program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='0000:00:01.0', 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xd}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x13}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/dwc2-pci/new_id\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1af4 1050', 0x9)
[ 97.136396][ T4641] Bluetooth: hci0: command tx timeout
[ 97.233233][ T5320] Console: switching to colour dummy device 80x25
[ 97.386167][ T5320] =============================================================================
[ 97.387298][ T5320]
[ 97.387305][ T5320] ======================================================
[ 97.387310][ T5320] WARNING: possible circular locking dependency detected
[ 97.387316][ T5320] syzkaller #0 Not tainted
[ 97.387321][ T5320] ------------------------------------------------------
[ 97.387324][ T5320] syz.0.0/5320 is trying to acquire lock:
[ 97.387330][ T5320] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 97.387421][ T5320]
[ 97.387421][ T5320] but task is already holding lock:
[ 97.387425][ T5320] ffff88801af6cd98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 97.387453][ T5320]
[ 97.387453][ T5320] which lock already depends on the new lock.
[ 97.387453][ T5320]
[ 97.387457][ T5320]
[ 97.387457][ T5320] the existing dependency chain (in reverse order) is:
[ 97.387462][ T5320]
[ 97.387462][ T5320] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 97.387478][ T5320] _raw_spin_lock_irqsave+0x40/0x60
[ 97.387548][ T5320] get_from_partial_node+0x54/0x4c0
[ 97.387563][ T5320] ___slab_alloc+0xbe/0x950
[ 97.387576][ T5320] kmem_cache_alloc_noprof+0x135/0x5f0
[ 97.387594][ T5320] fill_pool+0x165/0x610
[ 97.387640][ T5320] debug_object_activate+0x38d/0x420
[ 97.387652][ T5320] insert_work+0x35/0x330
[ 97.387662][ T5320] __queue_work+0xcd8/0x10a0
[ 97.387674][ T5320] queue_work_on+0x106/0x1d0
[ 97.387685][ T5320] call_usermodehelper_exec+0x28e/0x4b0
[ 97.387695][ T5320] kobject_uevent_env+0x685/0x9e0
[ 97.387705][ T5320] workqueue_sysfs_register+0x28f/0x300
[ 97.387721][ T5320] __alloc_workqueue+0x1c75/0x2060
[ 97.387735][ T5320] alloc_workqueue_noprof+0xe3/0x210
[ 97.387748][ T5320] smbdirect_module_init+0x10a/0x1b0
[ 97.387874][ T5320] do_one_initcall+0x250/0x870
[ 97.387889][ T5320] do_initcall_level+0x10a/0x1a0
[ 97.387906][ T5320] do_initcalls+0x59/0xa0
[ 97.387920][ T5320] kernel_init_freeable+0x29d/0x3e0
[ 97.387934][ T5320] kernel_init+0x1d/0x1d0
[ 97.387947][ T5320] ret_from_fork+0x514/0xb70
[ 97.387966][ T5320] ret_from_fork_asm+0x1a/0x30
[ 97.387981][ T5320]
[ 97.387981][ T5320] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 97.387997][ T5320] _raw_spin_lock+0x2e/0x40
[ 97.388008][ T5320] __queue_work+0x72f/0x10a0
[ 97.388018][ T5320] queue_work_on+0x106/0x1d0
[ 97.388029][ T5320] rpm_suspend+0xeca/0x17b0
[ 97.388044][ T5320] __pm_runtime_idle+0x12f/0x1a0
[ 97.388057][ T5320] __device_attach+0x355/0x450
[ 97.388066][ T5320] device_initial_probe+0xa1/0xd0
[ 97.388074][ T5320] bus_probe_device+0x12a/0x220
[ 97.388087][ T5320] device_add+0x7d7/0xb80
[ 97.388101][ T5320] serial_base_port_add+0x18f/0x270
[ 97.388111][ T5320] serial_core_register_port+0x37f/0x2840
[ 97.388124][ T5320] serial8250_register_8250_port+0x16b4/0x2090
[ 97.388134][ T5320] serial_pnp_probe+0x56a/0x7f0
[ 97.388142][ T5320] pnp_device_probe+0x30b/0x4c0
[ 97.388149][ T5320] really_probe+0x254/0xae0
[ 97.388155][ T5320] __driver_probe_device+0x1e8/0x360
[ 97.388161][ T5320] driver_probe_device+0x4f/0x240
[ 97.388170][ T5320] __driver_attach+0x339/0x600
[ 97.388178][ T5320] bus_for_each_dev+0x23b/0x2c0
[ 97.388189][ T5320] bus_add_driver+0x345/0x670
[ 97.388201][ T5320] driver_register+0x23a/0x320
[ 97.388212][ T5320] serial8250_init+0x8f/0x160
[ 97.388231][ T5320] do_one_initcall+0x250/0x870
[ 97.388244][ T5320] do_initcall_level+0x10a/0x1a0
[ 97.388256][ T5320] do_initcalls+0x59/0xa0
[ 97.388267][ T5320] kernel_init_freeable+0x29d/0x3e0
[ 97.388281][ T5320] kernel_init+0x1d/0x1d0
[ 97.388295][ T5320] ret_from_fork+0x514/0xb70
[ 97.388308][ T5320] ret_from_fork_asm+0x1a/0x30
[ 97.388322][ T5320]
[ 97.388322][ T5320] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 97.388337][ T5320] _raw_spin_lock_irqsave+0x40/0x60
[ 97.388347][ T5320] __pm_runtime_resume+0x10f/0x180
[ 97.388362][ T5320] __uart_start+0x171/0x460
[ 97.388374][ T5320] uart_write+0x251/0x9f0
[ 97.388385][ T5320] n_tty_write+0xd49/0x11e0
[ 97.388395][ T5320] file_tty_write+0x509/0x9c0
[ 97.388407][ T5320] vfs_write+0x612/0xba0
[ 97.388421][ T5320] ksys_write+0x150/0x270
[ 97.388433][ T5320] do_syscall_64+0x174/0x580
[ 97.388446][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.388456][ T5320]
[ 97.388456][ T5320] -> #1 (&port_lock_key){-...}-{3:3}:
[ 97.388470][ T5320] _raw_spin_lock_irqsave+0x40/0x60
[ 97.388480][ T5320] serial8250_console_write+0x153/0x1ba0
[ 97.388495][ T5320] console_flush_all+0x6ea/0xaf0
[ 97.388505][ T5320] console_unlock+0xd1/0x1c0
[ 97.388520][ T5320] vprintk_emit+0x485/0x560
[ 97.388535][ T5320] _printk+0xdd/0x130
[ 97.388545][ T5320] register_console+0xbc3/0xfc0
[ 97.388554][ T5320] univ8250_console_init+0x3a/0x70
[ 97.388567][ T5320] console_init+0x10b/0x4a0
[ 97.388578][ T5320] start_kernel+0x238/0x3e0
[ 97.388591][ T5320] x86_64_start_reservations+0x24/0x30
[ 97.388602][ T5320] x86_64_start_kernel+0x137/0x1b0
[ 97.388613][ T5320] common_startup_64+0x13e/0x157
[ 97.388624][ T5320]
[ 97.388624][ T5320] -> #0 (console_owner){....}-{0:0}:
[ 97.388637][ T5320] __lock_acquire+0x1520/0x2cf0
[ 97.388650][ T5320] lock_acquire+0x106/0x350
[ 97.388661][ T5320] console_flush_all+0x693/0xaf0
[ 97.388671][ T5320] console_unlock+0xd1/0x1c0
[ 97.388685][ T5320] vprintk_emit+0x485/0x560
[ 97.388700][ T5320] _printk+0xdd/0x130
[ 97.388708][ T5320] __slab_bug+0x6e/0xd0
[ 97.388719][ T5320] slab_bug+0x57/0x80
[ 97.388727][ T5320] list_slab_objects+0x35/0x1a0
[ 97.388738][ T5320] __kmem_cache_shutdown+0x1a5/0x2a0
[ 97.388749][ T5320] kmem_cache_destroy+0x98/0x180
[ 97.388764][ T5320] virtio_gpu_free_vbufs+0x40/0x70
[ 97.388777][ T5320] virtio_gpu_release+0x55/0x140
[ 97.388787][ T5320] drm_dev_put+0xa9/0x120
[ 97.388797][ T5320] virtio_dev_remove+0x9c/0x1b0
[ 97.388807][ T5320] device_release_driver_internal+0x48b/0x880
[ 97.388817][ T5320] bus_remove_device+0x444/0x560
[ 97.388829][ T5320] device_del+0x524/0x8f0
[ 97.388842][ T5320] device_unregister+0x21/0xf0
[ 97.388856][ T5320] unregister_virtio_device+0x37/0x60
[ 97.388866][ T5320] virtio_pci_remove+0x7f/0xf0
[ 97.388880][ T5320] pci_device_remove+0x99/0x1c0
[ 97.388891][ T5320] device_release_driver_internal+0x48b/0x880
[ 97.388901][ T5320] unbind_store+0x1a1/0x1d0
[ 97.388912][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 97.388927][ T5320] vfs_write+0x612/0xba0
[ 97.388939][ T5320] ksys_write+0x150/0x270
[ 97.388960][ T5320] do_syscall_64+0x174/0x580
[ 97.388974][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.388987][ T5320]
[ 97.388987][ T5320] other info that might help us debug this:
[ 97.388987][ T5320]
[ 97.388990][ T5320] Chain exists of:
[ 97.388990][ T5320] console_owner --> &pool->lock --> &n->list_lock
[ 97.388990][ T5320]
[ 97.389008][ T5320] Possible unsafe locking scenario:
[ 97.389008][ T5320]
[ 97.389012][ T5320] CPU0 CPU1
[ 97.389015][ T5320] ---- ----
[ 97.389019][ T5320] lock(&n->list_lock);
[ 97.389027][ T5320] lock(&pool->lock);
[ 97.389035][ T5320] lock(&n->list_lock);
[ 97.389043][ T5320] lock(console_owner);
[ 97.389049][ T5320]
[ 97.389049][ T5320] *** DEADLOCK ***
[ 97.389049][ T5320]
[ 97.389052][ T5320] 10 locks held by syz.0.0/5320:
[ 97.389058][ T5320] #0: ffff88804367aef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 97.389086][ T5320] #1: ffff88801232a450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 97.389116][ T5320] #2: ffff888012aab480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 97.389146][ T5320] #3: ffff88801f8681f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 97.389169][ T5320] #4: ffff8880331661b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 97.389193][ T5320] #5: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 97.389224][ T5320] #6: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 97.389254][ T5320] #7: ffff88801af6cd98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 97.389280][ T5320] #8: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 97.389305][ T5320] #9: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 97.389331][ T5320]
[ 97.389331][ T5320] stack backtrace:
[ 97.389338][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 97.389350][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.389357][ T5320] Call Trace:
[ 97.389362][ T5320]
[ 97.389368][ T5320] dump_stack_lvl+0xe8/0x150
[ 97.389400][ T5320] print_circular_bug+0x2e1/0x300
[ 97.389419][ T5320] check_noncircular+0x12e/0x150
[ 97.389436][ T5320] __lock_acquire+0x1520/0x2cf0
[ 97.389456][ T5320] ? console_flush_all+0x123/0xaf0
[ 97.389472][ T5320] lock_acquire+0x106/0x350
[ 97.389488][ T5320] ? console_flush_all+0x123/0xaf0
[ 97.389502][ T5320] ? do_raw_spin_unlock+0x4d/0x210
[ 97.389515][ T5320] ? console_flush_all+0x123/0xaf0
[ 97.389526][ T5320] console_flush_all+0x693/0xaf0
[ 97.389537][ T5320] ? console_flush_all+0x123/0xaf0
[ 97.389550][ T5320] ? console_flush_all+0x123/0xaf0
[ 97.389557][ T5320] ? __pfx_console_flush_all+0x10/0x10
[ 97.389564][ T5320] ? is_printk_cpu_sync_owner+0x32/0x40
[ 97.389575][ T5320] console_unlock+0xd1/0x1c0
[ 97.389591][ T5320] ? __pfx_console_unlock+0x10/0x10
[ 97.389606][ T5320] ? _raw_spin_unlock+0x40/0x50
[ 97.389618][ T5320] ? _printk+0xdd/0x130
[ 97.389629][ T5320] vprintk_emit+0x485/0x560
[ 97.389646][ T5320] ? __pfx_vprintk_emit+0x10/0x10
[ 97.389667][ T5320] _printk+0xdd/0x130
[ 97.389675][ T5320] ? __lock_acquire+0x683/0x2cf0
[ 97.389689][ T5320] ? __pfx__printk+0x10/0x10
[ 97.389700][ T5320] ? do_raw_spin_lock+0x12b/0x2f0
[ 97.389713][ T5320] __slab_bug+0x6e/0xd0
[ 97.389758][ T5320] slab_bug+0x57/0x80
[ 97.389773][ T5320] list_slab_objects+0x35/0x1a0
[ 97.389787][ T5320] __kmem_cache_shutdown+0x1a5/0x2a0
[ 97.389803][ T5320] ? virtio_gpu_free_vbufs+0x40/0x70
[ 97.389817][ T5320] kmem_cache_destroy+0x98/0x180
[ 97.389833][ T5320] virtio_gpu_free_vbufs+0x40/0x70
[ 97.389845][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 97.389856][ T5320] virtio_gpu_release+0x55/0x140
[ 97.389866][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 97.389876][ T5320] drm_dev_put+0xa9/0x120
[ 97.389887][ T5320] virtio_dev_remove+0x9c/0x1b0
[ 97.389899][ T5320] ? __pfx_virtio_dev_remove+0x10/0x10
[ 97.389910][ T5320] device_release_driver_internal+0x48b/0x880
[ 97.389922][ T5320] bus_remove_device+0x444/0x560
[ 97.389936][ T5320] ? __pfx_bus_remove_device+0x10/0x10
[ 97.389957][ T5320] ? kernfs_remove_by_name_ns+0x101/0x140
[ 97.389974][ T5320] device_del+0x524/0x8f0
[ 97.389993][ T5320] ? __pfx_device_del+0x10/0x10
[ 97.390009][ T5320] device_unregister+0x21/0xf0
[ 97.390024][ T5320] unregister_virtio_device+0x37/0x60
[ 97.390034][ T5320] virtio_pci_remove+0x7f/0xf0
[ 97.390046][ T5320] pci_device_remove+0x99/0x1c0
[ 97.390057][ T5320] ? __pfx_pci_device_remove+0x10/0x10
[ 97.390068][ T5320] device_release_driver_internal+0x48b/0x880
[ 97.390082][ T5320] unbind_store+0x1a1/0x1d0
[ 97.390098][ T5320] ? __pfx_sysfs_kf_write+0x10/0x10
[ 97.390111][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 97.390128][ T5320] vfs_write+0x612/0xba0
[ 97.390144][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 97.390160][ T5320] ? __fget_files+0x2a/0x420
[ 97.390175][ T5320] ksys_write+0x150/0x270
[ 97.390191][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 97.390206][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.390218][ T5320] do_syscall_64+0x174/0x580
[ 97.390231][ T5320] ? trace_irq_disable+0x3b/0x140
[ 97.390240][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 97.390247][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.390254][ T5320] RIP: 0033:0x7fa22759e0d9
[ 97.390263][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.390269][ T5320] RSP: 002b:00007fa2283e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 97.390277][ T5320] RAX: ffffffffffffffda RBX: 00007fa227825fa0 RCX: 00007fa22759e0d9
[ 97.390282][ T5320] RDX: 000000000000000c RSI: 0000200000000280 RDI: 0000000000000003
[ 97.390287][ T5320] RBP: 00007fa227635024 R08: 0000000000000000 R09: 0000000000000000
[ 97.390293][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.390297][ T5320] R13: 00007fa227826038 R14: 00007fa227825fa0 R15: 00007fff3f685d48
[ 97.390305][ T5320]
[ 97.922296][ T5320] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 97.926358][ T5320] -----------------------------------------------------------------------------
[ 97.926358][ T5320]
[ 97.931077][ T5320] Object 0xffff88801f8218c0 @offset=2240
[ 97.933461][ T5320] Slab 0xffffea00007e0840 objects=14 used=1 fp=0xffff88801f8219d8 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 97.939474][ T5320] ------------[ cut here ]------------
[ 97.941821][ T5320] 1
[ 97.941834][ T5320] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5320
[ 97.946537][ T5320] Modules linked in:
[ 97.948281][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 97.952984][ T5320] Tainted: [B]=BAD_PAGE
[ 97.954710][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.958822][ T5320] RIP: 0010:__slab_err+0x15/0x20
[ 97.961074][ T5320] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 bc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 97.969328][ T5320] RSP: 0018:ffffc9000f4677b8 EFLAGS: 00010087
[ 97.971902][ T5320] RAX: ffffffff8186dc3a RBX: ffff88801d376b40 RCX: 0000000000100000
[ 97.975202][ T5320] RDX: ffffc9000eb8a000 RSI: 0000000000065be1 RDI: 0000000000065be2
[ 97.978631][ T5320] RBP: ffffea00007e6f90 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 97.982165][ T5320] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00007e7a10
[ 97.985674][ T5320] R13: ffffea00007e0840 R14: ffffc9000f4677d0 R15: ffff88801af6cd80
[ 97.988957][ T5320] FS: 00007fa2283ea6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 97.992978][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 97.995673][ T5320] CR2: 000055e1ab318718 CR3: 00000000125f8000 CR4: 0000000000352ef0
[ 97.999067][ T5320] Call Trace:
[ 98.000506][ T5320]
[ 98.001844][ T5320] __kmem_cache_shutdown+0x1a5/0x2a0
[ 98.004157][ T5320] ? virtio_gpu_free_vbufs+0x40/0x70
[ 98.006490][ T5320] kmem_cache_destroy+0x98/0x180
[ 98.008664][ T5320] virtio_gpu_free_vbufs+0x40/0x70
[ 98.010898][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 98.013212][ T5320] virtio_gpu_release+0x55/0x140
[ 98.015389][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 98.017820][ T5320] drm_dev_put+0xa9/0x120
[ 98.019658][ T5320] virtio_dev_remove+0x9c/0x1b0
[ 98.021728][ T5320] ? __pfx_virtio_dev_remove+0x10/0x10
[ 98.024202][ T5320] device_release_driver_internal+0x48b/0x880
[ 98.026856][ T5320] bus_remove_device+0x444/0x560
[ 98.029325][ T5320] ? __pfx_bus_remove_device+0x10/0x10
[ 98.032242][ T5320] ? kernfs_remove_by_name_ns+0x101/0x140
[ 98.035232][ T5320] device_del+0x524/0x8f0
[ 98.036995][ T5320] ? __pfx_device_del+0x10/0x10
[ 98.039043][ T5320] device_unregister+0x21/0xf0
[ 98.041182][ T5320] unregister_virtio_device+0x37/0x60
[ 98.043462][ T5320] virtio_pci_remove+0x7f/0xf0
[ 98.045420][ T5320] pci_device_remove+0x99/0x1c0
[ 98.047576][ T5320] ? __pfx_pci_device_remove+0x10/0x10
[ 98.050265][ T5320] device_release_driver_internal+0x48b/0x880
[ 98.053483][ T5320] unbind_store+0x1a1/0x1d0
[ 98.055439][ T5320] ? __pfx_sysfs_kf_write+0x10/0x10
[ 98.057638][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 98.059933][ T5320] vfs_write+0x612/0xba0
[ 98.061848][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 98.064044][ T5320] ? __fget_files+0x2a/0x420
[ 98.066093][ T5320] ksys_write+0x150/0x270
[ 98.067999][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 98.069953][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.072381][ T5320] do_syscall_64+0x174/0x580
[ 98.074242][ T5320] ? trace_irq_disable+0x3b/0x140
[ 98.076329][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 98.078301][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.080869][ T5320] RIP: 0033:0x7fa22759e0d9
[ 98.082729][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 98.090448][ T5320] RSP: 002b:00007fa2283e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.094093][ T5320] RAX: ffffffffffffffda RBX: 00007fa227825fa0 RCX: 00007fa22759e0d9
[ 98.097438][ T5320] RDX: 000000000000000c RSI: 0000200000000280 RDI: 0000000000000003
[ 98.100761][ T5320] RBP: 00007fa227635024 R08: 0000000000000000 R09: 0000000000000000
[ 98.104073][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.107782][ T5320] R13: 00007fa227826038 R14: 00007fa227825fa0 R15: 00007fff3f685d48
[ 98.111580][ T5320]
[ 98.112957][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 98.115957][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 98.120353][ T5320] Tainted: [B]=BAD_PAGE
[ 98.122197][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 98.126372][ T5320] Call Trace:
[ 98.127834][ T5320]
[ 98.129146][ T5320] vpanic+0x56c/0xa60
[ 98.131123][ T5320] ? __pfx__printk+0x10/0x10
[ 98.133547][ T5320] ? __pfx_vpanic+0x10/0x10
[ 98.136109][ T5320] ? is_bpf_text_address+0x292/0x2b0
[ 98.138541][ T5320] ? is_bpf_text_address+0x26/0x2b0
[ 98.140772][ T5320] panic+0xc5/0xd0
[ 98.142388][ T5320] ? __pfx_panic+0x10/0x10
[ 98.144272][ T5320] __warn+0x315/0x4c0
[ 98.146021][ T5320] ? __slab_err+0x15/0x20
[ 98.147931][ T5320] ? __slab_err+0x15/0x20
[ 98.149830][ T5320] __report_bug+0x276/0x570
[ 98.151867][ T5320] ? do_raw_spin_unlock+0x4d/0x210
[ 98.154025][ T5320] ? __slab_err+0x15/0x20
[ 98.155916][ T5320] ? __pfx___report_bug+0x10/0x10
[ 98.158159][ T5320] ? __wake_up_klogd+0xe6/0x120
[ 98.160397][ T5320] ? vprintk_emit+0x4eb/0x560
[ 98.162745][ T5320] ? __pfx_vprintk_emit+0x10/0x10
[ 98.164968][ T5320] ? _printk+0xdd/0x130
[ 98.166882][ T5320] ? __slab_err+0x15/0x20
[ 98.168840][ T5320] report_bug+0x16a/0x220
[ 98.170829][ T5320] ? __slab_err+0x15/0x20
[ 98.172646][ T5320] ? __slab_err+0x17/0x20
[ 98.174507][ T5320] handle_bug+0x9c/0x200
[ 98.176258][ T5320] exc_invalid_op+0x1a/0x50
[ 98.177834][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 98.179585][ T5320] RIP: 0010:__slab_err+0x15/0x20
[ 98.181498][ T5320] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 bc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 98.189379][ T5320] RSP: 0018:ffffc9000f4677b8 EFLAGS: 00010087
[ 98.192005][ T5320] RAX: ffffffff8186dc3a RBX: ffff88801d376b40 RCX: 0000000000100000
[ 98.196011][ T5320] RDX: ffffc9000eb8a000 RSI: 0000000000065be1 RDI: 0000000000065be2
[ 98.200257][ T5320] RBP: ffffea00007e6f90 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 98.203782][ T5320] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00007e7a10
[ 98.207248][ T5320] R13: ffffea00007e0840 R14: ffffc9000f4677d0 R15: ffff88801af6cd80
[ 98.210844][ T5320] ? add_taint+0x9a/0xe0
[ 98.212702][ T5320] ? __slab_err+0x14/0x20
[ 98.214571][ T5320] __kmem_cache_shutdown+0x1a5/0x2a0
[ 98.216737][ T5320] ? virtio_gpu_free_vbufs+0x40/0x70
[ 98.218813][ T5320] kmem_cache_destroy+0x98/0x180
[ 98.221039][ T5320] virtio_gpu_free_vbufs+0x40/0x70
[ 98.223287][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 98.225604][ T5320] virtio_gpu_release+0x55/0x140
[ 98.227701][ T5320] ? __pfx_virtio_gpu_release+0x10/0x10
[ 98.230027][ T5320] drm_dev_put+0xa9/0x120
[ 98.231935][ T5320] virtio_dev_remove+0x9c/0x1b0
[ 98.233991][ T5320] ? __pfx_virtio_dev_remove+0x10/0x10
[ 98.236394][ T5320] device_release_driver_internal+0x48b/0x880
[ 98.238996][ T5320] bus_remove_device+0x444/0x560
[ 98.241123][ T5320] ? __pfx_bus_remove_device+0x10/0x10
[ 98.243441][ T5320] ? kernfs_remove_by_name_ns+0x101/0x140
[ 98.245810][ T5320] device_del+0x524/0x8f0
[ 98.247635][ T5320] ? __pfx_device_del+0x10/0x10
[ 98.249759][ T5320] device_unregister+0x21/0xf0
[ 98.251972][ T5320] unregister_virtio_device+0x37/0x60
[ 98.254314][ T5320] virtio_pci_remove+0x7f/0xf0
[ 98.256362][ T5320] pci_device_remove+0x99/0x1c0
[ 98.258313][ T5320] ? __pfx_pci_device_remove+0x10/0x10
[ 98.260544][ T5320] device_release_driver_internal+0x48b/0x880
[ 98.262940][ T5320] unbind_store+0x1a1/0x1d0
[ 98.264833][ T5320] ? __pfx_sysfs_kf_write+0x10/0x10
[ 98.267038][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 98.269226][ T5320] vfs_write+0x612/0xba0
[ 98.271130][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 98.273181][ T5320] ? __fget_files+0x2a/0x420
[ 98.275160][ T5320] ksys_write+0x150/0x270
[ 98.276976][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 98.279077][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.281675][ T5320] do_syscall_64+0x174/0x580
[ 98.283696][ T5320] ? trace_irq_disable+0x3b/0x140
[ 98.285913][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 98.288041][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.290664][ T5320] RIP: 0033:0x7fa22759e0d9
[ 98.292514][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 98.299944][ T5320] RSP: 002b:00007fa2283e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.303280][ T5320] RAX: ffffffffffffffda RBX: 00007fa227825fa0 RCX: 00007fa22759e0d9
[ 98.306452][ T5320] RDX: 000000000000000c RSI: 0000200000000280 RDI: 0000000000000003
[ 98.309845][ T5320] RBP: 00007fa227635024 R08: 0000000000000000 R09: 0000000000000000
[ 98.313204][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.316612][ T5320] R13: 00007fa227826038 R14: 00007fa227825fa0 R15: 00007fff3f685d48
[ 98.319993][ T5320]
[ 98.321723][ T5320] Kernel Offset: disabled
[ 98.323668][ T5320] Rebooting in 86400 seconds..