef7a646201341a984"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x0, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0xbc, 0x8, [@generic={0x102, 0x11, "3aae9e87be7404ec1982e4d10d1db57c99d5ee89273df566b1c37425cc6ca98655956a3d23c18dc9ec3d31022bddd9fcb5c6782ec2ce3b267dbf7666df52031bd87f9190b415352524b2680c99d1016e51747208e4bd1d269550234db4cfdf64b9950c20627438f3bd2b5fd10576364aacc54538b47cc25acbd4176df159dd9d427a72865f49dae15e433952ea9cb69e489cd82ec0a9af2a981a4dc54b76f634b994739a64b8d2103176105974680703570b317a2875de806d63f801ec6c2eef8147d562e97bcf3715f50f18f0fa4395b66cbd657db403de9395a38030af029fd35c5a853a02084cdf430753d36ca04cba49aa7f9bfe7e2ced80d5a152ee27dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x1ff, 0x19, 0x7e, 0x4}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x2, 0x2, 0x1, [@generic={0xaf, 0x22, "2f15e08da4d1c49eb8ab6898d81a27a007bd92a982416184994024fef2a4155a05b67f1070af17d5173539dc9efe02de9c9907d290d1b1547768d919a82fb5db3927b8f8527c3afd4e9a9081750856527cc112ee05691d3ac71f70b506977209e26a96d7f2ac5230dc15ab130067cec986e46aea81ee9ea6fedaed6cc73f3cfad0196966569ef5795e3c77a67a43b54bfd8fe505b499e0ef395cf4ae13048590f5ad63affeb6b1539aee1c83a4"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x51}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0xad, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x6}, @generic={0x100, 0xf, "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"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x208, 0x1, 0x1, 0x1, [@generic={0x4, 0x6, "c6ec"}, @generic={0xda, 0x5, "e3657e50ef92d6181fc51b8f24ad32779d3ca7db4bbfb9ee0939cd82f3baf7db35d3fdf2705bd06bb75e6fb77d1384d115bd9b4f5d85f5a1efc2c81fc52d06e2458b0023d087e981c0f23b38cb25490b4bf6bc5c22d45fcd178787d2455b45af882b693d7c9366ce7249b7354079a0c516a09b6ddbdc3dcac548625a57f5260d9440fe0f45466da6222cf2832d09513f4ad88875d8feb7fd3700644edd909e5065ba5dc67a09bc346782f7ecd27025fdb98a81f208c6d9261aa4144bd6cae4daa6cc4cbfedf865e7b907fdc0f17626daa68f017305dcacd5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xb, 0x2, 0x4a}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0xf, 0x2, 0x10}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x4, 0x7f, 0x80}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0xa9, 0x6}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x40, 0xbe, 0xf8}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xd, 0xfe}}]}}, {{0x9, 0x4, 0x44, 0x7, 0x0, 0xd9, 0xe0, 0xce, 0x1a, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x38}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3, "9f"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x2, 0x4, 0xff}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0x6, "a69c17"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x0, 0x2, 0x2, 0x6, 0xf0, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x3, 0x6, 0xfc}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "acff79"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x1e5, 0xc, 0x7f}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x7, 0x4, 0x2, 0x10, 0x2}, 0x5, &(0x7f0000000f00)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x444}}, {0x97, &(0x7f0000000f80)=@string={0x97, 0x3, "76a19997f44e2ed267c6311524bb908573c8df6d5edf12b1a3d1244d9355cad663e2edc204c237c2bc1b77c57138f9115a8a5a8affa9bc47c36a0e94a25c1cd282740636c29196a6078eaef08af701d298a39559b222ec5fd0d023db5e0e76f59e8ee1b59121345e7f1cfc3e9deed60b926f20e59e7494c8656287d3c6a3bfa74573258e855404f229cc454ead85698e857bf7e8d7"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2028}}, {0x78, &(0x7f00000010c0)=@string={0x78, 0x3, "1d0187ac785a077fbcdbdf15aadf3958f3fbdd034697325d47f762906164e83a098be4dd03dc36415ff5248c2b34100b48ba88e931880e89b237551dfe7a39fe74b1092c04c9a532e1c482168cf8b77b7c8ccf7b680f04ced17a7de333bc429315bd9e6a2ecd74d0a53828e45f4eeef8c6b86d90519f"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x457}}, {0xde, &(0x7f00000011c0)=@string={0xde, 0x3, "1d66d1727f76ed8428d7b8f98671f09ed47ab440681661484609884d0d728a92c16cbaf8e4028d35719ba6f8190f8743a5c3b39093d6eb068556da270b7af57e4f6627a46e4a5120d601247fb9457baaefb3a5a5c09dbed57d7fb9ed2bf643c38ab7eceac5c046aad470e56db3b5a645eba95a8531ed92db947c33190e8d9dadfe953cbb652e65f536a4abdc49131af0641e85f4f659abffea32719dd37a5cf073ba43f91ff48ff5a0b79c8890dc7da610a5a4a3af0b36aca381d4c7c5fa200caae703055815597a7351749474507bb009d51b0258415a4fc54bb8ee"}}, {0x1a, &(0x7f00000012c0)=@string={0x1a, 0x3, "46684961a95d5d146f43d0ae19dbef08f37a1a707800fdc8"}}]}) (async, rerun: 32) mount(&(0x7f00000013c0)=@filename='./file0\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='aufs\x00', 0x200400, &(0x7f0000001480)='-!!%,^@\x00') (async, rerun: 32) r2 = syz_usb_connect$midi(0x1, 0x80, &(0x7f00000014c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x10f5, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x5, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x0, [], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0x9, 0x87, 0x4, {0xe, 0x25, 0x1, 0xa, "42e4ec9758e9402d2208"}}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xd, 0x9, 0x9, {0xa, 0x25, 0x1, 0x6, "1c421f711278"}}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7f, 0x4, 0xdb, {0x9, 0x25, 0x1, 0x5, "e5a1d4f694"}}}, {{0x9, 0x5, 0x7, 0x0, 0x608, 0x9, 0xf, 0x1, {0x9, 0x25, 0x1, 0x5, "1c4efe1807"}}}, {{0x9, 0x5, 0x7, 0x1c, 0x3ff, 0x0, 0xff, 0x0, {0x5, 0x25, 0x1, 0x1, 'S'}}}]}}}}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x110, 0x7f, 0x5, 0x81, 0x10, 0x9}, 0xf, &(0x7f0000001580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x2, 0x3, 0xfff}]}, 0x8, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x422}}, {0xb5, &(0x7f0000001600)=@string={0xb5, 0x3, "1824da663d64014ebd0d64bf3e2c7326e67accca85e6263c17e1562b391c579c3fe82d1177977119cf43ea5d20d2e1a176e39197d63a9bfc65edbc682f1ddda5c771741c9ede66e4bce68a2fe123ac2c89a8584e7cd2f6422ef1ca48974a5e9c612c8e467618bae28432fa839270f2741b200f96684350223427bfbc19f2d9ab89583765e6b45efc3692f12a2309a3c8ec3bbb324f0328e4fc513160c1f3a1c8137c512b8d1a4926794eb9d9a59a8254131c5d"}}, {0xda, &(0x7f00000016c0)=@string={0xda, 0x3, "45683f4fcb6eb78710f5ac947a3942b60f0cb6b88a9684e960f6517c905c6f2b81e03a5d9d70176feed6d52047b2c971ab0a8ecd73d139ada24c028c6772f6d96b4015340030d3eb6f8a8fcb4ac0cc8289b58960e936d3fbe4a628bc443b3b7e2f965e2896d0a2fc905dd0e1a8806b3108ca3abe1e9025b20678b62259d234d0e80553df72f9327f211bbe0cf8d708d6fe6fd375ed851ea037e7a550d1df29e9b7bab8fbaa230799c4e192987c9eda4f55b4673310a0b35ac3ee4d4b90846d084f91eca4c0c49b84e6dcf526b2ab62c134ada438f4fe1b8c"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x3d, &(0x7f0000001800)=@string={0x3d, 0x3, "28ec8bd206766646a8bbde7d7369593f20392d673b7ac47636cd6111de73fd4bed0fb4863e6e72e0f56118fc41cb9d63ac347f9f65bf8ba8ef55a3"}}, {0xde, &(0x7f0000001840)=@string={0xde, 0x3, "7c62338f2faff28eb81ce47c43b5d1fc885bb5775d1376e21ba3a831f81fdac8244a6ecffc901b3a682cef67e367b13669e92fff6e473eba101f974acdba8efab89b71ed6cef4dc7415bc0a340c884405425954678d3e8ccedaef50a42db8f972a3362f282c3a36060306c9eb1742d5acba5fa50090a26e9703f536048039e4d35e3b24437c5124de2b5d32ee6f61b79f7271d49ee1391ac177ea2dbf231ace0a150683cf243f1ffc4e3029d3c4c39ef0d76a26612677773cb604da7c8aef115d355d1a3e2febd45163a458337e74d0a9c4b99b85caecfb4c27ab120"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000001a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xf0, 0x3, "", [{{0x9, 0x4, 0x0, 0x48, 0x2, 0x7, 0x1, 0x3, 0x45, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x200, 0x2, 0xe, 0xfc, 0x20, 0x10}, 0xcf, &(0x7f0000001ac0)={0x5, 0xf, 0xcf, 0x6, [@generic={0x84, 0x10, 0x3, "ad28deedce911df0515d7d55440fc7ca1ad94be3725497ead4e3bc6b6bfe31751a426bfa14589718d38642a0196106a921882d25846ca36824a637826602587472dbc9a30e16f5632e3af1a049b4c052327c3e4168306155017660cc67b2771ef28eb6b5549c70bc919427fd1341a2f9860f7e54a4bcf49b736fdd0dc34f7bba9a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xc, 0x1, 0x6, 0xde}, @ss_container_id={0x14, 0x10, 0x4, 0x12, "c6c323450b3155fae4699140a2b74ab0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e228d93fd905214eeda8b8de4e0b3ff1"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1, 0xf, 0xc}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x4}]}, 0x4, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x140c}}, {0x93, &(0x7f0000001c00)=@string={0x93, 0x3, "a50e43eec217d0204aa22cb07354969f6023f7dee6cb5a44c536c948b49c6bbf5c57b32caf1696c3bf03b1284484b849b49dab37ed1786c3ea234a25566b9771d20a40450eea59e7d23d473223406db71ab4103580b67a389e0ef9ddce160a8ae4090bed87f120050a9c632260f3e018201e9d9931984c8d15b2569cb112621c77dbb6bb4296748d91dce41d6575ab7202"}}, {0x5d, &(0x7f0000001cc0)=@string={0x5d, 0x3, "3cebf716dddbb1297024c64ce769b05f431d1bcc700b43a52df242aaa1c46c8c9b87dc7a6be3ae13e774afb459b97664ceb52b0594a48928db073b11c7737d4ca1fb998b7ab65e45844d743dae838fb88273bca3e75754bc28cded"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x426}}]}) (async) syz_usb_control_io$printer(r2, &(0x7f0000001f40)={0x14, &(0x7f0000001e00)={0x40, 0xa, 0xf, {0xf, 0x7, "c39b6fa6a9429297cc2b6f98b0"}}, &(0x7f0000001e40)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "930c70b7c5a416932d6b0b40bad217f76639411648c7a14ac7cf95ecafb543ba240062c58924bca9a3b33b81c77a9b7b5e3cede38c29813ff0d1a721049e8e3f9f2c34f67b30940f125172943c7de7781133059139130b5dc36e2f439aa4c6f6398c93f9673d40af41f144ed473cfbc7226faa58f4fcabc6d6e2935345e9cc272391f544625756f7ada888aa04d8c56b131e4c5c65bd551b38b98e3b4e1807f4a8addd1ef3fabf5dcaa691de73a97ff20bcebb273b6b894489eee33767789193c7ea740a17c318bb724264ce22492509a7927f6f037d73"}}}, &(0x7f0000002200)={0x34, &(0x7f0000001f80)={0x0, 0xa, 0x82, "f95e344c1ef801ee663672070de778d62639e605e0dd6ea8002ead40c1eec35c79e73f0836ea8ea877d95e761067ced4734a6776b9fce2c7638061216e159772b21543a82664a8fadd627d23ff3b2f53e7fb65e35563842405206d7fdca6a3f9a28993fd579459352d9fc22313dd478ad8d4481bba49d8e8a7d468e7324050a9cf1d"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x27}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0x8f}, &(0x7f00000020c0)={0x20, 0x0, 0x97, {0x95, "44b3d46c992cafef66df559299142ac67685578441d7a12bc418d18f95bca165781ae34f4f1c2a3ae357de5b25d51cb09b42f92015c74a76508b464d727cfc2e8f850b9b6ae684776ad2df16d566d3009ddc2404967d96160c720004b3891f3f804cb949cff379e91f62c1913de0246a9ed7359b3353e7b82232f28ad5d89f30cc0ce86315ebccc1834b468b523e7aa969064ab03b"}}, &(0x7f0000002180)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000021c0)={0x20, 0x0, 0x1, 0xb}}) (async) syz_usb_control_io(r2, &(0x7f00000025c0)={0x2c, &(0x7f0000002240)={0x40, 0xf, 0x84, {0x84, 0x5, "4b3472261f94acc9b0117473ce693a3aec767165b8c83a0f7ae9b8f4dbb844e089d58d60cf4fe0157f2ff9e19b719fb3b4cf0ccbd981100d9cc2efa32767b7d4e702e3df2e33a887103c18e81e466440352f6505c4f6b076ce1d5b5828e3e00750dee36092f48355ae634eefb4a1c95518b755623832aca8c1b2b4903b883eb76a44"}}, &(0x7f0000002300)={0x0, 0x3, 0x47, @string={0x47, 0x3, "143f78741598b6f969b918ea690448958bc2f86d6269aeac3b33241845b7cd681b50dfa7757ef94acc1c7382a5cbde481171dbb2e290bc3066b613d94bfff331d113082c0d"}}, &(0x7f0000002380)={0x0, 0xf, 0x17d, {0x5, 0xf, 0x17d, 0x5, [@generic={0xbb, 0x10, 0x1, "9ab04a8c7757f6d89a7740dd08ba39ba886a851077134263fa8e4980d6b6a9b3da447612c391df7a9b714d135c16885b009e720b22b2a16505e21a29a21a274e41ec8b9ed5d0ecb5a94370d6051add9127b120e1b78c67261fba9985b854c350b1018394c76c94b1b548d9197707a83bfe340cd7f1428a23cc9b294a8708e54ea02763b7df128aa8da6198ca889b3364b8d489ac65e631fd2cfbc299b6cc07665d6a88efb4f8bfd269e9ac9fd6b273e309e573a8307793d4"}, @generic={0xa2, 0x10, 0xb, "5bba04a658caa832ca242f2f9e41ee452036b686113ff2ff6a4ea1ac3efb9407ea9256343685d0a4ce677cb8b57bc5e1a69387c266f92f03392c944699e5e769dab5497dda0c2465364c3613be47fe309030c657ff785baa61bab6c029c20408ae0254a57338a480441ff8e7570c51dc06c1fc9845b51bb5523ba1191f45799e47cc60f657693df3a4808b832fedca638fb6a1cad93a27ff27630206061810"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x1, 0xc5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x48, 0x6, 0x4}]}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x8, 0x6, "6bb03383", "624c58df"}}, &(0x7f0000002580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x1, 0x77, 0x9, 0x7, 0x5, 0xb}}}, &(0x7f0000002a80)={0x84, &(0x7f0000002600)={0x40, 0x0, 0xb6, "1ed21aedae728a67453c52a2816ebaa371ffd1e614f27e192ebd9373c21ecef065217dc28f94bb522934b9682608e695dece06e18f6c24fee1fb1af132ef4c60927b8d23ea99ed789caf7bd5724b1b084e7b651e39ab705ad48c04e639b7291b62ad7ec9ff6514d9431921d012c27668410bc13fd398332d4422d3446bce265def5e5de775c459873031a35a5e6f2b2de30018c3f996dd132f019bf484684a774172b799f5de7ea4ee0ea717642509539dde240cd28b"}, &(0x7f00000026c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002740)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000002780)={0x20, 0x0, 0x8, {0x1, 0x8, [0xf0f]}}, &(0x7f00000027c0)={0x40, 0x7, 0x2}, &(0x7f0000002800)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002840)={0x40, 0xb, 0x2, "b858"}, &(0x7f0000002880)={0x40, 0xf, 0x2, 0xfe2}, &(0x7f00000028c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002900)={0x40, 0x17, 0x6, @local}, &(0x7f0000002940)={0x40, 0x19, 0x2, "8688"}, &(0x7f0000002980)={0x40, 0x1a, 0x2, 0x60ca}, &(0x7f00000029c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002a00)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002a40)={0x40, 0x21, 0x1, 0xce}}) r3 = syz_open_dev$dvb_demux(&(0x7f0000002b40), 0x101, 0x2000) (async, rerun: 64) r4 = syz_open_dev$amidi(&(0x7f0000002b80), 0x9, 0x2942) (rerun: 64) ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000002bc0)={0x9, 0x80000, r4}) syz_usb_connect$uac1(0x0, 0xcc, &(0x7f0000002c00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x8, 0x604038e90cc45a48, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1c0, 0x36}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x3, 0x1, [0x7], 0xf7}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x6, "e6d0b808"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x401, 0x1, 0x6, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x80, "b0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xcc, 0x4, 0x0, 0x8, "", "a785"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x33, 0x1, "8f", '\\F'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3b, 0x2, 0x9, 0xf1, "", "10"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x80, 0x1, 0x2, {0x7, 0x25, 0x1, 0xc, 0x1, 0x41}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7f, 0x1002}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x3, 0x7, "98"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x5, 0x8, {0x7, 0x25, 0x1, 0x4, 0x5}}}}}}}}]}}, &(0x7f0000002e80)={0xa, &(0x7f0000002d00)={0xa, 0x6, 0x250, 0x6, 0x3, 0x9, 0x20, 0x4}, 0x5, &(0x7f0000002d40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x2401}}, {0x95, &(0x7f0000002dc0)=@string={0x95, 0x3, "84b7245771c2bd2e8c7d0a39d97dcaace54d39a0665f602407342a9a9fbc39c03708356f6920c1065d1e8c07e966731b98036da253eee99ae4ed8aee16ffa7c7e98819806ce416ed34dc27bafb83961349dce84a76c6c935d630e7b39302d83e8ebcdb29c8912570e575282f25ae46240682dc08e1a9faa9929e8b72e76336b9149472726d77f734ed7dec901bca0d12d00eba"}}]}) (async) mkdir(&(0x7f0000002ec0)='./file0\x00', 0x4) (async) write(r5, &(0x7f0000002f00)="8f9271725654dc1857d4910b9908506eaa0c025aad65595f4c7788a727261da3a11a57207c7658f3adf31b6edb68debd265021fae2db826ea9b8764bde2a283cc385c417ddde153203583b75581e4261a5ac520e722202cd60f3179459932631b34e0179471c36fe3a508e55926bb1ad9274d31450c0e9ed52efd1cd5bd7315191", 0x81) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002fc0)) (async, rerun: 32) syz_usb_control_io$uac3(r0, &(0x7f0000003180)={0x14, &(0x7f0000003000)={0x20, 0x21, 0xfe, {0xfe, 0xc, "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"}}, &(0x7f0000003140)={0x0, 0x3, 0x27, @string={0x27, 0x3, "1da805cd906d92020c9dbb0bd5293e1dfe62bd35c754f88888b1a582c5c34456e16603e59b"}}}, &(0x7f00000033c0)={0x44, &(0x7f00000031c0)={0x0, 0x14, 0x3a, "24fabf7a114a02273bae430185d1a906eef56ad8343f30e5118a397f11dacc705b24e07b17b71643808177163ea265c30dd0a911143ebbe8ff61"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000003280)={0x20, 0x81, 0x2, "34ba"}, &(0x7f00000032c0)={0x20, 0x82, 0x3, "5abee6"}, &(0x7f0000003300)={0x20, 0x83, 0x1, "11"}, &(0x7f0000003340)={0x20, 0x84, 0x1, "c0"}, &(0x7f0000003380)={0x20, 0x85, 0x3, "a90432"}}) (rerun: 32) write$UHID_INPUT2(r5, &(0x7f0000003440)={0xc, {0x3c, "75758b2ad736ea21bb244144bc0e87280bb1f769d4fc8120f4d75abf7f7e2d45e03981669298243161a2231e7a3fe333e55244633a74e49a0fec76f5"}}, 0x42) (async) sendmsg$nl_generic(r6, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x20, 0x41, 0x8, 0x70bd29, 0x25dfdbfd, {0x18}, [@typed={0xc, 0x147, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000003940)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003900)={&(0x7f0000003600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3221}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2174070}]}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x3a, 0xd, 0x1, 0x0, "251f18f534efb1e67d5143c28afa19f9c5fae5d87641c51cfc46b862e51425b5f289487dcffa53b79a8004964280124fa5e70f4002f6"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x16c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_DESC={0x158, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x154, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa26}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2c8}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000003980)={0x1, 0x1, 0x5, 0x7fff, 0x7, 0x101, 0xffff2f88, 0x9, 0x0, 0xfff, 0x3, 0x2, 0xfffffffc, 0x7ff}) (async, rerun: 64) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000039c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f0000003c00)={0x2c, &(0x7f0000003a00)={0x20, 0x21, 0x7, {0x7, 0xd, "69f9d1542c"}}, &(0x7f0000003a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000003a80)={0x0, 0xf, 0xc9, {0x5, 0xf, 0xc9, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0xc, 0xf3c1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x8, 0xcbc}, @generic={0x25, 0x10, 0xb, "6ecd1fbb4e7de360174838a50534fd721f3f1b75f72cc9e56634200aa1c7b66791f6"}, @generic={0x84, 0x10, 0x2, "54fd877c4ff492c25f7caf8de73fac08a020f5e752c420c7ac2e1bcc6976f4f27c4f4037f66eb082aabe15464c9bb09b2ba1ba7a29ed9d22ea4b2eeddc6c3a99472cf18f2067b0f0519926626ef18035c9d8c650ab4b968246d6f3af6f68bc5dc72392ff615348fe208d6772cc191136657f5c033a6601b820100959d5ae212364"}]}}, &(0x7f0000003b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x0, 0x3, "2f6c7d94", "d225750d"}}, &(0x7f0000003bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x5, 0x5, 0x6, 0x0, 0x7ff}}}, &(0x7f00000040c0)={0x84, &(0x7f0000003c40)={0x40, 0x9, 0x7d, "9a4dd4b3b7e95415698be3f64ec62267f7bda34a4814e724b82d4b4ecf7e311cb8482bff832a436b9a01859401d85d222cf381dd7c74aa28c123daefa7a93dd4a0f1e0c56663646df22d155ac7900ae4c869d8c7d71b2441c3109d3206674835f9c1edac6777a21ceb76411ce977a30128b4a6cb1a2c76fe7f7b56134a"}, &(0x7f0000003d00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000003dc0)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000003e00)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000003e40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000003e80)={0x40, 0xb, 0x2, "9458"}, &(0x7f0000003ec0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000003f00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000003f40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000003f80)={0x40, 0x19, 0x2, "85b9"}, &(0x7f0000003fc0)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000004000)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000004040)={0x40, 0x1e, 0x1}, &(0x7f0000004080)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) mkdirat(r5, &(0x7f0000004180)='.\x00', 0xb0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000004200), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000004440)={0x14, &(0x7f0000004300)={0x20, 0x4, 0xf8, {0xf8, 0xe, "aad458d484de4f7d3d5be2c387f6314d98132d7eca8be5280c4c44c2f3b60174af38f731b37ddefbcf89bb6fd3ee9a55c74812042fbf2638418faaf07ea3b89c890679fea3d085f820d55ac1c58706e1056360a56d5d7f9645a60daa1cb39fb4945629e8b2af93fd0349d71e31a76a93129706b3f4387cd1f8d85b9592d814c106d08efd11c1f024cab9bc33a6d965c3fc611a8d93e47a8c6d925a706b38f483b4a985ac372bf323e236c5b2a91e709a5e172f12f20d9d04949a9bf71f7e1ff61999db59c1592e942f2acb43859e52d3b2ad7dd6785c14399fbca5623169672b333a5ba02eac37fbe20fda1dc9f30ddb8ec37c7c6b58"}}, &(0x7f0000004400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004740)={0x44, &(0x7f0000004480)={0x0, 0x18, 0xe5, "ffdf3fc4a124cce7830739047d849c527e95a825d03042a3be4731792447a75fa4386393f4beefe3686804b7c79ea7b5a03f67ad3ecca837015e8bbf64dc71b0bfb6055873cc035bbb20eefe1e0fafd4375ac6a4bdec4821fdd4438537da627c8ecb95ae1707b940ee9590c4f962b6d28d57867689ae09f07207a3402217f57b9b241eb3501edec66cb31f4185ae006b2c32917ac25ece9a2daa132670d7a36b059f46d97fd5039567371d705de2f03f9410ad35cdeab20247dfb5ca64ee8fdaa7e832c0cc0e5e710b630186af4264f346cc350730a72abe207008f86c5b4462ee630b50bc"}, &(0x7f0000004580)={0x0, 0xa, 0x1, 0x8b}, &(0x7f00000045c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000004600)={0x20, 0x80, 0x1c, {0x4, 0x3, 0x6, 0x2, 0x3, 0x7, 0x3, 0x101, 0x7a97, 0x2, 0x8, 0x3}}, &(0x7f0000004640)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000004680)={0x20, 0x83, 0x2}, &(0x7f00000046c0)={0x20, 0x87, 0x2, 0xbe8d}, &(0x7f0000004700)={0x20, 0x89, 0x2}}) (async) syz_open_dev$audion(&(0x7f00000047c0), 0x7, 0x212781) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004800)) 2.104925852s ago: executing program 5 (id=521): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) statx(r0, &(0x7f0000000080)='.\x00', 0x6900, 0x80, &(0x7f0000000540)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40c8054}, 0x8810) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x4, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1/file0\x00', 0x113428, 0x11c) 1.89953805s ago: executing program 5 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{0x6, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.597024408s ago: executing program 5 (id=523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x4, 0xb9ff, 0x9, '\b\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r1 = syz_open_pts(r0, 0x101000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000500)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x50, 0x0, &(0x7f0000000540)="06c81be5f7164db350c291e0d6d3fd4414956497034b85a5f580f4bccee798954c79df6826b9264865cf798c7658faac23b9145bad4c39af8b42722f9a669fd99ade26882bb1ad0aa475b7546e73d138"}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$getflags(r6, 0x3) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) r10 = dup2(r9, r5) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r10, r15, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffd, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf914, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x9e86a, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="bb200000009ef67ff658fd97070100000064010102"], 0x14) 1.477727476s ago: executing program 3 (id=525): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x5) r1 = getpgid(0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x5, 0xb, 0x4, 0x100000000000000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000300)={{r3, &(0x7f0000000000)='.\xc7-^\\\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x200]}, {0xbe2, 0x0, 0x1000, 0x567}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x7}, {[0x6, 0x400, 0x7ce, 0x4]}, 0x8, 0xe3, &(0x7f0000000200)=""/227}) ioctl$TCXONC(r4, 0x540a, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000240)={'virt_wifi0\x00', @random="0600"}) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x229) pidfd_send_signal(r3, 0x21, 0x0, 0x4) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000000040)) 1.362822625s ago: executing program 2 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000002000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) 1.180324311s ago: executing program 3 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x70bd26, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) 1.160927177s ago: executing program 2 (id=528): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a0103000000000000000001db00000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000020a01030000000000000000000000061400000011000100"], 0xfc}}, 0x0) (fail_nth: 10) 700.479367ms ago: executing program 2 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) (fail_nth: 10) 636.80522ms ago: executing program 5 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x40}) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x55fdd7e50386e5c2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x108, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xf4, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "5609a4bfe10f2f993959b1a2a7e724c61d87534f1e187f6459d7137701bb74f0dd21a84f6469d64c1c761377b1d8b8552070792f9a42c0a1836c8d59e3f1f331bcd96f5ec9f24408a27bd67d5363340d0f7f04e148cc721f18d8bebf6d84dc34e28066bc0764f0e0c5427383a8a4685554897fe5935d656b82cc045d901d2b7394602ae7b5c60ecf537105df0d0d630a64796a44fe486e8618456b6dfd"}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x164}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) (async) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ce", 0x71}, {0x0}, {&(0x7f0000000e40), 0x6000}], 0x3}, 0x800) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES8=r8], 0x6c}, 0x1, 0x0, 0x0, 0x4040050}, 0x20040) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 602.509671ms ago: executing program 3 (id=531): shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c06, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x76, 0xe9, 0xe4, 0x10, 0x45e, 0x445, 0x87ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xed, 0x5d, 0x2, 0x7d, 0xd8, 0xce, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x15555555555557e1}) ioctl(r3, 0x928, 0x0) 529.074721ms ago: executing program 2 (id=532): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="3c0200007d00000005fb000000030020001000000000000000000000000000004008000000000400000082120000000000002900046e6f646576056314000000000000008108000000000031ff0b6afe704a86cec602007dfa673effeb0904351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8806b494e11200000000ad6ba97000000000000000000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d97983fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1408d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f752ddd9d52a3641aea9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd0739e1c2d87fff000000000000000000000000000000000080db5edc40eae47879f6edef12a173dcb0e6a35b45fd9fd6"], 0x23c) setns(0xc9, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x2c6, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 353.291331ms ago: executing program 1 (id=533): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) writev(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80}, 0x20) socket$kcm(0x29, 0x4, 0x0) r3 = syz_clone3(&(0x7f0000000040)={0x5248800, &(0x7f0000000000), 0x0, 0x0, {0x10035}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/dev_mcast\x00') ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1a) 304.989196ms ago: executing program 5 (id=534): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="4c00000011000e14001100020000000002000000200000", 0x17) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4109, 0x100d}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000240)=""/12, 0xc}], 0x3}, 0x429}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) 132.397653ms ago: executing program 5 (id=535): preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000004240)=""/4099, 0x1003}], 0x2, 0x0, 0x0, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x240) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xb9, 0x7f}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x5) read$alg(r4, &(0x7f0000000140)=""/60, 0x3c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500008100000072080003000500000000", 0x39}], 0x1) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xfb, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0xff, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x93, 0x3c}, [@extension_unit={0xa, 0x24, 0x8, 0x5, 0x9, 0x3, "b5423b"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x5, 0x47, "3bbf3a6d"}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x4, "c5d82e6f"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x6, "8b"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x92e, 0x0, "7ebe96"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x6, 0x5, "f232", "49e2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x9, 0x5, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff7, 0x4, 0x9, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x180, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0xfd, 0x7f, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x7f, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x78a, 0x4, 0xd}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x35, 0x4, 0x0, 0x2, "2c752d5048899af997"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x28, 0x8, {0x7, 0x25, 0x1, 0xc8cb0474a86bbc77, 0xb}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x8, 0x6, 0x7, 0x78, 0x2}, 0x13, &(0x7f0000000340)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xe, 0x20, 0x8, 0x7, 0x1ff, 0x4}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3072}}, {0xe4, &(0x7f0000000700)=@string={0xe4, 0x3, "24aaa3114d1c19b3925ccd3aaf14d430173f8bab4a45b70ed63926efd8dcf9b3ef4e983fefff2ca1685ef9b4722e833c1fc6647be1e7fa426a3c94b0b3144356a3de2b58946778ebcc2442ed7032c0913f0600756e1ab7e616208f7e03c6a7661fe1fa3adf34322ecc5e3fc9871f1f141e90d271e26129f8e53f0a3d2828ed0a1f660928fca1b64d257bf48a5a2a074278da269da14386965e8bcf4b7910658caf023fa91855583ff6ff7d430d99676b25e65bb84d644e23a981d5762fdd8eeac4ec95235c2c1209fbde39c69f3276cfa552c5f980c9a1777b9c65292886b3c8b5a5"}}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x2000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x60b, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000c17b20167ce1c3e40a5b7d106a05c500000000000001090224000100009006090400fe020300070009210510060122"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0x28, {0x28, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c55"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xa124, 0x2, 0xfffffffe, 0x15a}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040083, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 81.808549ms ago: executing program 2 (id=536): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x4, 0x4, 0x7}) syz_open_dev$vim2m(&(0x7f0000000000), 0x477, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 0s ago: executing program 2 (id=537): setns(0xc9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x9c) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = landlock_create_ruleset(&(0x7f0000000240)={0xb7e9}, 0x30, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) writev(r4, &(0x7f0000000480)=[{0x0}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000140)={0x0, @aes256, 0x0, @desc4}) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x2, 0x8, 0x80000001, 0x80500a}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) kernel console output (not intermixed with test programs): ldn't find an available UDC or it's busy [ 142.370719][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.520598][ T6676] veth0_vlan: entered promiscuous mode [ 142.548219][ T6676] veth1_vlan: entered promiscuous mode [ 142.625592][ T6676] veth0_macvtap: entered promiscuous mode [ 142.633438][ T6676] veth1_macvtap: entered promiscuous mode [ 142.660921][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.684441][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.712961][ T5614] Bluetooth: hci0: command tx timeout [ 142.722328][ T2997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.722519][ T2997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.722608][ T2997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.722705][ T2997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.823505][ T5700] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 142.919176][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.919201][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.965831][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.965855][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.980950][ T5700] usb 4-1: device descriptor read/64, error -71 [ 143.080035][ T6834] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 143.122440][ T5727] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.242329][ T5700] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 143.282269][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 143.283610][ T5727] usb 3-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 143.284930][ T5727] usb 3-1: config 53 has an invalid interface number: 101 but max is 0 [ 143.284963][ T5727] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 143.284978][ T5727] usb 3-1: config 53 has no interface number 0 [ 143.285033][ T5727] usb 3-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 143.285085][ T5727] usb 3-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.285101][ T5727] usb 3-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.285118][ T5727] usb 3-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.287354][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.287384][ T5727] usb 3-1: Product: syz [ 143.287396][ T5727] usb 3-1: Manufacturer: syz [ 143.287426][ T5727] usb 3-1: SerialNumber: syz [ 143.358304][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.393082][ T5700] usb 4-1: device descriptor read/64, error -71 [ 143.438921][ T5348] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 143.500610][ T5727] kvaser_usb 3-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 143.503067][ T5700] usb usb4-port1: attempt power cycle [ 143.525645][ T5727] usb 3-1: USB disconnect, device number 15 [ 143.573494][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 143.574875][ T30] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 143.575935][ T30] usb 6-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 143.575983][ T30] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 143.576009][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.576032][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.579126][ T30] usb 6-1: config 0 descriptor?? [ 143.729629][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.730501][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.865420][ T5700] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 143.882844][ T5700] usb 4-1: device descriptor read/8, error -71 [ 143.999895][ T30] nintendo 0003:057E:200E.0003: ignoring exceeding usage max [ 144.001621][ T30] hid_parser_main: 15 callbacks suppressed [ 144.001642][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x1 [ 144.001675][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001694][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001712][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001752][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001778][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001803][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001832][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001856][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.001874][ T30] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 144.101300][ T30] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.01 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 144.132250][ T5700] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 144.155082][ T5700] usb 4-1: device descriptor read/8, error -71 [ 144.177573][ T30] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 144.177599][ T30] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 144.216484][ T30] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 144.216679][ T30] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 144.220234][ T30] usb 6-1: USB disconnect, device number 2 [ 144.271642][ T5700] usb usb4-port1: unable to enumerate USB device [ 144.289993][ T6836] fido_id[6836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 144.416745][ T6840] syzkaller1: entered promiscuous mode [ 144.416772][ T6840] syzkaller1: entered allmulticast mode [ 144.649537][ T6847] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 144.792255][ T5614] Bluetooth: hci0: command tx timeout [ 144.930288][ T6858] FAULT_INJECTION: forcing a failure. [ 144.930288][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 144.930324][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.1.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.930354][ T6858] Tainted: [L]=SOFTLOCKUP [ 144.930363][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.930376][ T6858] Call Trace: [ 144.930385][ T6858] [ 144.930395][ T6858] dump_stack_lvl+0xe8/0x150 [ 144.930433][ T6858] should_fail_ex+0x3eb/0x540 [ 144.930464][ T6858] should_failslab+0xa8/0x100 [ 144.930491][ T6858] __kvmalloc_node_noprof+0x171/0x820 [ 144.930530][ T6858] ? dm_ctl_ioctl+0x49d/0xe10 [ 144.930564][ T6858] ? dm_ctl_ioctl+0x49d/0xe10 [ 144.930605][ T6858] dm_ctl_ioctl+0x49d/0xe10 [ 144.930638][ T6858] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.930667][ T6858] ? __pfx_table_load+0x10/0x10 [ 144.930702][ T6858] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 144.930766][ T6858] ? __fget_files+0x2a/0x420 [ 144.930794][ T6858] ? __fget_files+0x3a2/0x420 [ 144.930821][ T6858] ? __fget_files+0x2a/0x420 [ 144.930861][ T6858] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.930890][ T6858] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 144.930924][ T6858] __se_sys_ioctl+0xfc/0x170 [ 144.930962][ T6858] do_syscall_64+0x166/0x520 [ 144.930985][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.931009][ T6858] ? clear_bhb_loop+0x70/0xc0 [ 144.931047][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.931070][ T6858] RIP: 0033:0x7f0d52b9e159 [ 144.931091][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.931109][ T6858] RSP: 002b:00007f0d539df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.931134][ T6858] RAX: ffffffffffffffda RBX: 00007f0d52e25fa0 RCX: 00007f0d52b9e159 [ 144.931151][ T6858] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 144.931166][ T6858] RBP: 00007f0d539df090 R08: 0000000000000000 R09: 0000000000000000 [ 144.931183][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.931196][ T6858] R13: 00007f0d52e26038 R14: 00007f0d52e25fa0 R15: 00007ffdb3fce0b8 [ 144.931231][ T6858] [ 145.412772][ T6868] openvswitch: netlink: Missing key (keys=40, expected=100) [ 145.464721][ T6871] Option 'dnserror' to dns_resolver key: bad/missing value [ 145.487282][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.487798][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.605249][ T6874] FAULT_INJECTION: forcing a failure. [ 145.605249][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 145.605283][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.5.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.605313][ T6874] Tainted: [L]=SOFTLOCKUP [ 145.605320][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.605334][ T6874] Call Trace: [ 145.605342][ T6874] [ 145.605352][ T6874] dump_stack_lvl+0xe8/0x150 [ 145.605387][ T6874] should_fail_ex+0x3eb/0x540 [ 145.605418][ T6874] should_failslab+0xa8/0x100 [ 145.605445][ T6874] __kvmalloc_node_noprof+0x171/0x820 [ 145.605485][ T6874] ? dm_ctl_ioctl+0x49d/0xe10 [ 145.605518][ T6874] ? dm_ctl_ioctl+0x49d/0xe10 [ 145.605558][ T6874] dm_ctl_ioctl+0x49d/0xe10 [ 145.605618][ T6874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 145.605646][ T6874] ? __pfx_table_load+0x10/0x10 [ 145.605685][ T6874] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 145.605748][ T6874] ? __fget_files+0x2a/0x420 [ 145.605777][ T6874] ? __fget_files+0x3a2/0x420 [ 145.605804][ T6874] ? __fget_files+0x2a/0x420 [ 145.605837][ T6874] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.605865][ T6874] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 145.605899][ T6874] __se_sys_ioctl+0xfc/0x170 [ 145.605937][ T6874] do_syscall_64+0x166/0x520 [ 145.605958][ T6874] ? trace_irq_disable+0x3b/0x140 [ 145.605990][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.606013][ T6874] ? clear_bhb_loop+0x70/0xc0 [ 145.606040][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.606063][ T6874] RIP: 0033:0x7f27f799e159 [ 145.606084][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.606103][ T6874] RSP: 002b:00007f27f87b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.606126][ T6874] RAX: ffffffffffffffda RBX: 00007f27f7c25fa0 RCX: 00007f27f799e159 [ 145.606143][ T6874] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 145.606158][ T6874] RBP: 00007f27f87b5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.606171][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.606184][ T6874] R13: 00007f27f7c26038 R14: 00007f27f7c25fa0 R15: 00007fff655cef68 [ 145.606219][ T6874] [ 146.242253][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.292193][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 146.395208][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.396575][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.396622][ T30] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.399083][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.399110][ T30] usb 4-1: Product: syz [ 146.399126][ T30] usb 4-1: Manufacturer: syz [ 146.399141][ T30] usb 4-1: SerialNumber: syz [ 146.444544][ T5727] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.471416][ T30] cdc_ncm 4-1:1.0: skipping garbage [ 146.471445][ T30] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 146.471485][ T30] cdc_ncm 4-1:1.0: bind() failure [ 146.494001][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.495518][ T25] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.495559][ T25] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.495583][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.498359][ T25] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.498386][ T25] usb 3-1: Product: syz [ 146.498403][ T25] usb 3-1: Manufacturer: syz [ 146.498419][ T25] usb 3-1: SerialNumber: syz [ 146.506040][ T30] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 146.506162][ T30] cdc_ncm 4-1:1.1: bind() failure [ 146.526079][ T25] usb 3-1: config 0 descriptor?? [ 146.550837][ T25] usb 3-1: selecting invalid altsetting 0 [ 146.682144][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 146.684040][ T25] usb 4-1: USB disconnect, device number 14 [ 146.684122][ T5727] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 146.686677][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.686711][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.686785][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.747777][ T5727] usb 6-1: config 0 descriptor?? [ 146.770184][ T12] IPVS: starting estimator thread 0... [ 146.825773][ T6881] IPVS: rr: FWM 3 0x00000003 - no destination available [ 146.864575][ T6888] IPVS: using max 29 ests per chain, 69600 per kthread [ 146.865109][ T10] usb 3-1: USB disconnect, device number 16 [ 147.169521][ T1018] IPVS: starting estimator thread 0... [ 147.171932][ T6892] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 147.232475][ T5727] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 147.256043][ T6893] IPVS: using max 33 ests per chain, 79200 per kthread [ 147.285240][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.285776][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.410118][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 147.454101][ T6898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.366883][ T6918] fuse: Unknown parameter 'rodtmode' [ 148.377792][ T6917] fuse: Unknown parameter 'rodtmode' [ 148.770700][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 148.770736][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 148.981604][ T5348] Console: switching to colour frame buffer device 128x48 [ 149.004655][ T5348] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 149.224089][ T30] usb 6-1: USB disconnect, device number 3 [ 149.342875][ T6944] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 149.342899][ T6944] netlink: 152 bytes leftover after parsing attributes in process `syz.2.307'. [ 149.463898][ T5348] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 149.608147][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.308'. [ 149.622419][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 149.631623][ T5348] usb 4-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 149.642133][ T5348] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 7 [ 149.642176][ T5348] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 149.644212][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.644242][ T5348] usb 4-1: Product: syz [ 149.644258][ T5348] usb 4-1: Manufacturer: syz [ 149.644273][ T5348] usb 4-1: SerialNumber: syz [ 149.866894][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.871862][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.958511][ T5348] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 149.960742][ T5348] usb 4-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 150.084446][ T5348] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 150.102388][ T1562] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 150.111979][ T5348] usb 4-1: USB disconnect, device number 15 [ 150.166502][ T6889] udevd[6889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.215396][ T6967] mac80211_hwsim hwsim0 syzkaller1: entered promiscuous mode [ 150.215472][ T6967] mac80211_hwsim hwsim0 syzkaller1: entered allmulticast mode [ 150.273521][ T1562] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 150.274821][ T1562] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 150.278682][ T1562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.278710][ T1562] usb 6-1: Product: syz [ 150.278726][ T1562] usb 6-1: Manufacturer: syz [ 150.278743][ T1562] usb 6-1: SerialNumber: syz [ 150.326829][ T30] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 150.338789][ T6952] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 150.473441][ T30] usb 3-1: device descriptor read/64, error -71 [ 150.556988][ T1562] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.606611][ T1562] usb 6-1: USB disconnect, device number 4 [ 150.707313][ T6819] udevd[6819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.716689][ T30] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 150.741608][ T6972] FAULT_INJECTION: forcing a failure. [ 150.741608][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 150.741645][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.3.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.741676][ T6972] Tainted: [L]=SOFTLOCKUP [ 150.741684][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.741698][ T6972] Call Trace: [ 150.741707][ T6972] [ 150.741717][ T6972] dump_stack_lvl+0xe8/0x150 [ 150.741751][ T6972] should_fail_ex+0x3eb/0x540 [ 150.741786][ T6972] should_failslab+0xa8/0x100 [ 150.741811][ T6972] ? taskstats_exit+0x192/0xe70 [ 150.741841][ T6972] kmem_cache_alloc_noprof+0x9c/0x600 [ 150.741875][ T6972] ? taskstats_exit+0x192/0xe70 [ 150.741912][ T6972] taskstats_exit+0x192/0xe70 [ 150.741941][ T6972] ? acct_update_integrals+0x342/0x410 [ 150.741984][ T6972] ? acct_update_integrals+0x38a/0x410 [ 150.742018][ T6972] ? __pfx_taskstats_exit+0x10/0x10 [ 150.742056][ T6972] ? seccomp_filter_release+0x18a/0x2d0 [ 150.742082][ T6972] do_exit+0x6ad/0x2360 [ 150.742124][ T6972] ? __pfx_do_exit+0x10/0x10 [ 150.742160][ T6972] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.742197][ T6972] do_group_exit+0x22d/0x2f0 [ 150.742229][ T6972] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.742265][ T6972] get_signal+0x1216/0x12c0 [ 150.742314][ T6972] arch_do_signal_or_restart+0xbb/0x860 [ 150.742347][ T6972] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 150.742385][ T6972] ? ksys_write+0x242/0x270 [ 150.742425][ T6972] exit_to_user_mode_loop+0x10e/0x770 [ 150.742460][ T6972] ? rcu_is_watching+0x16/0xb0 [ 150.742488][ T6972] do_syscall_64+0x328/0x520 [ 150.742509][ T6972] ? trace_irq_disable+0x3b/0x140 [ 150.742541][ T6972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.742564][ T6972] ? clear_bhb_loop+0x70/0xc0 [ 150.742592][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.742615][ T6972] RIP: 0033:0x7f979759e159 [ 150.742636][ T6972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.742656][ T6972] RSP: 002b:00007f97984dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.742680][ T6972] RAX: fffffffffffffe00 RBX: 00007f9797826098 RCX: 00007f979759e159 [ 150.742697][ T6972] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9797826098 [ 150.742712][ T6972] RBP: 00007f9797826090 R08: 0000000000000000 R09: 0000000000000000 [ 150.742726][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.742740][ T6972] R13: 00007f9797826128 R14: 00007fffc89c0b40 R15: 00007fffc89c0c28 [ 150.742774][ T6972] [ 150.853271][ T30] usb 3-1: device descriptor read/64, error -71 [ 150.963726][ T30] usb usb3-port1: attempt power cycle [ 151.183957][ T6977] FAULT_INJECTION: forcing a failure. [ 151.183957][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 151.183996][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.5.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.184027][ T6977] Tainted: [L]=SOFTLOCKUP [ 151.184039][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.184054][ T6977] Call Trace: [ 151.184063][ T6977] [ 151.184073][ T6977] dump_stack_lvl+0xe8/0x150 [ 151.184110][ T6977] should_fail_ex+0x3eb/0x540 [ 151.184142][ T6977] should_failslab+0xa8/0x100 [ 151.184170][ T6977] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 151.184204][ T6977] ? __d_lookup+0x66/0x790 [ 151.184237][ T6977] ? __d_alloc+0x37/0x6f0 [ 151.184265][ T6977] ? __d_alloc+0x37/0x6f0 [ 151.184303][ T6977] __d_alloc+0x37/0x6f0 [ 151.184341][ T6977] d_alloc+0x4b/0x190 [ 151.184369][ T6977] ? lookup_one_qstr_excl+0xc4/0x360 [ 151.184405][ T6977] lookup_one_qstr_excl+0xd8/0x360 [ 151.184437][ T6977] ? lookup_noperm_common+0x245/0x430 [ 151.184472][ T6977] start_dirop+0x5c/0x90 [ 151.184501][ T6977] simple_start_creating+0xcc/0x110 [ 151.184535][ T6977] ? __pfx_simple_start_creating+0x10/0x10 [ 151.184570][ T6977] ? mntput+0x65/0xc0 [ 151.184600][ T6977] debugfs_start_creating+0xca/0x1b0 [ 151.184636][ T6977] debugfs_create_dir+0x24/0x350 [ 151.184673][ T6977] ieee80211_debugfs_recreate_netdev+0x1cc/0x14b0 [ 151.184715][ T6977] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 151.184767][ T6977] drv_remove_interface+0x1e6/0x580 [ 151.184796][ T6977] __ieee80211_suspend+0x6c5/0x1010 [ 151.184832][ T6977] reset_write+0x7a/0x210 [ 151.184864][ T6977] short_proxy_write+0x12b/0x1f0 [ 151.184893][ T6977] ? __pfx_short_proxy_write+0x10/0x10 [ 151.184926][ T6977] vfs_write+0x296/0xba0 [ 151.184969][ T6977] ? __pfx_vfs_write+0x10/0x10 [ 151.185003][ T6977] ? __fget_files+0x2a/0x420 [ 151.185036][ T6977] ? __fget_files+0x3a2/0x420 [ 151.185064][ T6977] ? __fget_files+0x2a/0x420 [ 151.185103][ T6977] ksys_write+0x150/0x270 [ 151.185138][ T6977] ? __pfx_ksys_write+0x10/0x10 [ 151.185183][ T6977] do_syscall_64+0x166/0x520 [ 151.185204][ T6977] ? trace_irq_disable+0x3b/0x140 [ 151.185236][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.185260][ T6977] ? clear_bhb_loop+0x70/0xc0 [ 151.185289][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.185312][ T6977] RIP: 0033:0x7f27f799e159 [ 151.185333][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.185350][ T6977] RSP: 002b:00007f27f87b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.185374][ T6977] RAX: ffffffffffffffda RBX: 00007f27f7c25fa0 RCX: 00007f27f799e159 [ 151.185390][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 151.185403][ T6977] RBP: 00007f27f87b5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.185417][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.185430][ T6977] R13: 00007f27f7c26038 R14: 00007f27f7c25fa0 R15: 00007fff655cef68 [ 151.185468][ T6977] [ 151.377672][ T30] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 151.413605][ T30] usb 3-1: device descriptor read/8, error -71 [ 151.662266][ T30] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 151.682886][ T30] usb 3-1: device descriptor read/8, error -71 [ 151.795649][ T30] usb usb3-port1: unable to enumerate USB device [ 151.917040][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.928685][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.013479][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.021916][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.441393][ T7009] netlink: 'syz.3.327': attribute type 3 has an invalid length. [ 152.441416][ T7009] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 152.441431][ T7009] netlink: 224 bytes leftover after parsing attributes in process `syz.3.327'. [ 153.036792][ T7023] mmap: syz.5.332 (7023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.182797][ T7028] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6029316.0.0), cmd(9) [ 153.230905][ T7031] FAULT_INJECTION: forcing a failure. [ 153.230905][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.230950][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.1.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.230980][ T7031] Tainted: [L]=SOFTLOCKUP [ 153.230988][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.231002][ T7031] Call Trace: [ 153.231011][ T7031] [ 153.231020][ T7031] dump_stack_lvl+0xe8/0x150 [ 153.231055][ T7031] should_fail_ex+0x3eb/0x540 [ 153.231085][ T7031] _copy_to_user+0x31/0xb0 [ 153.231115][ T7031] simple_read_from_buffer+0xe1/0x170 [ 153.231150][ T7031] proc_fail_nth_read+0x1bb/0x230 [ 153.231195][ T7031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.231232][ T7031] ? rw_verify_area+0x24a/0x4c0 [ 153.231264][ T7031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.231298][ T7031] vfs_read+0x213/0xa80 [ 153.231334][ T7031] ? __pfx___mutex_lock+0x10/0x10 [ 153.231357][ T7031] ? __pfx_vfs_read+0x10/0x10 [ 153.231388][ T7031] ? __fget_files+0x2a/0x420 [ 153.231420][ T7031] ? __fget_files+0x3a2/0x420 [ 153.231447][ T7031] ? __fget_files+0x2a/0x420 [ 153.231484][ T7031] ksys_read+0x150/0x270 [ 153.231516][ T7031] ? __pfx_ksys_read+0x10/0x10 [ 153.231558][ T7031] do_syscall_64+0x166/0x520 [ 153.231578][ T7031] ? trace_irq_disable+0x3b/0x140 [ 153.231609][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.231633][ T7031] ? clear_bhb_loop+0x70/0xc0 [ 153.231659][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.231682][ T7031] RIP: 0033:0x7f0d52b5e98e [ 153.231703][ T7031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.231722][ T7031] RSP: 002b:00007f0d539defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.231747][ T7031] RAX: ffffffffffffffda RBX: 00007f0d539df6c0 RCX: 00007f0d52b5e98e [ 153.231763][ T7031] RDX: 000000000000000f RSI: 00007f0d539df0a0 RDI: 0000000000000004 [ 153.231777][ T7031] RBP: 00007f0d539df090 R08: 0000000000000000 R09: 0000000000000000 [ 153.231791][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.231804][ T7031] R13: 00007f0d52e26038 R14: 00007f0d52e25fa0 R15: 00007ffdb3fce0b8 [ 153.231839][ T7031] [ 153.635751][ T7038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.809975][ T7044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.883858][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.887777][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.981738][ T7049] netlink: 256 bytes leftover after parsing attributes in process `syz.2.342'. [ 154.062848][ T1562] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.192245][ T1562] usb 4-1: device descriptor read/64, error -71 [ 154.243052][ T5727] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 154.390129][ T7054] bond0: option arp_interval: invalid value (10zœ‡ö…¾N«\) [ 154.390150][ T7054] bond0: option arp_interval: allowed values 0 - 2147483647 [ 154.401353][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 154.417924][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.417978][ T5727] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 154.419061][ T5727] usb 3-1: config 4 has an invalid interface number: 135 but max is 0 [ 154.419087][ T5727] usb 3-1: config 4 has no interface number 0 [ 154.419118][ T5727] usb 3-1: config 4 interface 135 has no altsetting 0 [ 154.421221][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.421249][ T5727] usb 3-1: Product: syz [ 154.421266][ T5727] usb 3-1: Manufacturer: syz [ 154.421282][ T5727] usb 3-1: SerialNumber: syz [ 154.439727][ T1562] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.583500][ T1562] usb 4-1: device descriptor read/64, error -71 [ 154.608308][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.608805][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.685815][ T7063] Failed to get privilege flags for destination (handle=0x2:0x0) [ 154.689476][ T7063] fuse: Unknown parameter 'user_idsystem.posix_acl_default' [ 154.709177][ T1562] usb usb4-port1: attempt power cycle [ 154.829138][ T5727] go7007 3-1:4.135: The Lifeview TV Walker Ultra is not supported. Sorry! [ 154.844876][ T5727] usb 3-1: USB disconnect, device number 21 [ 154.848480][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 154.848501][ T31] audit: type=1800 audit(1789509845.671:36): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.347" name="/47/task/48/fail-nth" dev="proc" ino=14960 res=0 errno=0 [ 154.959007][ T7069] Bluetooth: MGMT ver 1.23 [ 155.052420][ T1562] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 155.080331][ T7073] Config c/1 of g1 needs at least one function. [ 155.080557][ T7073] udc dummy_udc.0: failed to start g1: -22 [ 155.080573][ T7073] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 155.082235][ T7073] UDC core: g1: couldn't find an available UDC or it's busy [ 155.107517][ T1562] usb 4-1: device descriptor read/8, error -71 [ 155.227900][ T7079] netlink: 'syz.5.352': attribute type 2 has an invalid length. [ 155.342689][ T1562] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 155.372889][ T1562] usb 4-1: device descriptor read/8, error -71 [ 155.484073][ T1562] usb usb4-port1: unable to enumerate USB device [ 155.556010][ T7089] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.615267][ T7091] loop6: detected capacity change from 0 to 8 [ 155.840047][ T7089] md/raid10:md0: active with 2 out of 2 devices [ 155.876761][ T7089] md0: detected capacity change from 0 to 4096 [ 155.966857][ T7104] FAULT_INJECTION: forcing a failure. [ 155.966857][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 155.966893][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.5.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.966934][ T7104] Tainted: [L]=SOFTLOCKUP [ 155.966943][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.966957][ T7104] Call Trace: [ 155.966967][ T7104] [ 155.966977][ T7104] dump_stack_lvl+0xe8/0x150 [ 155.967013][ T7104] should_fail_ex+0x3eb/0x540 [ 155.967044][ T7104] should_failslab+0xa8/0x100 [ 155.967071][ T7104] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 155.967107][ T7104] ? __lock_acquire+0x747/0x2de0 [ 155.967140][ T7104] ? __kernfs_new_node+0xa9/0x980 [ 155.967173][ T7104] ? __kernfs_new_node+0xa9/0x980 [ 155.967208][ T7104] ? kasan_save_track+0x4f/0x80 [ 155.967247][ T7104] kstrdup+0x42/0x100 [ 155.967284][ T7104] __kernfs_new_node+0xa9/0x980 [ 155.967330][ T7104] ? __pfx___kernfs_new_node+0x10/0x10 [ 155.967366][ T7104] ? kernfs_root+0x1c/0x230 [ 155.967406][ T7104] ? kernfs_root+0x1c/0x230 [ 155.967438][ T7104] ? kernfs_root+0x1c/0x230 [ 155.967469][ T7104] ? kernfs_root+0x1c/0x230 [ 155.967507][ T7104] kernfs_create_dir_ns+0xfe/0x230 [ 155.967542][ T7104] sysfs_create_dir_ns+0x12f/0x2a0 [ 155.967579][ T7104] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.967616][ T7104] ? do_raw_spin_unlock+0xf5/0x200 [ 155.967649][ T7104] kobject_add_internal+0x622/0xcd0 [ 155.967690][ T7104] kobject_init_and_add+0x12b/0x1a0 [ 155.967717][ T7104] ? rcu_is_watching+0x16/0xb0 [ 155.967745][ T7104] ? __pfx_kobject_init_and_add+0x10/0x10 [ 155.967776][ T7104] ? __raw_spin_lock_init+0x45/0x100 [ 155.967817][ T7104] bus_add_driver+0x255/0x670 [ 155.967850][ T7104] driver_register+0x23a/0x320 [ 155.967888][ T7104] usb_gadget_register_driver_owner+0xf9/0x270 [ 155.967933][ T7104] raw_ioctl+0x1541/0x41c0 [ 155.967964][ T7104] ? tomoyo_path_number_perm+0x219/0x5f0 [ 155.967993][ T7104] ? do_vfs_ioctl+0x116f/0x1530 [ 155.968019][ T7104] ? __pfx_raw_ioctl+0x10/0x10 [ 155.968055][ T7104] ? hook_file_ioctl+0x1f2/0x600 [ 155.968101][ T7104] ? __fget_files+0x2a/0x420 [ 155.968134][ T7104] ? __fget_files+0x2a/0x420 [ 155.968162][ T7104] ? __fget_files+0x3a2/0x420 [ 155.968190][ T7104] ? __fget_files+0x2a/0x420 [ 155.968222][ T7104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.968251][ T7104] ? __pfx_raw_ioctl+0x10/0x10 [ 155.968273][ T7104] __se_sys_ioctl+0xfc/0x170 [ 155.968311][ T7104] do_syscall_64+0x166/0x520 [ 155.968333][ T7104] ? trace_irq_disable+0x3b/0x140 [ 155.968366][ T7104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.968389][ T7104] ? clear_bhb_loop+0x70/0xc0 [ 155.968417][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.968441][ T7104] RIP: 0033:0x7f27f799ddeb [ 155.968462][ T7104] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 155.968481][ T7104] RSP: 002b:00007f27f8791f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.968505][ T7104] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f27f799ddeb [ 155.968522][ T7104] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 155.968536][ T7104] RBP: 00007f27f8792fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 155.968551][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.968565][ T7104] R13: 0000200000000280 R14: 0000000000000000 R15: 0000000000000000 [ 155.968598][ T7104] [ 156.035076][ T7104] kobject: kobject_add_internal failed for raw-gadget.3 (error: -12 parent: drivers) [ 156.035223][ T7104] UDC core: USB Raw Gadget: driver registration failed: -12 [ 156.035276][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 156.375220][ T7091] Dev loop6: unable to read RDB block 8 [ 156.375267][ T7091] loop6: unable to read partition table [ 156.375453][ T7091] loop6: partition table beyond EOD, truncated [ 156.375495][ T7091] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 156.480821][ T7110] FAULT_INJECTION: forcing a failure. [ 156.480821][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 156.480861][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.2.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.480893][ T7110] Tainted: [L]=SOFTLOCKUP [ 156.480900][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.480922][ T7110] Call Trace: [ 156.480931][ T7110] [ 156.480942][ T7110] dump_stack_lvl+0xe8/0x150 [ 156.480979][ T7110] should_fail_ex+0x3eb/0x540 [ 156.481009][ T7110] ? __alloc_skb+0x1db/0x7a0 [ 156.481032][ T7110] should_failslab+0xa8/0x100 [ 156.481059][ T7110] ? __alloc_skb+0x1db/0x7a0 [ 156.481087][ T7110] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 156.481122][ T7110] ? __alloc_skb+0x18d/0x7a0 [ 156.481145][ T7110] ? __alloc_skb+0x1db/0x7a0 [ 156.481174][ T7110] __alloc_skb+0x1db/0x7a0 [ 156.481201][ T7110] fdb_notify+0xa6/0x160 [ 156.481240][ T7110] fdb_delete+0xc37/0xe40 [ 156.481278][ T7110] ? fdb_delete+0x1cb/0xe40 [ 156.481319][ T7110] br_fdb_changeaddr+0x244/0x470 [ 156.481364][ T7110] br_device_event+0x699/0x9c0 [ 156.481397][ T7110] ? net_generic+0x1e/0x240 [ 156.481431][ T7110] ? __pfx_br_device_event+0x10/0x10 [ 156.481466][ T7110] ? lockdep_rtnl_is_held+0x26/0x40 [ 156.481504][ T7110] notifier_call_chain+0x1a5/0x3d0 [ 156.481547][ T7110] call_netdevice_notifiers+0x90/0xd0 [ 156.481587][ T7110] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 156.481621][ T7110] ? __pfx___mutex_lock+0x10/0x10 [ 156.481642][ T7110] ? full_name_hash+0x92/0xe0 [ 156.481676][ T7110] ? dev_ifsioc+0x645/0x1360 [ 156.481704][ T7110] ? netdev_need_ops_lock+0xbe/0xf0 [ 156.481730][ T7110] dev_ifsioc+0x65a/0x1360 [ 156.481754][ T7110] ? dev_load+0x21/0x1f0 [ 156.481778][ T7110] dev_ioctl+0x7b4/0x1150 [ 156.481805][ T7110] sock_do_ioctl+0x23e/0x320 [ 156.481838][ T7110] ? __pfx_sock_do_ioctl+0x10/0x10 [ 156.481866][ T7110] ? hook_file_ioctl+0x1f2/0x600 [ 156.481907][ T7110] sock_ioctl+0x57a/0x7e0 [ 156.481937][ T7110] ? __pfx_sock_ioctl+0x10/0x10 [ 156.481967][ T7110] ? __fget_files+0x2a/0x420 [ 156.481995][ T7110] ? __fget_files+0x3a2/0x420 [ 156.482022][ T7110] ? __fget_files+0x2a/0x420 [ 156.482056][ T7110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.482094][ T7110] ? __pfx_sock_ioctl+0x10/0x10 [ 156.482123][ T7110] __se_sys_ioctl+0xfc/0x170 [ 156.482162][ T7110] do_syscall_64+0x166/0x520 [ 156.482183][ T7110] ? trace_irq_disable+0x3b/0x140 [ 156.482217][ T7110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.482241][ T7110] ? clear_bhb_loop+0x70/0xc0 [ 156.482270][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.482293][ T7110] RIP: 0033:0x7fe0b879e159 [ 156.482315][ T7110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.482335][ T7110] RSP: 002b:00007fe0b95b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.482360][ T7110] RAX: ffffffffffffffda RBX: 00007fe0b8a25fa0 RCX: 00007fe0b879e159 [ 156.482378][ T7110] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000008 [ 156.482393][ T7110] RBP: 00007fe0b883503b R08: 0000000000000000 R09: 0000000000000000 [ 156.482407][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.482421][ T7110] R13: 00007fe0b8a26038 R14: 00007fe0b8a25fa0 R15: 00007ffc2f31edf8 [ 156.482458][ T7110] [ 157.026680][ T7112] FAULT_INJECTION: forcing a failure. [ 157.026680][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.026716][ T7112] CPU: 1 UID: 0 PID: 7112 Comm: syz.2.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.026747][ T7112] Tainted: [L]=SOFTLOCKUP [ 157.026755][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.026770][ T7112] Call Trace: [ 157.026779][ T7112] [ 157.026789][ T7112] dump_stack_lvl+0xe8/0x150 [ 157.026824][ T7112] should_fail_ex+0x3eb/0x540 [ 157.026857][ T7112] _copy_to_user+0x31/0xb0 [ 157.026890][ T7112] dm_ctl_ioctl+0x300/0xe10 [ 157.026925][ T7112] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.026959][ T7112] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 157.027024][ T7112] ? __fget_files+0x2a/0x420 [ 157.027053][ T7112] ? __fget_files+0x3a2/0x420 [ 157.027080][ T7112] ? __fget_files+0x2a/0x420 [ 157.027113][ T7112] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.027143][ T7112] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 157.027178][ T7112] __se_sys_ioctl+0xfc/0x170 [ 157.027216][ T7112] do_syscall_64+0x166/0x520 [ 157.027238][ T7112] ? trace_irq_disable+0x3b/0x140 [ 157.027271][ T7112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.027295][ T7112] ? clear_bhb_loop+0x70/0xc0 [ 157.027324][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.027348][ T7112] RIP: 0033:0x7fe0b879e159 [ 157.027378][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.027398][ T7112] RSP: 002b:00007fe0b95b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.027424][ T7112] RAX: ffffffffffffffda RBX: 00007fe0b8a25fa0 RCX: 00007fe0b879e159 [ 157.027441][ T7112] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 157.027457][ T7112] RBP: 00007fe0b95b2090 R08: 0000000000000000 R09: 0000000000000000 [ 157.027472][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.027486][ T7112] R13: 00007fe0b8a26038 R14: 00007fe0b8a25fa0 R15: 00007ffc2f31edf8 [ 157.027525][ T7112] [ 157.095536][ T7104] FAULT_INJECTION: forcing a failure. [ 157.095536][ T7104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.095631][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.5.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.095708][ T7104] Tainted: [L]=SOFTLOCKUP [ 157.095729][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.095770][ T7104] Call Trace: [ 157.095792][ T7104] [ 157.095822][ T7104] dump_stack_lvl+0xe8/0x150 [ 157.095919][ T7104] should_fail_ex+0x3eb/0x540 [ 157.095993][ T7104] get_futex_key+0x1b4/0x1580 [ 157.096124][ T7104] ? __pfx_get_futex_key+0x10/0x10 [ 157.096250][ T7104] futex_wake+0x119/0x5f0 [ 157.096361][ T7104] ? __pfx_futex_wake+0x10/0x10 [ 157.096501][ T7104] ? mm_exit_exec_release+0x20/0x290 [ 157.096585][ T7104] do_futex+0x458/0x4e0 [ 157.096668][ T7104] ? __pfx_do_futex+0x10/0x10 [ 157.096744][ T7104] ? __might_fault+0xaf/0x130 [ 157.096825][ T7104] mm_exit_exec_release+0x10d/0x290 [ 157.096893][ T7104] exit_mm+0x4d/0x2d0 [ 157.096978][ T7104] do_exit+0x6cd/0x2360 [ 157.097083][ T7104] ? __pfx_do_exit+0x10/0x10 [ 157.097175][ T7104] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.097270][ T7104] do_group_exit+0x22d/0x2f0 [ 157.097359][ T7104] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.097447][ T7104] get_signal+0x1216/0x12c0 [ 157.097568][ T7104] arch_do_signal_or_restart+0xbb/0x860 [ 157.097679][ T7104] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.097787][ T7104] ? ksys_write+0x242/0x270 [ 157.097895][ T7104] exit_to_user_mode_loop+0x10e/0x770 [ 157.098006][ T7104] ? rcu_is_watching+0x16/0xb0 [ 157.098097][ T7104] do_syscall_64+0x328/0x520 [ 157.098150][ T7104] ? trace_irq_disable+0x3b/0x140 [ 157.098233][ T7104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.098305][ T7104] ? clear_bhb_loop+0x70/0xc0 [ 157.098389][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.098449][ T7104] RIP: 0033:0x7f27f799e159 [ 157.098510][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.098588][ T7104] RSP: 002b:00007f27f87940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.098650][ T7104] RAX: fffffffffffffe00 RBX: 00007f27f7c26098 RCX: 00007f27f799e159 [ 157.098682][ T7104] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27f7c26098 [ 157.098741][ T7104] RBP: 00007f27f7c26090 R08: 0000000000000000 R09: 0000000000000000 [ 157.098775][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.098815][ T7104] R13: 00007f27f7c26128 R14: 00007fff655cee80 R15: 00007fff655cef68 [ 157.098910][ T7104] [ 157.346152][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 157.532319][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 157.533336][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 157.536235][ T25] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 157.536264][ T25] usb 4-1: config 0 has no interface number 0 [ 157.553549][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.553654][ T25] usb 4-1: Product: syz [ 157.553698][ T25] usb 4-1: Manufacturer: syz [ 157.553734][ T25] usb 4-1: SerialNumber: syz [ 157.614865][ T25] usb 4-1: config 0 descriptor?? [ 157.627070][ T7092] Dev loop6: unable to read RDB block 8 [ 157.627173][ T7092] loop6: unable to read partition table [ 157.627758][ T7092] loop6: partition table beyond EOD, truncated [ 157.814843][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.815276][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.864680][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 157.864706][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 157.980375][ T7131] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 158.270919][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 158.271124][ T25] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 158.294316][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.296398][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.422269][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.573148][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 158.576666][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.576697][ T10] usb 6-1: Product: syz [ 158.576713][ T10] usb 6-1: Manufacturer: syz [ 158.576729][ T10] usb 6-1: SerialNumber: syz [ 158.581577][ T10] usb 6-1: config 0 descriptor?? [ 158.825482][ T7141] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 158.828594][ T7141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.926054][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 158.926085][ T10] usb 6-1: Please update to version 0.2 or newer [ 159.007585][ T10] usb 6-1: USB disconnect, device number 5 [ 159.745653][ T5701] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 159.893065][ T5701] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 159.894464][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.896690][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.896716][ T5701] usb 3-1: Product: syz [ 159.896732][ T5701] usb 3-1: Manufacturer: syz [ 159.896749][ T5701] usb 3-1: SerialNumber: syz [ 159.947019][ T5701] usb 3-1: config 0 descriptor?? [ 160.015231][ T7191] nftables ruleset with unbound set [ 160.066121][ T25] usb 4-1: USB disconnect, device number 20 [ 160.161505][ T5701] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 160.220007][ T5701] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 160.220931][ T5701] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 160.220995][ T5701] usb 3-1: media controller created [ 160.256348][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.329449][ T5701] DVB: Unable to find symbol dib7000p_attach() [ 160.329468][ T5701] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 160.329484][ T5701] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 160.330143][ T5701] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 160.330189][ T5701] usb 3-1: media controller created [ 160.371450][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.376252][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.391209][ T7200] fuse: Unknown parameter 'u@ºw”bë¡üì� ˜¨è¯Ãâå<¤ÅXgÒiû•@—÷‚ä··ÚKó_öÒcik7ÕÁÄ»›ƒÌÏÉñ¹ÊbRµûŸj‡hÏÝ' [ 160.391428][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.421451][ T5701] dib0700: the master dib7090 has to be initialized first [ 160.421469][ T5701] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 160.516363][ T5701] rc_core: IR keymap rc-dib0700-rc5 not found [ 160.516386][ T5701] Registered IR keymap rc-empty [ 160.516864][ T5701] dvb-usb: could not initialize remote control. [ 160.516874][ T5701] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 160.550687][ T5701] usb 3-1: USB disconnect, device number 22 [ 160.566744][ T1562] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 160.624570][ T5701] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 160.722261][ T1562] usb 6-1: Using ep0 maxpacket: 32 [ 160.723934][ T1562] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 160.725552][ T1562] usb 6-1: config 123 interface 0 has no altsetting 0 [ 160.727680][ T1562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.727717][ T1562] usb 6-1: Product: syz [ 160.727734][ T1562] usb 6-1: Manufacturer: syz [ 160.727750][ T1562] usb 6-1: SerialNumber: syz [ 160.976422][ T1562] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 160.996366][ T1562] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.996806][ T1562] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 160.996842][ T1562] usb 6-1: media controller created [ 161.069219][ T1562] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.173941][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.179636][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.210480][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.210960][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.224665][ T7206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.249467][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.250133][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.270399][ T1562] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 161.270426][ T1562] error writing reg: 0xff, val: 0x00 [ 161.343827][ T7206] md: couldn't update array info. -22 [ 161.383062][ T7206] md: could not open device unknown-block(1,1). [ 161.383152][ T7206] md: md_import_device returned -16 [ 161.466118][ T1562] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 161.485928][ T1562] usb 6-1: USB disconnect, device number 6 [ 161.814649][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 161.814696][ T7217] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 161.901111][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 162.111858][ T7225] netlink: 156 bytes leftover after parsing attributes in process `syz.5.398'. [ 162.277653][ T7227] FAULT_INJECTION: forcing a failure. [ 162.277653][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 162.277681][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.3.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.277702][ T7227] Tainted: [L]=SOFTLOCKUP [ 162.277708][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.277717][ T7227] Call Trace: [ 162.277723][ T7227] [ 162.277730][ T7227] dump_stack_lvl+0xe8/0x150 [ 162.277756][ T7227] should_fail_ex+0x3eb/0x540 [ 162.277778][ T7227] should_failslab+0xa8/0x100 [ 162.277798][ T7227] __kmalloc_noprof+0xf9/0x710 [ 162.277820][ T7227] ? rcu_is_watching+0x16/0xb0 [ 162.277837][ T7227] ? tomoyo_realpath_from_path+0xef/0x640 [ 162.277857][ T7227] ? tomoyo_realpath_from_path+0xef/0x640 [ 162.277883][ T7227] tomoyo_realpath_from_path+0xef/0x640 [ 162.277911][ T7227] ? tomoyo_path_number_perm+0x219/0x5f0 [ 162.277927][ T7227] tomoyo_path_number_perm+0x246/0x5f0 [ 162.277946][ T7227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.277962][ T7227] ? __lock_acquire+0x747/0x2de0 [ 162.277997][ T7227] ? hook_file_ioctl+0x1f2/0x600 [ 162.278028][ T7227] ? __fget_files+0x2a/0x420 [ 162.278051][ T7227] ? __fget_files+0x2a/0x420 [ 162.278070][ T7227] ? __fget_files+0x3a2/0x420 [ 162.278097][ T7227] ? __fget_files+0x2a/0x420 [ 162.278120][ T7227] security_file_ioctl+0xc3/0x2a0 [ 162.278147][ T7227] __se_sys_ioctl+0x47/0x170 [ 162.278175][ T7227] do_syscall_64+0x166/0x520 [ 162.278190][ T7227] ? trace_irq_disable+0x3b/0x140 [ 162.278214][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.278230][ T7227] ? clear_bhb_loop+0x70/0xc0 [ 162.278250][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.278266][ T7227] RIP: 0033:0x7f979759e159 [ 162.278280][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.278294][ T7227] RSP: 002b:00007f97984fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.278311][ T7227] RAX: ffffffffffffffda RBX: 00007f9797825fa0 RCX: 00007f979759e159 [ 162.278323][ T7227] RDX: 0000200000001e40 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 162.278333][ T7227] RBP: 00007f97984fe090 R08: 0000000000000000 R09: 0000000000000000 [ 162.278343][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.278353][ T7227] R13: 00007f9797826038 R14: 00007f9797825fa0 R15: 00007fffc89c0c28 [ 162.278377][ T7227] [ 162.278383][ T7227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.548510][ T7229] FAULT_INJECTION: forcing a failure. [ 162.548510][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 162.548552][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.5.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.548583][ T7229] Tainted: [L]=SOFTLOCKUP [ 162.548592][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.548607][ T7229] Call Trace: [ 162.548615][ T7229] [ 162.548626][ T7229] dump_stack_lvl+0xe8/0x150 [ 162.548666][ T7229] should_fail_ex+0x3eb/0x540 [ 162.548700][ T7229] should_failslab+0xa8/0x100 [ 162.548730][ T7229] __kmalloc_node_noprof+0xfb/0x720 [ 162.548765][ T7229] ? __get_vm_area_node+0x200/0x2f0 [ 162.548796][ T7229] ? __get_vm_area_node+0x283/0x2f0 [ 162.548822][ T7229] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 162.548851][ T7229] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 162.548888][ T7229] __vmalloc_node_range_noprof+0x5a0/0x1690 [ 162.548949][ T7229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.548981][ T7229] ? __kasan_kmalloc+0x93/0xb0 [ 162.549005][ T7229] ? __kmalloc_cache_noprof+0x31c/0x600 [ 162.549039][ T7229] ? vidtv_mux_init+0x204/0x1960 [ 162.549075][ T7229] vzalloc_noprof+0xb2/0xe0 [ 162.549106][ T7229] ? vidtv_mux_init+0x204/0x1960 [ 162.549133][ T7229] vidtv_mux_init+0x204/0x1960 [ 162.549159][ T7229] ? __mutex_lock+0x305/0x15a0 [ 162.549189][ T7229] vidtv_start_feed+0x36b/0x5a0 [ 162.549229][ T7229] ? __pfx_vidtv_start_feed+0x10/0x10 [ 162.549261][ T7229] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 162.549311][ T7229] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.549347][ T7229] dmx_section_feed_start_filtering+0x519/0x6b0 [ 162.549397][ T7229] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 162.549436][ T7229] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 162.549469][ T7229] dvb_demux_do_ioctl+0x470/0x540 [ 162.549506][ T7229] dvb_usercopy+0x199/0x2e0 [ 162.549531][ T7229] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 162.549558][ T7229] ? __pfx_dvb_usercopy+0x10/0x10 [ 162.549596][ T7229] ? __fget_files+0x3a2/0x420 [ 162.549626][ T7229] ? __fget_files+0x2a/0x420 [ 162.549657][ T7229] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 162.549686][ T7229] dvb_demux_ioctl+0x29/0x40 [ 162.549715][ T7229] __se_sys_ioctl+0xfc/0x170 [ 162.549753][ T7229] do_syscall_64+0x166/0x520 [ 162.549776][ T7229] ? trace_irq_disable+0x3b/0x140 [ 162.549809][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.549836][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 162.549866][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.549891][ T7229] RIP: 0033:0x7f27f799e159 [ 162.549915][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.549933][ T7229] RSP: 002b:00007f27f87b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.549959][ T7229] RAX: ffffffffffffffda RBX: 00007f27f7c25fa0 RCX: 00007f27f799e159 [ 162.549975][ T7229] RDX: 0000200000001e40 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 162.549990][ T7229] RBP: 00007f27f7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 162.550004][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.550018][ T7229] R13: 00007f27f7c26038 R14: 00007f27f7c25fa0 R15: 00007fff655cef68 [ 162.550063][ T7229] [ 162.550367][ T7229] syz.5.400: vmalloc error: size 94208, failed to allocated page array size 184, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 162.550595][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.5.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.550626][ T7229] Tainted: [L]=SOFTLOCKUP [ 162.550634][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.550647][ T7229] Call Trace: [ 162.550655][ T7229] [ 162.550663][ T7229] dump_stack_lvl+0xe8/0x150 [ 162.550696][ T7229] warn_alloc+0x24d/0x270 [ 162.550727][ T7229] ? lockdep_hardirqs_on+0x7b/0x110 [ 162.550770][ T7229] ? __pfx_warn_alloc+0x10/0x10 [ 162.550807][ T7229] ? __kmalloc_node_noprof+0x4d2/0x720 [ 162.550840][ T7229] ? __get_vm_area_node+0x200/0x2f0 [ 162.550869][ T7229] ? __get_vm_area_node+0x283/0x2f0 [ 162.550897][ T7229] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 162.550940][ T7229] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 162.550978][ T7229] __vmalloc_node_range_noprof+0x9e7/0x1690 [ 162.551039][ T7229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.551086][ T7229] ? __kasan_kmalloc+0x93/0xb0 [ 162.551113][ T7229] ? __kmalloc_cache_noprof+0x31c/0x600 [ 162.551148][ T7229] ? vidtv_mux_init+0x204/0x1960 [ 162.551176][ T7229] vzalloc_noprof+0xb2/0xe0 [ 162.551206][ T7229] ? vidtv_mux_init+0x204/0x1960 [ 162.551232][ T7229] vidtv_mux_init+0x204/0x1960 [ 162.551259][ T7229] ? __mutex_lock+0x305/0x15a0 [ 162.551288][ T7229] vidtv_start_feed+0x36b/0x5a0 [ 162.551326][ T7229] ? __pfx_vidtv_start_feed+0x10/0x10 [ 162.551358][ T7229] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 162.551407][ T7229] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.551442][ T7229] dmx_section_feed_start_filtering+0x519/0x6b0 [ 162.551487][ T7229] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 162.551525][ T7229] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 162.551558][ T7229] dvb_demux_do_ioctl+0x470/0x540 [ 162.551592][ T7229] dvb_usercopy+0x199/0x2e0 [ 162.551618][ T7229] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 162.551647][ T7229] ? __pfx_dvb_usercopy+0x10/0x10 [ 162.551692][ T7229] ? __fget_files+0x3a2/0x420 [ 162.551721][ T7229] ? __fget_files+0x2a/0x420 [ 162.551753][ T7229] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 162.551780][ T7229] dvb_demux_ioctl+0x29/0x40 [ 162.551805][ T7229] __se_sys_ioctl+0xfc/0x170 [ 162.551838][ T7229] do_syscall_64+0x166/0x520 [ 162.551861][ T7229] ? trace_irq_disable+0x3b/0x140 [ 162.551897][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.551922][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 162.551950][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.551974][ T7229] RIP: 0033:0x7f27f799e159 [ 162.551995][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.552012][ T7229] RSP: 002b:00007f27f87b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.552035][ T7229] RAX: ffffffffffffffda RBX: 00007f27f7c25fa0 RCX: 00007f27f799e159 [ 162.552064][ T7229] RDX: 0000200000001e40 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 162.552079][ T7229] RBP: 00007f27f7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 162.552093][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.552106][ T7229] R13: 00007f27f7c26038 R14: 00007f27f7c25fa0 R15: 00007fff655cef68 [ 162.552141][ T7229] [ 162.607303][ T7229] Mem-Info: [ 162.607347][ T7229] active_anon:5993 inactive_anon:2 isolated_anon:0 [ 162.607347][ T7229] active_file:321 inactive_file:51669 isolated_file:0 [ 162.607347][ T7229] unevictable:768 dirty:56 writeback:0 [ 162.607347][ T7229] slab_reclaimable:10682 slab_unreclaimable:95061 [ 162.607347][ T7229] mapped:25005 shmem:1300 pagetables:1862 [ 162.607347][ T7229] sec_pagetables:0 bounce:0 [ 162.607347][ T7229] kernel_misc_reclaimable:0 [ 162.607347][ T7229] free:1098256 free_pcp:9204 free_cma:0 [ 162.607525][ T7229] Node 0 active_anon:23972kB inactive_anon:8kB active_file:1284kB inactive_file:206472kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:100020kB dirty:224kB writeback:0kB shmem:5200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12476kB pagetables:7340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.607702][ T7229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.608759][ T7229] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.608945][ T7229] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 162.713192][ T7229] Node 0 DMA32 free:428224kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23972kB inactive_anon:8kB active_file:1284kB inactive_file:206472kB unevictable:3072kB writepending:224kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:35932kB local_pcp:17364kB free_cma:0kB [ 162.713801][ T7229] lowmem_reserve[]: 0 0 1 1 1 [ 162.713928][ T7229] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 162.714098][ T7229] lowmem_reserve[]: 0 0 0 0 0 [ 162.715608][ T7229] Node 1 Normal free:3928960kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.715787][ T7229] lowmem_reserve[]: 0 0 0 0 0 [ 162.715902][ T7229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 162.716291][ T7229] Node 0 DMA32: 8*4kB (UME) 8*8kB (ME) 56*16kB (UM) 107*32kB (UME) 94*64kB (UM) 96*128kB (UME) 82*256kB (ME) 11*512kB (UME) 16*1024kB (UME) 7*2048kB (UME) 85*4096kB (UM) = 428224kB [ 162.720312][ T7229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.720650][ T7229] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (UM) 5*32kB (UM) 4*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (UM) = 3928960kB [ 162.731364][ T7229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.731417][ T7229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.731462][ T7229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.731514][ T7229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.731575][ T7229] 53286 total pagecache pages [ 162.731778][ T7229] 0 pages in swap cache [ 162.731808][ T7229] Free swap = 124996kB [ 162.731831][ T7229] Total swap = 124996kB [ 162.731853][ T7229] 2097051 pages RAM [ 162.731874][ T7229] 0 pages HighMem/MovableOnly [ 162.731902][ T7229] 429554 pages reserved [ 162.731924][ T7229] 0 pages cma reserved [ 163.306715][ T4932] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 163.306824][ T4932] Bluetooth: hci1: Injecting HCI hardware error event [ 163.340220][ T4932] Bluetooth: hci1: hardware error 0x00 [ 163.752339][ T7230] Bluetooth: hci4: command 0x1003 tx timeout [ 163.754377][ T5614] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.908293][ T7236] comedi comedi1: pcl711: I/O base address or length out of range [ 164.042158][ T5701] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 164.116099][ T7241] FAULT_INJECTION: forcing a failure. [ 164.116099][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 164.116134][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.5.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.116163][ T7241] Tainted: [L]=SOFTLOCKUP [ 164.116171][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.116185][ T7241] Call Trace: [ 164.116193][ T7241] [ 164.116202][ T7241] dump_stack_lvl+0xe8/0x150 [ 164.116236][ T7241] should_fail_ex+0x3eb/0x540 [ 164.116266][ T7241] should_failslab+0xa8/0x100 [ 164.116295][ T7241] __kmalloc_cache_noprof+0x9e/0x600 [ 164.116331][ T7241] ? nf_tables_commit+0x906/0xad60 [ 164.116354][ T7241] ? nf_tables_commit+0x906/0xad60 [ 164.116384][ T7241] nf_tables_commit+0x906/0xad60 [ 164.116416][ T7241] ? lock_acquire+0x115/0x350 [ 164.116451][ T7241] ? nft_pernet+0x23/0x240 [ 164.116485][ T7241] ? nft_pernet+0x23/0x240 [ 164.116508][ T7241] ? nft_pernet+0x23/0x240 [ 164.116538][ T7241] ? __pfx_nf_tables_commit+0x10/0x10 [ 164.116560][ T7241] ? rcu_is_watching+0x16/0xb0 [ 164.116584][ T7241] ? kfree+0x4d/0x650 [ 164.116612][ T7241] ? nft_trans_rule_add+0x315/0x440 [ 164.116672][ T7241] ? nf_tables_newrule+0x258d/0x28a0 [ 164.116717][ T7241] ? __pfx_nf_tables_newrule+0x10/0x10 [ 164.116741][ T7241] ? lock_acquire+0x115/0x350 [ 164.116798][ T7241] nfnetlink_rcv+0x1caf/0x28c0 [ 164.116877][ T7241] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.116922][ T7241] ? ref_tracker_free+0x689/0x830 [ 164.117036][ T7241] ? skb_clone+0x246/0x3a0 [ 164.117070][ T7241] ? __netlink_deliver_tap+0x811/0x860 [ 164.117109][ T7241] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.117139][ T7241] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.117174][ T7241] netlink_unicast+0x7bd/0x940 [ 164.117213][ T7241] netlink_sendmsg+0x7c3/0xae0 [ 164.117251][ T7241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.117291][ T7241] ? apparmor_socket_sendmsg+0x98/0x360 [ 164.117318][ T7241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.117347][ T7241] sock_sendmsg_nosec+0x13a/0x180 [ 164.117383][ T7241] ____sys_sendmsg+0x54e/0x850 [ 164.117416][ T7241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.117452][ T7241] ? import_iovec+0x73/0xa0 [ 164.117486][ T7241] ___sys_sendmsg+0x2a5/0x360 [ 164.117510][ T7241] ? __lock_acquire+0x747/0x2de0 [ 164.117549][ T7241] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.117580][ T7241] ? futex_wait+0x2a2/0x390 [ 164.117648][ T7241] ? __fget_files+0x2a/0x420 [ 164.117677][ T7241] ? __fget_files+0x3a2/0x420 [ 164.117717][ T7241] __x64_sys_sendmsg+0x1b1/0x290 [ 164.117747][ T7241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.117797][ T7241] do_syscall_64+0x166/0x520 [ 164.117819][ T7241] ? trace_irq_disable+0x3b/0x140 [ 164.117852][ T7241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.117876][ T7241] ? clear_bhb_loop+0x70/0xc0 [ 164.117904][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.117928][ T7241] RIP: 0033:0x7f27f799e159 [ 164.117948][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.117968][ T7241] RSP: 002b:00007f27f87b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.117998][ T7241] RAX: ffffffffffffffda RBX: 00007f27f7c25fa0 RCX: 00007f27f799e159 [ 164.118022][ T7241] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 164.118037][ T7241] RBP: 00007f27f7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 164.118051][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.118064][ T7241] R13: 00007f27f7c26038 R14: 00007f27f7c25fa0 R15: 00007fff655cef68 [ 164.118097][ T7241] [ 164.215504][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 164.226205][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.247578][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.247615][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.247655][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.498285][ T5701] usb 4-1: config 0 descriptor?? [ 164.545902][ T5701] hub 4-1:0.0: USB hub found [ 164.757258][ T5701] hub 4-1:0.0: 1 port detected [ 165.672465][ T4932] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 165.949853][ T5701] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 165.981669][ T5701] usbhid 4-1:0.0: can't add hid device: -71 [ 165.981777][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.031232][ T5701] usb 4-1: USB disconnect, device number 21 [ 166.831870][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 166.831899][ T7278] openvswitch: netlink: Message has 24 unknown bytes. [ 167.115663][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.418'. [ 168.218585][ T7293] sg_write: data in/out 469212/136 bytes for SCSI command 0x0-- guessing data in; [ 168.218585][ T7293] program syz.3.422 not setting count and/or reply_len properly [ 168.440518][ T7297] FAULT_INJECTION: forcing a failure. [ 168.440518][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 168.440568][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.5.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.440599][ T7297] Tainted: [L]=SOFTLOCKUP [ 168.440608][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.440622][ T7297] Call Trace: [ 168.440631][ T7297] [ 168.440641][ T7297] dump_stack_lvl+0xe8/0x150 [ 168.440677][ T7297] should_fail_ex+0x3eb/0x540 [ 168.440709][ T7297] should_failslab+0xa8/0x100 [ 168.440747][ T7297] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 168.440779][ T7297] kmem_cache_alloc_noprof+0x9c/0x600 [ 168.440812][ T7297] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 168.440842][ T7297] ? kmem_cache_alloc_noprof+0x151/0x600 [ 168.440873][ T7297] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 168.440918][ T7297] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 168.440963][ T7297] mmu_topup_memory_caches+0x21/0x170 [ 168.441000][ T7297] kvm_mmu_load+0x9d/0x21e0 [ 168.441036][ T7297] ? kvm_msr_allowed+0x9a/0x490 [ 168.441066][ T7297] ? kvm_msr_allowed+0x3f4/0x490 [ 168.441092][ T7297] ? kvm_msr_allowed+0x9a/0x490 [ 168.441119][ T7297] ? kvm_msr_allowed+0x9a/0x490 [ 168.441167][ T7297] ? kvm_apic_has_interrupt+0x740/0x770 [ 168.441207][ T7297] vcpu_run+0x4f68/0x79b0 [ 168.441275][ T7297] ? update_se+0x90/0x1020 [ 168.441342][ T7297] ? __pfx_vcpu_run+0x10/0x10 [ 168.441374][ T7297] ? lock_acquire+0x115/0x350 [ 168.441425][ T7297] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 168.441463][ T7297] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 168.441497][ T7297] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 168.441538][ T7297] kvm_vcpu_ioctl+0xa61/0xfd0 [ 168.441588][ T7297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.441620][ T7297] ? hook_file_ioctl+0x1f2/0x600 [ 168.441668][ T7297] ? __fget_files+0x2a/0x420 [ 168.441701][ T7297] ? __fget_files+0x2a/0x420 [ 168.441729][ T7297] ? __fget_files+0x3a2/0x420 [ 168.441757][ T7297] ? __fget_files+0x2a/0x420 [ 168.441821][ T7297] ? bpf_lsm_file_ioctl+0x9/0x20 [ 168.441850][ T7297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.441885][ T7297] __se_sys_ioctl+0xfc/0x170 [ 168.441932][ T7297] do_syscall_64+0x166/0x520 [ 168.441954][ T7297] ? trace_irq_disable+0x3b/0x140 [ 168.441986][ T7297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.442010][ T7297] ? clear_bhb_loop+0x70/0xc0 [ 168.442039][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.442061][ T7297] RIP: 0033:0x7f27f799e159 [ 168.442081][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.442100][ T7297] RSP: 002b:00007f27f8794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.442125][ T7297] RAX: ffffffffffffffda RBX: 00007f27f7c26090 RCX: 00007f27f799e159 [ 168.442143][ T7297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 168.442158][ T7297] RBP: 00007f27f8794090 R08: 0000000000000000 R09: 0000000000000000 [ 168.442173][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.442187][ T7297] R13: 00007f27f7c26128 R14: 00007f27f7c26090 R15: 00007fff655cef68 [ 168.442223][ T7297] [ 168.735041][ T5701] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 168.896599][ T7300] netlink: 5 bytes leftover after parsing attributes in process `syz.2.424'. [ 168.896875][ T7300] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 168.907374][ T5701] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.925499][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.925593][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.925657][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.925767][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.979118][ T5701] usb 4-1: config 0 descriptor?? [ 169.017963][ T7300] 0ªî{X¹¦: entered allmulticast mode [ 169.018455][ T7300] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 169.048329][ T5701] usbhid 4-1:0.0: can't add hid device: -22 [ 169.048447][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 169.191227][ T5701] usb 4-1: USB disconnect, device number 22 [ 169.311697][ T7302] netlink: 'syz.2.425': attribute type 29 has an invalid length. [ 169.580184][ T7306] netlink: Conntrack attr has 12 unknown bytes [ 169.580224][ T7306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.611406][ T7308] rust_binder: 7307:7308 got transaction to invalid handle 1 [ 169.611477][ T7308] rust_binder: 7307:7308 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 169.620665][ T7310] rust_binder: 7307:7310 got transaction to invalid handle 1 [ 169.620743][ T7310] rust_binder: 7307:7310 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 169.632546][ T25] rust_binder: 7307: undelivered TRANSACTION_ERROR: 29201 [ 169.632579][ T25] rust_binder: 7307: undelivered TRANSACTION_ERROR: 29201 [ 169.637874][ T7310] syz.2.428 (7310) used greatest stack depth: 17456 bytes left [ 169.920424][ T7316] loop0: detected capacity change from 0 to 32768 [ 169.939735][ T7316] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 170.000615][ T7320] netlink: Unknown conntrack attr (0) [ 170.000654][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.042690][ T7316] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8457988.0.0), cmd(9) [ 170.050511][ T7316] device-mapper: ioctl: The device has no table. [ 170.089729][ T7318] loop4: detected capacity change from 0 to 2640 [ 170.090583][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090633][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090667][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090699][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090730][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090815][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090861][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090904][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090932][ T7318] ldm_validate_partition_table(): Disk read failed. [ 170.090961][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.090992][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.091041][ T7318] Dev loop4: unable to read RDB block 0 [ 170.091231][ T7318] loop4: unable to read partition table [ 170.091440][ T7318] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 170.556474][ T7331] jffs2: notice: (7331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.903999][ T7339] ªªªªªª: renamed from vlan0 (while UP) [ 171.703030][ T5727] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 171.732253][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 171.852823][ T5727] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 171.853860][ T5727] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 171.853888][ T5727] usb 4-1: config 0 has no interface number 0 [ 171.853923][ T5727] usb 4-1: config 0 interface 255 has no altsetting 0 [ 171.857251][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.857278][ T5727] usb 4-1: Product: syz [ 171.857296][ T5727] usb 4-1: Manufacturer: syz [ 171.857312][ T5727] usb 4-1: SerialNumber: syz [ 171.904826][ T25] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 171.913222][ T25] usb 1-1: Dual-Role OTG device on HNP port [ 171.915290][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.953185][ T5727] usb 4-1: config 0 descriptor?? [ 171.969795][ T25] gspca_main: spca501-2.14.0 probing 0000:0000 [ 171.971997][ T25] gspca_spca501: reg write: error -32 [ 171.972013][ T25] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 171.972502][ T25] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 172.165983][ T5727] usb 4-1: USB disconnect, device number 23 [ 172.352549][ T5701] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 172.522173][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 172.522246][ T1562] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 172.523455][ T5701] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 172.525392][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.525445][ T5701] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.525493][ T5701] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 172.525532][ T5701] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 172.525601][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.525626][ T5701] usb 3-1: config 1 interface 1 has no altsetting 0 [ 172.528882][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.528909][ T5701] usb 3-1: Product: syz [ 172.528925][ T5701] usb 3-1: Manufacturer: syz [ 172.528970][ T5701] usb 3-1: SerialNumber: syz [ 172.676530][ T1562] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.677216][ T1562] usb 6-1: not running at top speed; connect to a high speed hub [ 172.677251][ T1562] usb 6-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 172.690053][ T1562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.690080][ T1562] usb 6-1: Product: syz [ 172.690095][ T1562] usb 6-1: Manufacturer: syz [ 172.690109][ T1562] usb 6-1: SerialNumber: syz [ 172.947310][ T1562] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.982430][ T7358] openvswitch: netlink: Actions may not be safe on all matching packets [ 173.025846][ T1562] usb 6-1: USB disconnect, device number 7 [ 173.099079][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 173.606238][ T7365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.444'. [ 173.606344][ T7365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.444'. [ 173.786804][ T7368] 0x000000000000-0x000000010000 : "" [ 173.839704][ T7368] ftl_cs: FTL header not found. [ 174.163976][ T7374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.184789][ T7374] netlink: 'syz.5.448': attribute type 10 has an invalid length. [ 174.219278][ T7374] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 174.579297][ T31] audit: type=1400 audit(1789509865.401:37): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7384 comm="syz.1.451" name="unknown" offset=16 [ 174.833681][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 174.995761][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 174.999021][ T25] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 174.999106][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.999153][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.999177][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.999242][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.045175][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.045239][ T25] usb 4-1: Product: syz [ 175.045254][ T25] usb 4-1: Manufacturer: syz [ 175.045267][ T25] usb 4-1: SerialNumber: syz [ 175.134210][ T25] usb_debug 4-1:1.0: debug converter detected [ 175.198467][ T25] usb 4-1: debug converter now attached to ttyUSB0 [ 175.224499][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.459'. [ 175.277707][ T5701] usb 3-1: selecting invalid altsetting 0 [ 175.280439][ T5701] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 175.289103][ T5701] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 175.390412][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.390460][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.390576][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.390609][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.390699][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.390728][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.390815][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.390842][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.390935][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.390964][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391049][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.391076][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391170][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.391197][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391284][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.391312][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391400][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.391428][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391516][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.391545][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.391636][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.558889][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559031][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559071][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559229][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559264][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559374][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559408][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559519][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559558][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559670][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559707][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559819][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.559857][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.559971][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.560010][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.560134][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.560183][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.560282][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.696431][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.697118][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.702855][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.706944][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.707153][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.707465][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.707625][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.730039][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.730092][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.730814][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.739001][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785267][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.785338][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785488][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.785515][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785593][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.785638][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785728][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.785774][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785859][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.785903][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.785979][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786003][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786098][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786123][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786223][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786248][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786344][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786369][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786464][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786489][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786565][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786610][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786693][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786737][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786815][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786838][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.786933][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.786958][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.787052][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.787077][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.787170][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.787195][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.814648][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.814705][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.814862][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.814926][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.815284][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.815442][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.815938][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.816030][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.840864][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.841009][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.841398][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.841494][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.841790][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.841883][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.844795][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.844922][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.845229][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.845342][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.845626][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.845721][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.845987][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.846091][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.846399][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.846489][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.846774][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.846866][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.847141][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.847229][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.847533][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.847644][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.847972][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.848067][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.848339][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.848413][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.848710][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.848806][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.849110][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.849196][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.849463][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.849585][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.849879][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.849966][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.850235][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.850328][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.850604][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.850700][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 175.851017][ T7411] rust_binder: 7400:7411 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.851113][ T7411] rust_binder: Write failure EINVAL in pid:324 [ 176.648900][ T5701] usb 3-1: USB disconnect, device number 23 [ 176.741305][ T5718] usb 4-1: USB disconnect, device number 24 [ 176.742322][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 176.796939][ T7427] rust_binder: 7426:7427 no such ref 3 [ 176.796971][ T7427] rust_binder: 7426:7427 no such ref 67108864 [ 176.873583][ T5718] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 176.887807][ T5718] usb_debug 4-1:1.0: device disconnected [ 177.006315][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.008370][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.572312][ T5727] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.715864][ T7461] FAULT_INJECTION: forcing a failure. [ 177.715864][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 177.715905][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.2.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.715936][ T7461] Tainted: [L]=SOFTLOCKUP [ 177.715944][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.715958][ T7461] Call Trace: [ 177.715966][ T7461] [ 177.715975][ T7461] dump_stack_lvl+0xe8/0x150 [ 177.716011][ T7461] should_fail_ex+0x3eb/0x540 [ 177.716042][ T7461] should_failslab+0xa8/0x100 [ 177.716068][ T7461] __kmalloc_noprof+0xf9/0x710 [ 177.716101][ T7461] ? tomoyo_encode+0x2ad/0x570 [ 177.716128][ T7461] ? tomoyo_encode+0x2ad/0x570 [ 177.716161][ T7461] tomoyo_encode+0x2ad/0x570 [ 177.716195][ T7461] tomoyo_realpath_from_path+0x5fa/0x640 [ 177.716235][ T7461] ? tomoyo_path_number_perm+0x219/0x5f0 [ 177.716259][ T7461] tomoyo_path_number_perm+0x246/0x5f0 [ 177.716286][ T7461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.716309][ T7461] ? __lock_acquire+0x747/0x2de0 [ 177.716359][ T7461] ? hook_file_ioctl+0x1f2/0x600 [ 177.716405][ T7461] ? __fget_files+0x2a/0x420 [ 177.716447][ T7461] ? __fget_files+0x2a/0x420 [ 177.716474][ T7461] ? __fget_files+0x3a2/0x420 [ 177.716499][ T7461] ? __fget_files+0x2a/0x420 [ 177.716532][ T7461] security_file_ioctl+0xc3/0x2a0 [ 177.716569][ T7461] __se_sys_ioctl+0x47/0x170 [ 177.716607][ T7461] do_syscall_64+0x166/0x520 [ 177.716628][ T7461] ? trace_irq_disable+0x3b/0x140 [ 177.716659][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.716683][ T7461] ? clear_bhb_loop+0x70/0xc0 [ 177.716712][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.716735][ T7461] RIP: 0033:0x7fe0b879e159 [ 177.716756][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.716775][ T7461] RSP: 002b:00007fe0b95b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.716801][ T7461] RAX: ffffffffffffffda RBX: 00007fe0b8a25fa0 RCX: 00007fe0b879e159 [ 177.716818][ T7461] RDX: 0000200000000580 RSI: 0000000040047454 RDI: 0000000000000004 [ 177.716834][ T7461] RBP: 00007fe0b95b2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.716848][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.716861][ T7461] R13: 00007fe0b8a26038 R14: 00007fe0b8a25fa0 R15: 00007ffc2f31edf8 [ 177.716895][ T7461] [ 177.766936][ T5727] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.780638][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.780672][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.780697][ T5727] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.780743][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.789543][ T7461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.022367][ T5727] usb 6-1: config 0 descriptor?? [ 178.219609][ T7466] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 178.300615][ T7469] FAULT_INJECTION: forcing a failure. [ 178.300615][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 178.300653][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.300683][ T7469] Tainted: [L]=SOFTLOCKUP [ 178.300692][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.300711][ T7469] Call Trace: [ 178.300720][ T7469] [ 178.300730][ T7469] dump_stack_lvl+0xe8/0x150 [ 178.300766][ T7469] should_fail_ex+0x3eb/0x540 [ 178.300817][ T7469] should_failslab+0xa8/0x100 [ 178.300845][ T7469] __kmalloc_node_noprof+0xfb/0x720 [ 178.300879][ T7469] ? __get_vm_area_node+0x200/0x2f0 [ 178.300917][ T7469] ? __get_vm_area_node+0x283/0x2f0 [ 178.300945][ T7469] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 178.300976][ T7469] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 178.301016][ T7469] __vmalloc_node_range_noprof+0x5a0/0x1690 [ 178.301101][ T7469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.301135][ T7469] ? dup_task_struct+0x52/0xa00 [ 178.301162][ T7469] ? trace_kmem_cache_alloc+0x29/0xe0 [ 178.301195][ T7469] ? memcpy_and_pad+0x48/0x80 [ 178.301236][ T7469] __vmalloc_node_noprof+0xc2/0x100 [ 178.301269][ T7469] ? copy_process+0x81b/0x43e0 [ 178.301293][ T7469] ? copy_process+0x81b/0x43e0 [ 178.301322][ T7469] dup_task_struct+0x2c6/0xa00 [ 178.301356][ T7469] copy_process+0x81b/0x43e0 [ 178.301392][ T7469] ? preempt_schedule_thunk+0x16/0x40 [ 178.301432][ T7469] ? preempt_schedule_common+0x7f/0xd0 [ 178.301477][ T7469] ? try_to_wake_up+0x901/0x14d0 [ 178.301504][ T7469] ? __pfx_copy_process+0x10/0x10 [ 178.301534][ T7469] ? futex_private_hash_put+0x132/0x160 [ 178.301580][ T7469] kernel_clone+0x2d7/0x940 [ 178.301609][ T7469] ? __pfx_futex_wake+0x10/0x10 [ 178.301643][ T7469] ? __pfx_kernel_clone+0x10/0x10 [ 178.301684][ T7469] ? do_futex+0x458/0x4e0 [ 178.301716][ T7469] __x64_sys_clone+0x1b6/0x230 [ 178.301750][ T7469] ? __pfx___x64_sys_clone+0x10/0x10 [ 178.301796][ T7469] ? rcu_is_watching+0x16/0xb0 [ 178.301834][ T7469] do_syscall_64+0x166/0x520 [ 178.301855][ T7469] ? trace_irq_disable+0x3b/0x140 [ 178.301897][ T7469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.301923][ T7469] ? clear_bhb_loop+0x70/0xc0 [ 178.301953][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.301978][ T7469] RIP: 0033:0x7f0d52b9e159 [ 178.301999][ T7469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.302020][ T7469] RSP: 002b:00007f0d539bdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 178.302045][ T7469] RAX: ffffffffffffffda RBX: 00007f0d52e26090 RCX: 00007f0d52b9e159 [ 178.302061][ T7469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 178.302075][ T7469] RBP: 00007f0d52c3503b R08: 0000000000000000 R09: 0000000000000000 [ 178.302090][ T7469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.302104][ T7469] R13: 00007f0d52e26128 R14: 00007f0d52e26090 R15: 00007ffdb3fce0b8 [ 178.302140][ T7469] [ 178.309855][ T7469] syz.1.476: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.310222][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.310307][ T7469] Tainted: [L]=SOFTLOCKUP [ 178.310338][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.310379][ T7469] Call Trace: [ 178.310396][ T7469] [ 178.310419][ T7469] dump_stack_lvl+0xe8/0x150 [ 178.310511][ T7469] warn_alloc+0x24d/0x270 [ 178.310624][ T7469] ? __pfx_warn_alloc+0x10/0x10 [ 178.310722][ T7469] ? __kmalloc_node_noprof+0x4d2/0x720 [ 178.310807][ T7469] ? __get_vm_area_node+0x200/0x2f0 [ 178.310881][ T7469] ? __get_vm_area_node+0x283/0x2f0 [ 178.310970][ T7469] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 178.311046][ T7469] ? __vmalloc_node_range_noprof+0x5a0/0x1690 [ 178.311149][ T7469] __vmalloc_node_range_noprof+0x9e7/0x1690 [ 178.311317][ T7469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.311395][ T7469] ? dup_task_struct+0x52/0xa00 [ 178.311460][ T7469] ? trace_kmem_cache_alloc+0x29/0xe0 [ 178.311544][ T7469] ? memcpy_and_pad+0x48/0x80 [ 178.311648][ T7469] __vmalloc_node_noprof+0xc2/0x100 [ 178.311724][ T7469] ? copy_process+0x81b/0x43e0 [ 178.311788][ T7469] ? copy_process+0x81b/0x43e0 [ 178.311862][ T7469] dup_task_struct+0x2c6/0xa00 [ 178.311950][ T7469] copy_process+0x81b/0x43e0 [ 178.312043][ T7469] ? preempt_schedule_thunk+0x16/0x40 [ 178.312140][ T7469] ? preempt_schedule_common+0x7f/0xd0 [ 178.312254][ T7469] ? try_to_wake_up+0x901/0x14d0 [ 178.312333][ T7469] ? __pfx_copy_process+0x10/0x10 [ 178.312427][ T7469] ? futex_private_hash_put+0x132/0x160 [ 178.312544][ T7469] kernel_clone+0x2d7/0x940 [ 178.312616][ T7469] ? __pfx_futex_wake+0x10/0x10 [ 178.312699][ T7469] ? __pfx_kernel_clone+0x10/0x10 [ 178.312803][ T7469] ? do_futex+0x458/0x4e0 [ 178.312879][ T7469] __x64_sys_clone+0x1b6/0x230 [ 178.312973][ T7469] ? __pfx___x64_sys_clone+0x10/0x10 [ 178.313090][ T7469] ? rcu_is_watching+0x16/0xb0 [ 178.313183][ T7469] do_syscall_64+0x166/0x520 [ 178.313238][ T7469] ? trace_irq_disable+0x3b/0x140 [ 178.313331][ T7469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.313397][ T7469] ? clear_bhb_loop+0x70/0xc0 [ 178.313465][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.313528][ T7469] RIP: 0033:0x7f0d52b9e159 [ 178.313588][ T7469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.313633][ T7469] RSP: 002b:00007f0d539bdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 178.313707][ T7469] RAX: ffffffffffffffda RBX: 00007f0d52e26090 RCX: 00007f0d52b9e159 [ 178.313761][ T7469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 178.313810][ T7469] RBP: 00007f0d52c3503b R08: 0000000000000000 R09: 0000000000000000 [ 178.313852][ T7469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.313902][ T7469] R13: 00007f0d52e26128 R14: 00007f0d52e26090 R15: 00007ffdb3fce0b8 [ 178.313996][ T7469] [ 178.336808][ T7469] Mem-Info: [ 178.336933][ T7469] active_anon:6176 inactive_anon:2 isolated_anon:0 [ 178.336933][ T7469] active_file:321 inactive_file:51653 isolated_file:0 [ 178.336933][ T7469] unevictable:768 dirty:48 writeback:3 [ 178.336933][ T7469] slab_reclaimable:10668 slab_unreclaimable:95142 [ 178.336933][ T7469] mapped:25141 shmem:1308 pagetables:1904 [ 178.336933][ T7469] sec_pagetables:0 bounce:0 [ 178.336933][ T7469] kernel_misc_reclaimable:0 [ 178.336933][ T7469] free:1323472 free_pcp:9106 free_cma:0 [ 178.337152][ T7469] Node 0 active_anon:24704kB inactive_anon:8kB active_file:1284kB inactive_file:206408kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:100564kB dirty:192kB writeback:12kB shmem:5232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12652kB pagetables:7508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.337370][ T7469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.337566][ T7469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.340556][ T7469] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 178.340860][ T7469] Node 0 DMA32 free:1349568kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24704kB inactive_anon:8kB active_file:1284kB inactive_file:206408kB unevictable:3072kB writepending:300kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:36416kB local_pcp:19876kB free_cma:0kB [ 178.341924][ T7469] lowmem_reserve[]: 0 0 1 1 1 [ 178.346823][ T7469] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 178.347084][ T7469] lowmem_reserve[]: 0 0 0 0 0 [ 178.347253][ T7469] Node 1 Normal free:3928960kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.347471][ T7469] lowmem_reserve[]: 0 0 0 0 0 [ 178.347635][ T7469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 178.356118][ T7469] Node 0 DMA32: 642*4kB (UME) 371*8kB (UME) 570*16kB (UM) 182*32kB (UME) 361*64kB (UM) 335*128kB (UME) 228*256kB (UME) 73*512kB (UME) 34*1024kB (UME) 11*2048kB (UME) 271*4096kB (U) = 1349568kB [ 178.357490][ T7469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.363168][ T7469] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (UM) 5*32kB (UM) 4*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (UM) = 3928960kB [ 178.365829][ T7469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.365883][ T7469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.365913][ T7469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.365932][ T7469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.365950][ T7469] 53285 total pagecache pages [ 178.365960][ T7469] 0 pages in swap cache [ 178.365968][ T7469] Free swap = 124996kB [ 178.365977][ T7469] Total swap = 124996kB [ 178.365987][ T7469] 2097051 pages RAM [ 178.365995][ T7469] 0 pages HighMem/MovableOnly [ 178.366030][ T7469] 429554 pages reserved [ 178.366040][ T7469] 0 pages cma reserved [ 179.347785][ T5727] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 179.576939][ T7478] FAULT_INJECTION: forcing a failure. [ 179.576939][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 179.576982][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz.1.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.577013][ T7478] Tainted: [L]=SOFTLOCKUP [ 179.577022][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.577036][ T7478] Call Trace: [ 179.577046][ T7478] [ 179.577056][ T7478] dump_stack_lvl+0xe8/0x150 [ 179.577091][ T7478] should_fail_ex+0x3eb/0x540 [ 179.577122][ T7478] should_failslab+0xa8/0x100 [ 179.577149][ T7478] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 179.577184][ T7478] ? __kasan_kmalloc+0x93/0xb0 [ 179.577207][ T7478] ? __request_module+0x2ec/0x630 [ 179.577230][ T7478] ? __request_module+0x2ec/0x630 [ 179.577255][ T7478] ? __kmalloc_cache_noprof+0x148/0x600 [ 179.577292][ T7478] kstrdup+0x42/0x100 [ 179.577424][ T7478] __request_module+0x2ec/0x630 [ 179.577470][ T7478] ? __pfx___request_module+0x10/0x10 [ 179.577502][ T7478] ? kasan_quarantine_put+0xbb/0x1f0 [ 179.577544][ T7478] ? kfree+0x1c5/0x650 [ 179.577572][ T7478] ? nvmf_dev_write+0x1cc6/0x2d90 [ 179.577608][ T7478] nvmf_dev_write+0x1ecd/0x2d90 [ 179.577675][ T7478] ? __pfx_nvmf_dev_write+0x10/0x10 [ 179.577722][ T7478] ? lock_acquire+0x115/0x350 [ 179.577782][ T7478] ? bpf_lsm_file_permission+0x9/0x20 [ 179.577810][ T7478] ? security_file_permission+0x75/0x260 [ 179.577863][ T7478] ? rw_verify_area+0x203/0x4c0 [ 179.577898][ T7478] ? __pfx_nvmf_dev_write+0x10/0x10 [ 179.577929][ T7478] vfs_write+0x296/0xba0 [ 179.577970][ T7478] ? __pfx_vfs_write+0x10/0x10 [ 179.578003][ T7478] ? __fget_files+0x2a/0x420 [ 179.578035][ T7478] ? __fget_files+0x2a/0x420 [ 179.578062][ T7478] ? __fget_files+0x3a2/0x420 [ 179.578090][ T7478] ? __fget_files+0x2a/0x420 [ 179.578128][ T7478] ksys_write+0x150/0x270 [ 179.578163][ T7478] ? __pfx_ksys_write+0x10/0x10 [ 179.578209][ T7478] do_syscall_64+0x166/0x520 [ 179.578231][ T7478] ? trace_irq_disable+0x3b/0x140 [ 179.578266][ T7478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.578292][ T7478] ? clear_bhb_loop+0x70/0xc0 [ 179.578321][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.578348][ T7478] RIP: 0033:0x7f0d52b9e159 [ 179.578370][ T7478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.578391][ T7478] RSP: 002b:00007f0d539df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.578417][ T7478] RAX: ffffffffffffffda RBX: 00007f0d52e25fa0 RCX: 00007f0d52b9e159 [ 179.578435][ T7478] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000003 [ 179.578450][ T7478] RBP: 00007f0d539df090 R08: 0000000000000000 R09: 0000000000000000 [ 179.578465][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.578480][ T7478] R13: 00007f0d52e26038 R14: 00007f0d52e25fa0 R15: 00007ffdb3fce0b8 [ 179.578516][ T7478] [ 179.898352][ T3004] nvmet: connect request for invalid subsystem testsubsys! [ 179.921231][ T7478] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 180.131118][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.481'. [ 180.402997][ T5718] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 180.423543][ T7496] overlayfs: upper fs does not support file handles, falling back to index=off. [ 180.562219][ T5718] usb 4-1: Using ep0 maxpacket: 16 [ 180.563041][ T5718] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 180.567199][ T5718] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 180.567237][ T5718] usb 4-1: config 0 has no interface number 0 [ 180.567310][ T5718] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 180.567339][ T5718] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 180.610872][ T5700] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 180.634022][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.634052][ T5718] usb 4-1: Product: syz [ 180.634099][ T5718] usb 4-1: Manufacturer: syz [ 180.634117][ T5718] usb 4-1: SerialNumber: syz [ 180.637552][ T5718] usb 4-1: config 0 descriptor?? [ 180.639792][ T7488] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 180.639912][ T7488] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 180.845303][ T7488] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 180.845428][ T7488] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 180.920961][ T7507] netlink: 'syz.1.489': attribute type 11 has an invalid length. [ 180.935889][ T7507] capability: warning: `syz.1.489' uses 32-bit capabilities (legacy support in use) [ 180.936200][ T7507] program syz.1.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.062249][ T5718] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 181.267702][ T5718] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 181.267739][ T5718] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 181.268026][ T5718] asix 4-1:0.34: probe with driver asix failed with error -61 [ 181.395608][ T7517] FAULT_INJECTION: forcing a failure. [ 181.395608][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 181.395647][ T7517] CPU: 0 UID: 0 PID: 7517 Comm: syz.1.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.395678][ T7517] Tainted: [L]=SOFTLOCKUP [ 181.395688][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.395705][ T7517] Call Trace: [ 181.395714][ T7517] [ 181.395724][ T7517] dump_stack_lvl+0xe8/0x150 [ 181.395760][ T7517] should_fail_ex+0x3eb/0x540 [ 181.395791][ T7517] should_failslab+0xa8/0x100 [ 181.395819][ T7517] __kmalloc_noprof+0xf9/0x710 [ 181.395853][ T7517] ? tomoyo_encode+0x2ad/0x570 [ 181.395880][ T7517] ? tomoyo_encode+0x2ad/0x570 [ 181.395909][ T7517] ? __get_fs_type+0x21/0x280 [ 181.395946][ T7517] tomoyo_encode+0x2ad/0x570 [ 181.395981][ T7517] tomoyo_mount_permission+0x50d/0x9e0 [ 181.396010][ T7517] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 181.396043][ T7517] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 181.396070][ T7517] ? kasan_save_track+0x4f/0x80 [ 181.396158][ T7517] ? kasan_quarantine_put+0xbb/0x1f0 [ 181.396197][ T7517] security_sb_mount+0xe4/0x320 [ 181.396230][ T7517] path_mount+0xbc/0x1050 [ 181.396262][ T7517] ? user_path_at+0xd4/0x160 [ 181.396297][ T7517] __se_sys_mount+0x31d/0x420 [ 181.396332][ T7517] ? __pfx___se_sys_mount+0x10/0x10 [ 181.396379][ T7517] ? __x64_sys_mount+0x20/0xc0 [ 181.396410][ T7517] do_syscall_64+0x166/0x520 [ 181.396432][ T7517] ? trace_irq_disable+0x3b/0x140 [ 181.396466][ T7517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.396490][ T7517] ? clear_bhb_loop+0x70/0xc0 [ 181.396519][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.396543][ T7517] RIP: 0033:0x7f0d52b9e159 [ 181.396566][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.396585][ T7517] RSP: 002b:00007f0d539df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.396611][ T7517] RAX: ffffffffffffffda RBX: 00007f0d52e25fa0 RCX: 00007f0d52b9e159 [ 181.396628][ T7517] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 181.396644][ T7517] RBP: 00007f0d539df090 R08: 00002000000000c0 R09: 0000000000000000 [ 181.396660][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.396674][ T7517] R13: 00007f0d52e26038 R14: 00007f0d52e25fa0 R15: 00007ffdb3fce0b8 [ 181.396711][ T7517] [ 181.689887][ T5348] usb 6-1: USB disconnect, device number 8 [ 181.884492][ T7525] fuse: Bad value for 'user_id' [ 181.884545][ T7525] fuse: Bad value for 'user_id' [ 182.544931][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.545443][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.580271][ T7547] Bluetooth: MGMT ver 1.23 [ 182.698633][ T79] nvmet: connect request for invalid subsystem testsubsys! [ 182.698809][ T7551] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 182.719589][ T5701] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 182.872661][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 182.879962][ T5701] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 182.888405][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.888546][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.889112][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.889328][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.918301][ T5701] usb 3-1: config 0 descriptor?? [ 183.561824][ T5701] usbhid 3-1:0.0: can't add hid device: -71 [ 183.561967][ T5701] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 183.584944][ T5701] usb 3-1: USB disconnect, device number 24 [ 183.678728][ T3004] nvmet: connect request for invalid subsystem testsubsy%! [ 183.678948][ T7568] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsy%" [ 183.750165][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.761672][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.778168][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.778636][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.010579][ T5700] usb 4-1: USB disconnect, device number 25 [ 184.472417][ T5700] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 184.580239][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.517'. [ 184.580281][ T7605] netlink: 128 bytes leftover after parsing attributes in process `syz.5.517'. [ 184.605016][ T7605] fuse: Bad value for 'group_id' [ 184.605039][ T7605] fuse: Bad value for 'group_id' [ 184.624884][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 184.637794][ T5700] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=2b.be [ 184.639315][ T5700] usb 4-1: config 4 has an invalid interface number: 139 but max is 0 [ 184.639344][ T5700] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 184.639367][ T5700] usb 4-1: config 4 has no interface number 0 [ 184.639415][ T5700] usb 4-1: config 4 interface 139 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 184.639452][ T5700] usb 4-1: config 4 interface 139 altsetting 128 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 184.639481][ T5700] usb 4-1: config 4 interface 139 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 184.639507][ T5700] usb 4-1: config 4 interface 139 altsetting 128 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 184.639538][ T5700] usb 4-1: config 4 interface 139 altsetting 128 bulk endpoint 0x9 has invalid maxpacket 1023 [ 184.639566][ T5700] usb 4-1: config 4 interface 139 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 184.639592][ T5700] usb 4-1: config 4 interface 139 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 184.639621][ T5700] usb 4-1: config 4 interface 139 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 184.639646][ T5700] usb 4-1: config 4 interface 139 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 184.639672][ T5700] usb 4-1: config 4 interface 139 has no altsetting 0 [ 184.653606][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.653635][ T5700] usb 4-1: Product: 籯᱓㬯耲䚺 [ 184.653652][ T5700] usb 4-1: Manufacturer: ã�‰ [ 184.653668][ T5700] usb 4-1: SerialNumber: á�œ [ 184.814777][ T7583] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 184.934649][ T7610] ublk_ctrl_add_dev: dev id not match 4294967295 14 [ 185.039917][ T7611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.040090][ T7611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.077925][ T5700] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.111030][ T7614] overlayfs: upper fs does not support file handles, falling back to index=off. [ 185.199742][ T7611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.211756][ T5700] snd-usb-audio 4-1:4.139: probe with driver snd-usb-audio failed with error -2 [ 185.238487][ T5700] usb 4-1: USB disconnect, device number 26 [ 185.286305][ T6889] udevd[6889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.139/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 185.311903][ T7611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.312005][ T7611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.346232][ T7611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.365306][ T7611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.365387][ T7611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.386163][ T7611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.034233][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.527'. [ 186.037224][ T7638] FAULT_INJECTION: forcing a failure. [ 186.037224][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 186.037262][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.2.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.037293][ T7638] Tainted: [L]=SOFTLOCKUP [ 186.037302][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.037316][ T7638] Call Trace: [ 186.037325][ T7638] [ 186.037335][ T7638] dump_stack_lvl+0xe8/0x150 [ 186.037372][ T7638] should_fail_ex+0x3eb/0x540 [ 186.037403][ T7638] should_failslab+0xa8/0x100 [ 186.037432][ T7638] __kmalloc_cache_noprof+0x9e/0x600 [ 186.037472][ T7638] ? nft_trans_table_add+0x56/0x430 [ 186.037497][ T7638] ? nft_trans_table_add+0x56/0x430 [ 186.037529][ T7638] nft_trans_table_add+0x56/0x430 [ 186.037562][ T7638] nf_tables_newtable+0xd26/0x1990 [ 186.037607][ T7638] nfnetlink_rcv+0x1288/0x28c0 [ 186.037669][ T7638] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 186.037744][ T7638] ? lock_acquire+0x115/0x350 [ 186.037789][ T7638] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.037818][ T7638] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.037864][ T7638] netlink_unicast+0x7bd/0x940 [ 186.037903][ T7638] netlink_sendmsg+0x7c3/0xae0 [ 186.037939][ T7638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.037979][ T7638] ? apparmor_socket_sendmsg+0x98/0x360 [ 186.038007][ T7638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.038037][ T7638] sock_sendmsg_nosec+0x13a/0x180 [ 186.038072][ T7638] ____sys_sendmsg+0x54e/0x850 [ 186.038104][ T7638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.038141][ T7638] ? import_iovec+0x73/0xa0 [ 186.038174][ T7638] ___sys_sendmsg+0x2a5/0x360 [ 186.038199][ T7638] ? __lock_acquire+0x747/0x2de0 [ 186.038236][ T7638] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.038302][ T7638] ? __fget_files+0x2a/0x420 [ 186.038330][ T7638] ? __fget_files+0x3a2/0x420 [ 186.038371][ T7638] __x64_sys_sendmsg+0x1b1/0x290 [ 186.038401][ T7638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.038451][ T7638] do_syscall_64+0x166/0x520 [ 186.038473][ T7638] ? trace_irq_disable+0x3b/0x140 [ 186.038505][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.038530][ T7638] ? clear_bhb_loop+0x70/0xc0 [ 186.038559][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.038583][ T7638] RIP: 0033:0x7fe0b879e159 [ 186.038604][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.038624][ T7638] RSP: 002b:00007fe0b95b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.038649][ T7638] RAX: ffffffffffffffda RBX: 00007fe0b8a25fa0 RCX: 00007fe0b879e159 [ 186.038666][ T7638] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 186.038681][ T7638] RBP: 00007fe0b95b2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.038696][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.038710][ T7638] R13: 00007fe0b8a26038 R14: 00007fe0b8a25fa0 R15: 00007ffc2f31edf8 [ 186.038746][ T7638] [ 186.909897][ T7661] Bluetooth: hci0: unsupported parameter 5134 [ 186.909918][ T7661] Bluetooth: hci0: unsupported parameter 8192 [ 186.909931][ T7661] Bluetooth: hci0: unsupported parameter 5134 [ 186.909941][ T7661] Bluetooth: hci0: unsupported parameter 8192 [ 186.924711][ T5348] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.032876][ T4932] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.057050][ T7663] overlayfs: upper fs does not support file handles, falling back to index=off. [ 187.057077][ T7663] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 187.112524][ T5348] usb 4-1: Using ep0 maxpacket: 16 [ 187.122117][ T5348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.122174][ T5348] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 187.123598][ T5348] usb 4-1: config 1 has an invalid interface number: 237 but max is 0 [ 187.123623][ T5348] usb 4-1: config 1 has no interface number 0 [ 187.123661][ T5348] usb 4-1: config 1 interface 237 has no altsetting 0 [ 187.130535][ T5348] usb 4-1: string descriptor 0 read error: -22 [ 187.130680][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.188941][ T5348] ipaq 4-1:1.237: PocketPC PDA converter detected [ 187.352259][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.412764][ T7649] [ 187.415193][ T7649] ====================================================== [ 187.422360][ T7649] WARNING: possible circular locking dependency detected [ 187.429443][ T7649] syzkaller #0 Tainted: G L [ 187.432722][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.441463][ T7649] ------------------------------------------------------ [ 187.448521][ T7649] syz.3.531/7649 is trying to acquire lock: [ 187.454450][ T7649] ffffffff8f7543a0 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 187.463995][ T7649] [ 187.463995][ T7649] but task is already holding lock: [ 187.471383][ T7649] ffff88806643c358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 187.481701][ T7649] [ 187.481701][ T7649] which lock already depends on the new lock. [ 187.481701][ T7649] [ 187.492148][ T7649] [ 187.492148][ T7649] the existing dependency chain (in reverse order) is: [ 187.501195][ T7649] [ 187.501195][ T7649] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 187.509587][ T7649] __mutex_lock+0x197/0x15a0 [ 187.514745][ T7649] md_start_sync+0x179/0x1010 [ 187.519984][ T7649] process_scheduled_works+0xc3d/0x1630 [ 187.526100][ T7649] worker_thread+0xa47/0xfb0 [ 187.531243][ T7649] kthread+0x38b/0x480 [ 187.535860][ T7649] ret_from_fork+0x514/0xb70 [ 187.541038][ T7649] ret_from_fork_asm+0x1a/0x30 [ 187.546358][ T7649] [ 187.546358][ T7649] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 187.555905][ T7649] process_scheduled_works+0xc03/0x1630 [ 187.562013][ T7649] worker_thread+0xa47/0xfb0 [ 187.567151][ T7649] kthread+0x38b/0x480 [ 187.571774][ T7649] ret_from_fork+0x514/0xb70 [ 187.576910][ T7649] ret_from_fork_asm+0x1a/0x30 [ 187.582227][ T7649] [ 187.582227][ T7649] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 187.590506][ T7649] touch_wq_lockdep_map+0xcb/0x180 [ 187.596182][ T7649] __flush_workqueue+0x148/0x1470 [ 187.601769][ T7649] md_alloc+0x32/0xf20 [ 187.606396][ T7649] md_alloc_and_put+0x1a/0x1f0 [ 187.611706][ T7649] blk_request_module+0x27d/0x2a0 [ 187.617284][ T7649] blkdev_get_no_open+0x3f/0xe0 [ 187.622675][ T7649] blkdev_open+0x1d7/0x600 [ 187.627633][ T7649] do_dentry_open+0x80e/0x1360 [ 187.632946][ T7649] vfs_open_consume+0x4a/0x350 [ 187.638256][ T7649] path_openat+0x14d7/0x1e40 [ 187.643401][ T7649] do_file_open+0x23e/0x4a0 [ 187.648719][ T7649] do_sys_openat2+0x115/0x200 [ 187.653940][ T7649] __x64_sys_openat+0x138/0x170 [ 187.659342][ T7649] do_syscall_64+0x166/0x520 [ 187.664485][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.670948][ T7649] [ 187.670948][ T7649] -> #0 (major_names_lock){+.+.}-{4:4}: [ 187.678724][ T7649] __lock_acquire+0x164c/0x2de0 [ 187.684152][ T7649] lock_acquire+0x115/0x350 [ 187.689230][ T7649] __mutex_lock+0x197/0x15a0 [ 187.694379][ T7649] blk_request_module+0x35/0x2a0 [ 187.699879][ T7649] blkdev_get_no_open+0x3f/0xe0 [ 187.705283][ T7649] bdev_file_open_by_dev+0xa0/0x240 [ 187.711028][ T7649] md_import_device+0x2e9/0x650 [ 187.716429][ T7649] hot_add_disk+0xa7/0x4b0 [ 187.721402][ T7649] md_ioctl+0x1e5e/0x2610 [ 187.726280][ T7649] blkdev_ioctl+0x5e3/0x740 [ 187.731333][ T7649] __se_sys_ioctl+0xfc/0x170 [ 187.736491][ T7649] do_syscall_64+0x166/0x520 [ 187.741625][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.748178][ T7649] [ 187.748178][ T7649] other info that might help us debug this: [ 187.748178][ T7649] [ 187.758445][ T7649] Chain exists of: [ 187.758445][ T7649] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 187.758445][ T7649] [ 187.774071][ T7649] Possible unsafe locking scenario: [ 187.774071][ T7649] [ 187.781568][ T7649] CPU0 CPU1 [ 187.786954][ T7649] ---- ---- [ 187.792336][ T7649] lock(&mddev->reconfig_mutex); [ 187.797420][ T7649] lock((work_completion)(&mddev->sync_work)); [ 187.806724][ T7649] lock(&mddev->reconfig_mutex); [ 187.814302][ T7649] lock(major_names_lock); [ 187.818830][ T7649] [ 187.818830][ T7649] *** DEADLOCK *** [ 187.818830][ T7649] [ 187.826989][ T7649] locks held by syz.3.531/7649: 1, last CPU#0: [ 187.833164][ T7649] #0: ffff88806643c358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 187.843915][ T7649] [ 187.843915][ T7649] stack backtrace: [ 187.849829][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.3.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.860638][ T7649] Tainted: [L]=SOFTLOCKUP [ 187.865024][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.875145][ T7649] Call Trace: [ 187.878454][ T7649] [ 187.881408][ T7649] dump_stack_lvl+0xe8/0x150 [ 187.886032][ T7649] print_circular_bug+0x2e2/0x300 [ 187.891088][ T7649] check_noncircular+0x12f/0x150 [ 187.896059][ T7649] __lock_acquire+0x164c/0x2de0 [ 187.900946][ T7649] ? __page_table_check_zero+0x6c/0x430 [ 187.906547][ T7649] ? post_alloc_hook+0x208/0x250 [ 187.911522][ T7649] ? get_page_from_freelist+0x2209/0x2280 [ 187.917288][ T7649] lock_acquire+0x115/0x350 [ 187.921850][ T7649] ? blk_request_module+0x35/0x2a0 [ 187.926997][ T7649] __mutex_lock+0x197/0x15a0 [ 187.931621][ T7649] ? blk_request_module+0x35/0x2a0 [ 187.936800][ T7649] ? lock_acquire+0x115/0x350 [ 187.941512][ T7649] ? blk_request_module+0x35/0x2a0 [ 187.946661][ T7649] ? __pfx___mutex_lock+0x10/0x10 [ 187.951732][ T7649] ? find_inode_fast+0xd2/0x740 [ 187.956619][ T7649] ? find_inode_fast+0x5dc/0x740 [ 187.961582][ T7649] ? find_inode_fast+0xd2/0x740 [ 187.966472][ T7649] blk_request_module+0x35/0x2a0 [ 187.971453][ T7649] blkdev_get_no_open+0x3f/0xe0 [ 187.976331][ T7649] bdev_file_open_by_dev+0xa0/0x240 [ 187.981575][ T7649] md_import_device+0x2e9/0x650 [ 187.986468][ T7649] hot_add_disk+0xa7/0x4b0 [ 187.990925][ T7649] md_ioctl+0x1e5e/0x2610 [ 187.995399][ T7649] ? tomoyo_path_number_perm+0x219/0x5f0 [ 188.001063][ T7649] ? __pfx_md_ioctl+0x10/0x10 [ 188.005773][ T7649] ? do_vfs_ioctl+0x116f/0x1530 [ 188.010649][ T7649] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.015707][ T7649] ? hook_file_ioctl+0x1f2/0x600 [ 188.020685][ T7649] ? __pfx_md_ioctl+0x10/0x10 [ 188.025386][ T7649] blkdev_ioctl+0x5e3/0x740 [ 188.029928][ T7649] ? __pfx_blkdev_ioctl+0x10/0x10 [ 188.034976][ T7649] ? __fget_files+0x2a/0x420 [ 188.039599][ T7649] ? bpf_lsm_file_ioctl+0x9/0x20 [ 188.044570][ T7649] ? __pfx_blkdev_ioctl+0x10/0x10 [ 188.049627][ T7649] __se_sys_ioctl+0xfc/0x170 [ 188.054262][ T7649] do_syscall_64+0x166/0x520 [ 188.058884][ T7649] ? trace_irq_disable+0x3b/0x140 [ 188.063967][ T7649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.070068][ T7649] ? clear_bhb_loop+0x70/0xc0 [ 188.074776][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.080731][ T7649] RIP: 0033:0x7f979759e159 [ 188.085175][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.104819][ T7649] RSP: 002b:00007f97984fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.113273][ T7649] RAX: ffffffffffffffda RBX: 00007f9797825fa0 RCX: 00007f979759e159 [ 188.121307][ T7649] RDX: 0000000000000000 RSI: 0000000000000928 RDI: 0000000000000007 [ 188.129312][ T7649] RBP: 00007f979763503b R08: 0000000000000000 R09: 0000000000000000 [ 188.137320][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.145402][ T7649] R13: 00007f9797826038 R14: 00007f9797825fa0 R15: 00007fffc89c0c28 [ 188.153417][ T7649] [ 188.172567][ T5727] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 188.310683][ T7649] md: could not open device unknown-block(0,0). [ 188.310737][ T7649] md: error, md_import_device() returned -6 [ 188.327332][ T5727] usb 6-1: device descriptor read/64, error -71 [ 188.351749][ T5348] ipaq 4-1:1.237: probe with driver ipaq failed with error -71 [ 188.364836][ T5348] usb 4-1: USB disconnect, device number 27 [ 188.562137][ T5727] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 188.876607][ T5348] usb 2-1: USB disconnect, device number 15 [ 188.890158][ T5348] Console: switching to colour VGA+ 80x25 [ 188.907271][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.018101][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.077756][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.127020][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.239470][ T79] bridge_slave_1: left allmulticast mode [ 189.239527][ T79] bridge_slave_1: left promiscuous mode [ 189.239737][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.256692][ T79] bridge_slave_0: left allmulticast mode [ 189.256722][ T79] bridge_slave_0: left promiscuous mode [ 189.256939][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.436168][ T79] team0: Port device bond0 removed [ 189.438823][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.462765][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.467634][ T79] bond0 (unregistering): Released all slaves [ 189.471573][ T79] bo (unregistering): Released all slaves [ 189.679768][ T79] hsr_slave_0: left promiscuous mode [ 189.680297][ T79] hsr_slave_1: left promiscuous mode [ 189.680888][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.680909][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.681484][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.681502][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.694277][ T79] veth1_macvtap: left promiscuous mode [ 189.694364][ T79] veth0_macvtap: left promiscuous mode [ 189.694627][ T79] veth1_vlan: left promiscuous mode [ 189.694765][ T79] veth0_vlan: left promiscuous mode [ 189.886744][ T79] team0 (unregistering): Port device team_slave_1 removed [ 189.904729][ T79] team0 (unregistering): Port device team_slave_0 removed [ 189.995737][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 190.223359][ T79] IPVS: stop unused estimator thread 0... [ 190.321826][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.400388][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.458976][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.492634][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.496875][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 190.610780][ T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.640841][ T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.697551][ T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.759167][ T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.861420][ T79] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.915433][ T79] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.961305][ T79] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.975050][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 191.014962][ T79] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.098983][ T79] bridge_slave_1: left allmulticast mode [ 191.099009][ T79] bridge_slave_1: left promiscuous mode [ 191.099172][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.108649][ T79] bridge_slave_0: left allmulticast mode [ 191.108740][ T79] bridge_slave_0: left promiscuous mode [ 191.109313][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.145484][ T79] bridge_slave_1: left allmulticast mode [ 191.145511][ T79] bridge_slave_1: left promiscuous mode [ 191.145699][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.147547][ T79] bridge_slave_0: left allmulticast mode [ 191.147571][ T79] bridge_slave_0: left promiscuous mode [ 191.147715][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.187748][ T79] bridge_slave_1: left allmulticast mode [ 191.187774][ T79] bridge_slave_1: left promiscuous mode [ 191.187920][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.190976][ T79] bridge_slave_0: left allmulticast mode [ 191.190995][ T79] bridge_slave_0: left promiscuous mode [ 191.191138][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.375582][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.391588][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.403038][ T79] bond0 (unregistering): Released all slaves [ 191.481418][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.499693][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.500936][ T79] bond0 (unregistering): Released all slaves [ 191.578584][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.580282][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.581294][ T79] bond0 (unregistering): Released all slaves [ 191.617547][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 191.667990][ T79] tipc: Left network mode [ 191.678689][ T79] IPVS: stopping backup sync thread 6035 ... [ 191.999228][ T79] hsr_slave_0: left promiscuous mode [ 191.999690][ T79] hsr_slave_1: left promiscuous mode [ 192.000262][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.000282][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.000846][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.000864][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.048258][ T79] hsr_slave_0: left promiscuous mode [ 192.048925][ T79] hsr_slave_1: left promiscuous mode [ 192.049490][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.049510][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.050062][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.050079][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.093781][ T79] hsr_slave_0: left promiscuous mode [ 192.094338][ T79] hsr_slave_1: left promiscuous mode [ 192.094880][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.094900][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.095443][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.095460][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.145712][ T79] veth1_macvtap: left promiscuous mode [ 192.145749][ T79] veth0_macvtap: left promiscuous mode [ 192.145798][ T79] veth1_vlan: left promiscuous mode [ 192.145830][ T79] veth0_vlan: left promiscuous mode [ 192.148276][ T79] veth1_macvtap: left promiscuous mode [ 192.148298][ T79] veth0_macvtap: left promiscuous mode [ 192.148373][ T79] veth1_vlan: left promiscuous mode [ 192.148407][ T79] veth0_vlan: left promiscuous mode [ 192.149289][ T79] veth1_macvtap: left promiscuous mode [ 192.149318][ T79] veth0_macvtap: left promiscuous mode [ 192.149381][ T79] veth1_vlan: left promiscuous mode [ 192.149420][ T79] veth0_vlan: left promiscuous mode [ 192.428983][ T79] team0 (unregistering): Port device team_slave_1 removed [ 192.441697][ T79] team0 (unregistering): Port device team_slave_0 removed [ 192.590869][ T79] team0 (unregistering): Port device team_slave_1 removed [ 192.601634][ T79] team0 (unregistering): Port device team_slave_0 removed [ 192.749242][ T79] team0 (unregistering): Port device team_slave_1 removed [ 192.767492][ T79] team0 (unregistering): Port device team_slave_0 removed [ 192.842244][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 193.329372][ T79] IPVS: stop unused estimator thread 0... [ 193.329925][ T79] IPVS: stop unused estimator thread 0... [ 193.330275][ T79] IPVS: stop unused estimator thread 0... [ 193.395430][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 193.759957][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 194.140682][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 194.394474][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394549][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.498937][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 194.841560][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 195.201446][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 195.546053][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 195.881689][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 196.218920][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 196.563017][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 196.930087][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20