program: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r1 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x200080, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) write$P9_RCREATE(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000013000000000000203927adbb5202879fa056f6e3bc00040000007111"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYRES8=r3, @ANYRESHEX=r4, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES16=0x0, @ANYRES32=r3]) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000100)='debugfs\x00', 0x2008011, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = fanotify_init(0x200, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18f50000040000000000000002000000040000007d0000008542ab00000004ffffe2950000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000206050000000000000000000000000010"], 0x54}}, 0x0) fanotify_mark(r6, 0x401, 0x8000032, r0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r10, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r11, &(0x7f00000001c0)='1\x00', 0x1) bind$alg(r9, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x1e) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) [ 101.114587][ T5289] Bluetooth: hci0: command tx timeout [ 101.146218][ T5329] binder: 5328:5329 ioctl c0306201 0 returned -14 [ 101.182320][ T5329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.0'. [ 101.378252][ T5330] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 101.500579][ T5330] pci 0000:00:01.0: BAR 0 [mem 0xfc000000-0xfc7fffff pref] [ 101.508665][ T5330] pci 0000:00:01.0: BAR 2 [mem 0xfca00000-0xfca03fff 64bit pref] [ 101.526908][ T5330] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 101.542399][ T5330] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 101.571580][ T5330] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 101.643230][ T5330] pci 0000:00:01.0: Adding to iommu group 1 [ 101.665856][ T5330] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 101.668768][ T5330] pci 0000:00:01.0: vgaarb: bridge control possible [ 101.671508][ T5330] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x154000) [ 101.727989][ T5330] pci 0000:00:01.0: BAR 0 [mem 0x60000000-0x607fffff pref]: assigned [ 101.756700][ T5330] pci 0000:00:01.0: BAR 2 [mem 0x5c0000000-0x5c0003fff 64bit pref]: assigned [ 101.799852][ T5330] pci 0000:00:01.0: BAR 4 [mem 0x60800000-0x60800fff]: assigned [ 102.003970][ T5330] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 102.006727][ T5330] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 102.041572][ T1030] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 102.044520][ T1030] ata1: failed to read log page 10h (errno=-5) [ 102.052060][ T1030] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 102.059220][ T1030] ata1.00: irq_stat 0x41000000 [ 102.063240][ T5330] [drm] features: -virgl +edid -resource_blob -host_visible [ 102.063256][ T5330] [drm] features: -context_init -blob_alignment [ 102.069210][ T1030] ata1.00: failed command: READ FPDMA QUEUED [ 102.075731][ T1030] ata1.00: cmd 60/a0:70:6e:1b:01/0a:00:00:00:00/40 tag 14 ncq dma 1392640 in [ 102.075731][ T1030] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 102.091425][ T1030] ata1.00: status: { DRDY } [ 102.100813][ T1030] ata1.00: error: { ABRT } [ 102.103423][ T1030] ata1.00: configured for UDMA/100 [ 102.105933][ T1030] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 102.110027][ T1030] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 102.121058][ T1030] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 102.125531][ T5330] ------------[ cut here ]------------ [ 102.128550][ T5330] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 102.131642][ T5330] WARNING: mm/slab_common.c:112 at __kmem_cache_create_args+0xac/0x440, CPU#0: syz.0.0/5330 [ 102.136128][ T5330] Modules linked in: [ 102.138552][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.142642][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.146997][ T5330] RIP: 0010:__kmem_cache_create_args+0xaf/0x440 [ 102.149594][ T5330] Code: c6 8e 4d 8b 24 24 49 81 fc 18 9f c6 8e 74 20 49 8b 7c 24 f8 48 89 de e8 ef 10 b8 09 85 c0 75 e2 48 8d 3d d4 c4 45 0e 48 89 de <67> 48 0f b9 3a 48 89 df be 20 00 00 00 e8 8f 12 b8 09 48 85 c0 0f [ 102.158159][ T5330] RSP: 0018:ffffc9000ef66e28 EFLAGS: 00010246 [ 102.161031][ T5330] RAX: 0000000000000000 RBX: ffffffff8c7452e0 RCX: 0000000000000001 [ 102.164159][ T5330] RDX: 000000008c745200 RSI: ffffffff8c7452e0 RDI: ffffffff905c9f80 [ 102.167329][ T5330] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 102.170719][ T5330] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888034e27060 [ 102.174014][ T5330] R13: 1ffff92001decdcc R14: 00000000000000d8 R15: ffffc9000ef66e80 [ 102.177180][ T5330] FS: 00007fcc4688b6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 102.180844][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.183528][ T5330] CR2: 00007fcc45c14ea8 CR3: 000000003498a000 CR4: 0000000000352ef0 [ 102.186899][ T5330] Call Trace: [ 102.188264][ T5330] [ 102.189419][ T5330] virtio_gpu_alloc_vbufs+0xc3/0x150 [ 102.191720][ T5330] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.194250][ T5330] ? iowrite16+0x1e/0x80 [ 102.196156][ T5330] ? vp_modern_set_queue_enable+0x4d/0x80 [ 102.198511][ T5330] ? iowrite16+0x1e/0x80 [ 102.200574][ T5330] ? vp_modern_find_vqs+0xe9/0x110 [ 102.202749][ T5330] virtio_gpu_init+0x1195/0x19a0 [ 102.204893][ T5330] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.207219][ T5330] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.209707][ T5330] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.212389][ T5330] ? vga_remove_vgacon+0x3f/0xd0 [ 102.214524][ T5330] ? __pfx_console_unlock+0x10/0x10 [ 102.216756][ T5330] ? is_console_locked+0x9/0x20 [ 102.218911][ T5330] ? do_unregister_con_driver+0x267/0x470 [ 102.221434][ T5330] virtio_gpu_probe+0x1a9/0x290 [ 102.223406][ T5330] virtio_dev_probe+0xdf6/0x10c0 [ 102.225806][ T5330] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.228170][ T5330] ? sysfs_do_create_link_sd+0xe0/0x110 [ 102.234571][ T5330] ? driver_sysfs_add+0x1fe/0x210 [ 102.236801][ T5330] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.239003][ T5330] really_probe+0x254/0xae0 [ 102.241212][ T5330] __driver_probe_device+0x1e8/0x360 [ 102.243466][ T5330] driver_probe_device+0x4f/0x240 [ 102.245452][ T5330] __device_attach_driver+0x270/0x410 [ 102.247544][ T5330] bus_for_each_drv+0x258/0x2f0 [ 102.249585][ T5330] ? __pfx___device_attach_driver+0x10/0x10 [ 102.252200][ T5330] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.254994][ T5330] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.257193][ T5330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.260027][ T5330] __device_attach+0x2c4/0x450 [ 102.262222][ T5330] ? __pfx___device_attach+0x10/0x10 [ 102.264525][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 102.266878][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.268906][ T5330] device_initial_probe+0xa1/0xd0 [ 102.271152][ T5330] bus_probe_device+0x12a/0x220 [ 102.273105][ T5330] device_add+0x7d7/0xb80 [ 102.274894][ T5330] ? __pfx_vp_set_status+0x10/0x10 [ 102.276825][ T5330] register_virtio_device+0x4c2/0x6d0 [ 102.278898][ T5330] ? __pfx_register_virtio_device+0x10/0x10 [ 102.281329][ T5330] ? pci_set_master+0xf6/0x1a0 [ 102.283291][ T5330] ? __raw_spin_lock_init+0x45/0x100 [ 102.285499][ T5330] ? virtio_pci_modern_probe+0x225/0x280 [ 102.287929][ T5330] virtio_pci_probe+0x2a8/0x330 [ 102.290040][ T5330] pci_device_probe+0x431/0xc90 [ 102.292256][ T5330] ? __pfx_pci_device_probe+0x10/0x10 [ 102.294606][ T5330] ? kernfs_put+0x7b9/0x820 [ 102.296614][ T5330] ? kernfs_create_link+0x187/0x200 [ 102.298878][ T5330] ? sysfs_do_create_link_sd+0xe0/0x110 [ 102.301329][ T5330] ? driver_sysfs_add+0x1fe/0x210 [ 102.303517][ T5330] ? __pfx_pci_device_probe+0x10/0x10 [ 102.305900][ T5330] really_probe+0x254/0xae0 [ 102.307991][ T5330] __driver_probe_device+0x1e8/0x360 [ 102.311329][ T5330] driver_probe_device+0x4f/0x240 [ 102.313561][ T5330] __device_attach_driver+0x270/0x410 [ 102.315812][ T5330] bus_for_each_drv+0x258/0x2f0 [ 102.317814][ T5330] ? __pfx___device_attach_driver+0x10/0x10 [ 102.320215][ T5330] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.322447][ T5330] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.324677][ T5330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.327050][ T5330] __device_attach+0x2c4/0x450 [ 102.329070][ T5330] ? __pfx___device_attach+0x10/0x10 [ 102.331521][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.333700][ T5330] device_initial_probe+0xa1/0xd0 [ 102.335928][ T5330] pci_bus_add_device+0xbc/0xe0 [ 102.338038][ T5330] pci_bus_add_devices+0x94/0x1c0 [ 102.340133][ T5330] pci_rescan_bus+0x2a/0x40 [ 102.342263][ T5330] rescan_store+0xcc/0x150 [ 102.344167][ T5330] ? __pfx_rescan_store+0x10/0x10 [ 102.346351][ T5330] ? sysfs_file_kobj+0x1e4/0x230 [ 102.348513][ T5330] ? sysfs_kf_write+0x166/0x260 [ 102.350756][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.352975][ T5330] kernfs_fop_write_iter+0x3a4/0x540 [ 102.355262][ T5330] vfs_write+0x612/0xba0 [ 102.357561][ T5330] ? __pfx_vfs_write+0x10/0x10 [ 102.359966][ T5330] ? __fget_files+0x2a/0x420 [ 102.362051][ T5330] ksys_write+0x150/0x270 [ 102.363942][ T5330] ? __pfx_ksys_write+0x10/0x10 [ 102.365988][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.368552][ T5330] do_syscall_64+0x174/0x580 [ 102.370705][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.372880][ T5330] ? clear_bhb_loop+0x40/0x90 [ 102.375073][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.377801][ T5330] RIP: 0033:0x7fcc4599e019 [ 102.379847][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.388460][ T5330] RSP: 002b:00007fcc4688afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.392345][ T5330] RAX: ffffffffffffffda RBX: 00007fcc45c26090 RCX: 00007fcc4599e019 [ 102.395609][ T5330] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000b [ 102.398885][ T5330] RBP: 00007fcc45a3500c R08: 0000000000000000 R09: 0000000000000000 [ 102.402235][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.405754][ T5330] R13: 00007fcc45c26128 R14: 00007fcc45c26090 R15: 00007ffd580ca5a8 [ 102.409388][ T5330] [ 102.410953][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.414176][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.418180][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.422594][ T5330] Call Trace: [ 102.424133][ T5330] [ 102.425450][ T5330] vpanic+0x56c/0xa60 [ 102.427295][ T5330] ? __pfx__printk+0x10/0x10 [ 102.429365][ T5330] ? __pfx_vpanic+0x10/0x10 [ 102.431376][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 102.433642][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 102.435961][ T5330] panic+0xc5/0xd0 [ 102.437628][ T5330] ? __pfx_panic+0x10/0x10 [ 102.439603][ T5330] __warn+0x315/0x4c0 [ 102.441363][ T5330] ? __kmem_cache_create_args+0xac/0x440 [ 102.443841][ T5330] ? __kmem_cache_create_args+0xac/0x440 [ 102.446230][ T5330] __report_bug+0x276/0x570 [ 102.449482][ T5330] ? __kmem_cache_create_args+0xac/0x440 [ 102.451804][ T5330] ? __pfx___report_bug+0x10/0x10 [ 102.454011][ T5330] ? __mutex_lock+0x30d/0x1550 [ 102.456193][ T5330] ? vp_find_one_vq_msix+0x2b0/0x460 [ 102.458495][ T5330] report_bug_entry+0x19a/0x290 [ 102.460621][ T5330] ? __kmem_cache_create_args+0xaf/0x440 [ 102.462965][ T5330] ? __kmem_cache_create_args+0xb4/0x440 [ 102.465357][ T5330] handle_bug+0xce/0x200 [ 102.467330][ T5330] exc_invalid_op+0x1a/0x50 [ 102.469363][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 102.471527][ T5330] RIP: 0010:__kmem_cache_create_args+0xaf/0x440 [ 102.474269][ T5330] Code: c6 8e 4d 8b 24 24 49 81 fc 18 9f c6 8e 74 20 49 8b 7c 24 f8 48 89 de e8 ef 10 b8 09 85 c0 75 e2 48 8d 3d d4 c4 45 0e 48 89 de <67> 48 0f b9 3a 48 89 df be 20 00 00 00 e8 8f 12 b8 09 48 85 c0 0f [ 102.482624][ T5330] RSP: 0018:ffffc9000ef66e28 EFLAGS: 00010246 [ 102.485346][ T5330] RAX: 0000000000000000 RBX: ffffffff8c7452e0 RCX: 0000000000000001 [ 102.488726][ T5330] RDX: 000000008c745200 RSI: ffffffff8c7452e0 RDI: ffffffff905c9f80 [ 102.492141][ T5330] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 102.495635][ T5330] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888034e27060 [ 102.499152][ T5330] R13: 1ffff92001decdcc R14: 00000000000000d8 R15: ffffc9000ef66e80 [ 102.502637][ T5330] ? __kmem_cache_create_args+0xa1/0x440 [ 102.505065][ T5330] virtio_gpu_alloc_vbufs+0xc3/0x150 [ 102.507457][ T5330] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.510135][ T5330] ? iowrite16+0x1e/0x80 [ 102.512062][ T5330] ? vp_modern_set_queue_enable+0x4d/0x80 [ 102.514587][ T5330] ? iowrite16+0x1e/0x80 [ 102.516556][ T5330] ? vp_modern_find_vqs+0xe9/0x110 [ 102.518874][ T5330] virtio_gpu_init+0x1195/0x19a0 [ 102.521096][ T5330] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.523421][ T5330] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.525900][ T5330] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.528465][ T5330] ? vga_remove_vgacon+0x3f/0xd0 [ 102.530671][ T5330] ? __pfx_console_unlock+0x10/0x10 [ 102.532915][ T5330] ? is_console_locked+0x9/0x20 [ 102.535028][ T5330] ? do_unregister_con_driver+0x267/0x470 [ 102.537499][ T5330] virtio_gpu_probe+0x1a9/0x290 [ 102.539676][ T5330] virtio_dev_probe+0xdf6/0x10c0 [ 102.541874][ T5330] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.544224][ T5330] ? sysfs_do_create_link_sd+0xe0/0x110 [ 102.546673][ T5330] ? driver_sysfs_add+0x1fe/0x210 [ 102.548856][ T5330] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.551290][ T5330] really_probe+0x254/0xae0 [ 102.553297][ T5330] __driver_probe_device+0x1e8/0x360 [ 102.555625][ T5330] driver_probe_device+0x4f/0x240 [ 102.557921][ T5330] __device_attach_driver+0x270/0x410 [ 102.560347][ T5330] bus_for_each_drv+0x258/0x2f0 [ 102.562468][ T5330] ? __pfx___device_attach_driver+0x10/0x10 [ 102.565094][ T5330] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.567524][ T5330] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.569865][ T5330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.572482][ T5330] __device_attach+0x2c4/0x450 [ 102.574606][ T5330] ? __pfx___device_attach+0x10/0x10 [ 102.576991][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 102.579236][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.581327][ T5330] device_initial_probe+0xa1/0xd0 [ 102.583477][ T5330] bus_probe_device+0x12a/0x220 [ 102.585611][ T5330] device_add+0x7d7/0xb80 [ 102.587601][ T5330] ? __pfx_vp_set_status+0x10/0x10 [ 102.589931][ T5330] register_virtio_device+0x4c2/0x6d0 [ 102.592303][ T5330] ? __pfx_register_virtio_device+0x10/0x10 [ 102.594839][ T5330] ? pci_set_master+0xf6/0x1a0 [ 102.596931][ T5330] ? __raw_spin_lock_init+0x45/0x100 [ 102.599308][ T5330] ? virtio_pci_modern_probe+0x225/0x280 [ 102.601804][ T5330] virtio_pci_probe+0x2a8/0x330 [ 102.603970][ T5330] pci_device_probe+0x431/0xc90 [ 102.606135][ T5330] ? __pfx_pci_device_probe+0x10/0x10 [ 102.608474][ T5330] ? kernfs_put+0x7b9/0x820 [ 102.610495][ T5330] ? kernfs_create_link+0x187/0x200 [ 102.612799][ T5330] ? sysfs_do_create_link_sd+0xe0/0x110 [ 102.615215][ T5330] ? driver_sysfs_add+0x1fe/0x210 [ 102.617441][ T5330] ? __pfx_pci_device_probe+0x10/0x10 [ 102.619756][ T5330] really_probe+0x254/0xae0 [ 102.621775][ T5330] __driver_probe_device+0x1e8/0x360 [ 102.624097][ T5330] driver_probe_device+0x4f/0x240 [ 102.626383][ T5330] __device_attach_driver+0x270/0x410 [ 102.628775][ T5330] bus_for_each_drv+0x258/0x2f0 [ 102.631013][ T5330] ? __pfx___device_attach_driver+0x10/0x10 [ 102.633562][ T5330] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.636004][ T5330] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.638319][ T5330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.640961][ T5330] __device_attach+0x2c4/0x450 [ 102.643066][ T5330] ? __pfx___device_attach+0x10/0x10 [ 102.645324][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.647484][ T5330] device_initial_probe+0xa1/0xd0 [ 102.649756][ T5330] pci_bus_add_device+0xbc/0xe0 [ 102.651988][ T5330] pci_bus_add_devices+0x94/0x1c0 [ 102.654173][ T5330] pci_rescan_bus+0x2a/0x40 [ 102.656276][ T5330] rescan_store+0xcc/0x150 [ 102.658291][ T5330] ? __pfx_rescan_store+0x10/0x10 [ 102.660565][ T5330] ? sysfs_file_kobj+0x1e4/0x230 [ 102.662751][ T5330] ? sysfs_kf_write+0x166/0x260 [ 102.664903][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.667228][ T5330] kernfs_fop_write_iter+0x3a4/0x540 [ 102.669613][ T5330] vfs_write+0x612/0xba0 [ 102.671571][ T5330] ? __pfx_vfs_write+0x10/0x10 [ 102.673722][ T5330] ? __fget_files+0x2a/0x420 [ 102.675781][ T5330] ksys_write+0x150/0x270 [ 102.677763][ T5330] ? __pfx_ksys_write+0x10/0x10 [ 102.679899][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.682594][ T5330] do_syscall_64+0x174/0x580 [ 102.684693][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.686932][ T5330] ? clear_bhb_loop+0x40/0x90 [ 102.689035][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.691690][ T5330] RIP: 0033:0x7fcc4599e019 [ 102.693697][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.702038][ T5330] RSP: 002b:00007fcc4688afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.705678][ T5330] RAX: ffffffffffffffda RBX: 00007fcc45c26090 RCX: 00007fcc4599e019 [ 102.709144][ T5330] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000b [ 102.712468][ T5330] RBP: 00007fcc45a3500c R08: 0000000000000000 R09: 0000000000000000 [ 102.715652][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.718796][ T5330] R13: 00007fcc45c26128 R14: 00007fcc45c26090 R15: 00007ffd580ca5a8 [ 102.722129][ T5330] [ 102.723908][ T5330] Kernel Offset: disabled [ 102.725901][ T5330] Rebooting in 86400 seconds..