program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x109800, 0x20) r1 = openat(r0, &(0x7f0000000300)='driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0000:00:01.0\x00', 0xd) r2 = openat(r0, &(0x7f0000000500)='driver_override\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) write(r2, &(0x7f0000000600)='i915\x00', 0x5) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000800)='bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000900)='0000:00:01.0\x00', 0xd) [ 94.049814][ T4645] Bluetooth: hci0: command tx timeout [ 94.229414][ T5317] Console: switching to colour dummy device 80x25 [ 94.318233][ T5315] ------------[ cut here ]------------ [ 94.318245][ T5315] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 94.318263][ T5315] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12e2/0x1550, CPU#0: kworker/0:6/5315 [ 94.328132][ T5315] Modules linked in: [ 94.330042][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 94.334061][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.338906][ T5315] Workqueue: events virtio_gpu_array_put_free_work [ 94.341935][ T5315] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 94.344199][ T5315] Code: c6 7a 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 94 8e 05 00 75 13 48 8d 3d 9e 91 91 05 48 c7 c6 a0 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 94.352034][ T5315] RSP: 0018:ffffc9000dd17860 EFLAGS: 00010246 [ 94.354550][ T5315] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88800f9f0000 [ 94.358092][ T5315] RDX: 0000000000000000 RSI: ffffffff8c0d12a0 RDI: ffffffff917dc380 [ 94.361509][ T5315] RBP: ffffc9000dd179f0 R08: ffffffff917ac683 R09: 1ffffffff22f58d0 [ 94.364790][ T5315] R10: dffffc0000000000 R11: fffffbfff22f58d1 R12: ffff888000f351c0 [ 94.368311][ T5315] R13: 0000000000000000 R14: 1ffff92001ba2f20 R15: 0000000000000000 [ 94.371797][ T5315] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 94.375677][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.378723][ T5315] CR2: 00007f269e9909c0 CR3: 000000004467b000 CR4: 0000000000352ef0 [ 94.382214][ T5315] Call Trace: [ 94.383687][ T5315] [ 94.385022][ T5315] ? __lock_acquire+0x747/0x2de0 [ 94.387431][ T5315] ? virtio_gpu_free_object+0x90/0x1d0 [ 94.390034][ T5315] ? __lock_acquire+0x747/0x2de0 [ 94.392232][ T5315] ? __pfx___mutex_lock+0x10/0x10 [ 94.394422][ T5315] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.396641][ T5315] virtio_gpu_free_object+0x90/0x1d0 [ 94.399050][ T5315] virtio_gpu_array_put_free+0x114/0x240 [ 94.401473][ T5315] virtio_gpu_array_put_free_work+0x168/0x1c0 [ 94.404147][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 94.406466][ T5315] process_scheduled_works+0xc3d/0x1630 [ 94.408884][ T5315] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.411316][ T5315] ? assign_work+0x3cf/0x5d0 [ 94.413267][ T5315] worker_thread+0xa47/0xfb0 [ 94.415158][ T5315] ? __kthread_parkme+0x71/0x1f0 [ 94.417207][ T5315] kthread+0x38b/0x480 [ 94.419688][ T5315] ? __pfx_worker_thread+0x10/0x10 [ 94.421892][ T5315] ? __pfx_kthread+0x10/0x10 [ 94.423918][ T5315] ret_from_fork+0x514/0xb70 [ 94.426030][ T5315] ? __pfx_ret_from_fork+0x10/0x10 [ 94.428507][ T5315] ? __switch_to+0xc89/0x1420 [ 94.430580][ T5315] ? __pfx_kthread+0x10/0x10 [ 94.432662][ T5315] ret_from_fork_asm+0x1a/0x30 [ 94.434676][ T5315] [ 94.436042][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.439199][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 94.443028][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.447226][ T5315] Workqueue: events virtio_gpu_array_put_free_work [ 94.450044][ T5315] Call Trace: [ 94.451512][ T5315] [ 94.452841][ T5315] vpanic+0x56d/0xa60 [ 94.454460][ T5315] ? __pfx__printk+0x10/0x10 [ 94.456448][ T5315] ? __pfx_vpanic+0x10/0x10 [ 94.458510][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 94.460872][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 94.463154][ T5315] panic+0xc5/0xd0 [ 94.464778][ T5315] ? __pfx_panic+0x10/0x10 [ 94.466712][ T5315] ? ret_from_fork_asm+0x1a/0x30 [ 94.468589][ T5315] __warn+0x315/0x4c0 [ 94.470144][ T5315] ? __mutex_lock+0x12e2/0x1550 [ 94.472326][ T5315] ? __mutex_lock+0x12e2/0x1550 [ 94.474482][ T5315] __report_bug+0x276/0x570 [ 94.476487][ T5315] ? __lock_acquire+0x747/0x2de0 [ 94.478687][ T5315] ? __mutex_lock+0x12e2/0x1550 [ 94.480872][ T5315] ? __pfx___report_bug+0x10/0x10 [ 94.483073][ T5315] report_bug_entry+0x19b/0x290 [ 94.485212][ T5315] ? __mutex_lock+0x12e9/0x1550 [ 94.487331][ T5315] ? __mutex_lock+0x12ee/0x1550 [ 94.489511][ T5315] handle_bug+0xce/0x200 [ 94.491366][ T5315] exc_invalid_op+0x1a/0x50 [ 94.493363][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 94.495481][ T5315] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 94.497830][ T5315] Code: c6 7a 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 94 8e 05 00 75 13 48 8d 3d 9e 91 91 05 48 c7 c6 a0 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 94.506193][ T5315] RSP: 0018:ffffc9000dd17860 EFLAGS: 00010246 [ 94.508780][ T5315] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88800f9f0000 [ 94.512119][ T5315] RDX: 0000000000000000 RSI: ffffffff8c0d12a0 RDI: ffffffff917dc380 [ 94.515474][ T5315] RBP: ffffc9000dd179f0 R08: ffffffff917ac683 R09: 1ffffffff22f58d0 [ 94.518891][ T5315] R10: dffffc0000000000 R11: fffffbfff22f58d1 R12: ffff888000f351c0 [ 94.522429][ T5315] R13: 0000000000000000 R14: 1ffff92001ba2f20 R15: 0000000000000000 [ 94.525961][ T5315] ? __lock_acquire+0x747/0x2de0 [ 94.528193][ T5315] ? virtio_gpu_free_object+0x90/0x1d0 [ 94.530552][ T5315] ? __lock_acquire+0x747/0x2de0 [ 94.532415][ T5315] ? __pfx___mutex_lock+0x10/0x10 [ 94.534411][ T5315] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.536508][ T5315] virtio_gpu_free_object+0x90/0x1d0 [ 94.538883][ T5315] virtio_gpu_array_put_free+0x114/0x240 [ 94.540937][ T5315] virtio_gpu_array_put_free_work+0x168/0x1c0 [ 94.543351][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 94.545642][ T5315] process_scheduled_works+0xc3d/0x1630 [ 94.548030][ T5315] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.550674][ T5315] ? assign_work+0x3cf/0x5d0 [ 94.552723][ T5315] worker_thread+0xa47/0xfb0 [ 94.554726][ T5315] ? __kthread_parkme+0x71/0x1f0 [ 94.556956][ T5315] kthread+0x38b/0x480 [ 94.558814][ T5315] ? __pfx_worker_thread+0x10/0x10 [ 94.561057][ T5315] ? __pfx_kthread+0x10/0x10 [ 94.563054][ T5315] ret_from_fork+0x514/0xb70 [ 94.565078][ T5315] ? __pfx_ret_from_fork+0x10/0x10 [ 94.567200][ T5315] ? __switch_to+0xc89/0x1420 [ 94.569168][ T5315] ? __pfx_kthread+0x10/0x10 [ 94.571158][ T5315] ret_from_fork_asm+0x1a/0x30 [ 94.573296][ T5315] [ 94.574997][ T5315] Kernel Offset: disabled [ 94.576922][ T5315] Rebooting in 86400 seconds..