program:
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10)
pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff000000070581"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write(r3, &(0x7f0000000800)='abcd ef01', 0x9)
write(r1, &(0x7f0000000800)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a00)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0)
read(r5, &(0x7f0000000c00)=""/1000, 0x3e8)
[ 93.162055][ T4636] Bluetooth: hci0: command tx timeout
[ 93.183196][ T1370] cfg80211: failed to load regulatory.db
[ 93.549565][ T1370] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.702636][ T1370] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 93.706361][ T1370] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 93.711057][ T1370] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 93.718535][ T1370] usb 5-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[ 93.722719][ T1370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 93.725899][ T1370] usb 5-1: Product: syz
[ 93.727601][ T1370] usb 5-1: Manufacturer: syz
[ 93.730249][ T1370] usb 5-1: SerialNumber: syz
[ 94.671976][ T5318] usb 5-1: controller version 0 is not supported
[ 94.680050][ T5318] ushc 5-1:1.0: probe with driver ushc failed with error -22
[ 94.707962][ T5318] Console: switching to colour dummy device 80x25
[ 94.856086][ T5318] =============================================================================
[ 94.856557][ T5318]
[ 94.856564][ T5318] ======================================================
[ 94.856568][ T5318] WARNING: possible circular locking dependency detected
[ 94.856575][ T5318] syzkaller #0 Not tainted
[ 94.856581][ T5318] ------------------------------------------------------
[ 94.856586][ T5318] syz.0.0/5318 is trying to acquire lock:
[ 94.856592][ T5318] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.856668][ T5318]
[ 94.856668][ T5318] but task is already holding lock:
[ 94.856670][ T5318] ffff88801af5ed98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.856691][ T5318]
[ 94.856691][ T5318] which lock already depends on the new lock.
[ 94.856691][ T5318]
[ 94.856694][ T5318]
[ 94.856694][ T5318] the existing dependency chain (in reverse order) is:
[ 94.856699][ T5318]
[ 94.856699][ T5318] -> #4 (&n->list_lock){-.-.}-{3:3}:
[ 94.856711][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.856758][ T5318] get_from_partial_node+0x54/0x4c0
[ 94.856773][ T5318] ___slab_alloc+0x258/0x950
[ 94.856785][ T5318] kmem_cache_alloc_noprof+0x135/0x5f0
[ 94.856797][ T5318] fill_pool+0x165/0x610
[ 94.856831][ T5318] debug_object_activate+0x38d/0x420
[ 94.856837][ T5318] insert_work+0x35/0x330
[ 94.856842][ T5318] __queue_work+0xcd8/0x10a0
[ 94.856849][ T5318] queue_work_on+0x106/0x1d0
[ 94.856855][ T5318] call_usermodehelper_exec+0x28e/0x4b0
[ 94.856865][ T5318] kobject_uevent_env+0x685/0x9e0
[ 94.856872][ T5318] driver_register+0x2d4/0x320
[ 94.856880][ T5318] alarmtimer_init+0xe9/0x110
[ 94.856938][ T5318] do_one_initcall+0x250/0x870
[ 94.856948][ T5318] do_initcall_level+0x10a/0x1a0
[ 94.856958][ T5318] do_initcalls+0x59/0xa0
[ 94.856966][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 94.856974][ T5318] kernel_init+0x1d/0x1d0
[ 94.856983][ T5318] ret_from_fork+0x514/0xb70
[ 94.856993][ T5318] ret_from_fork_asm+0x1a/0x30
[ 94.857001][ T5318]
[ 94.857001][ T5318] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 94.857012][ T5318] _raw_spin_lock+0x2e/0x40
[ 94.857018][ T5318] __queue_work+0x72f/0x10a0
[ 94.857025][ T5318] queue_work_on+0x106/0x1d0
[ 94.857030][ T5318] rpm_suspend+0xeca/0x17b0
[ 94.857041][ T5318] __pm_runtime_idle+0x12f/0x1a0
[ 94.857053][ T5318] __device_attach+0x355/0x450
[ 94.857064][ T5318] device_initial_probe+0xa1/0xd0
[ 94.857071][ T5318] bus_probe_device+0x12a/0x220
[ 94.857081][ T5318] device_add+0x7d7/0xb80
[ 94.857094][ T5318] serial_base_port_add+0x18f/0x270
[ 94.857103][ T5318] serial_core_register_port+0x37f/0x2840
[ 94.857114][ T5318] serial8250_register_8250_port+0x16b4/0x2090
[ 94.857124][ T5318] serial_pnp_probe+0x56a/0x7f0
[ 94.857135][ T5318] pnp_device_probe+0x30b/0x4c0
[ 94.857146][ T5318] really_probe+0x254/0xae0
[ 94.857155][ T5318] __driver_probe_device+0x1e8/0x360
[ 94.857163][ T5318] driver_probe_device+0x4f/0x240
[ 94.857172][ T5318] __driver_attach+0x339/0x600
[ 94.857180][ T5318] bus_for_each_dev+0x23b/0x2c0
[ 94.857188][ T5318] bus_add_driver+0x345/0x670
[ 94.857195][ T5318] driver_register+0x23a/0x320
[ 94.857201][ T5318] serial8250_init+0x8f/0x160
[ 94.857208][ T5318] do_one_initcall+0x250/0x870
[ 94.857215][ T5318] do_initcall_level+0x10a/0x1a0
[ 94.857227][ T5318] do_initcalls+0x59/0xa0
[ 94.857237][ T5318] kernel_init_freeable+0x29d/0x3e0
[ 94.857248][ T5318] kernel_init+0x1d/0x1d0
[ 94.857261][ T5318] ret_from_fork+0x514/0xb70
[ 94.857273][ T5318] ret_from_fork_asm+0x1a/0x30
[ 94.857286][ T5318]
[ 94.857286][ T5318] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 94.857300][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.857309][ T5318] __pm_runtime_resume+0x10f/0x180
[ 94.857318][ T5318] __uart_start+0x171/0x460
[ 94.857325][ T5318] uart_write+0x251/0x9f0
[ 94.857332][ T5318] n_tty_write+0xd49/0x11e0
[ 94.857337][ T5318] file_tty_write+0x509/0x9c0
[ 94.857344][ T5318] vfs_write+0x612/0xba0
[ 94.857351][ T5318] ksys_write+0x150/0x270
[ 94.857360][ T5318] do_syscall_64+0x174/0x580
[ 94.857367][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.857374][ T5318]
[ 94.857374][ T5318] -> #1 (&port_lock_key){-...}-{3:3}:
[ 94.857382][ T5318] _raw_spin_lock_irqsave+0x40/0x60
[ 94.857389][ T5318] serial8250_console_write+0x153/0x1ba0
[ 94.857401][ T5318] console_flush_all+0x6ea/0xaf0
[ 94.857409][ T5318] console_unlock+0xd1/0x1c0
[ 94.857422][ T5318] vprintk_emit+0x485/0x560
[ 94.857435][ T5318] _printk+0xdd/0x130
[ 94.857444][ T5318] register_console+0xbc3/0xfc0
[ 94.857453][ T5318] univ8250_console_init+0x3a/0x70
[ 94.857465][ T5318] console_init+0x10b/0x4a0
[ 94.857474][ T5318] start_kernel+0x238/0x3e0
[ 94.857484][ T5318] x86_64_start_reservations+0x24/0x30
[ 94.857494][ T5318] x86_64_start_kernel+0x137/0x1b0
[ 94.857503][ T5318] common_startup_64+0x13e/0x157
[ 94.857512][ T5318]
[ 94.857512][ T5318] -> #0 (console_owner){....}-{0:0}:
[ 94.857525][ T5318] __lock_acquire+0x1520/0x2cf0
[ 94.857537][ T5318] lock_acquire+0x106/0x350
[ 94.857547][ T5318] console_flush_all+0x693/0xaf0
[ 94.857556][ T5318] console_unlock+0xd1/0x1c0
[ 94.857569][ T5318] vprintk_emit+0x485/0x560
[ 94.857582][ T5318] _printk+0xdd/0x130
[ 94.857590][ T5318] __slab_bug+0x6e/0xd0
[ 94.857600][ T5318] slab_bug+0x57/0x80
[ 94.857608][ T5318] list_slab_objects+0x35/0x1a0
[ 94.857614][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.857621][ T5318] kmem_cache_destroy+0x98/0x180
[ 94.857630][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 94.857637][ T5318] virtio_gpu_release+0x55/0x140
[ 94.857642][ T5318] drm_dev_put+0xa9/0x120
[ 94.857649][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 94.857658][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.857666][ T5318] bus_remove_device+0x444/0x560
[ 94.857676][ T5318] device_del+0x524/0x8f0
[ 94.857689][ T5318] device_unregister+0x21/0xf0
[ 94.857705][ T5318] unregister_virtio_device+0x37/0x60
[ 94.857714][ T5318] virtio_pci_remove+0x7f/0xf0
[ 94.857726][ T5318] pci_device_remove+0x99/0x1c0
[ 94.857736][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.857741][ T5318] pci_stop_bus_device+0xf6/0x120
[ 94.857750][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.857760][ T5318] remove_store+0xe5/0x150
[ 94.857769][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 94.857780][ T5318] vfs_write+0x612/0xba0
[ 94.857791][ T5318] ksys_write+0x150/0x270
[ 94.857800][ T5318] do_syscall_64+0x174/0x580
[ 94.857810][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.857820][ T5318]
[ 94.857820][ T5318] other info that might help us debug this:
[ 94.857820][ T5318]
[ 94.857823][ T5318] Chain exists of:
[ 94.857823][ T5318] console_owner --> &pool->lock --> &n->list_lock
[ 94.857823][ T5318]
[ 94.857837][ T5318] Possible unsafe locking scenario:
[ 94.857837][ T5318]
[ 94.857840][ T5318] CPU0 CPU1
[ 94.857843][ T5318] ---- ----
[ 94.857846][ T5318] lock(&n->list_lock);
[ 94.857852][ T5318] lock(&pool->lock);
[ 94.857869][ T5318] lock(&n->list_lock);
[ 94.857876][ T5318] lock(console_owner);
[ 94.857882][ T5318]
[ 94.857882][ T5318] *** DEADLOCK ***
[ 94.857882][ T5318]
[ 94.857885][ T5318] 11 locks held by syz.0.0/5318:
[ 94.857892][ T5318] #0: ffff888012aeed30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 94.857920][ T5318] #1: ffff888034b6a450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 94.857948][ T5318] #2: ffff8880136bb080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 94.857974][ T5318] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0
[ 94.858000][ T5318] #4: ffff88801f8601f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.858021][ T5318] #5: ffff8880331521b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 94.858042][ T5318] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180
[ 94.858070][ T5318] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180
[ 94.858098][ T5318] #8: ffff88801af5ed98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0
[ 94.858123][ T5318] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[ 94.858147][ T5318] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[ 94.858169][ T5318]
[ 94.858169][ T5318] stack backtrace:
[ 94.858175][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.858186][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.858197][ T5318] Call Trace:
[ 94.858202][ T5318]
[ 94.858207][ T5318] dump_stack_lvl+0xe8/0x150
[ 94.858222][ T5318] print_circular_bug+0x2e1/0x300
[ 94.858240][ T5318] check_noncircular+0x12e/0x150
[ 94.858260][ T5318] __lock_acquire+0x1520/0x2cf0
[ 94.858276][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.858284][ T5318] lock_acquire+0x106/0x350
[ 94.858296][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.858307][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 94.858317][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.858326][ T5318] console_flush_all+0x693/0xaf0
[ 94.858335][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.858346][ T5318] ? console_flush_all+0x123/0xaf0
[ 94.858356][ T5318] ? __pfx_console_flush_all+0x10/0x10
[ 94.858366][ T5318] ? is_printk_cpu_sync_owner+0x32/0x40
[ 94.858377][ T5318] console_unlock+0xd1/0x1c0
[ 94.858392][ T5318] ? __pfx_console_unlock+0x10/0x10
[ 94.858405][ T5318] ? _raw_spin_unlock+0x40/0x50
[ 94.858416][ T5318] ? _printk+0xdd/0x130
[ 94.858457][ T5318] vprintk_emit+0x485/0x560
[ 94.858475][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 94.858493][ T5318] _printk+0xdd/0x130
[ 94.858502][ T5318] ? __lock_acquire+0x683/0x2cf0
[ 94.858516][ T5318] ? __pfx__printk+0x10/0x10
[ 94.858526][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.858537][ T5318] __slab_bug+0x6e/0xd0
[ 94.858549][ T5318] slab_bug+0x57/0x80
[ 94.858560][ T5318] list_slab_objects+0x35/0x1a0
[ 94.858573][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 94.858584][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 94.858596][ T5318] kmem_cache_destroy+0x98/0x180
[ 94.858611][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 94.858623][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.858632][ T5318] virtio_gpu_release+0x55/0x140
[ 94.858642][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.858651][ T5318] drm_dev_put+0xa9/0x120
[ 94.858661][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 94.858671][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 94.858681][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.858692][ T5318] bus_remove_device+0x444/0x560
[ 94.858704][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 94.858717][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.858734][ T5318] device_del+0x524/0x8f0
[ 94.858751][ T5318] ? __pfx_device_del+0x10/0x10
[ 94.858765][ T5318] device_unregister+0x21/0xf0
[ 94.858778][ T5318] unregister_virtio_device+0x37/0x60
[ 94.858788][ T5318] virtio_pci_remove+0x7f/0xf0
[ 94.858801][ T5318] pci_device_remove+0x99/0x1c0
[ 94.858812][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 94.858822][ T5318] device_release_driver_internal+0x48b/0x880
[ 94.858833][ T5318] pci_stop_bus_device+0xf6/0x120
[ 94.858846][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.858869][ T5318] remove_store+0xe5/0x150
[ 94.858885][ T5318] ? __pfx_remove_store+0x10/0x10
[ 94.858900][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 94.858910][ T5318] ? sysfs_kf_write+0x166/0x260
[ 94.858920][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.858930][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 94.858945][ T5318] vfs_write+0x612/0xba0
[ 94.858959][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 94.858973][ T5318] ? __fget_files+0x2a/0x420
[ 94.858986][ T5318] ksys_write+0x150/0x270
[ 94.858998][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 94.859012][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.859021][ T5318] do_syscall_64+0x174/0x580
[ 94.859032][ T5318] ? trace_irq_disable+0x3b/0x140
[ 94.859044][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 94.859055][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.859065][ T5318] RIP: 0033:0x7f7c1bb9e0d9
[ 94.859076][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.859083][ T5318] RSP: 002b:00007f7c1ca87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.859095][ T5318] RAX: ffffffffffffffda RBX: 00007f7c1be26180 RCX: 00007f7c1bb9e0d9
[ 94.859102][ T5318] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[ 94.859109][ T5318] RBP: 00007f7c1bc35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.859116][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.859122][ T5318] R13: 00007f7c1be26218 R14: 00007f7c1be26180 R15: 00007ffdf178e058
[ 94.859134][ T5318]
[ 95.400415][ T5318] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[ 95.404310][ T5318] -----------------------------------------------------------------------------
[ 95.404310][ T5318]
[ 95.408908][ T5318] Object 0xffff88801d2dd000 @offset=0
[ 95.411123][ T5318] Object 0xffff88801d2dd118 @offset=280
[ 95.412954][ T5318] Object 0xffff88801d2dd578 @offset=1400
[ 95.414750][ T5318] Object 0xffff88801d2dd690 @offset=1680
[ 95.416611][ T5318] Object 0xffff88801d2dd7a8 @offset=1960
[ 95.418729][ T5318] Object 0xffff88801d2dd8c0 @offset=2240
[ 95.420724][ T5318] Object 0xffff88801d2dd9d8 @offset=2520
[ 95.422878][ T5318] Object 0xffff88801d2ddaf0 @offset=2800
[ 95.425020][ T5318] Object 0xffff88801d2ddc08 @offset=3080
[ 95.427234][ T5318] Object 0xffff88801d2ddd20 @offset=3360
[ 95.429384][ T5318] Object 0xffff88801d2dde38 @offset=3640
[ 95.431699][ T5318] Slab 0xffffea000074b740 objects=14 used=11 fp=0xffff88801d2dd230 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 95.441080][ T5318] ------------[ cut here ]------------
[ 95.443292][ T5318] 1
[ 95.443301][ T5318] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5318
[ 95.447354][ T5318] Modules linked in:
[ 95.448867][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.452826][ T5318] Tainted: [B]=BAD_PAGE
[ 95.454472][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.458089][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 95.460185][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.467947][ T5318] RSP: 0018:ffffc9000e06f6d8 EFLAGS: 00010083
[ 95.470370][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034b73000 RCX: 0000000000100000
[ 95.473615][ T5318] RDX: ffffc90020001000 RSI: 000000000006a918 RDI: 000000000006a919
[ 95.476711][ T5318] RBP: ffffea000074b610 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 95.479783][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea0000497390
[ 95.483229][ T5318] R13: ffffea000074b740 R14: ffffc9000e06f6f0 R15: ffff88801af5ed80
[ 95.486500][ T5318] FS: 00007f7c1ca886c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 95.490080][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.492770][ T5318] CR2: 00007f7c1ca45fe8 CR3: 0000000012037000 CR4: 0000000000352ef0
[ 95.496059][ T5318] Call Trace:
[ 95.497486][ T5318]
[ 95.498785][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.501023][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.503256][ T5318] kmem_cache_destroy+0x98/0x180
[ 95.505339][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 95.507407][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.509704][ T5318] virtio_gpu_release+0x55/0x140
[ 95.511788][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.514086][ T5318] drm_dev_put+0xa9/0x120
[ 95.515888][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 95.517906][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.520208][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.522749][ T5318] bus_remove_device+0x444/0x560
[ 95.524824][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 95.527075][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.529378][ T5318] device_del+0x524/0x8f0
[ 95.531184][ T5318] ? __pfx_device_del+0x10/0x10
[ 95.533272][ T5318] device_unregister+0x21/0xf0
[ 95.535347][ T5318] unregister_virtio_device+0x37/0x60
[ 95.537488][ T5318] virtio_pci_remove+0x7f/0xf0
[ 95.539453][ T5318] pci_device_remove+0x99/0x1c0
[ 95.541420][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 95.543642][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.546063][ T5318] pci_stop_bus_device+0xf6/0x120
[ 95.548041][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.550695][ T5318] remove_store+0xe5/0x150
[ 95.552633][ T5318] ? __pfx_remove_store+0x10/0x10
[ 95.554699][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 95.556596][ T5318] ? sysfs_kf_write+0x166/0x260
[ 95.558560][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.560484][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 95.562473][ T5318] vfs_write+0x612/0xba0
[ 95.564062][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 95.565879][ T5318] ? __fget_files+0x2a/0x420
[ 95.567764][ T5318] ksys_write+0x150/0x270
[ 95.569560][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 95.571448][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.573765][ T5318] do_syscall_64+0x174/0x580
[ 95.575466][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.577434][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.579310][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.581656][ T5318] RIP: 0033:0x7f7c1bb9e0d9
[ 95.583431][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.591067][ T5318] RSP: 002b:00007f7c1ca87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.594596][ T5318] RAX: ffffffffffffffda RBX: 00007f7c1be26180 RCX: 00007f7c1bb9e0d9
[ 95.597699][ T5318] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[ 95.600549][ T5318] RBP: 00007f7c1bc35024 R08: 0000000000000000 R09: 0000000000000000
[ 95.603490][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.606556][ T5318] R13: 00007f7c1be26218 R14: 00007f7c1be26180 R15: 00007ffdf178e058
[ 95.609713][ T5318]
[ 95.611031][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.613895][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full)
[ 95.618450][ T5318] Tainted: [B]=BAD_PAGE
[ 95.620187][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.624307][ T5318] Call Trace:
[ 95.625688][ T5318]
[ 95.627005][ T5318] vpanic+0x56c/0xa60
[ 95.628701][ T5318] ? __pfx__printk+0x10/0x10
[ 95.630630][ T5318] ? __pfx_vpanic+0x10/0x10
[ 95.632524][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 95.634759][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 95.636886][ T5318] panic+0xc5/0xd0
[ 95.638509][ T5318] ? __pfx_panic+0x10/0x10
[ 95.640473][ T5318] __warn+0x315/0x4c0
[ 95.642176][ T5318] ? __slab_err+0x15/0x20
[ 95.644101][ T5318] ? __slab_err+0x15/0x20
[ 95.645827][ T5318] __report_bug+0x276/0x570
[ 95.647559][ T5318] ? do_raw_spin_unlock+0x4d/0x210
[ 95.649485][ T5318] ? __slab_err+0x15/0x20
[ 95.651279][ T5318] ? __pfx___report_bug+0x10/0x10
[ 95.653298][ T5318] ? __wake_up_klogd+0xe6/0x120
[ 95.655325][ T5318] ? vprintk_emit+0x4eb/0x560
[ 95.657335][ T5318] ? __pfx_vprintk_emit+0x10/0x10
[ 95.659474][ T5318] ? _printk+0xdd/0x130
[ 95.661243][ T5318] ? __slab_err+0x15/0x20
[ 95.663049][ T5318] report_bug+0x16a/0x220
[ 95.664797][ T5318] ? __slab_err+0x15/0x20
[ 95.666625][ T5318] ? __slab_err+0x17/0x20
[ 95.668435][ T5318] handle_bug+0x9c/0x200
[ 95.670556][ T5318] exc_invalid_op+0x1a/0x50
[ 95.672837][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 95.674893][ T5318] RIP: 0010:__slab_err+0x15/0x20
[ 95.676984][ T5318] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90
[ 95.684942][ T5318] RSP: 0018:ffffc9000e06f6d8 EFLAGS: 00010083
[ 95.687526][ T5318] RAX: ffffffff8186dc3a RBX: ffff888034b73000 RCX: 0000000000100000
[ 95.690882][ T5318] RDX: ffffc90020001000 RSI: 000000000006a918 RDI: 000000000006a919
[ 95.694033][ T5318] RBP: ffffea000074b610 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18
[ 95.697228][ T5318] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea0000497390
[ 95.700469][ T5318] R13: ffffea000074b740 R14: ffffc9000e06f6f0 R15: ffff88801af5ed80
[ 95.703883][ T5318] ? add_taint+0x9a/0xe0
[ 95.705733][ T5318] ? __slab_err+0x14/0x20
[ 95.707597][ T5318] __kmem_cache_shutdown+0x1a5/0x2a0
[ 95.709839][ T5318] ? virtio_gpu_free_vbufs+0x40/0x70
[ 95.712061][ T5318] kmem_cache_destroy+0x98/0x180
[ 95.714135][ T5318] virtio_gpu_free_vbufs+0x40/0x70
[ 95.716233][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.718551][ T5318] virtio_gpu_release+0x55/0x140
[ 95.720835][ T5318] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.723517][ T5318] drm_dev_put+0xa9/0x120
[ 95.725355][ T5318] virtio_dev_remove+0x9c/0x1b0
[ 95.727210][ T5318] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.729327][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.732017][ T5318] bus_remove_device+0x444/0x560
[ 95.734137][ T5318] ? __pfx_bus_remove_device+0x10/0x10
[ 95.736416][ T5318] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.738607][ T5318] device_del+0x524/0x8f0
[ 95.740433][ T5318] ? __pfx_device_del+0x10/0x10
[ 95.742494][ T5318] device_unregister+0x21/0xf0
[ 95.744534][ T5318] unregister_virtio_device+0x37/0x60
[ 95.746782][ T5318] virtio_pci_remove+0x7f/0xf0
[ 95.748837][ T5318] pci_device_remove+0x99/0x1c0
[ 95.750910][ T5318] ? __pfx_pci_device_remove+0x10/0x10
[ 95.753078][ T5318] device_release_driver_internal+0x48b/0x880
[ 95.755493][ T5318] pci_stop_bus_device+0xf6/0x120
[ 95.757468][ T5318] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.760186][ T5318] remove_store+0xe5/0x150
[ 95.762037][ T5318] ? __pfx_remove_store+0x10/0x10
[ 95.764142][ T5318] ? sysfs_file_kobj+0x1e4/0x230
[ 95.766458][ T5318] ? sysfs_kf_write+0x166/0x260
[ 95.768392][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.770657][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 95.773515][ T5318] vfs_write+0x612/0xba0
[ 95.775781][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 95.778230][ T5318] ? __fget_files+0x2a/0x420
[ 95.780210][ T5318] ksys_write+0x150/0x270
[ 95.782117][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 95.784266][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.786702][ T5318] do_syscall_64+0x174/0x580
[ 95.788651][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.790900][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.793036][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.795523][ T5318] RIP: 0033:0x7f7c1bb9e0d9
[ 95.797495][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.805556][ T5318] RSP: 002b:00007f7c1ca87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.808980][ T5318] RAX: ffffffffffffffda RBX: 00007f7c1be26180 RCX: 00007f7c1bb9e0d9
[ 95.812206][ T5318] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[ 95.815605][ T5318] RBP: 00007f7c1bc35024 R08: 0000000000000000 R09: 0000000000000000
[ 95.819538][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.823161][ T5318] R13: 00007f7c1be26218 R14: 00007f7c1be26180 R15: 00007ffdf178e058
[ 95.826752][ T5318]
[ 95.828476][ T5318] Kernel Offset: disabled
[ 95.830353][ T5318] Rebooting in 86400 seconds..