program:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x7, 0x3, 0xfffffffe})
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x792}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
pwrite64(r3, &(0x7f0000000500)="f0000000", 0x4, 0x10)
pwrite64(r3, &(0x7f0000000600)="0200", 0x2, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f0000000800)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000a00)='1', 0x1)
[ 93.404990][ T932] cfg80211: failed to load regulatory.db
[ 93.559136][ T4641] Bluetooth: hci0: command tx timeout
[ 93.768955][ T932] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.918879][ T932] usb 5-1: Using ep0 maxpacket: 8
[ 93.925881][ T932] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 93.931233][ T932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 93.935180][ T932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 93.940655][ T932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 93.944783][ T932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 93.951409][ T932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 93.955423][ T932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.170937][ T932] usb 5-1: GET_CAPABILITIES returned 0
[ 94.175463][ T932] usbtmc 5-1:16.0: can't read capabilities
[ 94.383716][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.390104][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.393814][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.397356][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.400882][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.404411][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.408237][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.412006][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.418202][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.421602][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.425021][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.428758][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.432362][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.436024][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.475144][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.478782][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 94.502466][ T5315] Console: switching to colour dummy device 80x25
[ 94.619340][ T5315] =============================================================================
[ 94.619877][ T5315]
[ 94.619884][ T5315] ======================================================
[ 94.619889][ T5315] WARNING: possible circular locking dependency detected
[ 94.619894][ T5315] syzkaller #0 Not tainted
[ 94.619900][ T5315] ------------------------------------------------------
[ 94.619904][ T5315] syz.0.0/5315 is trying to acquire lock:
[ 94.619912][ T5315] ffffffff8eb4bf40 (console_owner){..-.}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.619990][ T5315]
[ 94.619990][ T5315] but task is already holding lock:
[ 94.619995][ T5315] ffff88801afdfd98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.620023][ T5315]
[ 94.620023][ T5315] which lock already depends on the new lock.
[ 94.620023][ T5315]
[ 94.620026][ T5315]
[ 94.620026][ T5315] the existing dependency chain (in reverse order) is:
[ 94.620031][ T5315]
[ 94.620031][ T5315] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 94.620045][ T5315] _raw_spin_lock_irqsave+0x40/0x60
[ 94.620086][ T5315] get_from_partial_node+0x54/0x4c0
[ 94.620095][ T5315] ___slab_alloc+0xbe/0x950
[ 94.620103][ T5315] kmem_cache_alloc_noprof+0x135/0x5f0
[ 94.620115][ T5315] fill_pool+0x165/0x610
[ 94.620158][ T5315] debug_object_activate+0x38d/0x420
[ 94.620168][ T5315] insert_work+0x35/0x330
[ 94.620178][ T5315] __queue_work+0xcd8/0x10a0
[ 94.620190][ T5315] queue_work_on+0x106/0x1d0
[ 94.620200][ T5315] call_usermodehelper_exec+0x28e/0x4b0
[ 94.620209][ T5315] kobject_uevent_env+0x685/0x9e0
[ 94.620217][ T5315] device_add+0x544/0xb80
[ 94.620230][ T5315] do_one_initcall+0x250/0x870
[ 94.620253][ T5315] do_initcall_level+0x10a/0x1a0
[ 94.620318][ T5315] do_initcalls+0x59/0xa0
[ 94.620326][ T5315] kernel_init_freeable+0x29d/0x3e0
[ 94.620335][ T5315] kernel_init+0x1d/0x1d0
[ 94.620345][ T5315] ret_from_fork+0x514/0xb70
[ 94.620358][ T5315] ret_from_fork_asm+0x1a/0x30
[ 94.620367][ T5315]
[ 94.620367][ T5315] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 94.620378][ T5315] _raw_spin_lock+0x2e/0x40
[ 94.620384][ T5315] __queue_work+0x72f/0x10a0
[ 94.620390][ T5315] queue_work_on+0x106/0x1d0
[ 94.620404][ T5315] rpm_suspend+0xeca/0x17b0
[ 94.620418][ T5315] __pm_runtime_idle+0x12f/0x1a0
[ 94.620431][ T5315] __device_attach+0x355/0x450
[ 94.620444][ T5315] device_initial_probe+0xa1/0xd0
[ 94.620452][ T5315] bus_probe_device+0x12a/0x220
[ 94.620463][ T5315] device_add+0x7d7/0xb80
[ 94.620475][ T5315] serial_base_port_add+0x18f/0x270
[ 94.620485][ T5315] serial_core_register_port+0x37f/0x2840
[ 94.620495][ T5315] serial8250_register_8250_port+0x16b4/0x2090
[ 94.620502][ T5315] serial_pnp_probe+0x56a/0x7f0
[ 94.620509][ T5315] pnp_device_probe+0x30b/0x4c0
[ 94.620516][ T5315] really_probe+0x254/0xae0
[ 94.620521][ T5315] __driver_probe_device+0x1e8/0x360
[ 94.620526][ T5315] driver_probe_device+0x4f/0x240
[ 94.620531][ T5315] __driver_attach+0x339/0x600
[ 94.620536][ T5315] bus_for_each_dev+0x23b/0x2c0
[ 94.620543][ T5315] bus_add_driver+0x345/0x670
[ 94.620550][ T5315] driver_register+0x23a/0x320
[ 94.620556][ T5315] serial8250_init+0x8f/0x160
[ 94.620563][ T5315] do_one_initcall+0x250/0x870
[ 94.620571][ T5315] do_initcall_level+0x10a/0x1a0
[ 94.620583][ T5315] do_initcalls+0x59/0xa0
[ 94.620594][ T5315] kernel_init_freeable+0x29d/0x3e0
[ 94.620606][ T5315] kernel_init+0x1d/0x1d0
[ 94.620619][ T5315] ret_from_fork+0x514/0xb70
[ 94.620630][ T5315] ret_from_fork_asm+0x1a/0x30
[ 94.620642][ T5315]
[ 94.620642][ T5315] -> #2 (&dev->power.lock){-...}-{3:3}:
[ 94.620656][ T5315] _raw_spin_lock_irqsave+0x40/0x60
[ 94.620665][ T5315] __pm_runtime_resume+0x10f/0x180
[ 94.620678][ T5315] __uart_start+0x171/0x460
[ 94.620689][ T5315] uart_write+0x251/0x9f0
[ 94.620700][ T5315] n_tty_write+0xd49/0x11e0
[ 94.620709][ T5315] file_tty_write+0x509/0x9c0
[ 94.620720][ T5315] vfs_write+0x612/0xba0
[ 94.620731][ T5315] ksys_write+0x150/0x270
[ 94.620741][ T5315] do_syscall_64+0x174/0x580
[ 94.620752][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.620762][ T5315]
[ 94.620762][ T5315] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 94.620775][ T5315] _raw_spin_lock_irqsave+0x40/0x60
[ 94.620784][ T5315] serial8250_console_write+0x153/0x1ba0
[ 94.620798][ T5315] console_flush_all+0x6ea/0xaf0
[ 94.620806][ T5315] console_unlock+0xd1/0x1c0
[ 94.620824][ T5315] vprintk_emit+0x485/0x560
[ 94.620836][ T5315] _printk+0xdd/0x130
[ 94.620844][ T5315] register_console+0xbc3/0xfc0
[ 94.620855][ T5315] univ8250_console_init+0x3a/0x70
[ 94.620865][ T5315] console_init+0x10b/0x4a0
[ 94.620875][ T5315] start_kernel+0x238/0x3e0
[ 94.620887][ T5315] x86_64_start_reservations+0x24/0x30
[ 94.620897][ T5315] x86_64_start_kernel+0x137/0x1b0
[ 94.620906][ T5315] common_startup_64+0x13e/0x157
[ 94.620915][ T5315]
[ 94.620915][ T5315] -> #0 (console_owner){..-.}-{0:0}:
[ 94.620929][ T5315] __lock_acquire+0x1520/0x2cf0
[ 94.620941][ T5315] lock_acquire+0x106/0x350
[ 94.620953][ T5315] console_flush_all+0x693/0xaf0
[ 94.620962][ T5315] console_unlock+0xd1/0x1c0
[ 94.620974][ T5315] vprintk_emit+0x485/0x560
[ 94.620988][ T5315] _printk+0xdd/0x130
[ 94.620996][ T5315] __slab_bug+0x6e/0xd0
[ 94.621005][ T5315] slab_bug+0x57/0x80
[ 94.621014][ T5315] list_slab_objects+0x35/0x1a0
[ 94.621024][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.621035][ T5315] kmem_cache_destroy+0x98/0x180
[ 94.621049][ T5315] virtio_gpu_free_vbufs+0x40/0x70
[ 94.621060][ T5315] virtio_gpu_release+0x55/0x140
[ 94.621068][ T5315] drm_dev_put+0xa9/0x120
[ 94.621078][ T5315] virtio_dev_remove+0x9c/0x1b0
[ 94.621088][ T5315] device_release_driver_internal+0x48b/0x880
[ 94.621098][ T5315] bus_remove_device+0x444/0x560
[ 94.621111][ T5315] device_del+0x524/0x8f0
[ 94.621124][ T5315] device_unregister+0x21/0xf0
[ 94.621137][ T5315] unregister_virtio_device+0x37/0x60
[ 94.621145][ T5315] virtio_pci_remove+0x7f/0xf0
[ 94.621157][ T5315] pci_device_remove+0x99/0x1c0
[ 94.621167][ T5315] device_release_driver_internal+0x48b/0x880
[ 94.621175][ T5315] pci_stop_bus_device+0xf6/0x120
[ 94.621187][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.621199][ T5315] remove_store+0xe5/0x150
[ 94.621212][ T5315] kernfs_fop_write_iter+0x3a4/0x540
[ 94.621225][ T5315] vfs_write+0x612/0xba0
[ 94.621237][ T5315] ksys_write+0x150/0x270
[ 94.621247][ T5315] do_syscall_64+0x174/0x580
[ 94.621258][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.621267][ T5315]
[ 94.621267][ T5315] other info that might help us debug this:
[ 94.621267][ T5315]
[ 94.621271][ T5315] Chain exists of:
[ 94.621271][ T5315] console_owner --> &pool->lock --> &n->list_lock
[ 94.621271][ T5315]
[ 94.621286][ T5315] Possible unsafe locking scenario:
[ 94.621286][ T5315]
[ 94.621289][ T5315] CPU0 CPU1
[ 94.621292][ T5315] ---- ----
[ 94.621296][ T5315] lock(&n->list_lock);
[ 94.621340][ T5315] lock(&pool->lock);
[ 94.621348][ T5315] lock(&n->list_lock);
[ 94.621355][ T5315] lock(console_owner);
[ 94.621362][ T5315]
[ 94.621362][ T5315] *** DEADLOCK ***
[ 94.621362][ T5315]
[ 94.621364][ T5315] 11 locks held by syz.0.0/5315:
[ 94.621370][ T5315] #0: ffff88801219d0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 94.621407][ T5315] #1: ffff88801d07a450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 94.621437][ T5315] #2: ffff88803fad2080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 94.621457][ T5315] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0
[ 94.621477][ T5315] #4: ffff88801d2681f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.621493][ T5315] #5: ffff8880333061b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.621509][ T5315] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 94.621529][ T5315] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 94.621545][ T5315] #8: ffff88801afdfd98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.621561][ T5315] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 94.621575][ T5315] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.621590][ T5315]
[ 94.621590][ T5315] stack backtrace:
[ 94.621594][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.621602][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.621607][ T5315] Call Trace:
[ 94.621610][ T5315]
[ 94.621613][ T5315] dump_stack_lvl+0xe8/0x150
[ 94.621627][ T5315] print_circular_bug+0x2e1/0x300
[ 94.621643][ T5315] check_noncircular+0x12e/0x150
[ 94.621659][ T5315] __lock_acquire+0x1520/0x2cf0
[ 94.621675][ T5315] ? console_flush_all+0x123/0xaf0
[ 94.621685][ T5315] lock_acquire+0x106/0x350
[ 94.621696][ T5315] ? console_flush_all+0x123/0xaf0
[ 94.621707][ T5315] ? do_raw_spin_unlock+0x4d/0x210
[ 94.621717][ T5315] ? console_flush_all+0x123/0xaf0
[ 94.621727][ T5315] console_flush_all+0x693/0xaf0
[ 94.621736][ T5315] ? console_flush_all+0x123/0xaf0
[ 94.621746][ T5315] ? console_flush_all+0x123/0xaf0
[ 94.621756][ T5315] ? __pfx_console_flush_all+0x10/0x10
[ 94.621766][ T5315] ? is_printk_cpu_sync_owner+0x32/0x40
[ 94.621779][ T5315] console_unlock+0xd1/0x1c0
[ 94.621793][ T5315] ? __pfx_console_unlock+0x10/0x10
[ 94.621807][ T5315] ? _raw_spin_unlock+0x40/0x50
[ 94.621817][ T5315] ? _printk+0xdd/0x130
[ 94.621827][ T5315] vprintk_emit+0x485/0x560
[ 94.621841][ T5315] ? __pfx_vprintk_emit+0x10/0x10
[ 94.621857][ T5315] _printk+0xdd/0x130
[ 94.621865][ T5315] ? __lock_acquire+0x683/0x2cf0
[ 94.621878][ T5315] ? __pfx__printk+0x10/0x10
[ 94.621888][ T5315] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.621899][ T5315] __slab_bug+0x6e/0xd0
[ 94.621911][ T5315] slab_bug+0x57/0x80
[ 94.621923][ T5315] list_slab_objects+0x35/0x1a0
[ 94.621935][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.621948][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70
[ 94.621959][ T5315] kmem_cache_destroy+0x98/0x180
[ 94.621974][ T5315] virtio_gpu_free_vbufs+0x40/0x70
[ 94.621986][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.621996][ T5315] virtio_gpu_release+0x55/0x140
[ 94.622049][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.622059][ T5315] drm_dev_put+0xa9/0x120
[ 94.622070][ T5315] virtio_dev_remove+0x9c/0x1b0
[ 94.622083][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10
[ 94.622092][ T5315] device_release_driver_internal+0x48b/0x880
[ 94.622103][ T5315] bus_remove_device+0x444/0x560
[ 94.622117][ T5315] ? __pfx_bus_remove_device+0x10/0x10
[ 94.622130][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.622144][ T5315] device_del+0x524/0x8f0
[ 94.622159][ T5315] ? __pfx_device_del+0x10/0x10
[ 94.622174][ T5315] device_unregister+0x21/0xf0
[ 94.622189][ T5315] unregister_virtio_device+0x37/0x60
[ 94.622198][ T5315] virtio_pci_remove+0x7f/0xf0
[ 94.622211][ T5315] pci_device_remove+0x99/0x1c0
[ 94.622222][ T5315] ? __pfx_pci_device_remove+0x10/0x10
[ 94.622232][ T5315] device_release_driver_internal+0x48b/0x880
[ 94.622243][ T5315] pci_stop_bus_device+0xf6/0x120
[ 94.622255][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.622269][ T5315] remove_store+0xe5/0x150
[ 94.622284][ T5315] ? __pfx_remove_store+0x10/0x10
[ 94.622297][ T5315] ? sysfs_file_kobj+0x1e4/0x230
[ 94.622306][ T5315] ? sysfs_kf_write+0x166/0x260
[ 94.622317][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.622327][ T5315] kernfs_fop_write_iter+0x3a4/0x540
[ 94.622342][ T5315] vfs_write+0x612/0xba0
[ 94.622355][ T5315] ? __pfx_vfs_write+0x10/0x10
[ 94.622370][ T5315] ? __fget_files+0x2a/0x420
[ 94.622382][ T5315] ksys_write+0x150/0x270
[ 94.622400][ T5315] ? __pfx_ksys_write+0x10/0x10
[ 94.622414][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.622424][ T5315] do_syscall_64+0x174/0x580
[ 94.622435][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 94.622446][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.622457][ T5315] RIP: 0033:0x7fabb799e0d9
[ 94.622468][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.622476][ T5315] RSP: 002b:00007fabb3dd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.622487][ T5315] RAX: ffffffffffffffda RBX: 00007fabb7c26090 RCX: 00007fabb799e0d9
[ 94.622495][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007
[ 94.622502][ T5315] RBP: 00007fabb7a35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.622509][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.622516][ T5315] R13: 00007fabb7c26128 R14: 00007fabb7c26090 R15: 00007ffccc252778
[ 94.622528][ T5315]
[ 95.135656][ T5315] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 95.139486][ T5315] -----------------------------------------------------------------------------
[ 95.139486][ T5315]
[ 95.143958][ T5315] Object 0xffff888012297578 @offset=1400
[ 95.146236][ T5315] Object 0xffff888012297690 @offset=1680
[ 95.148484][ T5315] Slab 0xffffea000048a5c0 objects=14 used=2 fp=0xffff888012297d20 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 95.154042][ T5315] ------------[ cut here ]------------
[ 95.156221][ T5315] 1
[ 95.156229][ T5315] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5315
[ 95.160670][ T5315] Modules linked in:
[ 95.162309][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.166796][ T5315] Tainted: [B]=BAD_PAGE
[ 95.168416][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.172634][ T5315] RIP: 0010:__slab_err+0x15/0x20
[ 95.174671][ T5315] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.184134][ T5315] RSP: 0018:ffffc9000dcaf6d8 EFLAGS: 00010083
[ 95.186384][ T5315] RAX: ffffffff8186dc3a RBX: ffff888034e8fdc0 RCX: 0000000000100000
[ 95.189411][ T5315] RDX: ffffc90020001000 RSI: 00000000000680de RDI: 00000000000680df
[ 95.192484][ T5315] RBP: 0000000000000000 R08: ffffffff9373e0c7 R09: 1ffffffff26e7c18
[ 95.195564][ T5315] R10: dffffc0000000000 R11: fffffbfff26e7c19 R12: ffffea0000485bd0
[ 95.198806][ T5315] R13: ffffea000048a5c0 R14: ffffc9000dcaf6f0 R15: ffff88801afdfd80
[ 95.202105][ T5315] FS: 00007fabb3dd46c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000
[ 95.205718][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.208277][ T5315] CR2: 00007fc257d909c0 CR3: 000000003feaa000 CR4: 0000000000352ef0
[ 95.211572][ T5315] Call Trace:
[ 95.213000][ T5315]
[ 95.214298][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.216649][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.218988][ T5315] kmem_cache_destroy+0x98/0x180
[ 95.221096][ T5315] virtio_gpu_free_vbufs+0x40/0x70
[ 95.223311][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.225684][ T5315] virtio_gpu_release+0x55/0x140
[ 95.227788][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.230115][ T5315] drm_dev_put+0xa9/0x120
[ 95.231956][ T5315] virtio_dev_remove+0x9c/0x1b0
[ 95.234028][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.236291][ T5315] device_release_driver_internal+0x48b/0x880
[ 95.238711][ T5315] bus_remove_device+0x444/0x560
[ 95.240759][ T5315] ? __pfx_bus_remove_device+0x10/0x10
[ 95.243050][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.245354][ T5315] device_del+0x524/0x8f0
[ 95.247153][ T5315] ? __pfx_device_del+0x10/0x10
[ 95.249212][ T5315] device_unregister+0x21/0xf0
[ 95.251186][ T5315] unregister_virtio_device+0x37/0x60
[ 95.256595][ T5315] virtio_pci_remove+0x7f/0xf0
[ 95.258542][ T5315] pci_device_remove+0x99/0x1c0
[ 95.260558][ T5315] ? __pfx_pci_device_remove+0x10/0x10
[ 95.262826][ T5315] device_release_driver_internal+0x48b/0x880
[ 95.265325][ T5315] pci_stop_bus_device+0xf6/0x120
[ 95.267417][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.270103][ T5315] remove_store+0xe5/0x150
[ 95.271939][ T5315] ? __pfx_remove_store+0x10/0x10
[ 95.273884][ T5315] ? sysfs_file_kobj+0x1e4/0x230
[ 95.275925][ T5315] ? sysfs_kf_write+0x166/0x260
[ 95.277678][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.279409][ T5315] kernfs_fop_write_iter+0x3a4/0x540
[ 95.281451][ T5315] vfs_write+0x612/0xba0
[ 95.283092][ T5315] ? __pfx_vfs_write+0x10/0x10
[ 95.285012][ T5315] ? __fget_files+0x2a/0x420
[ 95.286881][ T5315] ksys_write+0x150/0x270
[ 95.288612][ T5315] ? __pfx_ksys_write+0x10/0x10
[ 95.290720][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.293321][ T5315] do_syscall_64+0x174/0x580
[ 95.295289][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 95.297257][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.299753][ T5315] RIP: 0033:0x7fabb799e0d9
[ 95.301648][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.309364][ T5315] RSP: 002b:00007fabb3dd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.312554][ T5315] RAX: ffffffffffffffda RBX: 00007fabb7c26090 RCX: 00007fabb799e0d9
[ 95.315607][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007
[ 95.318692][ T5315] RBP: 00007fabb7a35024 R08: 0000000000000000 R09: 0000000000000000
[ 95.321644][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.324889][ T5315] R13: 00007fabb7c26128 R14: 00007fabb7c26090 R15: 00007ffccc252778
[ 95.328059][ T5315]
[ 95.329382][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.332557][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.336806][ T5315] Tainted: [B]=BAD_PAGE
[ 95.338560][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.342768][ T5315] Call Trace:
[ 95.344179][ T5315]
[ 95.345448][ T5315] vpanic+0x56c/0xa60
[ 95.347138][ T5315] ? __pfx__printk+0x10/0x10
[ 95.349038][ T5315] ? __pfx_vpanic+0x10/0x10
[ 95.350926][ T5315] ? is_bpf_text_address+0x292/0x2b0
[ 95.353060][ T5315] ? is_bpf_text_address+0x26/0x2b0
[ 95.355222][ T5315] panic+0xc5/0xd0
[ 95.356949][ T5315] ? __pfx_panic+0x10/0x10
[ 95.358902][ T5315] __warn+0x315/0x4c0
[ 95.360604][ T5315] ? __slab_err+0x15/0x20
[ 95.362430][ T5315] ? __slab_err+0x15/0x20
[ 95.364269][ T5315] __report_bug+0x276/0x570
[ 95.366242][ T5315] ? do_raw_spin_unlock+0x4d/0x210
[ 95.368460][ T5315] ? __slab_err+0x15/0x20
[ 95.370375][ T5315] ? __pfx___report_bug+0x10/0x10
[ 95.372580][ T5315] ? __wake_up_klogd+0xe6/0x120
[ 95.374652][ T5315] ? vprintk_emit+0x4eb/0x560
[ 95.376736][ T5315] ? __pfx_vprintk_emit+0x10/0x10
[ 95.378960][ T5315] ? _printk+0xdd/0x130
[ 95.380775][ T5315] ? __slab_err+0x15/0x20
[ 95.382556][ T5315] report_bug+0x16a/0x220
[ 95.384391][ T5315] ? __slab_err+0x15/0x20
[ 95.386258][ T5315] ? __slab_err+0x17/0x20
[ 95.388082][ T5315] handle_bug+0x9c/0x200
[ 95.389855][ T5315] exc_invalid_op+0x1a/0x50
[ 95.391671][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 95.393664][ T5315] RIP: 0010:__slab_err+0x15/0x20
[ 95.395719][ T5315] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.403232][ T5315] RSP: 0018:ffffc9000dcaf6d8 EFLAGS: 00010083
[ 95.405676][ T5315] RAX: ffffffff8186dc3a RBX: ffff888034e8fdc0 RCX: 0000000000100000
[ 95.409118][ T5315] RDX: ffffc90020001000 RSI: 00000000000680de RDI: 00000000000680df
[ 95.412920][ T5315] RBP: 0000000000000000 R08: ffffffff9373e0c7 R09: 1ffffffff26e7c18
[ 95.416307][ T5315] R10: dffffc0000000000 R11: fffffbfff26e7c19 R12: ffffea0000485bd0
[ 95.419557][ T5315] R13: ffffea000048a5c0 R14: ffffc9000dcaf6f0 R15: ffff88801afdfd80
[ 95.422747][ T5315] ? add_taint+0x9a/0xe0
[ 95.424376][ T5315] ? __slab_err+0x14/0x20
[ 95.426094][ T5315] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.428248][ T5315] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.430365][ T5315] kmem_cache_destroy+0x98/0x180
[ 95.432270][ T5315] virtio_gpu_free_vbufs+0x40/0x70
[ 95.434302][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.436622][ T5315] virtio_gpu_release+0x55/0x140
[ 95.438628][ T5315] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.440980][ T5315] drm_dev_put+0xa9/0x120
[ 95.442852][ T5315] virtio_dev_remove+0x9c/0x1b0
[ 95.444864][ T5315] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.447229][ T5315] device_release_driver_internal+0x48b/0x880
[ 95.450124][ T5315] bus_remove_device+0x444/0x560
[ 95.452436][ T5315] ? __pfx_bus_remove_device+0x10/0x10
[ 95.455002][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.457604][ T5315] device_del+0x524/0x8f0
[ 95.459471][ T5315] ? __pfx_device_del+0x10/0x10
[ 95.461539][ T5315] device_unregister+0x21/0xf0
[ 95.463625][ T5315] unregister_virtio_device+0x37/0x60
[ 95.465891][ T5315] virtio_pci_remove+0x7f/0xf0
[ 95.467790][ T5315] pci_device_remove+0x99/0x1c0
[ 95.469779][ T5315] ? __pfx_pci_device_remove+0x10/0x10
[ 95.471966][ T5315] device_release_driver_internal+0x48b/0x880
[ 95.474534][ T5315] pci_stop_bus_device+0xf6/0x120
[ 95.476722][ T5315] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.479423][ T5315] remove_store+0xe5/0x150
[ 95.481158][ T5315] ? __pfx_remove_store+0x10/0x10
[ 95.483180][ T5315] ? sysfs_file_kobj+0x1e4/0x230
[ 95.485162][ T5315] ? sysfs_kf_write+0x166/0x260
[ 95.487202][ T5315] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.489321][ T5315] kernfs_fop_write_iter+0x3a4/0x540
[ 95.491523][ T5315] vfs_write+0x612/0xba0
[ 95.493205][ T5315] ? __pfx_vfs_write+0x10/0x10
[ 95.495076][ T5315] ? __fget_files+0x2a/0x420
[ 95.496933][ T5315] ksys_write+0x150/0x270
[ 95.498820][ T5315] ? __pfx_ksys_write+0x10/0x10
[ 95.500749][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.503288][ T5315] do_syscall_64+0x174/0x580
[ 95.505226][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 95.507212][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.509723][ T5315] RIP: 0033:0x7fabb799e0d9
[ 95.511510][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.519578][ T5315] RSP: 002b:00007fabb3dd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.523050][ T5315] RAX: ffffffffffffffda RBX: 00007fabb7c26090 RCX: 00007fabb799e0d9
[ 95.526343][ T5315] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007
[ 95.529795][ T5315] RBP: 00007fabb7a35024 R08: 0000000000000000 R09: 0000000000000000
[ 95.533056][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.536318][ T5315] R13: 00007fabb7c26128 R14: 00007fabb7c26090 R15: 00007ffccc252778
[ 95.539583][ T5315]
[ 95.541320][ T5315] Kernel Offset: disabled
[ 95.543128][ T5315] Rebooting in 86400 seconds..