program:
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@local, 0x20, 0xffff, 0x1, 0xc, 0xa, 0x0, 0xa0, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffeff, 0x800, 0x0, 0x7fffffe}, 0xa, 0x0, 0x1, 0x1, 0x6}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x9, 0xfff}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev/ttyUSB0\x00', &(0x7f0000000300)='devpts\x00', 0x1058404, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0xd, 0x400002)
close(0x3)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x3a00}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0xff00)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
r3 = openat(r2, &(0x7f0000000440)='./sys/bus/pci/rescan\x00', 0x101001, 0xc)
write(r3, &(0x7f00000001c0)='1', 0x1)
socket$netlink(0x10, 0x3, 0x0)
[ 93.140150][ T1366] cfg80211: failed to load regulatory.db
[ 93.144212][ T44] Bluetooth: hci0: command tx timeout
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb7000)
[ 93.502162][ T1020] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 93.505199][ T1020] ata1: failed to read log page 10h (errno=-5)
[ 93.507859][ T1020] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0
[ 93.512613][ T1020] ata1.00: irq_stat 0x41000000
[ 93.514758][ T1020] ata1.00: failed command: WRITE FPDMA QUEUED
[ 93.517693][ T1020] ata1.00: cmd 61/a0:00:2e:0f:08/06:00:00:00:00/40 tag 0 ncq dma 868352 out
[ 93.517693][ T1020] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 93.525013][ T1020] ata1.00: status: { DRDY }
[ 93.526881][ T1020] ata1.00: failed command: WRITE FPDMA QUEUED
[ 93.529683][ T1020] ata1.00: cmd 61/b8:f0:76:09:08/05:00:00:00:00/40 tag 30 ncq dma 749568 out
[ 93.529683][ T1020] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 93.537289][ T1020] ata1.00: status: { DRDY }
[ 93.540543][ T1020] ata1.00: configured for UDMA/100
[ 93.542908][ T1366] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.551586][ T1020] ata1: EH complete
[ 93.694756][ T1366] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 93.700852][ T1366] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 93.710548][ T1366] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 93.714558][ T1366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 93.717917][ T1366] usb 5-1: Product: syz
[ 93.719959][ T1366] usb 5-1: Manufacturer: syz
[ 93.722563][ T1366] usb 5-1: SerialNumber: syz
[ 93.768063][ T1366] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[ 93.787799][ T1366] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 93.821415][ T1366] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 94.689088][ T5318] Console: switching to colour dummy device 80x25
[ 94.798053][ T5318] =============================================================================
[ 94.798550][ T5318]
[ 94.798555][ T5318] ======================================================
[ 94.798559][ T5318] WARNING: possible circular locking dependency detected
[ 94.798565][ T5318] syzkaller #0 Not tainted
[ 94.798571][ T5318] ------------------------------------------------------
[ 94.798575][ T5318] syz.0.0/5318 is trying to acquire lock:
[ 94.798581][ T5318] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.798659][ T5318]
[ 94.798659][ T5318] but task is already holding lock:
[ 94.798662][ T5318] ffff88801afe9d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.798679][ T5318]
[ 94.798679][ T5318] which lock already depends on the new lock.
[ 94.798679][ T5318]
[ 94.798682][ T5318]
[ 94.798682][ T5318] the existing dependency chain (in reverse order) is:
[ 94.798684][ T5318]
[ 94.798684][ T5318] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 94.798694][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.798730][ T5318] get_from_partial_node+0x54/0x4c0
[ 94.798738][ T5318] ___slab_alloc+0x258/0x950
[ 94.798746][ T5318] kmem_cache_alloc_noprof+0x135/0x5f0
[ 94.798756][ T5318] fill_pool+0x165/0x610
[ 94.798800][ T5318] debug_object_activate+0x38d/0x420
[ 94.798822][ T5318] insert_work+0x35/0x330
[ 94.798831][ T5318] __queue_work+0xcd8/0x10a0
[ 94.798842][ T5318] queue_work_on+0x106/0x1d0
[ 94.798852][ T5318] call_usermodehelper_exec+0x28e/0x4b0
[ 94.798861][ T5318] kobject_uevent_env+0x685/0x9e0
[ 94.798870][ T5318] driver_register+0x2d4/0x320
[ 94.798881][ T5318] do_one_initcall+0x250/0x870
[ 94.798896][ T5318] do_initcall_level+0x10a/0x1a0
[ 94.798969][ T5318] do_initcalls+0x59/0xa0
[ 94.798977][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 94.798986][ T5318] kernel_init+0x1d/0x1d0
[ 94.798996][ T5318] ret_from_fork+0x514/0xb70
[ 94.799006][ T5318] ret_from_fork_asm+0x1a/0x30
[ 94.799015][ T5318]
[ 94.799015][ T5318] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 94.799025][ T5318] _raw_spin_lock+0x2e/0x40
[ 94.799032][ T5318] __queue_work+0x72f/0x10a0
[ 94.799039][ T5318] queue_work_on+0x106/0x1d0
[ 94.799048][ T5318] rpm_suspend+0xeca/0x17b0
[ 94.799060][ T5318] __pm_runtime_idle+0x12f/0x1a0
[ 94.799072][ T5318] __device_attach+0x355/0x450
[ 94.799085][ T5318] device_initial_probe+0xa1/0xd0
[ 94.799093][ T5318] bus_probe_device+0x12a/0x220
[ 94.799105][ T5318] device_add+0x7d7/0xb80
[ 94.799117][ T5318] serial_base_port_add+0x18f/0x270
[ 94.799127][ T5318] serial_core_register_port+0x37f/0x2840
[ 94.799137][ T5318] serial8250_register_8250_port+0x16b4/0x2090
[ 94.799148][ T5318] serial_pnp_probe+0x56a/0x7f0
[ 94.799158][ T5318] pnp_device_probe+0x30b/0x4c0
[ 94.799169][ T5318] really_probe+0x254/0xae0
[ 94.799178][ T5318] __driver_probe_device+0x1e8/0x360
[ 94.799186][ T5318] driver_probe_device+0x4f/0x240
[ 94.799194][ T5318] __driver_attach+0x339/0x600
[ 94.799201][ T5318] bus_for_each_dev+0x23b/0x2c0
[ 94.799211][ T5318] bus_add_driver+0x345/0x670
[ 94.799221][ T5318] driver_register+0x23a/0x320
[ 94.799231][ T5318] serial8250_init+0x8f/0x160
[ 94.799243][ T5318] do_one_initcall+0x250/0x870
[ 94.799255][ T5318] do_initcall_level+0x10a/0x1a0
[ 94.799267][ T5318] do_initcalls+0x59/0xa0
[ 94.799278][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 94.799291][ T5318] kernel_init+0x1d/0x1d0
[ 94.799304][ T5318] ret_from_fork+0x514/0xb70
[ 94.799316][ T5318] ret_from_fork_asm+0x1a/0x30
[ 94.799328][ T5318]
[ 94.799328][ T5318] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 94.799342][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.799351][ T5318] __pm_runtime_resume+0x10f/0x180
[ 94.799365][ T5318] __uart_start+0x171/0x460
[ 94.799376][ T5318] uart_write+0x251/0x9f0
[ 94.799387][ T5318] n_tty_write+0xd49/0x11e0
[ 94.799395][ T5318] file_tty_write+0x509/0x9c0
[ 94.799406][ T5318] vfs_write+0x612/0xba0
[ 94.799417][ T5318] ksys_write+0x150/0x270
[ 94.799428][ T5318] do_syscall_64+0x174/0x580
[ 94.799440][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.799451][ T5318]
[ 94.799451][ T5318] -> #1 (&port_lock_key){-...}-{3:3}:
[ 94.799465][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.799475][ T5318] serial8250_console_write+0x153/0x1ba0
[ 94.799490][ T5318] console_flush_all+0x6ea/0xaf0
[ 94.799500][ T5318] console_unlock+0xd1/0x1c0
[ 94.799512][ T5318] vprintk_emit+0x485/0x560
[ 94.799524][ T5318] _printk+0xdd/0x130
[ 94.799532][ T5318] register_console+0xbc3/0xfc0
[ 94.799541][ T5318] univ8250_console_init+0x3a/0x70
[ 94.799553][ T5318] console_init+0x10b/0x4a0
[ 94.799562][ T5318] start_kernel+0x238/0x3e0
[ 94.799574][ T5318] x86_64_start_reservations+0x24/0x30
[ 94.799583][ T5318] x86_64_start_kernel+0x137/0x1b0
[ 94.799591][ T5318] common_startup_64+0x13e/0x157
[ 94.799597][ T5318]
[ 94.799597][ T5318] -> #0 (console_owner){....}-{0:0}:
[ 94.799605][ T5318] __lock_acquire+0x1520/0x2cf0
[ 94.799613][ T5318] lock_acquire+0x106/0x350
[ 94.799619][ T5318] console_flush_all+0x693/0xaf0
[ 94.799625][ T5318] console_unlock+0xd1/0x1c0
[ 94.799633][ T5318] vprintk_emit+0x485/0x560
[ 94.799643][ T5318] _printk+0xdd/0x130
[ 94.799650][ T5318] __slab_bug+0x6e/0xd0
[ 94.799659][ T5318] slab_bug+0x57/0x80
[ 94.799668][ T5318] list_slab_objects+0x35/0x1a0
[ 94.799678][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.799689][ T5318] kmem_cache_destroy+0x98/0x180
[ 94.799703][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 94.799714][ T5318] virtio_gpu_release+0x55/0x140
[ 94.799722][ T5318] drm_dev_put+0xa9/0x120
[ 94.799731][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 94.799741][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.799750][ T5318] bus_remove_device+0x444/0x560
[ 94.799761][ T5318] device_del+0x524/0x8f0
[ 94.799773][ T5318] device_unregister+0x21/0xf0
[ 94.799787][ T5318] unregister_virtio_device+0x37/0x60
[ 94.799793][ T5318] virtio_pci_remove+0x7f/0xf0
[ 94.799800][ T5318] pci_device_remove+0x99/0x1c0
[ 94.799807][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.799822][ T5318] pci_stop_bus_device+0xf6/0x120
[ 94.799835][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.799848][ T5318] remove_store+0xe5/0x150
[ 94.799860][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 94.799878][ T5318] vfs_write+0x612/0xba0
[ 94.799890][ T5318] ksys_write+0x150/0x270
[ 94.799900][ T5318] do_syscall_64+0x174/0x580
[ 94.799907][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.799912][ T5318]
[ 94.799912][ T5318] other info that might help us debug this:
[ 94.799912][ T5318]
[ 94.799915][ T5318] Chain exists of:
[ 94.799915][ T5318] console_owner --> &pool->lock --> &n->list_lock
[ 94.799915][ T5318]
[ 94.799925][ T5318] Possible unsafe locking scenario:
[ 94.799925][ T5318]
[ 94.799927][ T5318] CPU0 CPU1
[ 94.799929][ T5318] ---- ----
[ 94.799931][ T5318] lock(&n->list_lock);
[ 94.799935][ T5318] lock(&pool->lock);
[ 94.799940][ T5318] lock(&n->list_lock);
[ 94.799944][ T5318] lock(console_owner);
[ 94.799948][ T5318]
[ 94.799948][ T5318] *** DEADLOCK ***
[ 94.799948][ T5318]
[ 94.799950][ T5318] 11 locks held by syz.0.0/5318:
[ 94.799954][ T5318] #0: ffff888042be02b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 94.799971][ T5318] #1: ffff888038a3e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 94.799988][ T5318] #2: ffff888034d98c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 94.800005][ T5318] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0
[ 94.800029][ T5318] #4: ffff88801d2781f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.800052][ T5318] #5: ffff88803337e1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.800074][ T5318] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 94.800102][ T5318] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 94.800127][ T5318] #8: ffff88801afe9d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.800152][ T5318] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 94.800173][ T5318] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.800196][ T5318]
[ 94.800196][ T5318] stack backtrace:
[ 94.800202][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.800213][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.800219][ T5318] Call Trace:
[ 94.800224][ T5318]
[ 94.800229][ T5318] dump_stack_lvl+0xe8/0x150
[ 94.800244][ T5318] print_circular_bug+0x2e1/0x300
[ 94.800261][ T5318] check_noncircular+0x12e/0x150
[ 94.800277][ T5318] __lock_acquire+0x1520/0x2cf0
[ 94.800295][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.800304][ T5318] lock_acquire+0x106/0x350
[ 94.800315][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.800325][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 94.800335][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.800344][ T5318] console_flush_all+0x693/0xaf0
[ 94.800354][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.800365][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.800375][ T5318] ? __pfx_console_flush_all+0x10/0x10
[ 94.800386][ T5318] ? is_printk_cpu_sync_owner+0x32/0x40
[ 94.800398][ T5318] console_unlock+0xd1/0x1c0
[ 94.800412][ T5318] ? __pfx_console_unlock+0x10/0x10
[ 94.800426][ T5318] ? _raw_spin_unlock+0x40/0x50
[ 94.800436][ T5318] ? _printk+0xdd/0x130
[ 94.800446][ T5318] vprintk_emit+0x485/0x560
[ 94.800461][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 94.800477][ T5318] _printk+0xdd/0x130
[ 94.800485][ T5318] ? __lock_acquire+0x683/0x2cf0
[ 94.800497][ T5318] ? __pfx__printk+0x10/0x10
[ 94.800507][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.800518][ T5318] __slab_bug+0x6e/0xd0
[ 94.800530][ T5318] slab_bug+0x57/0x80
[ 94.800541][ T5318] list_slab_objects+0x35/0x1a0
[ 94.800553][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.800566][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 94.800578][ T5318] kmem_cache_destroy+0x98/0x180
[ 94.800593][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 94.800604][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.800612][ T5318] virtio_gpu_release+0x55/0x140
[ 94.800622][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.800631][ T5318] drm_dev_put+0xa9/0x120
[ 94.800642][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 94.800653][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 94.800662][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.800672][ T5318] bus_remove_device+0x444/0x560
[ 94.800686][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 94.800700][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.800717][ T5318] device_del+0x524/0x8f0
[ 94.800732][ T5318] ? __pfx_device_del+0x10/0x10
[ 94.800749][ T5318] device_unregister+0x21/0xf0
[ 94.800763][ T5318] unregister_virtio_device+0x37/0x60
[ 94.800772][ T5318] virtio_pci_remove+0x7f/0xf0
[ 94.800786][ T5318] pci_device_remove+0x99/0x1c0
[ 94.800797][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 94.800807][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.800825][ T5318] pci_stop_bus_device+0xf6/0x120
[ 94.800841][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.800855][ T5318] remove_store+0xe5/0x150
[ 94.800869][ T5318] ? __pfx_remove_store+0x10/0x10
[ 94.800883][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 94.800894][ T5318] ? sysfs_kf_write+0x166/0x260
[ 94.800904][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.800915][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 94.800930][ T5318] vfs_write+0x612/0xba0
[ 94.800944][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 94.800959][ T5318] ? __fget_files+0x2a/0x420
[ 94.800971][ T5318] ksys_write+0x150/0x270
[ 94.800984][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 94.800998][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.801009][ T5318] do_syscall_64+0x174/0x580
[ 94.801020][ T5318] ? trace_irq_disable+0x3b/0x140
[ 94.801032][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 94.801043][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.801053][ T5318] RIP: 0033:0x7fbe1d59e0d9
[ 94.801064][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.801073][ T5318] RSP: 002b:00007fbe1e3f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.801084][ T5318] RAX: ffffffffffffffda RBX: 00007fbe1d826180 RCX: 00007fbe1d59e0d9
[ 94.801092][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 94.801100][ T5318] RBP: 00007fbe1d635024 R08: 0000000000000000 R09: 0000000000000000
[ 94.801106][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.801113][ T5318] R13: 00007fbe1d826218 R14: 00007fbe1d826180 R15: 00007ffc73800538
[ 94.801126][ T5318]
[ 95.346432][ T5318] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 95.350239][ T5318] -----------------------------------------------------------------------------
[ 95.350239][ T5318]
[ 95.354785][ T5318] Object 0xffff88801fb68000 @offset=0
[ 95.357009][ T5318] Object 0xffff88801fb68118 @offset=280
[ 95.359248][ T5318] Object 0xffff88801fb68230 @offset=560
[ 95.361515][ T5318] Object 0xffff88801fb68348 @offset=840
[ 95.363846][ T5318] Object 0xffff88801fb68460 @offset=1120
[ 95.366124][ T5318] Object 0xffff88801fb68578 @offset=1400
[ 95.368394][ T5318] Object 0xffff88801fb68690 @offset=1680
[ 95.370673][ T5318] Object 0xffff88801fb687a8 @offset=1960
[ 95.373019][ T5318] Object 0xffff88801fb688c0 @offset=2240
[ 95.375309][ T5318] Slab 0xffffea00007eda00 objects=14 used=9 fp=0xffff88801fb689d8 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 95.380727][ T5318] ------------[ cut here ]------------
[ 95.382960][ T5318] 1
[ 95.382970][ T5318] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5318
[ 95.387287][ T5318] Modules linked in:
[ 95.388939][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.393064][ T5318] Tainted: [B]=BAD_PAGE
[ 95.394786][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.398905][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 95.400922][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.408696][ T5318] RSP: 0018:ffffc9000e4c76d8 EFLAGS: 00010087
[ 95.411204][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034ed4dc0 RCX: 0000000000100000
[ 95.414397][ T5318] RDX: ffffc90020802000 RSI: 00000000000698e0 RDI: 00000000000698e1
[ 95.417588][ T5318] RBP: 0000000000000000 R08: ffffffff9373e0c7 R09: 1ffffffff26e7c18
[ 95.420864][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7c19 R12: ffffea00004bf490
[ 95.424126][ T5318] R13: ffffea00007eda00 R14: ffffc9000e4c76f0 R15: ffff88801afe9d80
[ 95.427265][ T5318] FS: 00007fbe1e3f26c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000
[ 95.430808][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.433327][ T5318] CR2: 00007fbe1e3d0fe8 CR3: 0000000012e3e000 CR4: 0000000000352ef0
[ 95.436485][ T5318] Call Trace:
[ 95.437877][ T5318]
[ 95.439189][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.441400][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.443661][ T5318] kmem_cache_destroy+0x98/0x180
[ 95.445722][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 95.447824][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.449835][ T5318] virtio_gpu_release+0x55/0x140
[ 95.451713][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.454014][ T5318] drm_dev_put+0xa9/0x120
[ 95.455790][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 95.457739][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.459894][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.462375][ T5318] bus_remove_device+0x444/0x560
[ 95.464440][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 95.466677][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.468839][ T5318] device_del+0x524/0x8f0
[ 95.470632][ T5318] ? __pfx_device_del+0x10/0x10
[ 95.472661][ T5318] device_unregister+0x21/0xf0
[ 95.474786][ T5318] unregister_virtio_device+0x37/0x60
[ 95.477339][ T5318] virtio_pci_remove+0x7f/0xf0
[ 95.479500][ T5318] pci_device_remove+0x99/0x1c0
[ 95.481531][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 95.484173][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.487370][ T5318] pci_stop_bus_device+0xf6/0x120
[ 95.489564][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.492278][ T5318] remove_store+0xe5/0x150
[ 95.494136][ T5318] ? __pfx_remove_store+0x10/0x10
[ 95.496298][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 95.498420][ T5318] ? sysfs_kf_write+0x166/0x260
[ 95.500411][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.502845][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 95.505768][ T5318] vfs_write+0x612/0xba0
[ 95.508161][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 95.510796][ T5318] ? __fget_files+0x2a/0x420
[ 95.513202][ T5318] ksys_write+0x150/0x270
[ 95.514863][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 95.516751][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.519175][ T5318] do_syscall_64+0x174/0x580
[ 95.520982][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.523030][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.524926][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.527415][ T5318] RIP: 0033:0x7fbe1d59e0d9
[ 95.529223][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.536874][ T5318] RSP: 002b:00007fbe1e3f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.540233][ T5318] RAX: ffffffffffffffda RBX: 00007fbe1d826180 RCX: 00007fbe1d59e0d9
[ 95.543407][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 95.546392][ T5318] RBP: 00007fbe1d635024 R08: 0000000000000000 R09: 0000000000000000
[ 95.549378][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.552586][ T5318] R13: 00007fbe1d826218 R14: 00007fbe1d826180 R15: 00007ffc73800538
[ 95.555733][ T5318]
[ 95.557042][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.560157][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.564575][ T5318] Tainted: [B]=BAD_PAGE
[ 95.566141][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.570312][ T5318] Call Trace:
[ 95.571758][ T5318]
[ 95.573079][ T5318] vpanic+0x56c/0xa60
[ 95.574842][ T5318] ? __pfx__printk+0x10/0x10
[ 95.576973][ T5318] ? __pfx_vpanic+0x10/0x10
[ 95.578826][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 95.580896][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 95.582981][ T5318] panic+0xc5/0xd0
[ 95.584567][ T5318] ? __pfx_panic+0x10/0x10
[ 95.586401][ T5318] __warn+0x315/0x4c0
[ 95.588013][ T5318] ? __slab_err+0x15/0x20
[ 95.589797][ T5318] ? __slab_err+0x15/0x20
[ 95.591605][ T5318] __report_bug+0x276/0x570
[ 95.593370][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 95.595451][ T5318] ? __slab_err+0x15/0x20
[ 95.597259][ T5318] ? __pfx___report_bug+0x10/0x10
[ 95.599352][ T5318] ? __wake_up_klogd+0xe6/0x120
[ 95.601407][ T5318] ? vprintk_emit+0x4eb/0x560
[ 95.603424][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 95.605409][ T5318] ? _printk+0xdd/0x130
[ 95.606977][ T5318] ? __slab_err+0x15/0x20
[ 95.608617][ T5318] report_bug+0x16a/0x220
[ 95.610419][ T5318] ? __slab_err+0x15/0x20
[ 95.612251][ T5318] ? __slab_err+0x17/0x20
[ 95.614074][ T5318] handle_bug+0x9c/0x200
[ 95.615831][ T5318] exc_invalid_op+0x1a/0x50
[ 95.617737][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 95.619676][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 95.621532][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.628817][ T5318] RSP: 0018:ffffc9000e4c76d8 EFLAGS: 00010087
[ 95.631297][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034ed4dc0 RCX: 0000000000100000
[ 95.634171][ T5318] RDX: ffffc90020802000 RSI: 00000000000698e0 RDI: 00000000000698e1
[ 95.637011][ T5318] RBP: 0000000000000000 R08: ffffffff9373e0c7 R09: 1ffffffff26e7c18
[ 95.640233][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7c19 R12: ffffea00004bf490
[ 95.643563][ T5318] R13: ffffea00007eda00 R14: ffffc9000e4c76f0 R15: ffff88801afe9d80
[ 95.646822][ T5318] ? add_taint+0x9a/0xe0
[ 95.648515][ T5318] ? __slab_err+0x14/0x20
[ 95.650250][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.652282][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.654364][ T5318] kmem_cache_destroy+0x98/0x180
[ 95.656369][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 95.658452][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.660758][ T5318] virtio_gpu_release+0x55/0x140
[ 95.662889][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.665231][ T5318] drm_dev_put+0xa9/0x120
[ 95.667102][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 95.669127][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.671358][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.673834][ T5318] bus_remove_device+0x444/0x560
[ 95.675861][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 95.677908][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.680127][ T5318] device_del+0x524/0x8f0
[ 95.682092][ T5318] ? __pfx_device_del+0x10/0x10
[ 95.684058][ T5318] device_unregister+0x21/0xf0
[ 95.686005][ T5318] unregister_virtio_device+0x37/0x60
[ 95.687900][ T5318] virtio_pci_remove+0x7f/0xf0
[ 95.689797][ T5318] pci_device_remove+0x99/0x1c0
[ 95.691663][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 95.693769][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.696073][ T5318] pci_stop_bus_device+0xf6/0x120
[ 95.698012][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.700537][ T5318] remove_store+0xe5/0x150
[ 95.702027][ T5318] ? __pfx_remove_store+0x10/0x10
[ 95.704038][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 95.706107][ T5318] ? sysfs_kf_write+0x166/0x260
[ 95.707998][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.710196][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 95.712400][ T5318] vfs_write+0x612/0xba0
[ 95.714036][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 95.716021][ T5318] ? __fget_files+0x2a/0x420
[ 95.717941][ T5318] ksys_write+0x150/0x270
[ 95.719733][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 95.721683][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.724025][ T5318] do_syscall_64+0x174/0x580
[ 95.725787][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.727736][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.729597][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.731947][ T5318] RIP: 0033:0x7fbe1d59e0d9
[ 95.733752][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.741223][ T5318] RSP: 002b:00007fbe1e3f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.744188][ T5318] RAX: ffffffffffffffda RBX: 00007fbe1d826180 RCX: 00007fbe1d59e0d9
[ 95.747106][ T5318] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 95.750068][ T5318] RBP: 00007fbe1d635024 R08: 0000000000000000 R09: 0000000000000000
[ 95.753192][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.756383][ T5318] R13: 00007fbe1d826218 R14: 00007fbe1d826180 R15: 00007ffc73800538
[ 95.759531][ T5318]
[ 95.761073][ T5318] Kernel Offset: disabled
[ 95.762893][ T5318] Rebooting in 86400 seconds..