program:
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10)
pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904000002000000000705810240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000140))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000400))
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f0000000800)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a00)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0)
read(r6, &(0x7f0000000c00)=""/1000, 0x3e8)
[ 151.245976][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[ 151.248804][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[ 151.253304][ T5293] Bluetooth: hci0: command tx timeout
[ 151.590175][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 151.743196][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 151.747616][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 151.763190][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[ 151.767953][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 151.778111][ T9] usb 5-1: Product: syz
[ 151.780393][ T9] usb 5-1: Manufacturer: syz
[ 151.804272][ T5329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 151.813220][ T5329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 151.821885][ T9] usb_debug 5-1:1.0: debug converter detected
[ 151.832930][ T9] usb 5-1: debug converter now attached to ttyUSB0
[ 152.129834][ T5330] Console: switching to colour dummy device 80x25
[ 152.362171][ T5330] =============================================================================
[ 152.362795][ T5330]
[ 152.362802][ T5330] ======================================================
[ 152.362835][ T5330] WARNING: possible circular locking dependency detected
[ 152.362842][ T5330] syzkaller #0 Not tainted
[ 152.362848][ T5330] ------------------------------------------------------
[ 152.362853][ T5330] syz.0.0/5330 is trying to acquire lock:
[ 152.362859][ T5330] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 152.362936][ T5330]
[ 152.362936][ T5330] but task is already holding lock:
[ 152.362939][ T5330] ffff88801afdccd8 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 152.362965][ T5330]
[ 152.362965][ T5330] which lock already depends on the new lock.
[ 152.362965][ T5330]
[ 152.362968][ T5330]
[ 152.362968][ T5330] the existing dependency chain (in reverse order) is:
[ 152.362972][ T5330]
[ 152.362972][ T5330] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 152.362987][ T5330] _raw_spin_lock_irqsave+0x40/0x60
[ 152.363032][ T5330] get_from_partial_node+0x54/0x4c0
[ 152.363044][ T5330] ___slab_alloc+0x258/0x950
[ 152.363055][ T5330] kmem_cache_alloc_noprof+0x135/0x5f0
[ 152.363069][ T5330] fill_pool+0x165/0x610
[ 152.363109][ T5330] debug_object_activate+0x38d/0x420
[ 152.363119][ T5330] insert_work+0x35/0x330
[ 152.363130][ T5330] __queue_work+0xcd8/0x10a0
[ 152.363141][ T5330] queue_work_on+0x106/0x1d0
[ 152.363152][ T5330] pcpu_alloc_noprof+0xa92/0x1900
[ 152.363160][ T5330] iommu_dma_init_fq+0x2d3/0x700
[ 152.363170][ T5330] iommu_setup_dma_ops+0x6e5/0x1820
[ 152.363180][ T5330] bus_iommu_probe+0x296/0x470
[ 152.363193][ T5330] iommu_device_register+0x1af/0x210
[ 152.363204][ T5330] intel_iommu_init+0x6f0/0x8e0
[ 152.363271][ T5330] pci_iommu_init+0x38/0x70
[ 152.363287][ T5330] do_one_initcall+0x250/0x870
[ 152.363301][ T5330] do_initcall_level+0x10a/0x1a0
[ 152.363314][ T5330] do_initcalls+0x59/0xa0
[ 152.363325][ T5330] kernel_init_freeable+0x29d/0x3e0
[ 152.363338][ T5330] kernel_init+0x1d/0x1d0
[ 152.363352][ T5330] ret_from_fork+0x514/0xb70
[ 152.363364][ T5330] ret_from_fork_asm+0x1a/0x30
[ 152.363377][ T5330]
[ 152.363377][ T5330] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 152.363391][ T5330] _raw_spin_lock+0x2e/0x40
[ 152.363400][ T5330] __queue_work+0x72f/0x10a0
[ 152.363410][ T5330] queue_work_on+0x106/0x1d0
[ 152.363419][ T5330] rpm_suspend+0xeca/0x17b0
[ 152.363432][ T5330] __pm_runtime_idle+0x12f/0x1a0
[ 152.363445][ T5330] __device_attach+0x355/0x450
[ 152.363456][ T5330] device_initial_probe+0xa1/0xd0
[ 152.363463][ T5330] bus_probe_device+0x12a/0x220
[ 152.363473][ T5330] device_add+0x7d7/0xb80
[ 152.363485][ T5330] serial_base_port_add+0x18f/0x270
[ 152.363495][ T5330] serial_core_register_port+0x37f/0x2840
[ 152.363506][ T5330] serial8250_register_8250_port+0x16b4/0x2090
[ 152.363517][ T5330] serial_pnp_probe+0x56a/0x7f0
[ 152.363528][ T5330] pnp_device_probe+0x30b/0x4c0
[ 152.363538][ T5330] really_probe+0x254/0xae0
[ 152.363547][ T5330] __driver_probe_device+0x1e8/0x360
[ 152.363555][ T5330] driver_probe_device+0x4f/0x240
[ 152.363564][ T5330] __driver_attach+0x339/0x600
[ 152.363571][ T5330] bus_for_each_dev+0x23b/0x2c0
[ 152.363582][ T5330] bus_add_driver+0x345/0x670
[ 152.363592][ T5330] driver_register+0x23a/0x320
[ 152.363601][ T5330] serial8250_init+0x8f/0x160
[ 152.363613][ T5330] do_one_initcall+0x250/0x870
[ 152.363625][ T5330] do_initcall_level+0x10a/0x1a0
[ 152.363638][ T5330] do_initcalls+0x59/0xa0
[ 152.363650][ T5330] kernel_init_freeable+0x29d/0x3e0
[ 152.363662][ T5330] kernel_init+0x1d/0x1d0
[ 152.363675][ T5330] ret_from_fork+0x514/0xb70
[ 152.363687][ T5330] ret_from_fork_asm+0x1a/0x30
[ 152.363700][ T5330]
[ 152.363700][ T5330] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 152.363713][ T5330] _raw_spin_lock_irqsave+0x40/0x60
[ 152.363722][ T5330] __pm_runtime_resume+0x10f/0x180
[ 152.363735][ T5330] __uart_start+0x171/0x460
[ 152.363747][ T5330] uart_write+0x251/0x9f0
[ 152.363758][ T5330] n_tty_write+0xd49/0x11e0
[ 152.363767][ T5330] file_tty_write+0x509/0x9c0
[ 152.363777][ T5330] vfs_write+0x612/0xba0
[ 152.363789][ T5330] ksys_write+0x150/0x270
[ 152.363801][ T5330] do_syscall_64+0x174/0x580
[ 152.363812][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.363821][ T5330]
[ 152.363821][ T5330] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 152.363843][ T5330] _raw_spin_lock_irqsave+0x40/0x60
[ 152.363854][ T5330] serial8250_console_write+0x153/0x1ba0
[ 152.363869][ T5330] console_flush_all+0x6ea/0xaf0
[ 152.363879][ T5330] console_unlock+0xd1/0x1c0
[ 152.363894][ T5330] vprintk_emit+0x485/0x560
[ 152.363908][ T5330] _printk+0xdd/0x130
[ 152.363917][ T5330] register_console+0xbc3/0xfc0
[ 152.363926][ T5330] univ8250_console_init+0x3a/0x70
[ 152.363938][ T5330] console_init+0x10b/0x4a0
[ 152.363947][ T5330] start_kernel+0x238/0x3e0
[ 152.363959][ T5330] x86_64_start_reservations+0x24/0x30
[ 152.363969][ T5330] x86_64_start_kernel+0x137/0x1b0
[ 152.363977][ T5330] common_startup_64+0x13e/0x157
[ 152.363987][ T5330]
[ 152.363987][ T5330] -> #0 (console_owner){....}-{0:0}:
[ 152.364000][ T5330] __lock_acquire+0x1520/0x2cf0
[ 152.364012][ T5330] lock_acquire+0x106/0x350
[ 152.364021][ T5330] console_flush_all+0x693/0xaf0
[ 152.364029][ T5330] console_unlock+0xd1/0x1c0
[ 152.364041][ T5330] vprintk_emit+0x485/0x560
[ 152.364054][ T5330] _printk+0xdd/0x130
[ 152.364062][ T5330] __slab_bug+0x6e/0xd0
[ 152.364072][ T5330] slab_bug+0x57/0x80
[ 152.364081][ T5330] list_slab_objects+0x35/0x1a0
[ 152.364091][ T5330] __kmem_cache_shutdown+0x1a5/0x2a0
[ 152.364103][ T5330] kmem_cache_destroy+0x98/0x180
[ 152.364116][ T5330] virtio_gpu_free_vbufs+0x40/0x70
[ 152.364127][ T5330] virtio_gpu_release+0x55/0x140
[ 152.364135][ T5330] drm_dev_put+0xa9/0x120
[ 152.364145][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 152.364154][ T5330] device_release_driver_internal+0x48b/0x880
[ 152.364163][ T5330] bus_remove_device+0x444/0x560
[ 152.364174][ T5330] device_del+0x524/0x8f0
[ 152.364187][ T5330] device_unregister+0x21/0xf0
[ 152.364197][ T5330] unregister_virtio_device+0x37/0x60
[ 152.364206][ T5330] virtio_pci_remove+0x7f/0xf0
[ 152.364216][ T5330] pci_device_remove+0x99/0x1c0
[ 152.364225][ T5330] device_release_driver_internal+0x48b/0x880
[ 152.364233][ T5330] pci_stop_bus_device+0xf6/0x120
[ 152.364244][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 152.364255][ T5330] remove_store+0xe5/0x150
[ 152.364266][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 152.364279][ T5330] vfs_write+0x612/0xba0
[ 152.364291][ T5330] ksys_write+0x150/0x270
[ 152.364302][ T5330] do_syscall_64+0x174/0x580
[ 152.364314][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.364323][ T5330]
[ 152.364323][ T5330] other info that might help us debug this:
[ 152.364323][ T5330]
[ 152.364326][ T5330] Chain exists of:
[ 152.364326][ T5330] console_owner --> &pool->lock --> &n->list_lock
[ 152.364326][ T5330]
[ 152.364341][ T5330] Possible unsafe locking scenario:
[ 152.364341][ T5330]
[ 152.364344][ T5330] CPU0 CPU1
[ 152.364346][ T5330] ---- ----
[ 152.364349][ T5330] lock(&n->list_lock);
[ 152.364356][ T5330] lock(&pool->lock);
[ 152.364363][ T5330] lock(&n->list_lock);
[ 152.364370][ T5330] lock(console_owner);
[ 152.364377][ T5330]
[ 152.364377][ T5330] *** DEADLOCK ***
[ 152.364377][ T5330]
[ 152.364381][ T5330] 11 locks held by syz.0.0/5330:
[ 152.364387][ T5330] #0: ffff888012100470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 152.364415][ T5330] #1: ffff88801d1c8450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 152.364442][ T5330] #2: ffff88803f9e1880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 152.364459][ T5330] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0
[ 152.364475][ T5330] #4: ffff88801d2701f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 152.364490][ T5330] #5: ffff88803338e1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 152.364503][ T5330] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 152.364520][ T5330] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 152.364537][ T5330] #8: ffff88801afdccd8 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 152.364555][ T5330] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 152.364576][ T5330] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 152.364599][ T5330]
[ 152.364599][ T5330] stack backtrace:
[ 152.364606][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 152.364617][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 152.364624][ T5330] Call Trace:
[ 152.364629][ T5330]
[ 152.364634][ T5330] dump_stack_lvl+0xe8/0x150
[ 152.364645][ T5330] print_circular_bug+0x2e1/0x300
[ 152.364655][ T5330] check_noncircular+0x12e/0x150
[ 152.364665][ T5330] __lock_acquire+0x1520/0x2cf0
[ 152.364677][ T5330] ? console_flush_all+0x123/0xaf0
[ 152.364683][ T5330] lock_acquire+0x106/0x350
[ 152.364691][ T5330] ? console_flush_all+0x123/0xaf0
[ 152.364699][ T5330] ? do_raw_spin_unlock+0x4d/0x210
[ 152.364709][ T5330] ? console_flush_all+0x123/0xaf0
[ 152.364718][ T5330] console_flush_all+0x693/0xaf0
[ 152.364726][ T5330] ? console_flush_all+0x123/0xaf0
[ 152.364736][ T5330] ? console_flush_all+0x123/0xaf0
[ 152.364746][ T5330] ? __pfx_console_flush_all+0x10/0x10
[ 152.364757][ T5330] ? is_printk_cpu_sync_owner+0x32/0x40
[ 152.364769][ T5330] console_unlock+0xd1/0x1c0
[ 152.364784][ T5330] ? __pfx_console_unlock+0x10/0x10
[ 152.364798][ T5330] ? _raw_spin_unlock+0x40/0x50
[ 152.364808][ T5330] ? _printk+0xdd/0x130
[ 152.364818][ T5330] vprintk_emit+0x485/0x560
[ 152.364841][ T5330] ? __pfx_vprintk_emit+0x10/0x10
[ 152.364857][ T5330] _printk+0xdd/0x130
[ 152.364867][ T5330] ? __lock_acquire+0x683/0x2cf0
[ 152.364881][ T5330] ? __pfx__printk+0x10/0x10
[ 152.364888][ T5330] ? do_raw_spin_lock+0x12b/0x2f0
[ 152.364896][ T5330] __slab_bug+0x6e/0xd0
[ 152.364903][ T5330] slab_bug+0x57/0x80
[ 152.364911][ T5330] list_slab_objects+0x35/0x1a0
[ 152.364921][ T5330] __kmem_cache_shutdown+0x1a5/0x2a0
[ 152.364929][ T5330] ? virtio_gpu_free_vbufs+0x40/0x70
[ 152.364936][ T5330] kmem_cache_destroy+0x98/0x180
[ 152.364945][ T5330] virtio_gpu_free_vbufs+0x40/0x70
[ 152.364952][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 152.364958][ T5330] virtio_gpu_release+0x55/0x140
[ 152.364963][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 152.364969][ T5330] drm_dev_put+0xa9/0x120
[ 152.364975][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 152.364982][ T5330] ? __pfx_virtio_dev_remove+0x10/0x10
[ 152.364988][ T5330] device_release_driver_internal+0x48b/0x880
[ 152.364994][ T5330] bus_remove_device+0x444/0x560
[ 152.365002][ T5330] ? __pfx_bus_remove_device+0x10/0x10
[ 152.365010][ T5330] ? kernfs_remove_by_name_ns+0x101/0x140
[ 152.365019][ T5330] device_del+0x524/0x8f0
[ 152.365029][ T5330] ? __pfx_device_del+0x10/0x10
[ 152.365038][ T5330] device_unregister+0x21/0xf0
[ 152.365050][ T5330] unregister_virtio_device+0x37/0x60
[ 152.365059][ T5330] virtio_pci_remove+0x7f/0xf0
[ 152.365071][ T5330] pci_device_remove+0x99/0x1c0
[ 152.365082][ T5330] ? __pfx_pci_device_remove+0x10/0x10
[ 152.365093][ T5330] device_release_driver_internal+0x48b/0x880
[ 152.365104][ T5330] pci_stop_bus_device+0xf6/0x120
[ 152.365117][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 152.365130][ T5330] remove_store+0xe5/0x150
[ 152.365139][ T5330] ? __pfx_remove_store+0x10/0x10
[ 152.365147][ T5330] ? sysfs_file_kobj+0x1e4/0x230
[ 152.365154][ T5330] ? sysfs_kf_write+0x166/0x260
[ 152.365160][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10
[ 152.365166][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 152.365176][ T5330] vfs_write+0x612/0xba0
[ 152.365184][ T5330] ? __pfx_vfs_write+0x10/0x10
[ 152.365193][ T5330] ? __fget_files+0x2a/0x420
[ 152.365200][ T5330] ksys_write+0x150/0x270
[ 152.365208][ T5330] ? __pfx_ksys_write+0x10/0x10
[ 152.365221][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.365229][ T5330] do_syscall_64+0x174/0x580
[ 152.365240][ T5330] ? trace_irq_disable+0x3b/0x140
[ 152.365251][ T5330] ? clear_bhb_loop+0x70/0xc0
[ 152.365262][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.365272][ T5330] RIP: 0033:0x7fa945f9e0d9
[ 152.365282][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 152.365290][ T5330] RSP: 002b:00007fa946dfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 152.365301][ T5330] RAX: ffffffffffffffda RBX: 00007fa946226090 RCX: 00007fa945f9e0d9
[ 152.365309][ T5330] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000009
[ 152.365315][ T5330] RBP: 00007fa946035024 R08: 0000000000000000 R09: 0000000000000000
[ 152.365322][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 152.365328][ T5330] R13: 00007fa946226128 R14: 00007fa946226090 R15: 00007ffc189d2af8
[ 152.365339][ T5330]
[ 152.909923][ T5330] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 152.913885][ T5330] -----------------------------------------------------------------------------
[ 152.913885][ T5330]
[ 152.918342][ T5330] Object 0xffff88801d337000 @offset=0
[ 152.920700][ T5330] Object 0xffff88801d337118 @offset=280
[ 152.923074][ T5330] Object 0xffff88801d337230 @offset=560
[ 152.925405][ T5330] Object 0xffff88801d337348 @offset=840
[ 152.927771][ T5330] Slab 0xffffea000074cdc0 objects=14 used=4 fp=0xffff88801d337460 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 152.933431][ T5330] ------------[ cut here ]------------
[ 152.935596][ T5330] 1
[ 152.935604][ T5330] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5330
[ 152.940135][ T5330] Modules linked in:
[ 152.941853][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 152.946001][ T5330] Tainted: [B]=BAD_PAGE
[ 152.947525][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 152.951343][ T5330] RIP: 0010:__slab_err+0x15/0x20
[ 152.953138][ T5330] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 152.960926][ T5330] RSP: 0018:ffffc9000e38f6d8 EFLAGS: 00010083
[ 152.963118][ T5330] RAX: ffffffff8186dc3a RBX: ffff888034ea08c0 RCX: 0000000000100000
[ 152.966014][ T5330] RDX: ffffc90020001000 RSI: 000000000006bca0 RDI: 000000000006bca1
[ 152.969373][ T5330] RBP: 0000000000000000 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 152.972388][ T5330] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea000049c890
[ 152.975701][ T5330] R13: ffffea000074cdc0 R14: ffffc9000e38f6f0 R15: ffff88801afdccc0
[ 152.979090][ T5330] FS: 00007fa946dfc6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 152.982773][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.985557][ T5330] CR2: 00007fa946db9fe8 CR3: 0000000012f8c000 CR4: 0000000000352ef0
[ 152.989043][ T5330] Call Trace:
[ 152.990517][ T5330]
[ 152.991730][ T5330] __kmem_cache_shutdown+0x1a5/0x2a0
[ 152.993879][ T5330] ? virtio_gpu_free_vbufs+0x40/0x70
[ 152.996144][ T5330] kmem_cache_destroy+0x98/0x180
[ 152.998273][ T5330] virtio_gpu_free_vbufs+0x40/0x70
[ 153.000459][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 153.002706][ T5330] virtio_gpu_release+0x55/0x140
[ 153.004856][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 153.006949][ T5330] drm_dev_put+0xa9/0x120
[ 153.008797][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 153.010996][ T5330] ? __pfx_virtio_dev_remove+0x10/0x10
[ 153.013388][ T5330] device_release_driver_internal+0x48b/0x880
[ 153.015947][ T5330] bus_remove_device+0x444/0x560
[ 153.018111][ T5330] ? __pfx_bus_remove_device+0x10/0x10
[ 153.020451][ T5330] ? kernfs_remove_by_name_ns+0x101/0x140
[ 153.022885][ T5330] device_del+0x524/0x8f0
[ 153.024753][ T5330] ? __pfx_device_del+0x10/0x10
[ 153.026882][ T5330] device_unregister+0x21/0xf0
[ 153.028970][ T5330] unregister_virtio_device+0x37/0x60
[ 153.031292][ T5330] virtio_pci_remove+0x7f/0xf0
[ 153.033364][ T5330] pci_device_remove+0x99/0x1c0
[ 153.035458][ T5330] ? __pfx_pci_device_remove+0x10/0x10
[ 153.037732][ T5330] device_release_driver_internal+0x48b/0x880
[ 153.040012][ T5330] pci_stop_bus_device+0xf6/0x120
[ 153.042331][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 153.045165][ T5330] remove_store+0xe5/0x150
[ 153.047222][ T5330] ? __pfx_remove_store+0x10/0x10
[ 153.049541][ T5330] ? sysfs_file_kobj+0x1e4/0x230
[ 153.051763][ T5330] ? sysfs_kf_write+0x166/0x260
[ 153.053912][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10
[ 153.056048][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 153.058310][ T5330] vfs_write+0x612/0xba0
[ 153.060106][ T5330] ? __pfx_vfs_write+0x10/0x10
[ 153.062107][ T5330] ? __fget_files+0x2a/0x420
[ 153.064090][ T5330] ksys_write+0x150/0x270
[ 153.066059][ T5330] ? __pfx_ksys_write+0x10/0x10
[ 153.068230][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.070912][ T5330] do_syscall_64+0x174/0x580
[ 153.072926][ T5330] ? trace_irq_disable+0x3b/0x140
[ 153.075103][ T5330] ? clear_bhb_loop+0x70/0xc0
[ 153.077102][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.079571][ T5330] RIP: 0033:0x7fa945f9e0d9
[ 153.081374][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 153.089372][ T5330] RSP: 002b:00007fa946dfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 153.092920][ T5330] RAX: ffffffffffffffda RBX: 00007fa946226090 RCX: 00007fa945f9e0d9
[ 153.096340][ T5330] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000009
[ 153.099697][ T5330] RBP: 00007fa946035024 R08: 0000000000000000 R09: 0000000000000000
[ 153.102974][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 153.106007][ T5330] R13: 00007fa946226128 R14: 00007fa946226090 R15: 00007ffc189d2af8
[ 153.108958][ T5330]
[ 153.110247][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 153.113290][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 153.117425][ T5330] Tainted: [B]=BAD_PAGE
[ 153.119277][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 153.123475][ T5330] Call Trace:
[ 153.124936][ T5330]
[ 153.126216][ T5330] vpanic+0x56c/0xa60
[ 153.127962][ T5330] ? __pfx__printk+0x10/0x10
[ 153.129953][ T5330] ? __pfx_vpanic+0x10/0x10
[ 153.131894][ T5330] ? is_bpf_text_address+0x292/0x2b0
[ 153.134069][ T5330] ? is_bpf_text_address+0x26/0x2b0
[ 153.136165][ T5330] panic+0xc5/0xd0
[ 153.137747][ T5330] ? __pfx_panic+0x10/0x10
[ 153.139947][ T5330] __warn+0x315/0x4c0
[ 153.141714][ T5330] ? __slab_err+0x15/0x20
[ 153.143434][ T5330] ? __slab_err+0x15/0x20
[ 153.145207][ T5330] __report_bug+0x276/0x570
[ 153.146930][ T5330] ? do_raw_spin_unlock+0x4d/0x210
[ 153.149131][ T5330] ? __slab_err+0x15/0x20
[ 153.150969][ T5330] ? __pfx___report_bug+0x10/0x10
[ 153.153155][ T5330] ? __wake_up_klogd+0xe6/0x120
[ 153.155259][ T5330] ? vprintk_emit+0x4eb/0x560
[ 153.157149][ T5330] ? __pfx_vprintk_emit+0x10/0x10
[ 153.159203][ T5330] ? _printk+0xdd/0x130
[ 153.160922][ T5330] ? __slab_err+0x15/0x20
[ 153.162742][ T5330] report_bug+0x16a/0x220
[ 153.164585][ T5330] ? __slab_err+0x15/0x20
[ 153.166430][ T5330] ? __slab_err+0x17/0x20
[ 153.168237][ T5330] handle_bug+0x9c/0x200
[ 153.170095][ T5330] exc_invalid_op+0x1a/0x50
[ 153.172082][ T5330] asm_exc_invalid_op+0x1a/0x20
[ 153.173946][ T5330] RIP: 0010:__slab_err+0x15/0x20
[ 153.175908][ T5330] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 153.184027][ T5330] RSP: 0018:ffffc9000e38f6d8 EFLAGS: 00010083
[ 153.186625][ T5330] RAX: ffffffff8186dc3a RBX: ffff888034ea08c0 RCX: 0000000000100000
[ 153.190042][ T5330] RDX: ffffc90020001000 RSI: 000000000006bca0 RDI: 000000000006bca1
[ 153.193461][ T5330] RBP: 0000000000000000 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 153.196740][ T5330] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea000049c890
[ 153.200142][ T5330] R13: ffffea000074cdc0 R14: ffffc9000e38f6f0 R15: ffff88801afdccc0
[ 153.203536][ T5330] ? add_taint+0x9a/0xe0
[ 153.205402][ T5330] ? __slab_err+0x14/0x20
[ 153.207346][ T5330] __kmem_cache_shutdown+0x1a5/0x2a0
[ 153.209676][ T5330] ? virtio_gpu_free_vbufs+0x40/0x70
[ 153.211988][ T5330] kmem_cache_destroy+0x98/0x180
[ 153.214057][ T5330] virtio_gpu_free_vbufs+0x40/0x70
[ 153.216260][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 153.218606][ T5330] virtio_gpu_release+0x55/0x140
[ 153.220743][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 153.223096][ T5330] drm_dev_put+0xa9/0x120
[ 153.224965][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 153.227066][ T5330] ? __pfx_virtio_dev_remove+0x10/0x10
[ 153.229388][ T5330] device_release_driver_internal+0x48b/0x880
[ 153.231965][ T5330] bus_remove_device+0x444/0x560
[ 153.234052][ T5330] ? __pfx_bus_remove_device+0x10/0x10
[ 153.236078][ T5330] ? kernfs_remove_by_name_ns+0x101/0x140
[ 153.238432][ T5330] device_del+0x524/0x8f0
[ 153.240227][ T5330] ? __pfx_device_del+0x10/0x10
[ 153.242339][ T5330] device_unregister+0x21/0xf0
[ 153.244420][ T5330] unregister_virtio_device+0x37/0x60
[ 153.246566][ T5330] virtio_pci_remove+0x7f/0xf0
[ 153.248599][ T5330] pci_device_remove+0x99/0x1c0
[ 153.250425][ T5330] ? __pfx_pci_device_remove+0x10/0x10
[ 153.252624][ T5330] device_release_driver_internal+0x48b/0x880
[ 153.255046][ T5330] pci_stop_bus_device+0xf6/0x120
[ 153.257182][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 153.259724][ T5330] remove_store+0xe5/0x150
[ 153.261563][ T5330] ? __pfx_remove_store+0x10/0x10
[ 153.263658][ T5330] ? sysfs_file_kobj+0x1e4/0x230
[ 153.265665][ T5330] ? sysfs_kf_write+0x166/0x260
[ 153.267726][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10
[ 153.269945][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 153.272133][ T5330] vfs_write+0x612/0xba0
[ 153.273874][ T5330] ? __pfx_vfs_write+0x10/0x10
[ 153.275950][ T5330] ? __fget_files+0x2a/0x420
[ 153.278262][ T5330] ksys_write+0x150/0x270
[ 153.280040][ T5330] ? __pfx_ksys_write+0x10/0x10
[ 153.282096][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.284511][ T5330] do_syscall_64+0x174/0x580
[ 153.286361][ T5330] ? trace_irq_disable+0x3b/0x140
[ 153.288619][ T5330] ? clear_bhb_loop+0x70/0xc0
[ 153.290600][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.292909][ T5330] RIP: 0033:0x7fa945f9e0d9
[ 153.294600][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 153.302127][ T5330] RSP: 002b:00007fa946dfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 153.305413][ T5330] RAX: ffffffffffffffda RBX: 00007fa946226090 RCX: 00007fa945f9e0d9
[ 153.308462][ T5330] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000009
[ 153.311485][ T5330] RBP: 00007fa946035024 R08: 0000000000000000 R09: 0000000000000000
[ 153.314537][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 153.317662][ T5330] R13: 00007fa946226128 R14: 00007fa946226090 R15: 00007ffc189d2af8
[ 153.320868][ T5330]
[ 153.322560][ T5330] Kernel Offset: disabled
[ 153.324416][ T5330] Rebooting in 86400 seconds..