last executing test programs: 3m26.294472427s ago: executing program 3 (id=4): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000080)={0x0, 0x3752, 0x800, 0x0, 0x15f}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x20044000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5e, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 3m24.942360101s ago: executing program 3 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 3m9.320535024s ago: executing program 32 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 35.751921096s ago: executing program 4 (id=239): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 34.811415146s ago: executing program 4 (id=241): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) getsockname(r3, 0x0, &(0x7f0000000180)) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, r5) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r9 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 29.578509311s ago: executing program 5 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendmsg$inet(r5, 0x0, 0x4004045) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r5, r6, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) 29.543944101s ago: executing program 2 (id=247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) 28.662167358s ago: executing program 2 (id=248): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac6f9d2ade2c9e8474ca5fc9852e49b06c69f58c3c877e21a1285b1660e5b7a18b1dd0fb87aa5b6cc5d4044345a80d46899015e2f4723afe8fe52b04dcd9218c14172ffeffaecf616cc02f778ac39ef5"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$unix(0x1, 0x5, 0x0) 27.327542508s ago: executing program 5 (id=249): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 25.962537364s ago: executing program 0 (id=251): openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x468c00, 0x0) socket(0x2c, 0x80805, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000cc0000/0x1000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x1000, 0x2, 0x2}) r3 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x6, 0x2, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x2000c840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000a00)=""/126, 0x7e, 0x7) 25.616762742s ago: executing program 5 (id=252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x2, 0x3, "8c8ee811ddd396f06db560b6396e471eeee6f7c1e1dc7c61b76dd45128573ea3", 0x20363159}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 22.076449671s ago: executing program 4 (id=254): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x37, 0x1, 0x200, "4749570000000000000000000e1609d600", 0x20493859}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x9, r2}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf40002030109021200"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004088) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xef74abe58c74ae0b}, @mon_options]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8080) 21.941171965s ago: executing program 1 (id=255): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 20.683735202s ago: executing program 1 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r3 = eventfd2(0x8, 0x1) write$eventfd(r3, &(0x7f0000000080)=0x430f, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000240)={{0x3, 0x5, 0x50, 0x9, 'syz0\x00', 0x6f}, 0x0, [0xa42, 0x8, 0x1ff, 0x10001, 0x2, 0x4c5cceb, 0x65, 0xffff, 0x8cb, 0xe, 0x1, 0x87, 0xb8, 0x1, 0x9294, 0x1, 0x5, 0x7, 0x9, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffc, 0xffffffff, 0x77b2, 0x5, 0x4bc8, 0x80, 0x444, 0x80000001, 0xf, 0x1ff, 0x8, 0x1, 0x1, 0x8, 0x200, 0x6, 0x101, 0x9, 0x1, 0x8c, 0x80000000, 0xe, 0x6, 0xac8, 0x7, 0x4, 0x1ff, 0x8, 0x80, 0xcae1, 0xa213, 0x8000, 0xefe2, 0xec8, 0x6, 0x8, 0x7, 0x38fea0b3, 0x9, 0x4, 0x7, 0xd, 0x39, 0x26, 0x4, 0x4, 0xc1b, 0x1, 0xffffff66, 0x6, 0x5, 0x40, 0x101, 0x7, 0x5e0a, 0x1, 0x2, 0x401, 0x9, 0x40, 0x5, 0x7, 0x5, 0xffff33ba, 0xfffffffc, 0x7fffffff, 0x6, 0x1, 0x8bd6, 0x3, 0xffffff01, 0x9, 0x5, 0x10001, 0x1, 0xd00000, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x64f76898, 0x5, 0x9, 0x1, 0x3ff, 0x24000, 0xe5, 0x2a85, 0x0, 0x4, 0x795, 0x8, 0x3, 0x8, 0x6, 0x0, 0x80, 0x3, 0x7, 0xfffffffc, 0x401, 0x7]}) unshare(0x28000600) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r9, 0x1) 17.123400029s ago: executing program 0 (id=257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r5, 0x9620}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x10000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r6) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r4, 0x100}, 0x8) 16.537968156s ago: executing program 1 (id=258): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 16.183772599s ago: executing program 2 (id=259): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) writev(r0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 15.520767218s ago: executing program 1 (id=260): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) preadv(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001680)=""/4110, 0x100e}], 0x2, 0x0, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.197602631s ago: executing program 2 (id=261): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x80001) r3 = eventfd(0x40) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r3, 0x101, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x5, 0x1, r2}) r4 = io_uring_setup(0x203c, &(0x7f0000000040)={0x0, 0xd4b5, 0x80, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x318, 0x3d8, 0x3d8, 0x318, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @remote, [0xff, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 'wg0\x00', 'bond0\x00', {0xff}, {}, 0x88, 0x3, 0x0, 0x40}, 0x0, 0x1c4, 0x20c, 0x0, {}, [@common=@srh={{0x2c}, {0x87, 0x5a, 0x9, 0x0, 0x6, 0x1120, 0x81}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x60800, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000280)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, &(0x7f0000001780)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0x71, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x10, 0x0}}, 0x10) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000000)={0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) inotify_init1(0x0) 14.811509426s ago: executing program 5 (id=262): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) lseek(r3, 0x3, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x14b141) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xffff, 0x6, 0x2, 0x0, 0x0, "f700", "1200", "211c7f74", "fcffffff", ["0500000400", "47979b000000000200", "0c436d743c97c443084000", "ff81000000008000"]}) readv(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x100) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000005, 0x20010, r5, 0x104000) socket$inet(0x2b, 0xcac6d60255e605aa, 0x0) 14.708153732s ago: executing program 0 (id=263): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000c40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000400)={0x3f, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r7, 0x0, 0x0, 0x10000009, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x20, 0x1000, "5e83243f809fff21a672ee0b60a5bde68653c4fd0bb19eb4ef88eb3c6f3bf088d3463ec88f9aae573bbcfd96a0a9efe5c5464915e046bd14a5fb2bb50f6ba26f744ca20855a6cacc043dcc28fcaac73ac4aa1c5c5fce32675a92c6750b671126a9469ef1aef4d80636c3588970ab307d8b86c15503c98bb8e2b6ef7c33ce1b3c8b2a2be15253c875004ebaf0353312cdbbd4048d76f75164a5900cc4cb09eedb242f86e1884ae9d8b56733505d4725885c12209cc7315f0596833b77c0db2ff6c8e8c0606b3bf0b939cf2d81b1dbd66196ac0e92871076e13ebbeb73031f984d4356e8a79c04d476c753cfb1b6c4ccb891f61fe92c0616b65ad11d0be7c0f632f06c9800527a9b7d17ab590228b539049fae1075f668b3be7abf25ff2a3706d21420a1beb0b1a9d0aade12be8c129b4b742badfa433782a438d7e04c5408f4aa47077b2b7a83046466186779d4744c1367097cf23681b6e8fda25276d5fd9f811ad3358612a462d1884687774dbd0a20063882190d928aab9eff16f151fa35c4d6292d86439eeded723bc855fb0f213bd9c2744a105277be94debac05cf1e82b18837fe22724cea251103d34653f7d4996ff7483c90b3678333909e172dd67275245b03f955e6d655196b80e49364faa16fdf7dca610b011fe49fe76124300a306413e3327f07395740268b25e76a3d22c58f93132ae6dd079118883453fba69cc7d315eaa2d23510a2e6ad5a45cf96177a8c765f97be3244fb43bf930b3464d6a75864d2f48f3e41fa41597a3e6613f94347c3091c0d5f20e7cd95a59edf50a5e22eed2bf8b6fd33ec9f0a3028cf1c289336e7cae36302898365c5e778fa0ab978b49fc9135a35c5aebaeb21b93e325d4ded04038b159515a7382f6b33e46dd67440111b4bce9c5679b96b79b41dffb0a203e0dcd01b392e99df0d8c19e7f95877ccbc9f1da1f7cfb6007b76b232cacd634e0dfb1598b28351786489c7665279034f02278a2116c3b8cc2798ca35af2ae139ab40820164f1b4013ecdc6573dbd541df492f6e85b05fb83934a92410bc780aceb42a7954192580c633bc4c52c802b33a827c1c872337ad61e6ca6ac7177ced19f8900933b9d546a62ab0d353c249370833a1e9351cf47c35ecd40714ddf979080e5ea629329f0b1718b73b33a4967cdb193566369c45dd2e901f26a587007e0c1bd9d542caa55cd5d863f8bfe22e2233c1f74ab347d4f1388514b1944059a7003f6545f41d1b7fead8e92266f745759c81f2e181032f6d320f084e89ba08153e44483760229c48e8eac08feb2702864bb891d16619ab5016c54d0eb1e69f046e014ba7c21c1e4dd6ddb40aa446800bbbf383142a146fbc8fd406a6976b60124efeb5024daf6b527d1473c167301bdb9ade52f60e898be4960efbfda14c9e498cef9ca72c198f1a7996269250293ff8ecf6d8f91ca52963b52c733996e8c77636038db294ba5c408ed4c331921a5c2d2caf56fd6e85508d54ef61007e69bf4114af4352fb3366f3f3472fd4ab1a1e37ad30fed13b9d3508bd768f5b0e5ffd90ae0ec8a336b0adcd6073cfd990720432dcb648fc274df80f3179345d5a368af5872c3dda6f02fc0fea69385bfefeb5e0f53088592914c231178ebe4a62fa2cc2a62d41c7d3908009c78bfcfd58e7dcf7e7fed0b80a9eec8debeb77b252745a7003faefc1fafe4f08ae8e55edb94871e8000037ee031c07cc00f271972f7924504cf3a4dd668588f1b242124c84ffb0612402ba9fc7b54b010a195553bc725059e967df0689f8277bbd57ac7b9228c969137dc9bb24287a97d1e4b9523f265e20d79e4f642251bdb0ac52a3d861261db899aea59e1ed0461fba1b771e24412ef7e235d06d4d8ac563793055d4db53ab9f8a441ec9025aeca0289c6c40902324edecd8a953ea611efc3c79c3e123111237122a2a4fc66d5d0fb42bde97f00d601d2a6cbf7bb5fd939e3ae14d881fa36e9329281672f7647f32fcbf704d38f777beee53d7b28cc91fd949cfcaf2eff87707dbdb937863196dae9ae7b2a2845966e812c1d41282b0fbc2654fe3369580968e31fa44a209ceef888dc33fe92d13f0722866452c0c1f9cf2a5ea14d78f75eec0d13ed525e095f2ba00ba909b068c14efa56d391bc264fd34eccaa9407bbef89c127a39452034483e400a655e61322d376a5f248cd84376517486ee5e98bf3219135bb27a78910d4c84b2f83a44c1396bb64eb1f34e8a22c4332edcdf4e3f1dc8d5342cdff6d86f5c71752df621799d378e26ec4ae2927465364e2fbc6ad01b11e3c5d1c6f914c4d428afb359caea87493b9fdcbf0a22aeece4775d71b14d3a8dcc81692e00068ae78e9be1cbf1dfe483426c7a11a55d57727a2c941b67572f25eeed251350c1d2dd4fd92ad851ec882616a37eca2811e7ce2169c04215898b429e5bbdfb5f7bbf2c3c9aac3e6d1f761ebb6ed5b4a506dedaf1c51e3ee8e3f3e5a3b0c06f40ce50b481643576d2bb3895ee1306a8b6609fba45fdb8e983e384fcee752644baaff1e81f647dfbb5d62ffb96013c3443703cf7cc96f71fa7d31a2e37a24d28a8e0107643e51e1ed7bc107f0db73818ff0183bf8f96ff7d3af5225d6e71ee79a8998b2cdd898299519f980630b53bb5d71e532cb31ef0c01feae2b0b558e210725d294649f0a06ee3c8f0f2b0322af417b6c47126cb88157fe7a220f8e03dfa8f504168075c9581b2df441cc39cefb7b9c6690417e370bd1f9c7e6fc760357d6c91fd800fe66d253f8c441bfd974110746ebd0e5712bb4dea64239b5040f2443786219bf9ff01b14f75a6b6ae5ed773f8f319f90e8922cbe2dcb39f46d2e1cd182538db996213573560a1e2387b634c3960a79a834b56246f4ac31371828b69c2230f39a1f8a03d43e9cb97bdc288a8f4b5715637039a127b4c6561f6dba3450333f8c9ba0c7f2532974643947dce594745d2b56158bdad94c67de1bee2dd18aef2bb847a2031060a4fe5c8cba88cb0dda5cd78f787cafd57493bab816afb5be91f5c9436197c52f34c224d10d9e4ba54e9ae9ecc374e392d15e1034e62aca385250348241f06cdd6b853596faad48b85b2157596e43be4c0cfa81a51ef7be68f2823da7a45da9237bcd40d96b3ab1810e1f734ce3ea2d7f65b9e28e0ce5d3a243942e6bd0b6c853871ae5e3a2dfffc67e67305125670b3fe8a037338188dd87983daa795ef5513abc65ff60bc1e4862b7098b2072e7e7bae658590d05d8eb30e0b3df773ad24a810f770d9b6ef4cb47ba9f230a3623ab5c6ce2b6af37bbee823b4e1adf1e3410832f16a20d0cb8f494be10dea8fd94a6809267ceaf454ed0f2898f9531996cf8f68cc5b6cf5c48b93794eac01813309b4e98e4bd33ef1ed465fce8eecdc748280d48745d1acbd9e3fcb2617282a2e3824250e7a59f05d018d9a645ff284ea5626f63d95efbb867baca409e493df239c41c2f916c1ca5d237d2510def2ff187d8d8359d6d9d08ca45304e355d6f96a06f97d1a6d896579c41e753a2740246fac859fe74e4e5a0ac375f1e9ab69b24520eb6cdb92a73f78278f4da94e7b62a8d8239243a7c60f27d0469fe288f28b05ad74b029362656413f501829f0a7997553bd07f3808228116d0322cb1a940a2efb0e0d3392c01aa934843b9c44eb30a5138a2b6d85dac9cbeeb6db3dadef3713af23e4e591b1f3b199a76e84bda74ca33080c8ab08b56557a1266fcf327c9f70ba3ed92cdfcdef812d4db788884ef921714c9eb5260995c79ae2fbd125c6ef7787fecc39e83bac5003a172c3f0d235aa536bbb6c510fd7bfb749d26d1ac04a4198eaec741f53d2989f2a9e5f8d5fb31029a690a7c2e16a570d0023f389d679ca16d5d6be045743cbe78e7260778bf076bcf9469f687d624a33180724d8f47872a9da9b81ea9cb007ad499af532cf88b913f7a4c03501511304ad41621fe5609d8c98f23b5ef8b58b0e5f6fc2bd02386698e4308436cdda025a4f310f5dbfe63b4c4a18a51b6151864c923d65b2d8a076b4347fbb92cded19a69b6aaea15642a15812152ee0bef357a3683ab5e542df8d275aea43db9d73d738c4180636c5d6ca1edee54d3bd913f30aaf32acc7a629c318cb36490596bc3c35a9f6a9b92cb034d7371bc920198453afbe96dd7f16a9317fb9ef365ab9073c994f8380ad80ab80135c9138564563c4cedfe1cbc1345719d001b648e114175d2b18784b600e93bdc51335dc7b00d2579d6dcfb1e0654bfc4aeb5d1c90b115e10bb2b48a89a2ba299ae207c0f958da64d7ce7d67165ddfce999f183070a6222cb451527f8811f225fad5f0ba81005f749129bd20551efedd2a0ff2c9142e8559de1242c499b66d3e5f15fe9d0e9c469f21cf8a5950812f92c1ec3167f3766b14fb3e7be8ce651ec061210f1262d14615a9f345b92a03ff1ac4eb56bcf4f0e6c39e434ac2a871488c01d884206932deb22851ed09aecf3a2a8825d166d063ea81f72c7b4d41d1d525d125fec80a1f40f1c070453b94ead1c4bf02a5a1a4e9e4730a8afb43ccb62a5954639e81e84d6aa0e408d34028fa23db00db089aeebb9c05eb3daf144860a41158aa2d9615d09645abe2a101995a30040964c95be510c76c39993ef577cfddd2fa162445583d0119837e76a45cbe4d0d94564e59cfd01791aeaa3b9728619e77b885143783423ec15653b1dfdf3b221ccb8b7db29cec576c75b41d47f6cfe915b301cef72157fa6de75172ba50892c2938a6b5661b71e679b828f3634dc8f4d86d5d6d1c03a47e195d9633aeb7571e31b706e14514b3e54ac2ea56649f8aa18bb3b726b4b5aa7bf4220d0507c5e0d7e071325cbaed4434380259604ac8940b8674a1cbedc721ea371334912d25e147895951e19196f839e68c2b1fe692d78b2ad6d430855f974188db4540e186ac4451b33ea67a1e5b25a364fc0f0a05fec541bae629437301afa7b41eea76bb7124bcdc8ef4322dd20ccbeea28c5b2d4a8e073b252de9746a64772bcf76bd0b21015c8bea4d7fff5f799a6806fe2424083e606a268ea49e3395e5719075fdcb7f7b6f786fcef54c9ba06adacf9e11ee72f8e8300067f8b36f43f5d94465fdad41cb3300101d5fa8373906209cdcfc5d0ab3c60c4066aebef5d5be4835900ac02c968d78858edec225d1326baf15bcbfaa7c1907a8c0634573287674800bac839e68cc9aa5813be33b045a0665d29fbe321f37f66fd06b5734e455088cb3b0ccf727cd73a508bf633336e5758f1c609343a2a9aa69644362dc0de2dad1e449ea91f150152d912576465adfcb2608e852ce394529385f10acfc0d4df45205bdd93f284d678c4cfaa75e82a6d32f6b2b489097f6e2db57fe526dc3cc3c33dd2145fe0e4d09e1c7d2d359dd6f0126134374357a55bf2a6b35cd69005da23b47271f48e33f3c73c07c603b39812320a4bd5e6f91d31aa506e3c5e2e04b4d7bd0386b1e76024cf95c4c097bdc7d8e1839ddcd8a14c64a2556759ca950bd84974138baaa18471c5a9a367fd687846884ccb86b5fa44f138cbc122100e728851c8ef5f7e2c647a4845b5c4f9ce09d2a91c8017b6cb31bce699da293dea9ecac791f2329ea5c58ddabd6ebdc3dae9c7efcef0079c1d0942be0c10c64e14d937ca93ed4b7b1745aaf8cae78f74827d0cd313684d48c1ca5073ce246d0f23a7decd12ecdc929afaa7886f24d55e1350fa7559cce51e5c69cef3379141b919596db655d910d901af048c36cedf68b5450f85c1a70f8d029e5223a6627"}}) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0x4, 0x31, 0xfffe, 0x0}) 14.330550666s ago: executing program 4 (id=264): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x25, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x1004, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x8, 0x7, 0x3, 0x8, 0x10, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008070, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x8, 0x2, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x4, 0xff, 0x3f8, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x80004, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x1, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x208, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x3, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xfffffff8, 0xaf, 0x5, 0x6, 0x7, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x4, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.177171491s ago: executing program 1 (id=265): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10900) sendfile(r0, r0, &(0x7f0000000200)=0x7, 0x10001) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x6) r1 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) lsetxattr$security_ima(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f0000004400), 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r6, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000006800)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006640)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfb}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44850) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) stat64(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, 0x0) 11.534493595s ago: executing program 2 (id=266): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) getsockname(r3, 0x0, &(0x7f0000000180)) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, r5) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 9.857351493s ago: executing program 1 (id=267): openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x468c00, 0x0) socket(0x2c, 0x80805, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000cc0000/0x1000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x1000, 0x2, 0x2}) r3 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x6, 0x2, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x2000c840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000a00)=""/126, 0x7e, 0x7) 8.729707516s ago: executing program 4 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000240)={{0x3, 0x5, 0x50, 0x9, 'syz0\x00', 0x6f}, 0x0, [0xa42, 0x8, 0x1ff, 0x10001, 0x2, 0x4c5cceb, 0x65, 0xffff, 0x8cb, 0xe, 0x1, 0x87, 0xb8, 0x1, 0x9294, 0x1, 0x5, 0x7, 0x9, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffc, 0xffffffff, 0x77b2, 0x5, 0x4bc8, 0x80, 0x444, 0x80000001, 0xf, 0x1ff, 0x8, 0x1, 0x1, 0x8, 0x200, 0x6, 0x101, 0x9, 0x1, 0x8c, 0x80000000, 0xe, 0x6, 0xac8, 0x7, 0x4, 0x1ff, 0x8, 0x80, 0xcae1, 0xa213, 0x8000, 0xefe2, 0xec8, 0x6, 0x8, 0x7, 0x38fea0b3, 0x9, 0x4, 0x7, 0xd, 0x39, 0x26, 0x4, 0x4, 0xc1b, 0x1, 0xffffff66, 0x6, 0x5, 0x40, 0x101, 0x7, 0x5e0a, 0x1, 0x2, 0x401, 0x9, 0x40, 0x5, 0x7, 0x5, 0xffff33ba, 0xfffffffc, 0x7fffffff, 0x6, 0x1, 0x8bd6, 0x3, 0xffffff01, 0x9, 0x5, 0x10001, 0x1, 0xd00000, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x64f76898, 0x5, 0x9, 0x1, 0x3ff, 0x24000, 0xe5, 0x2a85, 0x0, 0x4, 0x795, 0x8, 0x3, 0x8, 0x6, 0x0, 0x80, 0x3, 0x7, 0xfffffffc, 0x401, 0x7]}) unshare(0x28000600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r8, 0x1) 4.932266106s ago: executing program 4 (id=269): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac6f9d2ade2c9e8474ca5fc9852e49b06c69f58c3c877e21a1285b1660e5b7a18b1dd0fb87aa5b6cc5d4044345a80d46899015e2f4723afe8fe52b04dcd9218c14172ffeffaecf616cc02f778ac39ef5"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$unix(0x1, 0x5, 0x0) 3.806124724s ago: executing program 5 (id=270): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.255308502s ago: executing program 0 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 2.06817143s ago: executing program 2 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x2, 0x3, "8c8ee811ddd396f06db560b6396e471eeee6f7c1e1dc7c61b76dd45128573ea3", 0x20363159}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.424915681s ago: executing program 0 (id=273): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) writev(r0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 1.302003477s ago: executing program 5 (id=274): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x37, 0x1, 0x200, "4749570000000000000000000e1609d600", 0x20493859}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x9, r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf40002030109021200"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004088) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xef74abe58c74ae0b}, @mon_options]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8080) 0s ago: executing program 0 (id=275): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x2, &(0x7f0000000040)={0x12, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. [ 181.926792][ T5748] cgroup: Unknown subsys name 'net' [ 182.062275][ T5748] cgroup: Unknown subsys name 'cpuset' [ 182.078768][ T5748] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 188.532922][ T5748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 193.259788][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.269382][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.279003][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.308953][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.330397][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.355721][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.365067][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.382178][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.385311][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.408077][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.418533][ T5070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.428916][ T5070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.456366][ T5070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.469915][ T5070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.481993][ T5070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.492067][ T5070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.501477][ T5070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.511761][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.536165][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.551680][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.562571][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.572545][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.582135][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.612148][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.634710][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.889721][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 195.304729][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 195.351415][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 195.510469][ T5776] Bluetooth: hci1: command tx timeout [ 195.510512][ T5070] Bluetooth: hci0: command tx timeout [ 195.590359][ T5776] Bluetooth: hci3: command tx timeout [ 195.670598][ T5776] Bluetooth: hci2: command tx timeout [ 195.736379][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 195.750458][ T5776] Bluetooth: hci4: command tx timeout [ 195.923256][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 196.412865][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.425695][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.433571][ T5766] bridge_slave_0: entered allmulticast mode [ 196.443673][ T5766] bridge_slave_0: entered promiscuous mode [ 196.537608][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.549833][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.558982][ T5766] bridge_slave_1: entered allmulticast mode [ 196.572716][ T5766] bridge_slave_1: entered promiscuous mode [ 196.630998][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.638566][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.652956][ T5767] bridge_slave_0: entered allmulticast mode [ 196.664317][ T5767] bridge_slave_0: entered promiscuous mode [ 196.746256][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.754526][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.766708][ T5769] bridge_slave_0: entered allmulticast mode [ 196.777786][ T5769] bridge_slave_0: entered promiscuous mode [ 196.792978][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.803612][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.813330][ T5767] bridge_slave_1: entered allmulticast mode [ 196.824373][ T5767] bridge_slave_1: entered promiscuous mode [ 196.849816][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.873797][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.894492][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.902274][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.909943][ T5769] bridge_slave_1: entered allmulticast mode [ 196.918909][ T5769] bridge_slave_1: entered promiscuous mode [ 197.253876][ T5766] team0: Port device team_slave_0 added [ 197.269007][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.279049][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.287576][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.295331][ T5782] bridge_slave_0: entered allmulticast mode [ 197.304349][ T5782] bridge_slave_0: entered promiscuous mode [ 197.325287][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.371451][ T5766] team0: Port device team_slave_1 added [ 197.386107][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.423613][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.432013][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.439511][ T5782] bridge_slave_1: entered allmulticast mode [ 197.449200][ T5782] bridge_slave_1: entered promiscuous mode [ 197.468887][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.514122][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.521810][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.529426][ T5772] bridge_slave_0: entered allmulticast mode [ 197.539267][ T5772] bridge_slave_0: entered promiscuous mode [ 197.590574][ T5776] Bluetooth: hci1: command tx timeout [ 197.596213][ T5776] Bluetooth: hci0: command tx timeout [ 197.670502][ T5776] Bluetooth: hci3: command tx timeout [ 197.677273][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.685274][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.693090][ T5772] bridge_slave_1: entered allmulticast mode [ 197.702530][ T5772] bridge_slave_1: entered promiscuous mode [ 197.748549][ T5769] team0: Port device team_slave_0 added [ 197.754663][ T5776] Bluetooth: hci2: command tx timeout [ 197.771746][ T5769] team0: Port device team_slave_1 added [ 197.812015][ T5767] team0: Port device team_slave_0 added [ 197.830434][ T5776] Bluetooth: hci4: command tx timeout [ 197.854025][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.861545][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.887851][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.937184][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.955385][ T5767] team0: Port device team_slave_1 added [ 198.012898][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.020031][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.047144][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.093725][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.141679][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.162374][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.200498][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.207765][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.234405][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.355176][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.362412][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.388778][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.433750][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.441278][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.467706][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.574217][ T5782] team0: Port device team_slave_0 added [ 198.582966][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.593032][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.619598][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.662611][ T5772] team0: Port device team_slave_0 added [ 198.688425][ T5766] hsr_slave_0: entered promiscuous mode [ 198.699299][ T5766] hsr_slave_1: entered promiscuous mode [ 198.725551][ T5782] team0: Port device team_slave_1 added [ 198.788478][ T5772] team0: Port device team_slave_1 added [ 199.077494][ T5769] hsr_slave_0: entered promiscuous mode [ 199.087095][ T5769] hsr_slave_1: entered promiscuous mode [ 199.095540][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 199.101548][ T5769] Cannot create hsr debugfs directory [ 199.110591][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.117766][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.144273][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.158543][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.166629][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.193703][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.287058][ T5767] hsr_slave_0: entered promiscuous mode [ 199.295963][ T5767] hsr_slave_1: entered promiscuous mode [ 199.304467][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 199.310476][ T5767] Cannot create hsr debugfs directory [ 199.319118][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.326520][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.353038][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.367442][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.374902][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.401214][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.670651][ T5070] Bluetooth: hci1: command tx timeout [ 199.676717][ T5776] Bluetooth: hci0: command tx timeout [ 199.750659][ T5776] Bluetooth: hci3: command tx timeout [ 199.830423][ T5776] Bluetooth: hci2: command tx timeout [ 199.870854][ T5782] hsr_slave_0: entered promiscuous mode [ 199.879815][ T5782] hsr_slave_1: entered promiscuous mode [ 199.888710][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 199.894803][ T5782] Cannot create hsr debugfs directory [ 199.910518][ T5776] Bluetooth: hci4: command tx timeout [ 199.956529][ T5772] hsr_slave_0: entered promiscuous mode [ 199.965508][ T5772] hsr_slave_1: entered promiscuous mode [ 199.973983][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 199.979930][ T5772] Cannot create hsr debugfs directory [ 201.044173][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.096830][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.136311][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.156352][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.290936][ T5767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.352344][ T5767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.405994][ T5767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.426394][ T5767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.621862][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.647714][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.674530][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.739689][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.751285][ T5776] Bluetooth: hci0: command tx timeout [ 201.755554][ T5070] Bluetooth: hci1: command tx timeout [ 201.830423][ T5070] Bluetooth: hci3: command tx timeout [ 201.912169][ T5070] Bluetooth: hci2: command tx timeout [ 201.995515][ T5070] Bluetooth: hci4: command tx timeout [ 202.046621][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.074434][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.096513][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.145643][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.286345][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.547853][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.586246][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.622155][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.649983][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.694215][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.737224][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.744842][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.885888][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.893539][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.984605][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.227522][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.284170][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.387258][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.394782][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.483500][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.518656][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.526289][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.568897][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.661871][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.669470][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.747465][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.755136][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.025038][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.103555][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.110431][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.192483][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.200033][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.275805][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.283474][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.346849][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.654476][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.744880][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.752582][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.886944][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.917038][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.924658][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.576968][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.842127][ T5766] veth0_vlan: entered promiscuous mode [ 205.959177][ T5766] veth1_vlan: entered promiscuous mode [ 206.290974][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.539883][ T5769] veth0_vlan: entered promiscuous mode [ 206.645497][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.798567][ T5766] veth0_macvtap: entered promiscuous mode [ 206.858799][ T5769] veth1_vlan: entered promiscuous mode [ 206.935640][ T5766] veth1_macvtap: entered promiscuous mode [ 207.168801][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.272466][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.418598][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.447950][ T5782] veth0_vlan: entered promiscuous mode [ 207.556338][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.576084][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.596949][ T5769] veth0_macvtap: entered promiscuous mode [ 207.648934][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.662346][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.697318][ T5782] veth1_vlan: entered promiscuous mode [ 207.718944][ T5769] veth1_macvtap: entered promiscuous mode [ 208.003833][ T5772] veth0_vlan: entered promiscuous mode [ 208.114586][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.148480][ T5772] veth1_vlan: entered promiscuous mode [ 208.209956][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.307442][ T5782] veth0_macvtap: entered promiscuous mode [ 208.374091][ T5767] veth0_vlan: entered promiscuous mode [ 208.399812][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.435373][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.448062][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.475827][ T5782] veth1_macvtap: entered promiscuous mode [ 208.532100][ T5767] veth1_vlan: entered promiscuous mode [ 208.547161][ T172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.876826][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.903824][ T5772] veth0_macvtap: entered promiscuous mode [ 208.985656][ T5772] veth1_macvtap: entered promiscuous mode [ 209.026766][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.087248][ T5767] veth0_macvtap: entered promiscuous mode [ 209.186662][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.211757][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.227739][ T5767] veth1_macvtap: entered promiscuous mode [ 209.289474][ T166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.325912][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.469427][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.573628][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.623945][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.708965][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.828370][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.859845][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.918794][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.955531][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.995565][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.020431][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.029519][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.153440][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.584877][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.600247][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.919234][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.941164][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.388192][ T5766] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 215.192514][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.217332][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.529640][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.593503][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.861835][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.869973][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.104327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 217.115414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 217.331015][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.339075][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.648319][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.700736][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.994766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 218.108051][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.211170][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.643478][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.679911][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.191812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 219.257373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.273802][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.513512][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.080553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 220.089217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 220.841290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 221.271733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 221.311778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 226.801796][ T5997] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 228.165013][ T6005] process 'syz.4.12' launched '/dev/fd/9' with NULL argv: empty string added [ 228.399380][ T6008] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 230.860441][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 231.170867][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 231.373316][ T5825] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 231.406312][ T5825] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 231.455214][ T5825] usb 2-1: config 6 has no interface number 0 [ 231.513643][ T5825] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.630590][ T5825] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.717666][ T5825] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 231.738198][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.772785][ T5825] usb 2-1: Product: syz [ 231.794193][ T5825] usb 2-1: Manufacturer: syz [ 231.806092][ T5825] usb 2-1: SerialNumber: syz [ 232.014482][ T5825] hso 2-1:6.2: Failed to find INT IN ep [ 232.307538][ T5825] usb 2-1: USB disconnect, device number 2 [ 238.512218][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 239.204522][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.229503][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.252119][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.284906][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.316092][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.411493][ T6039] vivid-007: disconnect [ 240.937288][ T6031] vivid-007: reconnect [ 241.430721][ T5776] Bluetooth: hci5: command tx timeout [ 242.421122][ T5939] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 242.727695][ T5939] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.795389][ T5939] usb 1-1: config 0 has no interface number 0 [ 242.836891][ T5939] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.879066][ T5939] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 242.950724][ T5939] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 242.999445][ T5939] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 243.194142][ T5939] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 243.288338][ T5939] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.406833][ T5939] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 243.466832][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.502761][ T5939] usb 1-1: config 0 descriptor?? [ 243.511494][ T5776] Bluetooth: hci5: command tx timeout [ 243.534488][ T6058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.604333][ T6058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.706022][ T5939] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 243.955805][ T5939] usb 1-1: USB disconnect, device number 2 [ 243.956117][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 244.037659][ T5939] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 245.590576][ T5776] Bluetooth: hci5: command tx timeout [ 246.501835][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 247.671189][ T5776] Bluetooth: hci5: command tx timeout [ 248.604983][ T5882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.038498][ T5882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.598412][ T5882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.035116][ T5882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.346733][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 250.482520][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.520415][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.528265][ T6035] bridge_slave_0: entered allmulticast mode [ 250.582933][ T6035] bridge_slave_0: entered promiscuous mode [ 250.680484][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.732830][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.776528][ T6035] bridge_slave_1: entered allmulticast mode [ 250.843962][ T6035] bridge_slave_1: entered promiscuous mode [ 251.502588][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.838928][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.508747][ T6035] team0: Port device team_slave_0 added [ 252.652021][ T6035] team0: Port device team_slave_1 added [ 253.230760][ T5882] bridge_slave_1: left allmulticast mode [ 253.249397][ T5882] bridge_slave_1: left promiscuous mode [ 253.274604][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.356656][ T5882] bridge_slave_0: left allmulticast mode [ 253.374106][ T5882] bridge_slave_0: left promiscuous mode [ 253.431392][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.823494][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.904798][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.971843][ T5882] bond0 (unregistering): Released all slaves [ 255.129854][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.156074][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.292700][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.443157][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.468639][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.530567][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.000389][ T5882] hsr_slave_0: left promiscuous mode [ 257.202471][ T5882] hsr_slave_1: left promiscuous mode [ 257.219875][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.280616][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.313728][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.333912][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 257.341978][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.446195][ T5882] veth1_macvtap: left promiscuous mode [ 257.490411][ T5882] veth0_macvtap: left promiscuous mode [ 257.496477][ T5882] veth1_vlan: left promiscuous mode [ 257.540856][ T5882] veth0_vlan: left promiscuous mode [ 260.168473][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 260.271295][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 260.978570][ T6035] hsr_slave_0: entered promiscuous mode [ 261.017895][ T6035] hsr_slave_1: entered promiscuous mode [ 261.050604][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 261.064418][ T6035] Cannot create hsr debugfs directory [ 261.936474][ T6183] tipc: Started in network mode [ 262.011256][ T6183] tipc: Node identity 1ec51722def8, cluster identity 4711 [ 262.054876][ T6183] tipc: Enabled bearer , priority 0 [ 262.195239][ T6182] Zero length message leads to an empty skb [ 262.420812][ T6182] tipc: Resetting bearer [ 263.434098][ T6180] tipc: Disabling bearer [ 263.516894][ T794] tipc: Node number set to 3225229090 [ 264.411551][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 265.298152][ T6035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.536575][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.543503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.599226][ T6035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.679722][ T6035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.757582][ T6035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.439883][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.678736][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.926974][ T6229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.007047][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.014599][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.141809][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.149565][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.370598][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 268.574308][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.652704][ T794] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.680338][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.764028][ T794] usb 1-1: config 0 descriptor?? [ 269.045121][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.131308][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.252915][ T794] usbhid 1-1:0.0: can't add hid device: -71 [ 269.259595][ T794] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 269.274303][ T6235] tipc: Started in network mode [ 269.312657][ T6235] tipc: Node identity d61c736d0ef7, cluster identity 4711 [ 269.359390][ T6235] tipc: Enabled bearer , priority 0 [ 269.401638][ T794] usb 1-1: USB disconnect, device number 3 [ 269.414332][ T6237] syzkaller0: entered promiscuous mode [ 269.455991][ T6237] syzkaller0: entered allmulticast mode [ 269.750686][ T6235] tipc: Resetting bearer [ 269.858106][ T6233] tipc: Resetting bearer [ 269.943645][ T6233] tipc: Disabling bearer [ 271.140873][ T5825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 271.284624][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 271.306838][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.340946][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 271.427998][ T5825] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 271.460701][ T5825] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 271.503753][ T5825] usb 2-1: config 6 has no interface number 0 [ 271.538712][ T5825] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.595804][ T5825] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.751469][ T5825] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 271.819599][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.861455][ T5825] usb 2-1: Product: syz [ 271.865877][ T5825] usb 2-1: Manufacturer: syz [ 271.888627][ T5825] usb 2-1: SerialNumber: syz [ 272.011601][ T5825] hso 2-1:6.2: Failed to find INT IN ep [ 272.344103][ T5825] usb 2-1: USB disconnect, device number 3 [ 274.824039][ T6035] veth0_vlan: entered promiscuous mode [ 275.038545][ T6295] tipc: Started in network mode [ 275.070545][ T6295] tipc: Node identity 524a52fda485, cluster identity 4711 [ 275.078672][ T6295] tipc: Enabled bearer , priority 0 [ 275.148165][ T6035] veth1_vlan: entered promiscuous mode [ 275.220020][ T6293] syzkaller0: entered promiscuous mode [ 275.225869][ T6293] syzkaller0: entered allmulticast mode [ 275.574551][ T6293] tipc: Resetting bearer [ 275.636699][ T6292] tipc: Resetting bearer [ 275.713237][ T6292] tipc: Disabling bearer [ 275.928204][ T6035] veth0_macvtap: entered promiscuous mode [ 276.008375][ T6035] veth1_macvtap: entered promiscuous mode [ 276.316511][ T6301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.354979][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.569049][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.810526][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 276.900711][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.926621][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.024434][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.150313][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.184915][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.223429][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.249710][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.331052][ T10] usb 1-1: config 0 descriptor?? [ 277.721988][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.837887][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.194515][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 279.212944][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.320441][ T10] usb 1-1: USB disconnect, device number 4 [ 280.368024][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 283.482136][ T6360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.019036][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 284.187323][ T5939] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.226289][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.281115][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.310688][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.371856][ T10] usb 5-1: config 0 descriptor?? [ 284.400691][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 284.520957][ T5939] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 284.529243][ T5939] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 284.619149][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.640437][ T5939] usb 2-1: config 6 has no interface number 0 [ 284.646811][ T5939] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.702539][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.732839][ T5939] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.852139][ T5939] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 284.893492][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.950312][ T5939] usb 2-1: Product: syz [ 284.954740][ T5939] usb 2-1: Manufacturer: syz [ 284.981895][ T5939] usb 2-1: SerialNumber: syz [ 285.118935][ T5939] hso 2-1:6.2: Failed to find INT IN ep [ 285.352406][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 285.358940][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 285.471919][ T794] usb 2-1: USB disconnect, device number 4 [ 285.492203][ T10] usb 5-1: USB disconnect, device number 2 [ 286.430442][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.438491][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.754132][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 286.820385][ T5882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.860608][ T5882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.662414][ T794] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 289.881166][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.920416][ T794] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.993216][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.048720][ T794] usb 6-1: config 0 descriptor?? [ 290.331321][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.377098][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.519959][ T794] usbhid 6-1:0.0: can't add hid device: -71 [ 290.571762][ T794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 290.626997][ T794] usb 6-1: USB disconnect, device number 2 [ 291.303719][ T6423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.890878][ T794] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 292.128376][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.191144][ T794] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 292.250401][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.403878][ T794] usb 5-1: config 0 descriptor?? [ 292.681182][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.759208][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.387664][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.102'. [ 293.446879][ T794] usbhid 5-1:0.0: can't add hid device: -71 [ 293.503993][ T794] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 293.651881][ T794] usb 5-1: USB disconnect, device number 3 [ 295.383711][ T6442] bridge0: entered promiscuous mode [ 295.435745][ T6442] bridge0: port 3(macvtap1) entered blocking state [ 295.480972][ T6442] bridge0: port 3(macvtap1) entered disabled state [ 295.521102][ T6442] macvtap1: entered allmulticast mode [ 295.543270][ T6442] bridge0: entered allmulticast mode [ 295.583242][ T6442] macvtap1: left allmulticast mode [ 295.710860][ T6442] bridge0: left allmulticast mode [ 295.780331][ T6442] bridge0: left promiscuous mode [ 298.534438][ T794] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 298.801922][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 298.950453][ T794] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 298.996034][ T794] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 299.068681][ T794] usb 5-1: config 6 has no interface number 0 [ 299.090390][ T794] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.140360][ T794] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.249233][ T794] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 299.303114][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.360423][ T794] usb 5-1: Product: syz [ 299.364909][ T794] usb 5-1: Manufacturer: syz [ 299.380507][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 299.413540][ T794] usb 5-1: SerialNumber: syz [ 299.514795][ T794] hso 5-1:6.2: Failed to find INT IN ep [ 299.612464][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.670651][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.699055][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.756373][ T10] usb 2-1: config 0 descriptor?? [ 299.780443][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 299.856426][ T5825] usb 5-1: USB disconnect, device number 4 [ 299.995871][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 300.071565][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.112798][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.139002][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.183009][ T6478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.208172][ T5822] usb 6-1: config 3 has an invalid interface number: 92 but max is 1 [ 300.246425][ T5822] usb 6-1: config 3 has an invalid interface number: 120 but max is 1 [ 300.286893][ T5822] usb 6-1: config 3 has an invalid interface number: 92 but max is 1 [ 300.316986][ T5822] usb 6-1: config 3 has no interface number 0 [ 300.350233][ T5822] usb 6-1: config 3 has no interface number 1 [ 300.378118][ T5822] usb 6-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 300.447829][ T5822] usb 6-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.479258][ T5822] usb 6-1: config 3 interface 92 has no altsetting 0 [ 300.496557][ T5822] usb 6-1: config 3 interface 92 has no altsetting 1 [ 300.505481][ T5822] usb 6-1: config 3 interface 120 has no altsetting 0 [ 300.529924][ T5822] usb 6-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 300.584205][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.610471][ T794] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 300.626232][ T5822] usb 6-1: Product: syz [ 300.650752][ T5822] usb 6-1: Manufacturer: syz [ 300.667086][ T5822] usb 6-1: SerialNumber: syz [ 300.803880][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 300.889178][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.905595][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 300.935298][ T794] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.955211][ T10] usb 2-1: USB disconnect, device number 5 [ 301.007551][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.093050][ T794] usb 3-1: config 0 descriptor?? [ 301.116865][ T5822] usb 6-1: selecting invalid altsetting 1 [ 301.199996][ T5822] sierra 6-1:3.92: Sierra USB modem converter detected [ 301.287075][ T5822] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 301.388398][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.463011][ T5822] sierra 6-1:3.120: Sierra USB modem converter detected [ 301.472008][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.553395][ T5822] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 301.573317][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 301.618259][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.647302][ T5822] usb 6-1: USB disconnect, device number 3 [ 301.703752][ T794] usb 3-1: USB disconnect, device number 2 [ 301.746550][ T5822] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 301.806441][ T5822] sierra 6-1:3.92: device disconnected [ 301.894685][ T5822] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 301.944037][ T5822] sierra 6-1:3.120: device disconnected [ 302.569348][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.117'. [ 303.631521][ T6498] bridge0: entered promiscuous mode [ 303.983003][ T6498] bridge0: port 3(macvtap1) entered blocking state [ 304.010507][ T5822] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 304.033253][ T6498] bridge0: port 3(macvtap1) entered disabled state [ 304.058717][ T6498] macvtap1: entered allmulticast mode [ 304.071619][ T6498] bridge0: entered allmulticast mode [ 304.133523][ T6498] macvtap1: left allmulticast mode [ 304.138904][ T6498] bridge0: left allmulticast mode [ 304.314776][ T5822] usb 1-1: config 0 has no interfaces? [ 304.341566][ T6498] bridge0: left promiscuous mode [ 304.350446][ T5822] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 304.370350][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.444200][ T5822] usb 1-1: config 0 descriptor?? [ 310.214488][ T6534] tipc: Enabling of bearer rejected, failed to enable media [ 311.062891][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 312.750415][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 313.074054][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.140576][ T5825] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.200835][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.284636][ T5825] usb 2-1: config 0 descriptor?? [ 313.572132][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.673068][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.872740][ T5825] usbhid 2-1:0.0: can't add hid device: -71 [ 313.911002][ T5825] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.039259][ T5825] usb 2-1: USB disconnect, device number 6 [ 314.981708][ T5822] usb 1-1: USB disconnect, device number 5 [ 316.966272][ T5939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 317.220427][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 317.282073][ T5939] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 317.321741][ T5939] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 317.378636][ T5939] usb 1-1: config 6 has no interface number 0 [ 317.403016][ T5939] usb 1-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.485655][ T5939] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.626347][ T5939] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 317.655476][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.700561][ T5939] usb 1-1: Product: syz [ 317.704982][ T5939] usb 1-1: Manufacturer: syz [ 317.709787][ T5939] usb 1-1: SerialNumber: syz [ 317.853495][ T5939] hso 1-1:6.2: Failed to find INT IN ep [ 318.041847][ T6602] tipc: Enabled bearer , priority 0 [ 318.101473][ T6602] syzkaller0: entered promiscuous mode [ 318.107183][ T6602] syzkaller0: entered allmulticast mode [ 318.113466][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.141'. [ 318.270324][ T5822] usb 1-1: USB disconnect, device number 6 [ 318.317813][ T6602] tipc: Resetting bearer [ 318.436915][ T6601] tipc: Resetting bearer [ 318.507494][ T6601] tipc: Disabling bearer [ 318.798949][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 318.805431][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 318.813457][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 318.819702][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 319.278363][ T5939] IPVS: starting estimator thread 0... [ 319.470993][ T6616] IPVS: using max 288 ests per chain, 14400 per kthread [ 320.208535][ T6622] bridge0: entered promiscuous mode [ 320.508815][ T6622] bridge0: port 3(macvtap1) entered blocking state [ 320.520513][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 320.551416][ T6622] bridge0: port 3(macvtap1) entered disabled state [ 320.581801][ T6622] macvtap1: entered allmulticast mode [ 320.587690][ T6622] bridge0: entered allmulticast mode [ 320.732094][ T6622] macvtap1: left allmulticast mode [ 320.737463][ T6622] bridge0: left allmulticast mode [ 320.827684][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.906726][ T5822] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 320.907383][ T6622] bridge0: left promiscuous mode [ 320.922950][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.954755][ T5822] usb 6-1: config 0 descriptor?? [ 321.020592][ T794] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 321.261376][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.340570][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.645925][ T794] usb 3-1: config 0 has no interfaces? [ 321.657030][ T794] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 321.697139][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.778694][ T794] usb 3-1: config 0 descriptor?? [ 322.013106][ T5822] usbhid 6-1:0.0: can't add hid device: -71 [ 322.081406][ T5822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 322.189468][ T5822] usb 6-1: USB disconnect, device number 4 [ 327.100568][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.109909][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.556022][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 329.386446][ T6675] tipc: Started in network mode [ 329.470669][ T6675] tipc: Node identity eabd10da11, cluster identity 4711 [ 329.521022][ T6675] tipc: Enabled bearer , priority 0 [ 329.624056][ T6676] syzkaller0: entered promiscuous mode [ 329.629692][ T6676] syzkaller0: entered allmulticast mode [ 329.912544][ T6674] tipc: Resetting bearer [ 330.046599][ T6674] tipc: Disabling bearer [ 331.426298][ T6685] veth0_vlan: entered allmulticast mode [ 332.066404][ T794] usb 3-1: USB disconnect, device number 3 [ 335.421806][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.810365][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 336.030451][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.070374][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 336.102300][ T5825] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.145720][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.203478][ T5825] usb 3-1: config 0 descriptor?? [ 336.295048][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 336.383039][ T5939] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 336.469370][ T5939] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 336.520684][ T5939] usb 6-1: config 6 has no interface number 0 [ 336.564620][ T5939] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.583697][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.642047][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.643643][ T5939] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.873087][ T5939] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 336.987650][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.030494][ T5939] usb 6-1: Product: syz [ 337.035394][ T5939] usb 6-1: Manufacturer: syz [ 337.112531][ T5939] usb 6-1: SerialNumber: syz [ 337.324987][ T5939] hso 6-1:6.2: Failed to find INT IN ep [ 337.350534][ T5825] usbhid 3-1:0.0: can't add hid device: -71 [ 337.407086][ T5825] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 337.499985][ T5825] usb 3-1: USB disconnect, device number 4 [ 337.792146][ T2049] usb 6-1: USB disconnect, device number 5 [ 337.910703][ T5939] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 338.168295][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 338.237860][ T5939] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 338.271767][ T5939] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 338.340266][ T5939] usb 2-1: config 6 has no interface number 0 [ 338.346661][ T5939] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 338.406835][ T5939] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 338.481251][ T5939] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.590551][ T5939] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 338.627063][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.679177][ T5939] usb 2-1: Product: syz [ 338.710502][ T5939] usb 2-1: Manufacturer: syz [ 338.715367][ T5939] usb 2-1: SerialNumber: syz [ 338.893902][ T5939] hso 2-1:6.2: Failed to find INT IN ep [ 339.172672][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 339.295507][ T5939] usb 2-1: USB disconnect, device number 7 [ 340.143587][ T6729] tipc: Enabled bearer , priority 0 [ 340.183687][ T6729] syzkaller0: entered promiscuous mode [ 340.189394][ T6729] syzkaller0: entered allmulticast mode [ 340.351002][ T6729] tipc: Resetting bearer [ 340.401575][ T6728] tipc: Resetting bearer [ 340.457665][ T6728] tipc: Disabling bearer [ 344.312570][ T6767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.780621][ T2049] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 345.062831][ T2049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.171108][ T2049] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 345.232969][ T2049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.398634][ T2049] usb 5-1: config 0 descriptor?? [ 345.631488][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.176'. [ 345.814963][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.921139][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.053055][ T2049] usbhid 5-1:0.0: can't add hid device: -71 [ 346.059473][ T2049] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.196021][ T2049] usb 5-1: USB disconnect, device number 5 [ 348.422476][ T6794] tipc: Enabled bearer , priority 0 [ 348.473808][ T6794] syzkaller0: entered promiscuous mode [ 348.479530][ T6794] syzkaller0: entered allmulticast mode [ 348.690817][ T6794] tipc: Resetting bearer [ 348.711163][ T6799] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 348.760575][ T6799] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 348.814456][ T6792] tipc: Resetting bearer [ 348.937766][ T6792] tipc: Disabling bearer [ 350.330510][ T5822] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 350.520728][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 350.611749][ T5822] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 350.653875][ T5822] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 350.694379][ T5822] usb 5-1: config 6 has no interface number 0 [ 350.726795][ T5822] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.777995][ T5822] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.920864][ T5822] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 350.980652][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.988960][ T5822] usb 5-1: Product: syz [ 351.040396][ T5822] usb 5-1: Manufacturer: syz [ 351.045245][ T5822] usb 5-1: SerialNumber: syz [ 351.175978][ T5822] hso 5-1:6.2: Failed to find INT IN ep [ 351.370424][ T2049] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 351.538334][ T5939] usb 5-1: USB disconnect, device number 6 [ 351.600468][ T2049] usb 2-1: Using ep0 maxpacket: 8 [ 351.716478][ T2049] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 351.727225][ T2049] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 351.745814][ T2049] usb 2-1: config 6 has no interface number 0 [ 351.777714][ T2049] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 351.825809][ T2049] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 351.860458][ T2049] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.904405][ T2049] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 351.939735][ T2049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.981974][ T2049] usb 2-1: Product: syz [ 351.986382][ T2049] usb 2-1: Manufacturer: syz [ 352.010627][ T2049] usb 2-1: SerialNumber: syz [ 352.131757][ T2049] hso 2-1:6.2: Failed to find INT IN ep [ 352.783899][ T5822] usb 2-1: USB disconnect, device number 8 [ 353.021931][ T6823] bridge0: entered promiscuous mode [ 353.280751][ T6823] bridge0: port 3(macvtap1) entered blocking state [ 353.288221][ T6823] bridge0: port 3(macvtap1) entered disabled state [ 353.300945][ T6823] macvtap1: entered allmulticast mode [ 353.306592][ T6823] bridge0: entered allmulticast mode [ 353.432763][ T6823] macvtap1: left allmulticast mode [ 353.438057][ T6823] bridge0: left allmulticast mode [ 353.466878][ T6827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.591643][ T6823] bridge0: left promiscuous mode [ 353.861291][ T794] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 353.901558][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 354.103125][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.182678][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.192478][ T794] usb 1-1: config 0 has no interfaces? [ 354.198215][ T794] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 354.225466][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.243406][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.277237][ T10] usb 6-1: config 0 descriptor?? [ 354.298615][ T794] usb 1-1: config 0 descriptor?? [ 354.694230][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.854337][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.728459][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 355.735373][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.751765][ T10] usb 6-1: USB disconnect, device number 6 [ 357.948919][ T6839] tipc: Enabled bearer , priority 0 [ 358.016166][ T6840] syzkaller0: entered promiscuous mode [ 358.057231][ T6840] syzkaller0: entered allmulticast mode [ 358.208305][ T6839] tipc: Resetting bearer [ 358.217758][ T6842] netlink: 'syz.5.196': attribute type 1 has an invalid length. [ 358.269239][ T6838] tipc: Resetting bearer [ 358.335237][ T6838] tipc: Disabling bearer [ 358.982075][ T6844] veth3: entered promiscuous mode [ 360.522987][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 361.524147][ T6863] veth0_vlan: left allmulticast mode [ 362.943955][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 363.075302][ T6874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.158253][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.194811][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.247468][ T10] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 363.270973][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.337590][ T10] usb 5-1: config 0 descriptor?? [ 363.540366][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 363.752334][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.832363][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 363.871181][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.972124][ T10] usb 3-1: config 0 descriptor?? [ 364.031152][ T5939] usb 1-1: USB disconnect, device number 7 [ 364.273996][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.312574][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.870812][ T5774] Bluetooth: hci5: command 0x0406 tx timeout [ 364.967653][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 364.976518][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 365.078638][ T10] usb 3-1: USB disconnect, device number 5 [ 365.995037][ T10] usb 5-1: USB disconnect, device number 7 [ 366.838666][ T6894] tipc: Enabled bearer , priority 0 [ 366.903491][ T6889] syzkaller0: entered promiscuous mode [ 366.910388][ T6889] syzkaller0: entered allmulticast mode [ 367.104923][ T6889] tipc: Resetting bearer [ 367.210571][ T6888] tipc: Resetting bearer [ 367.302537][ T6888] tipc: Disabling bearer [ 368.345119][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 368.580325][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 368.611163][ T10] usb 6-1: config 149 has too many interfaces: 128, using maximum allowed: 32 [ 368.674024][ T10] usb 6-1: config 149 has an invalid descriptor of length 205, skipping remainder of the config [ 368.742849][ T10] usb 6-1: config 149 has 0 interfaces, different from the descriptor's value: 128 [ 368.854626][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 368.907057][ T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 368.986081][ T10] usb 6-1: Product: syz [ 369.005131][ T10] usb 6-1: SerialNumber: syz [ 369.781899][ T10] usb 6-1: USB disconnect, device number 7 [ 372.155553][ T6918] bridge0: entered promiscuous mode [ 372.305633][ T6918] bridge0: port 3(macvtap1) entered blocking state [ 372.321863][ T6918] bridge0: port 3(macvtap1) entered disabled state [ 372.341093][ T6920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.353633][ T6918] macvtap1: entered allmulticast mode [ 372.359584][ T6918] bridge0: entered allmulticast mode [ 372.385194][ T6918] macvtap1: left allmulticast mode [ 372.478507][ T6918] bridge0: left allmulticast mode [ 372.700439][ T794] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 372.770658][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 372.783364][ T6918] bridge0: left promiscuous mode [ 373.055816][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.088507][ T5822] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.117206][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.136660][ T794] usb 2-1: config 0 has no interfaces? [ 373.168539][ T794] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 373.179395][ T5822] usb 3-1: config 0 descriptor?? [ 373.239872][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.421268][ T794] usb 2-1: config 0 descriptor?? [ 373.493189][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.582222][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.115751][ T5822] usbhid 3-1:0.0: can't add hid device: -71 [ 375.135675][ T5822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 375.197063][ T5822] usb 3-1: USB disconnect, device number 6 [ 376.850891][ T6939] tipc: Started in network mode [ 376.862403][ T6939] tipc: Node identity 72db84e110f6, cluster identity 4711 [ 376.896537][ T6939] tipc: Enabled bearer , priority 0 [ 376.918137][ T6942] syzkaller0: entered promiscuous mode [ 376.992741][ T6942] syzkaller0: entered allmulticast mode [ 377.128846][ T6939] tipc: Resetting bearer [ 377.163304][ T6938] tipc: Resetting bearer [ 377.274365][ T6938] tipc: Disabling bearer [ 383.302686][ T5939] usb 2-1: USB disconnect, device number 9 [ 384.663651][ T5822] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 384.876719][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.938797][ T5822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.995587][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.071604][ T5822] usb 2-1: config 0 descriptor?? [ 385.383529][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.472779][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.230551][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 386.494639][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 386.563588][ T5939] usb 3-1: config 149 has too many interfaces: 128, using maximum allowed: 32 [ 386.630450][ T5939] usb 3-1: config 149 has an invalid descriptor of length 205, skipping remainder of the config [ 386.700561][ T5939] usb 3-1: config 149 has 0 interfaces, different from the descriptor's value: 128 [ 386.820659][ T5822] usbhid 2-1:0.0: can't add hid device: -71 [ 386.889678][ T5822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 387.000344][ T5822] usb 2-1: USB disconnect, device number 10 [ 387.013737][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 387.078067][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 387.130941][ T5939] usb 3-1: Product: syz [ 387.135371][ T5939] usb 3-1: SerialNumber: syz [ 387.905931][ T5939] usb 3-1: USB disconnect, device number 7 [ 388.433320][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.440186][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.207726][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 392.669766][ T7016] bridge0: entered promiscuous mode [ 393.195667][ T7016] bridge0: port 3(macvtap1) entered blocking state [ 393.280689][ T7016] bridge0: port 3(macvtap1) entered disabled state [ 393.305732][ T7016] macvtap1: entered allmulticast mode [ 393.321079][ T7016] bridge0: entered allmulticast mode [ 393.442898][ T7016] macvtap1: left allmulticast mode [ 393.448281][ T7016] bridge0: left allmulticast mode [ 393.615387][ T7016] bridge0: left promiscuous mode [ 393.870328][ T794] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 394.218729][ T794] usb 5-1: config 0 has no interfaces? [ 394.271042][ T794] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 394.300997][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.345522][ T794] usb 5-1: config 0 descriptor?? [ 395.496679][ T7026] syz_tun: entered allmulticast mode [ 398.100484][ T5939] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 398.336167][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.388277][ T5939] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 398.426673][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.713541][ T5939] usb 1-1: config 0 descriptor?? [ 398.958809][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.033118][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.297104][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 399.335631][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 399.402107][ T5939] usb 1-1: USB disconnect, device number 8 [ 404.350322][ T794] usb 5-1: USB disconnect, device number 8 [ 405.920711][ T794] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 406.160366][ T794] usb 5-1: Using ep0 maxpacket: 16 [ 406.291639][ T794] usb 5-1: config 149 has too many interfaces: 128, using maximum allowed: 32 [ 406.340385][ T794] usb 5-1: config 149 has an invalid descriptor of length 205, skipping remainder of the config [ 406.380351][ T794] usb 5-1: config 149 has 0 interfaces, different from the descriptor's value: 128 [ 406.464742][ T794] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 406.506728][ T794] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 406.560467][ T794] usb 5-1: Product: syz [ 406.564877][ T794] usb 5-1: SerialNumber: syz [ 407.120431][ T794] usb 5-1: USB disconnect, device number 9 [ 411.794049][ T7090] Invalid argument reading file caps for ./file0 [ 412.010902][ T7094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.350749][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 412.746999][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.812382][ T5939] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.848028][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.905404][ T5939] usb 3-1: config 0 descriptor?? [ 413.195668][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.270610][ T794] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 413.333183][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.465430][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 413.480218][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 413.521422][ T5939] usb 3-1: USB disconnect, device number 8 [ 413.635850][ T794] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 413.735133][ T794] usb 5-1: config 0 has no interface number 0 [ 413.790986][ T794] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.880326][ T794] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 413.931163][ T794] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 413.961493][ T794] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 414.007643][ T794] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 414.051205][ T794] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.114620][ T794] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 414.178498][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.265808][ T794] usb 5-1: config 0 descriptor?? [ 414.296557][ T7108] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 414.351269][ T7108] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 414.571160][ T794] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 414.668672][ T794] usb 5-1: USB disconnect, device number 10 [ 414.742430][ T794] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 416.329668][ T7113] bridge0: entered promiscuous mode [ 416.359923][ T7113] bridge0: port 3(macvtap1) entered blocking state [ 416.378133][ T7113] bridge0: port 3(macvtap1) entered disabled state [ 416.408953][ T7113] macvtap1: entered allmulticast mode [ 416.424665][ T7113] bridge0: entered allmulticast mode [ 416.450785][ T7113] macvtap1: left allmulticast mode [ 416.457381][ T7113] bridge0: left allmulticast mode [ 416.641621][ T7113] bridge0: left promiscuous mode [ 416.830362][ T5822] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 417.316140][ T5822] usb 3-1: config 0 has no interfaces? [ 417.341277][ T5822] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 417.458381][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.565466][ T5822] usb 3-1: config 0 descriptor?? [ 424.435832][ T5939] usb 3-1: USB disconnect, device number 9 [ 426.620481][ T5822] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 426.840257][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 426.883005][ T5822] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 426.933185][ T5822] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 427.006697][ T5822] usb 6-1: config 6 has no interface number 0 [ 427.050685][ T5822] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.096575][ T5822] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.186605][ T5822] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 427.220332][ T5939] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 427.230777][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.239033][ T5822] usb 6-1: Product: syz [ 427.290429][ T5822] usb 6-1: Manufacturer: syz [ 427.301204][ T5822] usb 6-1: SerialNumber: syz [ 427.414567][ T5822] hso 6-1:6.2: Failed to find INT IN ep [ 427.480348][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 427.523047][ T5939] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 427.580260][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.642955][ T5939] usb 1-1: config 0 descriptor?? [ 427.772654][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.822387][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.974300][ T5939] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 427.997053][ T5822] usb 6-1: USB disconnect, device number 8 [ 428.037778][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.118353][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 428.176800][ T5939] usb 1-1: media controller created [ 428.186587][ T7158] ===================================================== [ 428.194005][ T7158] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 428.201776][ T7158] _copy_to_user+0xcc/0x120 [ 428.206409][ T7158] i2cdev_ioctl_smbus+0x586/0x660 [ 428.211722][ T7158] compat_i2cdev_ioctl+0x48f/0xb40 [ 428.217031][ T7158] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 428.222807][ T7158] ia32_sys_call+0x2854/0x4360 [ 428.227675][ T7158] __do_fast_syscall_32+0x17f/0x3f0 [ 428.233267][ T7158] do_fast_syscall_32+0x37/0x80 [ 428.241076][ T7158] do_SYSENTER_32+0x1f/0x30 [ 428.245701][ T7158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.252474][ T7158] [ 428.254886][ T7158] Uninit was stored to memory at: [ 428.260296][ T7158] __i2c_smbus_xfer+0x25b3/0x3120 [ 428.265579][ T7158] i2c_smbus_xfer+0x2d8/0x480 [ 428.270690][ T7158] i2cdev_ioctl_smbus+0x4a1/0x660 [ 428.275926][ T7158] compat_i2cdev_ioctl+0x48f/0xb40 [ 428.281392][ T7158] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 428.287091][ T7158] ia32_sys_call+0x2854/0x4360 [ 428.293120][ T7158] __do_fast_syscall_32+0x17f/0x3f0 [ 428.298454][ T7158] do_fast_syscall_32+0x37/0x80 [ 428.303649][ T7158] do_SYSENTER_32+0x1f/0x30 [ 428.308277][ T7158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.314907][ T7158] [ 428.317297][ T7158] Local variable msgbuf1.i created at: [ 428.322977][ T7158] __i2c_smbus_xfer+0x853/0x3120 [ 428.328064][ T7158] i2c_smbus_xfer+0x2d8/0x480 [ 428.333045][ T7158] [ 428.335420][ T7158] Byte 0 of 1 is uninitialized [ 428.340355][ T7158] Memory access of size 1 starts at ffff8881072c3c76 [ 428.347105][ T7158] Data copied to user address 0000000080000040 [ 428.353554][ T7158] [ 428.355974][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.0.275 Not tainted syzkaller #0 PREEMPT(full) [ 428.365478][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 428.375756][ T7158] ===================================================== [ 428.382902][ T7158] Disabling lock debugging due to kernel taint [ 428.499528][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.531381][ T7158] Kernel panic - not syncing: kmsan.panic set ... [ 428.538029][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.275 Tainted: G B syzkaller #0 PREEMPT(full) [ 428.549043][ T7158] Tainted: [B]=BAD_PAGE [ 428.553326][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 428.563563][ T7158] Call Trace: [ 428.566972][ T7158] [ 428.570090][ T7158] __dump_stack+0x26/0x30 [ 428.574662][ T7158] dump_stack_lvl+0x50/0x1c0 [ 428.579477][ T7158] ? dump_stack+0x12/0x25 [ 428.584068][ T7158] dump_stack+0x1e/0x25 [ 428.588457][ T7158] vpanic+0x7b4/0x1430 [ 428.592784][ T7158] panic+0x15d/0x160 [ 428.596974][ T7158] kmsan_report+0x31a/0x320 [ 428.601733][ T7158] ? kmsan_internal_check_memory+0x1e8/0x240 [ 428.608008][ T7158] ? kmsan_copy_to_user+0xef/0x190 [ 428.613388][ T7158] ? _copy_to_user+0xcc/0x120 [ 428.618266][ T7158] ? i2cdev_ioctl_smbus+0x586/0x660 [ 428.623684][ T7158] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 428.629186][ T7158] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 428.635208][ T7158] ? ia32_sys_call+0x2854/0x4360 [ 428.640343][ T7158] ? __do_fast_syscall_32+0x17f/0x3f0 [ 428.645959][ T7158] ? do_fast_syscall_32+0x37/0x80 [ 428.651186][ T7158] ? do_SYSENTER_32+0x1f/0x30 [ 428.656082][ T7158] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.662836][ T7158] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 428.668341][ T7158] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 428.673824][ T7158] ? __i2c_transfer+0x1179/0x3280 [ 428.679076][ T7158] ? kmsan_get_metadata+0xf1/0x160 [ 428.684468][ T7158] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 428.691063][ T7158] ? kmsan_get_metadata+0xf1/0x160 [ 428.696452][ T7158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.702529][ T7158] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 428.707969][ T7158] ? kmsan_get_metadata+0xf1/0x160 [ 428.713353][ T7158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.719452][ T7158] kmsan_internal_check_memory+0x1e8/0x240 [ 428.725537][ T7158] kmsan_copy_to_user+0xef/0x190 [ 428.730724][ T7158] _copy_to_user+0xcc/0x120 [ 428.735476][ T7158] i2cdev_ioctl_smbus+0x586/0x660 [ 428.740747][ T7158] compat_i2cdev_ioctl+0x48f/0xb40 [ 428.746126][ T7158] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 428.751978][ T7158] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 428.757789][ T7158] ? fpregs_restore_userregs+0x213/0x3e0 [ 428.763682][ T7158] ? kmsan_get_metadata+0xf1/0x160 [ 428.769041][ T7158] ? kmsan_get_metadata+0xf1/0x160 [ 428.774437][ T7158] ia32_sys_call+0x2854/0x4360 [ 428.779392][ T7158] __do_fast_syscall_32+0x17f/0x3f0 [ 428.784824][ T7158] do_fast_syscall_32+0x37/0x80 [ 428.789885][ T7158] do_SYSENTER_32+0x1f/0x30 [ 428.794589][ T7158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.801175][ T7158] RIP: 0023:0xf706ef6c [ 428.805437][ T7158] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 428.825265][ T7158] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 428.833916][ T7158] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 428.842059][ T7158] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.850196][ T7158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.858475][ T7158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.866607][ T7158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.874794][ T7158] [ 428.878560][ T7158] Kernel Offset: disabled [ 428.882976][ T7158] Rebooting in 86400 seconds..