program:
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1b}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='1', 0x1)
[ 110.050042][ T5277] Bluetooth: hci0: command tx timeout
[ 110.171758][ T5318] Console: switching to colour dummy device 80x25
[ 110.376328][ T5318] =============================================================================
[ 110.377166][ T5318]
[ 110.377176][ T5318] ======================================================
[ 110.377181][ T5318] WARNING: possible circular locking dependency detected
[ 110.377188][ T5318] syzkaller #0 Not tainted
[ 110.377194][ T5318] ------------------------------------------------------
[ 110.377200][ T5318] syz.0.0/5318 is trying to acquire lock:
[ 110.377208][ T5318] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 110.377455][ T5318]
[ 110.377455][ T5318] but task is already holding lock:
[ 110.377461][ T5318] ffff88801afedc18 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 110.377510][ T5318]
[ 110.377510][ T5318] which lock already depends on the new lock.
[ 110.377510][ T5318]
[ 110.377516][ T5318]
[ 110.377516][ T5318] the existing dependency chain (in reverse order) is:
[ 110.377520][ T5318]
[ 110.377520][ T5318] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 110.377534][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 110.377622][ T5318] get_from_partial_node+0x54/0x4c0
[ 110.377636][ T5318] ___slab_alloc+0x258/0x950
[ 110.377648][ T5318] kmem_cache_alloc_noprof+0x135/0x5f0
[ 110.377664][ T5318] fill_pool+0x165/0x610
[ 110.377772][ T5318] debug_object_activate+0x38d/0x420
[ 110.377785][ T5318] insert_work+0x35/0x330
[ 110.377796][ T5318] __queue_work+0xcd8/0x10a0
[ 110.377811][ T5318] queue_work_on+0x106/0x1d0
[ 110.377824][ T5318] call_usermodehelper_exec+0x28e/0x4b0
[ 110.377836][ T5318] kobject_uevent_env+0x685/0x9e0
[ 110.377851][ T5318] device_add+0x544/0xb80
[ 110.377881][ T5318] device_create_with_groups+0x26a/0x300
[ 110.377893][ T5318] misc_register+0x2f7/0x560
[ 110.377923][ T5318] do_one_initcall+0x250/0x870
[ 110.377966][ T5318] do_initcall_level+0x10a/0x1a0
[ 110.378099][ T5318] do_initcalls+0x59/0xa0
[ 110.378112][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 110.378124][ T5318] kernel_init+0x1d/0x1d0
[ 110.378143][ T5318] ret_from_fork+0x514/0xb70
[ 110.378158][ T5318] ret_from_fork_asm+0x1a/0x30
[ 110.378174][ T5318]
[ 110.378174][ T5318] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 110.378191][ T5318] _raw_spin_lock+0x2e/0x40
[ 110.378200][ T5318] __queue_work+0x72f/0x10a0
[ 110.378211][ T5318] queue_work_on+0x106/0x1d0
[ 110.378224][ T5318] rpm_suspend+0xeca/0x17b0
[ 110.378240][ T5318] __pm_runtime_idle+0x12f/0x1a0
[ 110.378259][ T5318] __device_attach+0x355/0x450
[ 110.378270][ T5318] device_initial_probe+0xa1/0xd0
[ 110.378281][ T5318] bus_probe_device+0x12a/0x220
[ 110.378297][ T5318] device_add+0x7d7/0xb80
[ 110.378314][ T5318] serial_base_port_add+0x18f/0x270
[ 110.378327][ T5318] serial_core_register_port+0x37f/0x2840
[ 110.378342][ T5318] serial8250_register_8250_port+0x16b4/0x2090
[ 110.378357][ T5318] serial_pnp_probe+0x56a/0x7f0
[ 110.378366][ T5318] pnp_device_probe+0x30b/0x4c0
[ 110.378375][ T5318] really_probe+0x254/0xae0
[ 110.378381][ T5318] __driver_probe_device+0x1e8/0x360
[ 110.378387][ T5318] driver_probe_device+0x4f/0x240
[ 110.378393][ T5318] __driver_attach+0x339/0x600
[ 110.378399][ T5318] bus_for_each_dev+0x23b/0x2c0
[ 110.378407][ T5318] bus_add_driver+0x345/0x670
[ 110.378415][ T5318] driver_register+0x23a/0x320
[ 110.378422][ T5318] serial8250_init+0x8f/0x160
[ 110.378434][ T5318] do_one_initcall+0x250/0x870
[ 110.378443][ T5318] do_initcall_level+0x10a/0x1a0
[ 110.378454][ T5318] do_initcalls+0x59/0xa0
[ 110.378468][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 110.378482][ T5318] kernel_init+0x1d/0x1d0
[ 110.378497][ T5318] ret_from_fork+0x514/0xb70
[ 110.378511][ T5318] ret_from_fork_asm+0x1a/0x30
[ 110.378530][ T5318]
[ 110.378530][ T5318] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 110.378577][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 110.378593][ T5318] __pm_runtime_resume+0x10f/0x180
[ 110.378611][ T5318] __uart_start+0x171/0x460
[ 110.378646][ T5318] uart_write+0x251/0x9f0
[ 110.378661][ T5318] n_tty_write+0xd49/0x11e0
[ 110.378671][ T5318] file_tty_write+0x509/0x9c0
[ 110.378688][ T5318] vfs_write+0x612/0xba0
[ 110.378704][ T5318] ksys_write+0x150/0x270
[ 110.378721][ T5318] do_syscall_64+0x174/0x580
[ 110.378737][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.378749][ T5318]
[ 110.378749][ T5318] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 110.378764][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 110.378775][ T5318] serial8250_console_write+0x153/0x1ba0
[ 110.378790][ T5318] console_flush_all+0x6ea/0xaf0
[ 110.378802][ T5318] console_unlock+0xd1/0x1c0
[ 110.378816][ T5318] vprintk_emit+0x485/0x560
[ 110.378831][ T5318] _printk+0xdd/0x130
[ 110.378841][ T5318] register_console+0xbc3/0xfc0
[ 110.378850][ T5318] univ8250_console_init+0x3a/0x70
[ 110.378863][ T5318] console_init+0x10b/0x4a0
[ 110.378875][ T5318] start_kernel+0x238/0x3e0
[ 110.378888][ T5318] x86_64_start_reservations+0x24/0x30
[ 110.378900][ T5318] x86_64_start_kernel+0x137/0x1b0
[ 110.378911][ T5318] common_startup_64+0x13e/0x157
[ 110.378923][ T5318]
[ 110.378923][ T5318] -> #0 (console_owner){....}-{0:0}:
[ 110.378948][ T5318] __lock_acquire+0x1520/0x2cf0
[ 110.378975][ T5318] lock_acquire+0x106/0x350
[ 110.378991][ T5318] console_flush_all+0x693/0xaf0
[ 110.379003][ T5318] console_unlock+0xd1/0x1c0
[ 110.379022][ T5318] vprintk_emit+0x485/0x560
[ 110.379037][ T5318] _printk+0xdd/0x130
[ 110.379047][ T5318] __slab_bug+0x6e/0xd0
[ 110.379059][ T5318] slab_bug+0x57/0x80
[ 110.379070][ T5318] list_slab_objects+0x35/0x1a0
[ 110.379083][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 110.379096][ T5318] kmem_cache_destroy+0x98/0x180
[ 110.379108][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 110.379117][ T5318] virtio_gpu_release+0x55/0x140
[ 110.379124][ T5318] drm_dev_put+0xa9/0x120
[ 110.379131][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 110.379139][ T5318] device_release_driver_internal+0x48b/0x880
[ 110.379150][ T5318] bus_remove_device+0x444/0x560
[ 110.379162][ T5318] device_del+0x524/0x8f0
[ 110.379178][ T5318] device_unregister+0x21/0xf0
[ 110.379193][ T5318] unregister_virtio_device+0x37/0x60
[ 110.379203][ T5318] virtio_pci_remove+0x7f/0xf0
[ 110.379216][ T5318] pci_device_remove+0x99/0x1c0
[ 110.379228][ T5318] device_release_driver_internal+0x48b/0x880
[ 110.379238][ T5318] pci_stop_bus_device+0xf6/0x120
[ 110.379253][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 110.379268][ T5318] remove_store+0xe5/0x150
[ 110.379283][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 110.379301][ T5318] vfs_write+0x612/0xba0
[ 110.379316][ T5318] ksys_write+0x150/0x270
[ 110.379329][ T5318] do_syscall_64+0x174/0x580
[ 110.379344][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.379352][ T5318]
[ 110.379352][ T5318] other info that might help us debug this:
[ 110.379352][ T5318]
[ 110.379355][ T5318] Chain exists of:
[ 110.379355][ T5318] console_owner --> &pool->lock --> &n->list_lock
[ 110.379355][ T5318]
[ 110.379368][ T5318] Possible unsafe locking scenario:
[ 110.379368][ T5318]
[ 110.379370][ T5318] CPU0 CPU1
[ 110.379373][ T5318] ---- ----
[ 110.379375][ T5318] lock(&n->list_lock);
[ 110.379380][ T5318] lock(&pool->lock);
[ 110.379388][ T5318] lock(&n->list_lock);
[ 110.379398][ T5318] lock(console_owner);
[ 110.379406][ T5318]
[ 110.379406][ T5318] *** DEADLOCK ***
[ 110.379406][ T5318]
[ 110.379409][ T5318] 11 locks held by syz.0.0/5318:
[ 110.379418][ T5318] #0: ffff88801d1e19b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 110.379452][ T5318] #1: ffff88801285c450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 110.379484][ T5318] #2: ffff888034b0cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 110.379516][ T5318] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0
[ 110.379547][ T5318] #4: ffff88801d2701f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 110.379575][ T5318] #5: ffff8880333761b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 110.379602][ T5318] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 110.379635][ T5318] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 110.379665][ T5318] #8: ffff88801afedc18 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 110.379705][ T5318] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 110.379740][ T5318] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 110.379762][ T5318]
[ 110.379762][ T5318] stack backtrace:
[ 110.379768][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 110.379777][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 110.379782][ T5318] Call Trace:
[ 110.379787][ T5318]
[ 110.379792][ T5318] dump_stack_lvl+0xe8/0x150
[ 110.379810][ T5318] print_circular_bug+0x2e1/0x300
[ 110.379828][ T5318] check_noncircular+0x12e/0x150
[ 110.379848][ T5318] __lock_acquire+0x1520/0x2cf0
[ 110.379869][ T5318] ? console_flush_all+0x123/0xaf0
[ 110.379880][ T5318] lock_acquire+0x106/0x350
[ 110.379893][ T5318] ? console_flush_all+0x123/0xaf0
[ 110.379907][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 110.379920][ T5318] ? console_flush_all+0x123/0xaf0
[ 110.379939][ T5318] console_flush_all+0x693/0xaf0
[ 110.379951][ T5318] ? console_flush_all+0x123/0xaf0
[ 110.379965][ T5318] ? console_flush_all+0x123/0xaf0
[ 110.379979][ T5318] ? __pfx_console_flush_all+0x10/0x10
[ 110.379992][ T5318] ? is_printk_cpu_sync_owner+0x32/0x40
[ 110.380007][ T5318] console_unlock+0xd1/0x1c0
[ 110.380027][ T5318] ? __pfx_console_unlock+0x10/0x10
[ 110.380039][ T5318] ? _raw_spin_unlock+0x40/0x50
[ 110.380048][ T5318] ? _printk+0xdd/0x130
[ 110.380055][ T5318] vprintk_emit+0x485/0x560
[ 110.380069][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 110.380087][ T5318] _printk+0xdd/0x130
[ 110.380097][ T5318] ? __lock_acquire+0x683/0x2cf0
[ 110.380112][ T5318] ? __pfx__printk+0x10/0x10
[ 110.380125][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 110.380137][ T5318] __slab_bug+0x6e/0xd0
[ 110.380150][ T5318] slab_bug+0x57/0x80
[ 110.380164][ T5318] list_slab_objects+0x35/0x1a0
[ 110.380179][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 110.380195][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 110.380210][ T5318] kmem_cache_destroy+0x98/0x180
[ 110.380226][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 110.380235][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 110.380242][ T5318] virtio_gpu_release+0x55/0x140
[ 110.380249][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 110.380256][ T5318] drm_dev_put+0xa9/0x120
[ 110.380266][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 110.380276][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 110.380287][ T5318] device_release_driver_internal+0x48b/0x880
[ 110.380301][ T5318] bus_remove_device+0x444/0x560
[ 110.380319][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 110.380335][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 110.380353][ T5318] device_del+0x524/0x8f0
[ 110.380375][ T5318] ? __pfx_device_del+0x10/0x10
[ 110.380394][ T5318] device_unregister+0x21/0xf0
[ 110.380414][ T5318] unregister_virtio_device+0x37/0x60
[ 110.380426][ T5318] virtio_pci_remove+0x7f/0xf0
[ 110.380441][ T5318] pci_device_remove+0x99/0x1c0
[ 110.380454][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 110.380466][ T5318] device_release_driver_internal+0x48b/0x880
[ 110.380479][ T5318] pci_stop_bus_device+0xf6/0x120
[ 110.380495][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 110.380511][ T5318] remove_store+0xe5/0x150
[ 110.380528][ T5318] ? __pfx_remove_store+0x10/0x10
[ 110.380545][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 110.380557][ T5318] ? sysfs_kf_write+0x166/0x260
[ 110.380570][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 110.380580][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 110.380592][ T5318] vfs_write+0x612/0xba0
[ 110.380603][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 110.380613][ T5318] ? __fget_files+0x2a/0x420
[ 110.380623][ T5318] ksys_write+0x150/0x270
[ 110.380633][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 110.380647][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.380659][ T5318] do_syscall_64+0x174/0x580
[ 110.380674][ T5318] ? trace_irq_disable+0x3b/0x140
[ 110.380692][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 110.380708][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.380721][ T5318] RIP: 0033:0x7fab13d9e0d9
[ 110.380734][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.380744][ T5318] RSP: 002b:00007fab14d23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 110.380760][ T5318] RAX: ffffffffffffffda RBX: 00007fab14025fa0 RCX: 00007fab13d9e0d9
[ 110.380770][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 110.380780][ T5318] RBP: 00007fab13e35024 R08: 0000000000000000 R09: 0000000000000000
[ 110.380788][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.380796][ T5318] R13: 00007fab14026038 R14: 00007fab14025fa0 R15: 00007ffe649d4558
[ 110.380812][ T5318]
[ 110.971744][ T5318] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 110.975802][ T5318] -----------------------------------------------------------------------------
[ 110.975802][ T5318]
[ 110.981332][ T5318] Object 0xffff888000280000 @offset=0
[ 110.983908][ T5318] Object 0xffff888000280118 @offset=280
[ 110.986335][ T5318] Slab 0xffffea000000a000 objects=14 used=2 fp=0xffff888000280230 flags=0x7ff00000000200(workingset|node=0|zone=0|lastcpupid=0x7ff)
[ 110.992163][ T5318] ------------[ cut here ]------------
[ 110.994775][ T5318] 1
[ 110.994790][ T5318] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5318
[ 110.999661][ T5318] Modules linked in:
[ 111.001470][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 111.006126][ T5318] Tainted: [B]=BAD_PAGE
[ 111.008066][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.012301][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 111.014417][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 bc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 111.022377][ T5318] RSP: 0018:ffffc9000f5a76d8 EFLAGS: 00010087
[ 111.024973][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034e84b40 RCX: 0000000000100000
[ 111.028464][ T5318] RDX: ffffc9000ed6a000 RSI: 0000000000069740 RDI: 0000000000069741
[ 111.032052][ T5318] RBP: ffffea00004bdd50 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 111.035482][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffff88801afedc48
[ 111.038966][ T5318] R13: ffffea000000a000 R14: ffffc9000f5a76f0 R15: ffff88801afedc00
[ 111.042587][ T5318] FS: 00007fab14d246c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 111.046832][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.050003][ T5318] CR2: 00007f7584f909c0 CR3: 000000004403c000 CR4: 0000000000352ef0
[ 111.053750][ T5318] Call Trace:
[ 111.055439][ T5318]
[ 111.056955][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 111.059730][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 111.062456][ T5318] kmem_cache_destroy+0x98/0x180
[ 111.064818][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 111.067162][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 111.069573][ T5318] virtio_gpu_release+0x55/0x140
[ 111.071997][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 111.074663][ T5318] drm_dev_put+0xa9/0x120
[ 111.076942][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 111.079311][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 111.081750][ T5318] device_release_driver_internal+0x48b/0x880
[ 111.084549][ T5318] bus_remove_device+0x444/0x560
[ 111.086969][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 111.089993][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 111.093246][ T5318] device_del+0x524/0x8f0
[ 111.095541][ T5318] ? __pfx_device_del+0x10/0x10
[ 111.097886][ T5318] device_unregister+0x21/0xf0
[ 111.099801][ T5318] unregister_virtio_device+0x37/0x60
[ 111.101944][ T5318] virtio_pci_remove+0x7f/0xf0
[ 111.104178][ T5318] pci_device_remove+0x99/0x1c0
[ 111.106746][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 111.109417][ T5318] device_release_driver_internal+0x48b/0x880
[ 111.112254][ T5318] pci_stop_bus_device+0xf6/0x120
[ 111.114635][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 111.117644][ T5318] remove_store+0xe5/0x150
[ 111.119665][ T5318] ? __pfx_remove_store+0x10/0x10
[ 111.121949][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 111.124105][ T5318] ? sysfs_kf_write+0x166/0x260
[ 111.126164][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 111.128207][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 111.130402][ T5318] vfs_write+0x612/0xba0
[ 111.132163][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 111.134292][ T5318] ? __fget_files+0x2a/0x420
[ 111.136369][ T5318] ksys_write+0x150/0x270
[ 111.138315][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 111.140518][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.143092][ T5318] do_syscall_64+0x174/0x580
[ 111.144978][ T5318] ? trace_irq_disable+0x3b/0x140
[ 111.147104][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 111.148991][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.151251][ T5318] RIP: 0033:0x7fab13d9e0d9
[ 111.153077][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.161982][ T5318] RSP: 002b:00007fab14d23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 111.165380][ T5318] RAX: ffffffffffffffda RBX: 00007fab14025fa0 RCX: 00007fab13d9e0d9
[ 111.168770][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 111.172179][ T5318] RBP: 00007fab13e35024 R08: 0000000000000000 R09: 0000000000000000
[ 111.175651][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.179058][ T5318] R13: 00007fab14026038 R14: 00007fab14025fa0 R15: 00007ffe649d4558
[ 111.182177][ T5318]
[ 111.183575][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 111.186633][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 111.190977][ T5318] Tainted: [B]=BAD_PAGE
[ 111.192720][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.197083][ T5318] Call Trace:
[ 111.198587][ T5318]
[ 111.199788][ T5318] vpanic+0x56c/0xa60
[ 111.201498][ T5318] ? __pfx__printk+0x10/0x10
[ 111.203587][ T5318] ? __pfx_vpanic+0x10/0x10
[ 111.205483][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 111.207559][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 111.209600][ T5318] panic+0xc5/0xd0
[ 111.211158][ T5318] ? __pfx_panic+0x10/0x10
[ 111.212979][ T5318] __warn+0x315/0x4c0
[ 111.214585][ T5318] ? __slab_err+0x15/0x20
[ 111.216195][ T5318] ? __slab_err+0x15/0x20
[ 111.217902][ T5318] __report_bug+0x276/0x570
[ 111.219756][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 111.221744][ T5318] ? __slab_err+0x15/0x20
[ 111.223406][ T5318] ? __pfx___report_bug+0x10/0x10
[ 111.225421][ T5318] ? __wake_up_klogd+0xe6/0x120
[ 111.227405][ T5318] ? vprintk_emit+0x4eb/0x560
[ 111.229413][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 111.231616][ T5318] ? _printk+0xdd/0x130
[ 111.233321][ T5318] ? __slab_err+0x15/0x20
[ 111.235187][ T5318] report_bug+0x16a/0x220
[ 111.236873][ T5318] ? __slab_err+0x15/0x20
[ 111.238639][ T5318] ? __slab_err+0x17/0x20
[ 111.240391][ T5318] handle_bug+0x9c/0x200
[ 111.242122][ T5318] exc_invalid_op+0x1a/0x50
[ 111.243927][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 111.245871][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 111.247833][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 bc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 111.255839][ T5318] RSP: 0018:ffffc9000f5a76d8 EFLAGS: 00010087
[ 111.258214][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034e84b40 RCX: 0000000000100000
[ 111.261217][ T5318] RDX: ffffc9000ed6a000 RSI: 0000000000069740 RDI: 0000000000069741
[ 111.264662][ T5318] RBP: ffffea00004bdd50 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 111.268222][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffff88801afedc48
[ 111.271669][ T5318] R13: ffffea000000a000 R14: ffffc9000f5a76f0 R15: ffff88801afedc00
[ 111.275192][ T5318] ? add_taint+0x9a/0xe0
[ 111.277135][ T5318] ? __slab_err+0x14/0x20
[ 111.279065][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 111.281537][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 111.283998][ T5318] kmem_cache_destroy+0x98/0x180
[ 111.286194][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 111.288371][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 111.290753][ T5318] virtio_gpu_release+0x55/0x140
[ 111.292777][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 111.295023][ T5318] drm_dev_put+0xa9/0x120
[ 111.296861][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 111.298987][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 111.301163][ T5318] device_release_driver_internal+0x48b/0x880
[ 111.303800][ T5318] bus_remove_device+0x444/0x560
[ 111.306002][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 111.308240][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 111.310292][ T5318] device_del+0x524/0x8f0
[ 111.311983][ T5318] ? __pfx_device_del+0x10/0x10
[ 111.313944][ T5318] device_unregister+0x21/0xf0
[ 111.315735][ T5318] unregister_virtio_device+0x37/0x60
[ 111.317814][ T5318] virtio_pci_remove+0x7f/0xf0
[ 111.319712][ T5318] pci_device_remove+0x99/0x1c0
[ 111.321546][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 111.323560][ T5318] device_release_driver_internal+0x48b/0x880
[ 111.326081][ T5318] pci_stop_bus_device+0xf6/0x120
[ 111.328184][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 111.330963][ T5318] remove_store+0xe5/0x150
[ 111.332953][ T5318] ? __pfx_remove_store+0x10/0x10
[ 111.335175][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 111.337270][ T5318] ? sysfs_kf_write+0x166/0x260
[ 111.339157][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 111.341201][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 111.343475][ T5318] vfs_write+0x612/0xba0
[ 111.345255][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 111.347220][ T5318] ? __fget_files+0x2a/0x420
[ 111.349130][ T5318] ksys_write+0x150/0x270
[ 111.350947][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 111.352958][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.355446][ T5318] do_syscall_64+0x174/0x580
[ 111.357445][ T5318] ? trace_irq_disable+0x3b/0x140
[ 111.359606][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 111.361733][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.364072][ T5318] RIP: 0033:0x7fab13d9e0d9
[ 111.366003][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.373851][ T5318] RSP: 002b:00007fab14d23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 111.377322][ T5318] RAX: ffffffffffffffda RBX: 00007fab14025fa0 RCX: 00007fab13d9e0d9
[ 111.380543][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 111.383752][ T5318] RBP: 00007fab13e35024 R08: 0000000000000000 R09: 0000000000000000
[ 111.387229][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.391131][ T5318] R13: 00007fab14026038 R14: 00007fab14025fa0 R15: 00007ffe649d4558
[ 111.395965][ T5318]
[ 111.398422][ T5318] Kernel Offset: disabled
[ 111.400611][ T5318] Rebooting in 86400 seconds..