program: mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10) pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4097, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) read(r3, &(0x7f0000000c00)=""/1000, 0x3e8) [ 92.519558][ T4641] Bluetooth: hci0: command tx timeout [ 92.553266][ T804] cfg80211: failed to load regulatory.db [ 92.788067][ T5315] Console: switching to colour dummy device 80x25 [ 92.919030][ T5315] ============================================================================= [ 92.919583][ T5315] [ 92.919589][ T5315] ====================================================== [ 92.919594][ T5315] WARNING: possible circular locking dependency detected [ 92.919599][ T5315] syzkaller #0 Not tainted [ 92.919604][ T5315] ------------------------------------------------------ [ 92.919609][ T5315] syz.0.0/5315 is trying to acquire lock: [ 92.919616][ T5315] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 92.919697][ T5315] [ 92.919697][ T5315] but task is already holding lock: [ 92.919700][ T5315] ffff888032ab8d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 92.919725][ T5315] [ 92.919725][ T5315] which lock already depends on the new lock. [ 92.919725][ T5315] [ 92.919728][ T5315] [ 92.919728][ T5315] the existing dependency chain (in reverse order) is: [ 92.919731][ T5315] [ 92.919731][ T5315] -> #4 (&n->list_lock){-.-.}-{3:3}: [ 92.919745][ T5315] _raw_spin_lock_irqsave+0x40/0x60 [ 92.919790][ T5315] get_from_partial_node+0x54/0x4c0 [ 92.919802][ T5315] ___slab_alloc+0x258/0x950 [ 92.919813][ T5315] kmem_cache_alloc_noprof+0x135/0x5f0 [ 92.919827][ T5315] fill_pool+0x165/0x610 [ 92.919869][ T5315] debug_object_activate+0x38d/0x420 [ 92.919880][ T5315] insert_work+0x35/0x330 [ 92.919894][ T5315] __queue_work+0xcd8/0x10a0 [ 92.919905][ T5315] queue_work_on+0x106/0x1d0 [ 92.919914][ T5315] call_usermodehelper_exec+0x28e/0x4b0 [ 92.919924][ T5315] kobject_uevent_env+0x685/0x9e0 [ 92.919933][ T5315] driver_register+0x2d4/0x320 [ 92.919946][ T5315] do_one_initcall+0x250/0x870 [ 92.919958][ T5315] do_initcall_level+0x10a/0x1a0 [ 92.920079][ T5315] do_initcalls+0x59/0xa0 [ 92.920092][ T5315] kernel_init_freeable+0x29d/0x3e0 [ 92.920103][ T5315] kernel_init+0x1d/0x1d0 [ 92.920115][ T5315] ret_from_fork+0x514/0xb70 [ 92.920127][ T5315] ret_from_fork_asm+0x1a/0x30 [ 92.920138][ T5315] [ 92.920138][ T5315] -> #3 (&pool->lock){-.-.}-{2:2}: [ 92.920150][ T5315] _raw_spin_lock+0x2e/0x40 [ 92.920159][ T5315] __queue_work+0x72f/0x10a0 [ 92.920168][ T5315] queue_work_on+0x106/0x1d0 [ 92.920177][ T5315] rpm_suspend+0xeca/0x17b0 [ 92.920190][ T5315] __pm_runtime_idle+0x12f/0x1a0 [ 92.920203][ T5315] __device_attach+0x355/0x450 [ 92.920216][ T5315] device_initial_probe+0xa1/0xd0 [ 92.920224][ T5315] bus_probe_device+0x12a/0x220 [ 92.920234][ T5315] device_add+0x7d7/0xb80 [ 92.920246][ T5315] serial_base_port_add+0x18f/0x270 [ 92.920255][ T5315] serial_core_register_port+0x37f/0x2840 [ 92.920265][ T5315] serial8250_register_8250_port+0x16b4/0x2090 [ 92.920276][ T5315] serial_pnp_probe+0x56a/0x7f0 [ 92.920286][ T5315] pnp_device_probe+0x30b/0x4c0 [ 92.920297][ T5315] really_probe+0x254/0xae0 [ 92.920305][ T5315] __driver_probe_device+0x1e8/0x360 [ 92.920312][ T5315] driver_probe_device+0x4f/0x240 [ 92.920320][ T5315] __driver_attach+0x339/0x600 [ 92.920328][ T5315] bus_for_each_dev+0x23b/0x2c0 [ 92.920337][ T5315] bus_add_driver+0x345/0x670 [ 92.920346][ T5315] driver_register+0x23a/0x320 [ 92.920355][ T5315] serial8250_init+0x8f/0x160 [ 92.920367][ T5315] do_one_initcall+0x250/0x870 [ 92.920377][ T5315] do_initcall_level+0x10a/0x1a0 [ 92.920388][ T5315] do_initcalls+0x59/0xa0 [ 92.920399][ T5315] kernel_init_freeable+0x29d/0x3e0 [ 92.920410][ T5315] kernel_init+0x1d/0x1d0 [ 92.920423][ T5315] ret_from_fork+0x514/0xb70 [ 92.920434][ T5315] ret_from_fork_asm+0x1a/0x30 [ 92.920447][ T5315] [ 92.920447][ T5315] -> #2 (&dev->power.lock){-...}-{3:3}: [ 92.920462][ T5315] _raw_spin_lock_irqsave+0x40/0x60 [ 92.920472][ T5315] __pm_runtime_resume+0x10f/0x180 [ 92.920486][ T5315] __uart_start+0x171/0x460 [ 92.920497][ T5315] uart_write+0x251/0x9f0 [ 92.920507][ T5315] n_tty_write+0xd49/0x11e0 [ 92.920515][ T5315] file_tty_write+0x509/0x9c0 [ 92.920526][ T5315] vfs_write+0x612/0xba0 [ 92.920538][ T5315] ksys_write+0x150/0x270 [ 92.920549][ T5315] do_syscall_64+0x174/0x580 [ 92.920561][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.920570][ T5315] [ 92.920570][ T5315] -> #1 (&port_lock_key){-...}-{3:3}: [ 92.920582][ T5315] _raw_spin_lock_irqsave+0x40/0x60 [ 92.920593][ T5315] serial8250_console_write+0x153/0x1ba0 [ 92.920606][ T5315] console_flush_all+0x6ea/0xaf0 [ 92.920615][ T5315] console_unlock+0xd1/0x1c0 [ 92.920628][ T5315] vprintk_emit+0x485/0x560 [ 92.920641][ T5315] _printk+0xdd/0x130 [ 92.920649][ T5315] register_console+0xbc3/0xfc0 [ 92.920658][ T5315] univ8250_console_init+0x3a/0x70 [ 92.920670][ T5315] console_init+0x10b/0x4a0 [ 92.920681][ T5315] start_kernel+0x238/0x3e0 [ 92.920692][ T5315] x86_64_start_reservations+0x24/0x30 [ 92.920702][ T5315] x86_64_start_kernel+0x137/0x1b0 [ 92.920711][ T5315] common_startup_64+0x13e/0x157 [ 92.920720][ T5315] [ 92.920720][ T5315] -> #0 (console_owner){....}-{0:0}: [ 92.920734][ T5315] __lock_acquire+0x1520/0x2cf0 [ 92.920746][ T5315] lock_acquire+0x106/0x350 [ 92.920757][ T5315] console_flush_all+0x693/0xaf0 [ 92.920766][ T5315] console_unlock+0xd1/0x1c0 [ 92.920777][ T5315] vprintk_emit+0x485/0x560 [ 92.920791][ T5315] _printk+0xdd/0x130 [ 92.920799][ T5315] __slab_bug+0x6e/0xd0 [ 92.920809][ T5315] slab_bug+0x57/0x80 [ 92.920818][ T5315] list_slab_objects+0x35/0x1a0 [ 92.920829][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0 [ 92.920839][ T5315] kmem_cache_destroy+0x98/0x180 [ 92.920852][ T5315] virtio_gpu_free_vbufs+0x40/0x70 [ 92.920864][ T5315] virtio_gpu_release+0x55/0x140 [ 92.920873][ T5315] drm_dev_put+0xa9/0x120 [ 92.920889][ T5315] virtio_dev_remove+0x9c/0x1b0 [ 92.920901][ T5315] device_release_driver_internal+0x48b/0x880 [ 92.920910][ T5315] bus_remove_device+0x444/0x560 [ 92.920921][ T5315] device_del+0x524/0x8f0 [ 92.920934][ T5315] device_unregister+0x21/0xf0 [ 92.920946][ T5315] unregister_virtio_device+0x37/0x60 [ 92.920955][ T5315] virtio_pci_remove+0x7f/0xf0 [ 92.920966][ T5315] pci_device_remove+0x99/0x1c0 [ 92.920976][ T5315] device_release_driver_internal+0x48b/0x880 [ 92.920984][ T5315] pci_stop_bus_device+0xf6/0x120 [ 92.920994][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 92.921006][ T5315] remove_store+0xe5/0x150 [ 92.921018][ T5315] kernfs_fop_write_iter+0x3a4/0x540 [ 92.921030][ T5315] vfs_write+0x612/0xba0 [ 92.921042][ T5315] ksys_write+0x150/0x270 [ 92.921053][ T5315] do_syscall_64+0x174/0x580 [ 92.921064][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.921073][ T5315] [ 92.921073][ T5315] other info that might help us debug this: [ 92.921073][ T5315] [ 92.921077][ T5315] Chain exists of: [ 92.921077][ T5315] console_owner --> &pool->lock --> &n->list_lock [ 92.921077][ T5315] [ 92.921092][ T5315] Possible unsafe locking scenario: [ 92.921092][ T5315] [ 92.921095][ T5315] CPU0 CPU1 [ 92.921097][ T5315] ---- ---- [ 92.921100][ T5315] lock(&n->list_lock); [ 92.921108][ T5315] lock(&pool->lock); [ 92.921115][ T5315] lock(&n->list_lock); [ 92.921123][ T5315] lock(console_owner); [ 92.921131][ T5315] [ 92.921131][ T5315] *** DEADLOCK *** [ 92.921131][ T5315] [ 92.921135][ T5315] 11 locks held by syz.0.0/5315: [ 92.921141][ T5315] #0: ffff8880129e47f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 92.921165][ T5315] #1: ffff88803394e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 92.921191][ T5315] #2: ffff888013227c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 92.921215][ T5315] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0 [ 92.921241][ T5315] #4: ffff88801f8481f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 92.921263][ T5315] #5: ffff8880331881b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 92.921285][ T5315] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180 [ 92.921311][ T5315] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180 [ 92.921337][ T5315] #8: ffff888032ab8d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 92.921362][ T5315] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 92.921383][ T5315] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 92.921404][ T5315] [ 92.921404][ T5315] stack backtrace: [ 92.921410][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.921424][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.921431][ T5315] Call Trace: [ 92.921436][ T5315] [ 92.921441][ T5315] dump_stack_lvl+0xe8/0x150 [ 92.921457][ T5315] print_circular_bug+0x2e1/0x300 [ 92.921474][ T5315] check_noncircular+0x12e/0x150 [ 92.921488][ T5315] __lock_acquire+0x1520/0x2cf0 [ 92.921504][ T5315] ? console_flush_all+0x123/0xaf0 [ 92.921513][ T5315] lock_acquire+0x106/0x350 [ 92.921524][ T5315] ? console_flush_all+0x123/0xaf0 [ 92.921536][ T5315] ? do_raw_spin_unlock+0x4d/0x210 [ 92.921546][ T5315] ? console_flush_all+0x123/0xaf0 [ 92.921555][ T5315] console_flush_all+0x693/0xaf0 [ 92.921563][ T5315] ? console_flush_all+0x123/0xaf0 [ 92.921573][ T5315] ? console_flush_all+0x123/0xaf0 [ 92.921582][ T5315] ? __pfx_console_flush_all+0x10/0x10 [ 92.921592][ T5315] ? is_printk_cpu_sync_owner+0x32/0x40 [ 92.921604][ T5315] console_unlock+0xd1/0x1c0 [ 92.921618][ T5315] ? __pfx_console_unlock+0x10/0x10 [ 92.921630][ T5315] ? _raw_spin_unlock+0x40/0x50 [ 92.921640][ T5315] ? _printk+0xdd/0x130 [ 92.921651][ T5315] vprintk_emit+0x485/0x560 [ 92.921665][ T5315] ? __lock_acquire+0x683/0x2cf0 [ 92.921678][ T5315] ? __pfx_vprintk_emit+0x10/0x10 [ 92.921690][ T5315] ? __lock_acquire+0x683/0x2cf0 [ 92.921701][ T5315] _printk+0xdd/0x130 [ 92.921709][ T5315] ? __lock_acquire+0x683/0x2cf0 [ 92.921722][ T5315] ? __pfx__printk+0x10/0x10 [ 92.921732][ T5315] ? lock_acquire+0x106/0x350 [ 92.921745][ T5315] __slab_bug+0x6e/0xd0 [ 92.921756][ T5315] slab_bug+0x57/0x80 [ 92.921769][ T5315] list_slab_objects+0x35/0x1a0 [ 92.921780][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0 [ 92.921793][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70 [ 92.921804][ T5315] kmem_cache_destroy+0x98/0x180 [ 92.921818][ T5315] virtio_gpu_free_vbufs+0x40/0x70 [ 92.921829][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 92.921887][ T5315] virtio_gpu_release+0x55/0x140 [ 92.921899][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 92.921909][ T5315] drm_dev_put+0xa9/0x120 [ 92.921920][ T5315] virtio_dev_remove+0x9c/0x1b0 [ 92.921932][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10 [ 92.921942][ T5315] device_release_driver_internal+0x48b/0x880 [ 92.921954][ T5315] bus_remove_device+0x444/0x560 [ 92.921966][ T5315] ? __pfx_bus_remove_device+0x10/0x10 [ 92.921979][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 92.921992][ T5315] device_del+0x524/0x8f0 [ 92.922006][ T5315] ? __pfx_device_del+0x10/0x10 [ 92.922020][ T5315] device_unregister+0x21/0xf0 [ 92.922033][ T5315] unregister_virtio_device+0x37/0x60 [ 92.922042][ T5315] virtio_pci_remove+0x7f/0xf0 [ 92.922055][ T5315] pci_device_remove+0x99/0x1c0 [ 92.922065][ T5315] ? __pfx_pci_device_remove+0x10/0x10 [ 92.922074][ T5315] device_release_driver_internal+0x48b/0x880 [ 92.922084][ T5315] pci_stop_bus_device+0xf6/0x120 [ 92.922097][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 92.922111][ T5315] remove_store+0xe5/0x150 [ 92.922125][ T5315] ? __pfx_remove_store+0x10/0x10 [ 92.922139][ T5315] ? sysfs_file_kobj+0x1e4/0x230 [ 92.922150][ T5315] ? sysfs_kf_write+0x166/0x260 [ 92.922160][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.922169][ T5315] kernfs_fop_write_iter+0x3a4/0x540 [ 92.922185][ T5315] vfs_write+0x612/0xba0 [ 92.922198][ T5315] ? __pfx_vfs_write+0x10/0x10 [ 92.922212][ T5315] ? __fget_files+0x2a/0x420 [ 92.922224][ T5315] ksys_write+0x150/0x270 [ 92.922235][ T5315] ? __pfx_ksys_write+0x10/0x10 [ 92.922247][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.922257][ T5315] do_syscall_64+0x174/0x580 [ 92.922268][ T5315] ? trace_irq_disable+0x3b/0x140 [ 92.922278][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 92.922288][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.922296][ T5315] RIP: 0033:0x7fac1c59e0d9 [ 92.922306][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.922315][ T5315] RSP: 002b:00007fac1d437fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.922325][ T5315] RAX: ffffffffffffffda RBX: 00007fac1c825fa0 RCX: 00007fac1c59e0d9 [ 92.922333][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 92.922339][ T5315] RBP: 00007fac1c635024 R08: 0000000000000000 R09: 0000000000000000 [ 92.922346][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.922352][ T5315] R13: 00007fac1c826038 R14: 00007fac1c825fa0 R15: 00007ffcaf32d838 [ 92.922363][ T5315] [ 93.467216][ T5315] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 93.471035][ T5315] ----------------------------------------------------------------------------- [ 93.471035][ T5315] [ 93.475570][ T5315] Object 0xffff888043b54690 @offset=1680 [ 93.477879][ T5315] Object 0xffff888043b547a8 @offset=1960 [ 93.480180][ T5315] Slab 0xffffea00010ed500 objects=14 used=2 fp=0xffff888043b54000 flags=0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 93.485924][ T5315] ------------[ cut here ]------------ [ 93.488257][ T5315] 1 [ 93.488267][ T5315] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5315 [ 93.492745][ T5315] Modules linked in: [ 93.494483][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 93.498775][ T5315] Tainted: [B]=BAD_PAGE [ 93.500539][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.504719][ T5315] RIP: 0010:__slab_err+0x15/0x20 [ 93.506899][ T5315] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.515080][ T5315] RSP: 0018:ffffc9000ee576d8 EFLAGS: 00010083 [ 93.517673][ T5315] RAX: ffffffff8186dc3a RBX: ffff888034b32c80 RCX: 0000000000100000 [ 93.521032][ T5315] RDX: ffffc9000f5c9000 RSI: 0000000000068d74 RDI: 0000000000068d75 [ 93.524377][ T5315] RBP: ffffea00010e0310 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 93.527884][ T5315] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffff888032ab8dc8 [ 93.531318][ T5315] R13: ffffea00010ed500 R14: ffffc9000ee576f0 R15: ffff888032ab8d80 [ 93.534670][ T5315] FS: 00007fac1d4386c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 93.538430][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.541416][ T5315] CR2: 00007ffaf7b909c0 CR3: 0000000012015000 CR4: 0000000000352ef0 [ 93.544771][ T5315] Call Trace: [ 93.546640][ T5315] [ 93.548238][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0 [ 93.550583][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70 [ 93.552952][ T5315] kmem_cache_destroy+0x98/0x180 [ 93.555036][ T5315] virtio_gpu_free_vbufs+0x40/0x70 [ 93.557303][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.559698][ T5315] virtio_gpu_release+0x55/0x140 [ 93.561794][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.564084][ T5315] drm_dev_put+0xa9/0x120 [ 93.565867][ T5315] virtio_dev_remove+0x9c/0x1b0 [ 93.567988][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10 [ 93.570274][ T5315] device_release_driver_internal+0x48b/0x880 [ 93.572952][ T5315] bus_remove_device+0x444/0x560 [ 93.575053][ T5315] ? __pfx_bus_remove_device+0x10/0x10 [ 93.577353][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 93.579687][ T5315] device_del+0x524/0x8f0 [ 93.581512][ T5315] ? __pfx_device_del+0x10/0x10 [ 93.583594][ T5315] device_unregister+0x21/0xf0 [ 93.585588][ T5315] unregister_virtio_device+0x37/0x60 [ 93.587919][ T5315] virtio_pci_remove+0x7f/0xf0 [ 93.589984][ T5315] pci_device_remove+0x99/0x1c0 [ 93.592095][ T5315] ? __pfx_pci_device_remove+0x10/0x10 [ 93.594389][ T5315] device_release_driver_internal+0x48b/0x880 [ 93.596946][ T5315] pci_stop_bus_device+0xf6/0x120 [ 93.599053][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 93.601777][ T5315] remove_store+0xe5/0x150 [ 93.603738][ T5315] ? __pfx_remove_store+0x10/0x10 [ 93.605795][ T5315] ? sysfs_file_kobj+0x1e4/0x230 [ 93.607853][ T5315] ? sysfs_kf_write+0x166/0x260 [ 93.609872][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.612054][ T5315] kernfs_fop_write_iter+0x3a4/0x540 [ 93.614270][ T5315] vfs_write+0x612/0xba0 [ 93.616004][ T5315] ? __pfx_vfs_write+0x10/0x10 [ 93.617988][ T5315] ? __fget_files+0x2a/0x420 [ 93.619942][ T5315] ksys_write+0x150/0x270 [ 93.621786][ T5315] ? __pfx_ksys_write+0x10/0x10 [ 93.624014][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.626524][ T5315] do_syscall_64+0x174/0x580 [ 93.628491][ T5315] ? trace_irq_disable+0x3b/0x140 [ 93.630727][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 93.632792][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.635299][ T5315] RIP: 0033:0x7fac1c59e0d9 [ 93.637211][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.645530][ T5315] RSP: 002b:00007fac1d437fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.648976][ T5315] RAX: ffffffffffffffda RBX: 00007fac1c825fa0 RCX: 00007fac1c59e0d9 [ 93.652413][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 93.655748][ T5315] RBP: 00007fac1c635024 R08: 0000000000000000 R09: 0000000000000000 [ 93.658978][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.662249][ T5315] R13: 00007fac1c826038 R14: 00007fac1c825fa0 R15: 00007ffcaf32d838 [ 93.665514][ T5315] [ 93.666899][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.669973][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 93.674355][ T5315] Tainted: [B]=BAD_PAGE [ 93.676146][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.680283][ T5315] Call Trace: [ 93.681711][ T5315] [ 93.683078][ T5315] vpanic+0x56c/0xa60 [ 93.684816][ T5315] ? __pfx__printk+0x10/0x10 [ 93.686795][ T5315] ? __pfx_vpanic+0x10/0x10 [ 93.688717][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 93.690937][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 93.693138][ T5315] panic+0xc5/0xd0 [ 93.694785][ T5315] ? __pfx_panic+0x10/0x10 [ 93.696672][ T5315] __warn+0x315/0x4c0 [ 93.698350][ T5315] ? __slab_err+0x15/0x20 [ 93.700203][ T5315] ? __slab_err+0x15/0x20 [ 93.702112][ T5315] __report_bug+0x276/0x570 [ 93.704064][ T5315] ? do_raw_spin_unlock+0x4d/0x210 [ 93.706227][ T5315] ? __slab_err+0x15/0x20 [ 93.708043][ T5315] ? __pfx___report_bug+0x10/0x10 [ 93.710113][ T5315] ? __wake_up_klogd+0xe6/0x120 [ 93.712257][ T5315] ? vprintk_emit+0x4eb/0x560 [ 93.714281][ T5315] ? __pfx_vprintk_emit+0x10/0x10 [ 93.716396][ T5315] ? _printk+0xdd/0x130 [ 93.718105][ T5315] ? __slab_err+0x15/0x20 [ 93.719914][ T5315] report_bug+0x16a/0x220 [ 93.721721][ T5315] ? __slab_err+0x15/0x20 [ 93.723552][ T5315] ? __slab_err+0x17/0x20 [ 93.725366][ T5315] handle_bug+0x9c/0x200 [ 93.727157][ T5315] exc_invalid_op+0x1a/0x50 [ 93.729122][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 93.731291][ T5315] RIP: 0010:__slab_err+0x15/0x20 [ 93.733592][ T5315] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.741660][ T5315] RSP: 0018:ffffc9000ee576d8 EFLAGS: 00010083 [ 93.744241][ T5315] RAX: ffffffff8186dc3a RBX: ffff888034b32c80 RCX: 0000000000100000 [ 93.747533][ T5315] RDX: ffffc9000f5c9000 RSI: 0000000000068d74 RDI: 0000000000068d75 [ 93.750889][ T5315] RBP: ffffea00010e0310 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 93.754265][ T5315] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffff888032ab8dc8 [ 93.757630][ T5315] R13: ffffea00010ed500 R14: ffffc9000ee576f0 R15: ffff888032ab8d80 [ 93.760839][ T5315] ? add_taint+0x9a/0xe0 [ 93.762636][ T5315] ? __slab_err+0x14/0x20 [ 93.764625][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0 [ 93.767052][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70 [ 93.769303][ T5315] kmem_cache_destroy+0x98/0x180 [ 93.771516][ T5315] virtio_gpu_free_vbufs+0x40/0x70 [ 93.773716][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.776005][ T5315] virtio_gpu_release+0x55/0x140 [ 93.778064][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.780488][ T5315] drm_dev_put+0xa9/0x120 [ 93.782311][ T5315] virtio_dev_remove+0x9c/0x1b0 [ 93.784335][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10 [ 93.786626][ T5315] device_release_driver_internal+0x48b/0x880 [ 93.789140][ T5315] bus_remove_device+0x444/0x560 [ 93.791437][ T5315] ? __pfx_bus_remove_device+0x10/0x10 [ 93.793727][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 93.796058][ T5315] device_del+0x524/0x8f0 [ 93.797979][ T5315] ? __pfx_device_del+0x10/0x10 [ 93.800117][ T5315] device_unregister+0x21/0xf0 [ 93.802088][ T5315] unregister_virtio_device+0x37/0x60 [ 93.804326][ T5315] virtio_pci_remove+0x7f/0xf0 [ 93.806312][ T5315] pci_device_remove+0x99/0x1c0 [ 93.808368][ T5315] ? __pfx_pci_device_remove+0x10/0x10 [ 93.810699][ T5315] device_release_driver_internal+0x48b/0x880 [ 93.813320][ T5315] pci_stop_bus_device+0xf6/0x120 [ 93.815410][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 93.818132][ T5315] remove_store+0xe5/0x150 [ 93.820071][ T5315] ? __pfx_remove_store+0x10/0x10 [ 93.822344][ T5315] ? sysfs_file_kobj+0x1e4/0x230 [ 93.824435][ T5315] ? sysfs_kf_write+0x166/0x260 [ 93.826466][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.828587][ T5315] kernfs_fop_write_iter+0x3a4/0x540 [ 93.830833][ T5315] vfs_write+0x612/0xba0 [ 93.832645][ T5315] ? __pfx_vfs_write+0x10/0x10 [ 93.834691][ T5315] ? __fget_files+0x2a/0x420 [ 93.836683][ T5315] ksys_write+0x150/0x270 [ 93.838486][ T5315] ? __pfx_ksys_write+0x10/0x10 [ 93.840522][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.843063][ T5315] do_syscall_64+0x174/0x580 [ 93.845103][ T5315] ? trace_irq_disable+0x3b/0x140 [ 93.847280][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 93.849223][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.851718][ T5315] RIP: 0033:0x7fac1c59e0d9 [ 93.853602][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.861464][ T5315] RSP: 002b:00007fac1d437fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.864974][ T5315] RAX: ffffffffffffffda RBX: 00007fac1c825fa0 RCX: 00007fac1c59e0d9 [ 93.868246][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 93.871566][ T5315] RBP: 00007fac1c635024 R08: 0000000000000000 R09: 0000000000000000 [ 93.874976][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.878232][ T5315] R13: 00007fac1c826038 R14: 00007fac1c825fa0 R15: 00007ffcaf32d838 [ 93.881582][ T5315] [ 93.883369][ T5315] Kernel Offset: disabled [ 93.885235][ T5315] Rebooting in 86400 seconds..