program: mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)="f000", 0x2, 0x3) pwrite64(r0, &(0x7f0000000600)="0200d0e37237ea8388bfb8958ce2df7b22f3860784c30248ed39490dfe8037f6cb012c19e5f66193b7492fb9f8e66c469b9f96b242d5344e44ca9245b0a0fcf8ae83f291f080290ce9952b0112485d0761ec21cb22aeab9032f383fd15d09dd079ccea656c6fe70fc86d3b030f355b9284d62aa5af173e266bfd1020b1b3c3e074", 0x81, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$eJzs3M1rI/UfB/BP2u0+//ZXRNDbDixCC5uw6XYXvVXdxQfsUnw4eNI0mYbsJpnSpGntyYNH8eB/IgqePPo3ePDsbfGgeBOUzEx0KwpC08ZuXy+YvGe+mXzm882h8J0pCeDMWkx++akS1+JSRMxHxNWIfL9Sbrm1Ip6PiOsRMffEVinH/xg4HxGXI+LauHhRs1K+9fnN0Y07P7758zffXTh35Yuvv5/drIFZeyEietvF/l6vyKxd5MNyvDHq5NlbHZVZvNF7VB5nRe6lm3mFvcbkvEaet9vF+dn27mCcW91Gc5ztzlY+vt0vLjgYtSd18g88bOzkx610M8/OIMuzfVD0tX9Q/G07GAyLOq2y3kd5+RgOJ1mMp/tpMZ/tR3k2+8NyvKibtdL9cY7KLC8XzazbyvvYPMo3/d/2Vqe/u5+M0p1BJ+snd2r1F2v1u9X6TtZKh+lqtdFr3V1Nltrd8WnVYdrorbWzrN1Na82st5wstZvNar2eLN1LNzuNflKv127XblXvLJd7N5PXHryXdFvJ0jhf6fR3h53uINnKdpLiE8vJSu32S8vJjXryzvpGsvH2/fvrG+9+cO/9By+vv/FqedLhth6nq8nSyq2VlWr9VnWlvnyG5v9J2fQU5w9HUpl1AwCnj/U/MAunff0f1v9TcarWv5O2zur6/xjmD0di/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGb9sPDl6/nOYnF8pRz/Xzn0THlciYi5iPjtb8zH+UM158s6C/9w/sJfevi2EnmF8TUulNvliFgrt1//f9zfAgAAADy9vvr4+mfFar14WZx1Q5yk4qbN3NUPp1SvEhELi4+nVG1u/PLslIrFcxFxLvaPWOVSmfkNrItH76qQ33I7N61q/8r8obj4RFSKmDvRdgAAgBNxeCVwsqsQAAAATtKns26A2ajE5FHm5Flw/p/3fz4QvHToCAAAADiFKrNuAAAAADh2+frf7/8BAADA0634/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/ZuZ+c1KEoDsCnhb7H+5dHjHO34gyW4RIcOjQswE2wBNyCC5A14MwlGDC0JVqDiUlv20i+L2nLvSE/TgmTcy8pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF16Klbz+9uLu7Y52107ae4GAAAAOGZTrObli2k1/lPP/6unzupxFhF5RBzr3Ufxo5E5qnOKT95ffKjhIaJM2H/Gz/r4HRGX9fHyv+tvAQAAAE7B49HZ9WI5q7r16jTtuSoGVS3a5H+vEuVlEVFMnxOl5fvTeaKw8vc9jptEaeUC1iRRWLXkNk6V9iWjxmXy7pJVl7zXcgAAgF40O4F+uxAAAAD6dD10AQwji8NW5mEvuPzn/duG4K/GCAAAAPiGsqELAAAAADpX9v+e/wcAAACnrXr+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aFKv5erGctc3Z7tpJczcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyv68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD8+c7n0gLCCshDEGJggIW6bmnpCgIUMcB/gBSlbgm4/Ggz0KpCysKGMndBMCKEBApb/4fOrdSlbB08lIWx6H7FV7dSTkS+c5rPR3p+X19e7n3fJYryvXcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApel7szhOX/p5HBXH7jy8sZH2d+f61K2de6tpS+NOk0kfDq9V33QG7SUCAADA0RGX9X0I4X6yu5b2UT+r/5NyTFrz//xiHpf1/HzdX/Zl7Z+2v/588MreRP18nvSkFzcn41NPptJd3CqXxL+PcnOHX9r3E7vZlc/uvcTZFyT6ePvlaZJdz86Pt29/2MvCY4tKHAA4qJNlXwTl70NpP2ozMQCeCb0aY7qVwrus/+P+YvMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWAbT7fB8GXdCCKvdWZy6+/DGxtP6Wzv3Vst27ubNneo501MkIYSLm5PxqQbXsuyuXrv+5fpkMr4yC94P80cWE7weQljwFPsHn9UYE0KbGQoOGkTF9/qy5HM4gpZ/MAEA8MxJipbW9feT3bX0WGclhEe/PF7/v1mJQ836/8Hn5+5U56rW/6PGVtiaDz6tOXC4dfmb4dVr19/evLx+aXxp/NU7p0fvjs6cP3v2/DC7VzJ0xwQAAICD6RWtWv9HK0/u/5+oxKFm/f/tT6Pvq3PFR6v+r2226dd2JgAAAEdWWe7+03naB3u98N361taVUf669/50/tpwrv/LsaJV6/94pe2sAAAAgCZMtzuP7f9fqMSh5v7/C7+++nv1nHEI4XiIsv3/kxtfTy40t5yl1sSfE7e9RgAAANp1vGjV/f8ke/4/2nvkIQohvPVGHhf/BrBW/R9/9MNv1bmqz/+faW6JSyka5Ncj6wchdAdtZwQAAMCh1d9/yHNFS4v9v5PdtS/+OPFJz/P/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE37LwAA//9EikmR") [ 94.871983][ T5273] Bluetooth: hci0: command tx timeout [ 95.191966][ T5311] Console: switching to colour dummy device 80x25 [ 95.406366][ T5311] ============================================================================= [ 95.406916][ T5311] [ 95.406922][ T5311] ====================================================== [ 95.406927][ T5311] WARNING: possible circular locking dependency detected [ 95.406933][ T5311] syzkaller #0 Not tainted [ 95.406938][ T5311] ------------------------------------------------------ [ 95.406943][ T5311] syz.0.0/5311 is trying to acquire lock: [ 95.406949][ T5311] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 95.407024][ T5311] [ 95.407024][ T5311] but task is already holding lock: [ 95.407027][ T5311] ffff88801af81d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 95.407052][ T5311] [ 95.407052][ T5311] which lock already depends on the new lock. [ 95.407052][ T5311] [ 95.407056][ T5311] [ 95.407056][ T5311] the existing dependency chain (in reverse order) is: [ 95.407059][ T5311] [ 95.407059][ T5311] -> #4 (&n->list_lock){-.-.}-{3:3}: [ 95.407072][ T5311] _raw_spin_lock_irqsave+0x40/0x60 [ 95.407116][ T5311] get_from_partial_node+0x54/0x4c0 [ 95.407130][ T5311] ___slab_alloc+0xbe/0x950 [ 95.407141][ T5311] kmem_cache_alloc_noprof+0x135/0x5f0 [ 95.407156][ T5311] fill_pool+0x165/0x610 [ 95.407198][ T5311] debug_object_activate+0x38d/0x420 [ 95.407209][ T5311] insert_work+0x35/0x330 [ 95.407218][ T5311] __queue_work+0xcd8/0x10a0 [ 95.407229][ T5311] queue_work_on+0x106/0x1d0 [ 95.407238][ T5311] pcpu_alloc_noprof+0xa92/0x1900 [ 95.407247][ T5311] iova_domain_init_rcaches+0x217/0x530 [ 95.407260][ T5311] iommu_setup_dma_ops+0x554/0x1820 [ 95.407270][ T5311] bus_iommu_probe+0x296/0x470 [ 95.407285][ T5311] iommu_device_register+0x1af/0x210 [ 95.407299][ T5311] intel_iommu_init+0x6f0/0x8e0 [ 95.407371][ T5311] pci_iommu_init+0x38/0x70 [ 95.407385][ T5311] do_one_initcall+0x250/0x870 [ 95.407399][ T5311] do_initcall_level+0x10a/0x1a0 [ 95.407412][ T5311] do_initcalls+0x59/0xa0 [ 95.407423][ T5311] kernel_init_freeable+0x29d/0x3e0 [ 95.407436][ T5311] kernel_init+0x1d/0x1d0 [ 95.407449][ T5311] ret_from_fork+0x514/0xb70 [ 95.407461][ T5311] ret_from_fork_asm+0x1a/0x30 [ 95.407474][ T5311] [ 95.407474][ T5311] -> #3 (&pool->lock){-.-.}-{2:2}: [ 95.407488][ T5311] _raw_spin_lock+0x2e/0x40 [ 95.407497][ T5311] __queue_work+0x72f/0x10a0 [ 95.407506][ T5311] queue_work_on+0x106/0x1d0 [ 95.407515][ T5311] rpm_suspend+0xeca/0x17b0 [ 95.407528][ T5311] __pm_runtime_idle+0x12f/0x1a0 [ 95.407541][ T5311] __device_attach+0x355/0x450 [ 95.407554][ T5311] device_initial_probe+0xa1/0xd0 [ 95.407562][ T5311] bus_probe_device+0x12a/0x220 [ 95.407573][ T5311] device_add+0x7d7/0xb80 [ 95.407585][ T5311] serial_base_port_add+0x18f/0x270 [ 95.407594][ T5311] serial_core_register_port+0x37f/0x2840 [ 95.407605][ T5311] serial8250_register_8250_port+0x16b4/0x2090 [ 95.407617][ T5311] serial_pnp_probe+0x56a/0x7f0 [ 95.407628][ T5311] pnp_device_probe+0x30b/0x4c0 [ 95.407639][ T5311] really_probe+0x254/0xae0 [ 95.407647][ T5311] __driver_probe_device+0x1e8/0x360 [ 95.407655][ T5311] driver_probe_device+0x4f/0x240 [ 95.407663][ T5311] __driver_attach+0x339/0x600 [ 95.407671][ T5311] bus_for_each_dev+0x23b/0x2c0 [ 95.407682][ T5311] bus_add_driver+0x345/0x670 [ 95.407693][ T5311] driver_register+0x23a/0x320 [ 95.407702][ T5311] serial8250_init+0x8f/0x160 [ 95.407713][ T5311] do_one_initcall+0x250/0x870 [ 95.407725][ T5311] do_initcall_level+0x10a/0x1a0 [ 95.407737][ T5311] do_initcalls+0x59/0xa0 [ 95.407755][ T5311] kernel_init_freeable+0x29d/0x3e0 [ 95.407770][ T5311] kernel_init+0x1d/0x1d0 [ 95.407783][ T5311] ret_from_fork+0x514/0xb70 [ 95.407796][ T5311] ret_from_fork_asm+0x1a/0x30 [ 95.407809][ T5311] [ 95.407809][ T5311] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 95.407822][ T5311] _raw_spin_lock_irqsave+0x40/0x60 [ 95.407831][ T5311] __pm_runtime_resume+0x10f/0x180 [ 95.407845][ T5311] __uart_start+0x171/0x460 [ 95.407855][ T5311] uart_write+0x251/0x9f0 [ 95.407866][ T5311] n_tty_write+0xd49/0x11e0 [ 95.407874][ T5311] file_tty_write+0x509/0x9c0 [ 95.407885][ T5311] vfs_write+0x612/0xba0 [ 95.407896][ T5311] ksys_write+0x150/0x270 [ 95.407907][ T5311] do_syscall_64+0x174/0x580 [ 95.407918][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.407927][ T5311] [ 95.407927][ T5311] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 95.407940][ T5311] _raw_spin_lock_irqsave+0x40/0x60 [ 95.407949][ T5311] serial8250_console_write+0x153/0x1ba0 [ 95.407961][ T5311] console_flush_all+0x6ea/0xaf0 [ 95.407970][ T5311] console_unlock+0xd1/0x1c0 [ 95.407984][ T5311] vprintk_emit+0x485/0x560 [ 95.407996][ T5311] _printk+0xdd/0x130 [ 95.408004][ T5311] register_console+0xbc3/0xfc0 [ 95.408013][ T5311] univ8250_console_init+0x3a/0x70 [ 95.408025][ T5311] console_init+0x10b/0x4a0 [ 95.408034][ T5311] start_kernel+0x238/0x3e0 [ 95.408046][ T5311] x86_64_start_reservations+0x24/0x30 [ 95.408056][ T5311] x86_64_start_kernel+0x137/0x1b0 [ 95.408064][ T5311] common_startup_64+0x13e/0x157 [ 95.408074][ T5311] [ 95.408074][ T5311] -> #0 (console_owner){....}-{0:0}: [ 95.408086][ T5311] __lock_acquire+0x1520/0x2cf0 [ 95.408099][ T5311] lock_acquire+0x106/0x350 [ 95.408109][ T5311] console_flush_all+0x693/0xaf0 [ 95.408117][ T5311] console_unlock+0xd1/0x1c0 [ 95.408130][ T5311] vprintk_emit+0x485/0x560 [ 95.408143][ T5311] _printk+0xdd/0x130 [ 95.408150][ T5311] __slab_bug+0x6e/0xd0 [ 95.408159][ T5311] slab_bug+0x57/0x80 [ 95.408168][ T5311] list_slab_objects+0x35/0x1a0 [ 95.408178][ T5311] __kmem_cache_shutdown+0x1a5/0x2a0 [ 95.408189][ T5311] kmem_cache_destroy+0x98/0x180 [ 95.408202][ T5311] virtio_gpu_free_vbufs+0x40/0x70 [ 95.408213][ T5311] virtio_gpu_release+0x55/0x140 [ 95.408222][ T5311] drm_dev_put+0xa9/0x120 [ 95.408230][ T5311] virtio_dev_remove+0x9c/0x1b0 [ 95.408240][ T5311] device_release_driver_internal+0x48b/0x880 [ 95.408249][ T5311] bus_remove_device+0x444/0x560 [ 95.408260][ T5311] device_del+0x524/0x8f0 [ 95.408274][ T5311] device_unregister+0x21/0xf0 [ 95.408288][ T5311] unregister_virtio_device+0x37/0x60 [ 95.408297][ T5311] virtio_pci_remove+0x7f/0xf0 [ 95.408309][ T5311] pci_device_remove+0x99/0x1c0 [ 95.408320][ T5311] device_release_driver_internal+0x48b/0x880 [ 95.408328][ T5311] pci_stop_bus_device+0xf6/0x120 [ 95.408340][ T5311] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 95.408353][ T5311] remove_store+0xe5/0x150 [ 95.408365][ T5311] kernfs_fop_write_iter+0x3a4/0x540 [ 95.408379][ T5311] vfs_write+0x612/0xba0 [ 95.408389][ T5311] ksys_write+0x150/0x270 [ 95.408400][ T5311] do_syscall_64+0x174/0x580 [ 95.408410][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.408419][ T5311] [ 95.408419][ T5311] other info that might help us debug this: [ 95.408419][ T5311] [ 95.408423][ T5311] Chain exists of: [ 95.408423][ T5311] console_owner --> &pool->lock --> &n->list_lock [ 95.408423][ T5311] [ 95.408437][ T5311] Possible unsafe locking scenario: [ 95.408437][ T5311] [ 95.408440][ T5311] CPU0 CPU1 [ 95.408443][ T5311] ---- ---- [ 95.408445][ T5311] lock(&n->list_lock); [ 95.408452][ T5311] lock(&pool->lock); [ 95.408460][ T5311] lock(&n->list_lock); [ 95.408468][ T5311] lock(console_owner); [ 95.408475][ T5311] [ 95.408475][ T5311] *** DEADLOCK *** [ 95.408475][ T5311] [ 95.408478][ T5311] 11 locks held by syz.0.0/5311: [ 95.408484][ T5311] #0: ffff88801f81b470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 95.408508][ T5311] #1: ffff888012fb8450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 95.408535][ T5311] #2: ffff888040377880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 95.408563][ T5311] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0 [ 95.408589][ T5311] #4: ffff88801f8581f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 95.408609][ T5311] #5: ffff88803337f1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 95.408630][ T5311] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180 [ 95.408658][ T5311] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180 [ 95.408686][ T5311] #8: ffff88801af81d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 95.408709][ T5311] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 95.408730][ T5311] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 95.408761][ T5311] [ 95.408761][ T5311] stack backtrace: [ 95.408767][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.408780][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.408787][ T5311] Call Trace: [ 95.408792][ T5311] [ 95.408797][ T5311] dump_stack_lvl+0xe8/0x150 [ 95.408811][ T5311] print_circular_bug+0x2e1/0x300 [ 95.408830][ T5311] check_noncircular+0x12e/0x150 [ 95.408845][ T5311] __lock_acquire+0x1520/0x2cf0 [ 95.408862][ T5311] ? console_flush_all+0x123/0xaf0 [ 95.408872][ T5311] lock_acquire+0x106/0x350 [ 95.408884][ T5311] ? console_flush_all+0x123/0xaf0 [ 95.408894][ T5311] ? do_raw_spin_unlock+0x4d/0x210 [ 95.408904][ T5311] ? console_flush_all+0x123/0xaf0 [ 95.408913][ T5311] console_flush_all+0x693/0xaf0 [ 95.408923][ T5311] ? console_flush_all+0x123/0xaf0 [ 95.408933][ T5311] ? console_flush_all+0x123/0xaf0 [ 95.408944][ T5311] ? __pfx_console_flush_all+0x10/0x10 [ 95.408954][ T5311] ? is_printk_cpu_sync_owner+0x32/0x40 [ 95.408966][ T5311] console_unlock+0xd1/0x1c0 [ 95.408980][ T5311] ? __pfx_console_unlock+0x10/0x10 [ 95.408993][ T5311] ? _raw_spin_unlock+0x40/0x50 [ 95.409004][ T5311] ? _printk+0xdd/0x130 [ 95.409014][ T5311] vprintk_emit+0x485/0x560 [ 95.409029][ T5311] ? __pfx_vprintk_emit+0x10/0x10 [ 95.409046][ T5311] _printk+0xdd/0x130 [ 95.409055][ T5311] ? __lock_acquire+0x683/0x2cf0 [ 95.409069][ T5311] ? __pfx__printk+0x10/0x10 [ 95.409080][ T5311] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.409091][ T5311] __slab_bug+0x6e/0xd0 [ 95.409102][ T5311] slab_bug+0x57/0x80 [ 95.409114][ T5311] list_slab_objects+0x35/0x1a0 [ 95.409126][ T5311] __kmem_cache_shutdown+0x1a5/0x2a0 [ 95.409139][ T5311] ? virtio_gpu_free_vbufs+0x40/0x70 [ 95.409150][ T5311] kmem_cache_destroy+0x98/0x180 [ 95.409164][ T5311] virtio_gpu_free_vbufs+0x40/0x70 [ 95.409175][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 95.409185][ T5311] virtio_gpu_release+0x55/0x140 [ 95.409194][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 95.409203][ T5311] drm_dev_put+0xa9/0x120 [ 95.409214][ T5311] virtio_dev_remove+0x9c/0x1b0 [ 95.409225][ T5311] ? __pfx_virtio_dev_remove+0x10/0x10 [ 95.409234][ T5311] device_release_driver_internal+0x48b/0x880 [ 95.409245][ T5311] bus_remove_device+0x444/0x560 [ 95.409257][ T5311] ? __pfx_bus_remove_device+0x10/0x10 [ 95.409270][ T5311] ? kernfs_remove_by_name_ns+0x101/0x140 [ 95.409285][ T5311] device_del+0x524/0x8f0 [ 95.409301][ T5311] ? __pfx_device_del+0x10/0x10 [ 95.409317][ T5311] device_unregister+0x21/0xf0 [ 95.409328][ T5311] unregister_virtio_device+0x37/0x60 [ 95.409334][ T5311] virtio_pci_remove+0x7f/0xf0 [ 95.409342][ T5311] pci_device_remove+0x99/0x1c0 [ 95.409349][ T5311] ? __pfx_pci_device_remove+0x10/0x10 [ 95.409355][ T5311] device_release_driver_internal+0x48b/0x880 [ 95.409362][ T5311] pci_stop_bus_device+0xf6/0x120 [ 95.409373][ T5311] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 95.409385][ T5311] remove_store+0xe5/0x150 [ 95.409398][ T5311] ? __pfx_remove_store+0x10/0x10 [ 95.409411][ T5311] ? sysfs_file_kobj+0x1e4/0x230 [ 95.409421][ T5311] ? sysfs_kf_write+0x166/0x260 [ 95.409432][ T5311] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.409442][ T5311] kernfs_fop_write_iter+0x3a4/0x540 [ 95.409457][ T5311] vfs_write+0x612/0xba0 [ 95.409470][ T5311] ? __pfx_vfs_write+0x10/0x10 [ 95.409484][ T5311] ? __fget_files+0x2a/0x420 [ 95.409496][ T5311] ksys_write+0x150/0x270 [ 95.409509][ T5311] ? __pfx_ksys_write+0x10/0x10 [ 95.409523][ T5311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.409533][ T5311] do_syscall_64+0x174/0x580 [ 95.409544][ T5311] ? trace_irq_disable+0x3b/0x140 [ 95.409556][ T5311] ? clear_bhb_loop+0x70/0xc0 [ 95.409567][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.409578][ T5311] RIP: 0033:0x7f958f99e0d9 [ 95.409588][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.409597][ T5311] RSP: 002b:00007f95907eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.409607][ T5311] RAX: ffffffffffffffda RBX: 00007f958fc26090 RCX: 00007f958f99e0d9 [ 95.409614][ T5311] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 95.409621][ T5311] RBP: 00007f958fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 95.409627][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.409634][ T5311] R13: 00007f958fc26128 R14: 00007f958fc26090 R15: 00007ffc8464bb68 [ 95.409646][ T5311] [ 95.963843][ T5311] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 95.967527][ T5311] ----------------------------------------------------------------------------- [ 95.967527][ T5311] [ 95.971734][ T5311] Object 0xffff88801f99fd20 @offset=3360 [ 95.974357][ T5311] Object 0xffff88801f99fe38 @offset=3640 [ 95.976833][ T5311] Slab 0xffffea00007e67c0 objects=14 used=2 fp=0xffff88801f99f000 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 95.982220][ T5311] ------------[ cut here ]------------ [ 95.984610][ T5311] 1 [ 95.984620][ T5311] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5311 [ 95.990110][ T5311] Modules linked in: [ 95.991820][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 95.996055][ T5311] Tainted: [B]=BAD_PAGE [ 95.997869][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.004552][ T5311] RIP: 0010:__slab_err+0x15/0x20 [ 96.006413][ T5311] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 96.013786][ T5311] RSP: 0018:ffffc9000e75f6d8 EFLAGS: 00010083 [ 96.016359][ T5311] RAX: ffffffff8186dc3a RBX: ffff888034d3bc80 RCX: 0000000000100000 [ 96.019771][ T5311] RDX: ffffc90020001000 RSI: 000000000006a2a1 RDI: 000000000006a2a2 [ 96.023198][ T5311] RBP: ffffea000074b3d0 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 96.026534][ T5311] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00004994d0 [ 96.029910][ T5311] R13: ffffea00007e67c0 R14: ffffc9000e75f6f0 R15: ffff88801af81d80 [ 96.033246][ T5311] FS: 00007f95907ef6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 96.037078][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.040000][ T5311] CR2: 00007f9584bbd000 CR3: 00000000121ef000 CR4: 0000000000352ef0 [ 96.043308][ T5311] Call Trace: [ 96.044755][ T5311] [ 96.046074][ T5311] __kmem_cache_shutdown+0x1a5/0x2a0 [ 96.048340][ T5311] ? virtio_gpu_free_vbufs+0x40/0x70 [ 96.050603][ T5311] kmem_cache_destroy+0x98/0x180 [ 96.052793][ T5311] virtio_gpu_free_vbufs+0x40/0x70 [ 96.054845][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.057121][ T5311] virtio_gpu_release+0x55/0x140 [ 96.059358][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.061681][ T5311] drm_dev_put+0xa9/0x120 [ 96.063624][ T5311] virtio_dev_remove+0x9c/0x1b0 [ 96.065786][ T5311] ? __pfx_virtio_dev_remove+0x10/0x10 [ 96.068079][ T5311] device_release_driver_internal+0x48b/0x880 [ 96.070758][ T5311] bus_remove_device+0x444/0x560 [ 96.072850][ T5311] ? __pfx_bus_remove_device+0x10/0x10 [ 96.075058][ T5311] ? kernfs_remove_by_name_ns+0x101/0x140 [ 96.077151][ T5311] device_del+0x524/0x8f0 [ 96.078914][ T5311] ? __pfx_device_del+0x10/0x10 [ 96.080969][ T5311] device_unregister+0x21/0xf0 [ 96.083005][ T5311] unregister_virtio_device+0x37/0x60 [ 96.084979][ T5311] virtio_pci_remove+0x7f/0xf0 [ 96.086819][ T5311] pci_device_remove+0x99/0x1c0 [ 96.088775][ T5311] ? __pfx_pci_device_remove+0x10/0x10 [ 96.090908][ T5311] device_release_driver_internal+0x48b/0x880 [ 96.093504][ T5311] pci_stop_bus_device+0xf6/0x120 [ 96.095714][ T5311] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 96.098397][ T5311] remove_store+0xe5/0x150 [ 96.100194][ T5311] ? __pfx_remove_store+0x10/0x10 [ 96.102299][ T5311] ? sysfs_file_kobj+0x1e4/0x230 [ 96.104418][ T5311] ? sysfs_kf_write+0x166/0x260 [ 96.106587][ T5311] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.108803][ T5311] kernfs_fop_write_iter+0x3a4/0x540 [ 96.111044][ T5311] vfs_write+0x612/0xba0 [ 96.112832][ T5311] ? __pfx_vfs_write+0x10/0x10 [ 96.114929][ T5311] ? __fget_files+0x2a/0x420 [ 96.116882][ T5311] ksys_write+0x150/0x270 [ 96.118769][ T5311] ? __pfx_ksys_write+0x10/0x10 [ 96.120820][ T5311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.123463][ T5311] do_syscall_64+0x174/0x580 [ 96.125503][ T5311] ? trace_irq_disable+0x3b/0x140 [ 96.127663][ T5311] ? clear_bhb_loop+0x70/0xc0 [ 96.129847][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.132484][ T5311] RIP: 0033:0x7f958f99e0d9 [ 96.134470][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.142806][ T5311] RSP: 002b:00007f95907eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.146530][ T5311] RAX: ffffffffffffffda RBX: 00007f958fc26090 RCX: 00007f958f99e0d9 [ 96.149948][ T5311] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 96.153442][ T5311] RBP: 00007f958fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.156817][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.160248][ T5311] R13: 00007f958fc26128 R14: 00007f958fc26090 R15: 00007ffc8464bb68 [ 96.163762][ T5311] [ 96.165293][ T5311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.168485][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 96.173248][ T5311] Tainted: [B]=BAD_PAGE [ 96.175065][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.179328][ T5311] Call Trace: [ 96.180728][ T5311] [ 96.182075][ T5311] vpanic+0x56c/0xa60 [ 96.183827][ T5311] ? __pfx__printk+0x10/0x10 [ 96.185825][ T5311] ? __pfx_vpanic+0x10/0x10 [ 96.187859][ T5311] ? is_bpf_text_address+0x292/0x2b0 [ 96.190085][ T5311] ? is_bpf_text_address+0x26/0x2b0 [ 96.192360][ T5311] panic+0xc5/0xd0 [ 96.193954][ T5311] ? __pfx_panic+0x10/0x10 [ 96.195912][ T5311] __warn+0x315/0x4c0 [ 96.197720][ T5311] ? __slab_err+0x15/0x20 [ 96.199578][ T5311] ? __slab_err+0x15/0x20 [ 96.201404][ T5311] __report_bug+0x276/0x570 [ 96.203455][ T5311] ? do_raw_spin_unlock+0x4d/0x210 [ 96.205589][ T5311] ? __slab_err+0x15/0x20 [ 96.207409][ T5311] ? __pfx___report_bug+0x10/0x10 [ 96.209715][ T5311] ? __wake_up_klogd+0xe6/0x120 [ 96.211993][ T5311] ? vprintk_emit+0x4eb/0x560 [ 96.214016][ T5311] ? __pfx_vprintk_emit+0x10/0x10 [ 96.216120][ T5311] ? _printk+0xdd/0x130 [ 96.217907][ T5311] ? __slab_err+0x15/0x20 [ 96.219791][ T5311] report_bug+0x16a/0x220 [ 96.221643][ T5311] ? __slab_err+0x15/0x20 [ 96.223586][ T5311] ? __slab_err+0x17/0x20 [ 96.225487][ T5311] handle_bug+0x9c/0x200 [ 96.227245][ T5311] exc_invalid_op+0x1a/0x50 [ 96.229130][ T5311] asm_exc_invalid_op+0x1a/0x20 [ 96.231304][ T5311] RIP: 0010:__slab_err+0x15/0x20 [ 96.233489][ T5311] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 96.241680][ T5311] RSP: 0018:ffffc9000e75f6d8 EFLAGS: 00010083 [ 96.244322][ T5311] RAX: ffffffff8186dc3a RBX: ffff888034d3bc80 RCX: 0000000000100000 [ 96.247596][ T5311] RDX: ffffc90020001000 RSI: 000000000006a2a1 RDI: 000000000006a2a2 [ 96.250959][ T5311] RBP: ffffea000074b3d0 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 96.254288][ T5311] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00004994d0 [ 96.257503][ T5311] R13: ffffea00007e67c0 R14: ffffc9000e75f6f0 R15: ffff88801af81d80 [ 96.260717][ T5311] ? add_taint+0x9a/0xe0 [ 96.262571][ T5311] ? __slab_err+0x14/0x20 [ 96.264442][ T5311] __kmem_cache_shutdown+0x1a5/0x2a0 [ 96.266740][ T5311] ? virtio_gpu_free_vbufs+0x40/0x70 [ 96.269028][ T5311] kmem_cache_destroy+0x98/0x180 [ 96.271202][ T5311] virtio_gpu_free_vbufs+0x40/0x70 [ 96.273379][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.275778][ T5311] virtio_gpu_release+0x55/0x140 [ 96.277976][ T5311] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.280370][ T5311] drm_dev_put+0xa9/0x120 [ 96.282302][ T5311] virtio_dev_remove+0x9c/0x1b0 [ 96.284394][ T5311] ? __pfx_virtio_dev_remove+0x10/0x10 [ 96.286715][ T5311] device_release_driver_internal+0x48b/0x880 [ 96.289347][ T5311] bus_remove_device+0x444/0x560 [ 96.291368][ T5311] ? __pfx_bus_remove_device+0x10/0x10 [ 96.293665][ T5311] ? kernfs_remove_by_name_ns+0x101/0x140 [ 96.296051][ T5311] device_del+0x524/0x8f0 [ 96.297877][ T5311] ? __pfx_device_del+0x10/0x10 [ 96.299916][ T5311] device_unregister+0x21/0xf0 [ 96.301951][ T5311] unregister_virtio_device+0x37/0x60 [ 96.304240][ T5311] virtio_pci_remove+0x7f/0xf0 [ 96.306325][ T5311] pci_device_remove+0x99/0x1c0 [ 96.308527][ T5311] ? __pfx_pci_device_remove+0x10/0x10 [ 96.310927][ T5311] device_release_driver_internal+0x48b/0x880 [ 96.313510][ T5311] pci_stop_bus_device+0xf6/0x120 [ 96.315623][ T5311] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 96.318189][ T5311] remove_store+0xe5/0x150 [ 96.320025][ T5311] ? __pfx_remove_store+0x10/0x10 [ 96.322089][ T5311] ? sysfs_file_kobj+0x1e4/0x230 [ 96.324135][ T5311] ? sysfs_kf_write+0x166/0x260 [ 96.326219][ T5311] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.328387][ T5311] kernfs_fop_write_iter+0x3a4/0x540 [ 96.330496][ T5311] vfs_write+0x612/0xba0 [ 96.332274][ T5311] ? __pfx_vfs_write+0x10/0x10 [ 96.334328][ T5311] ? __fget_files+0x2a/0x420 [ 96.336258][ T5311] ksys_write+0x150/0x270 [ 96.338035][ T5311] ? __pfx_ksys_write+0x10/0x10 [ 96.340024][ T5311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.342524][ T5311] do_syscall_64+0x174/0x580 [ 96.344403][ T5311] ? trace_irq_disable+0x3b/0x140 [ 96.346524][ T5311] ? clear_bhb_loop+0x70/0xc0 [ 96.348507][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.351005][ T5311] RIP: 0033:0x7f958f99e0d9 [ 96.352975][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.360909][ T5311] RSP: 002b:00007f95907eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.364359][ T5311] RAX: ffffffffffffffda RBX: 00007f958fc26090 RCX: 00007f958f99e0d9 [ 96.367613][ T5311] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 96.370890][ T5311] RBP: 00007f958fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.374344][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.377734][ T5311] R13: 00007f958fc26128 R14: 00007f958fc26090 R15: 00007ffc8464bb68 [ 96.381060][ T5311] [ 96.382776][ T5311] Kernel Offset: disabled [ 96.384539][ T5311] Rebooting in 86400 seconds..