program: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000000c0), 0xff, 0x756, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x501042, 0x52) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000200001030000000000000000020000000000000001000000140003006c6f000000000000e0c9437f54a4dd1b"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000940)={0x60, 0x124, 0x0, 0x0, 0x0, 0x20, 0xf, 0x0, {0x0, 0x4000000}, {}, {}, {0x7f368e4e}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) ioctl$int_in(r5, 0x5452, &(0x7f0000000340)=0xffffffff) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1dc) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)={0x1c, r0, 0x101, 0x70bd29, 0x25dfdbf9, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xba, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) [ 85.869300][ T5321] loop0: detected capacity change from 0 to 2048 [ 85.879902][ T4648] Bluetooth: hci0: command tx timeout [ 85.938301][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.056148][ T5322] Console: switching to colour dummy device 80x25 [ 86.098246][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.0'. [ 86.564597][ T5320] ------------[ cut here ]------------ [ 86.564640][ T5320] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 86.564672][ T5320] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12e2/0x1550, CPU#0: syz.0.0/5320 [ 86.574182][ T5320] Modules linked in: [ 86.576040][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.579882][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.584217][ T5320] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 86.586618][ T5320] Code: 73 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 32 92 04 00 75 13 48 8d 3d ae 2e 95 04 48 c7 c6 60 10 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 86.594944][ T5320] RSP: 0018:ffffc9000efcfae0 EFLAGS: 00010246 [ 86.597951][ T5320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880331e8000 [ 86.601417][ T5320] RDX: 0000000000000000 RSI: ffffffff8c0d1060 RDI: ffffffff907d6f90 [ 86.605041][ T5320] RBP: ffffc9000efcfc80 R08: ffffffff907a7383 R09: 1ffffffff20f4e70 [ 86.608485][ T5320] R10: dffffc0000000000 R11: fffffbfff20f4e71 R12: ffff888034ed51c0 [ 86.611954][ T5320] R13: 0000000000000000 R14: 1ffff92001df9f70 R15: 0000000000000000 [ 86.615604][ T5320] FS: 0000555594afa540(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 86.619362][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.622155][ T5320] CR2: 00007f77c6a17fe8 CR3: 0000000043d2e000 CR4: 0000000000352ef0 [ 86.625722][ T5320] Call Trace: [ 86.627217][ T5320] [ 86.628557][ T5320] ? kfree+0x1c5/0x650 [ 86.630402][ T5320] ? drm_mode_rmfb+0x561/0x7a0 [ 86.632708][ T5320] ? drm_gem_fb_destroy+0x1c9/0x200 [ 86.635026][ T5320] ? virtio_gpu_free_object+0x90/0x1d0 [ 86.637612][ T5320] ? drm_mode_rmfb+0x561/0x7a0 [ 86.639748][ T5320] ? __pfx___mutex_lock+0x10/0x10 [ 86.641999][ T5320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.644751][ T5320] virtio_gpu_free_object+0x90/0x1d0 [ 86.647096][ T5320] drm_client_buffer_delete+0x183/0x2d0 [ 86.649583][ T5320] drm_fbdev_shmem_fb_destroy+0xb5/0xe0 [ 86.652046][ T5320] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 86.654854][ T5320] fb_release+0x11d/0x140 [ 86.656862][ T5320] ? __pfx_fb_release+0x10/0x10 [ 86.659053][ T5320] __fput+0x418/0xa50 [ 86.660854][ T5320] task_work_run+0x1d9/0x270 [ 86.663306][ T5320] ? __pfx_task_work_run+0x10/0x10 [ 86.665639][ T5320] exit_to_user_mode_loop+0x204/0x770 [ 86.667990][ T5320] ? rcu_is_watching+0x16/0xb0 [ 86.670094][ T5320] do_syscall_64+0x328/0x520 [ 86.672153][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.674876][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 86.677028][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.679619][ T5320] RIP: 0033:0x7f77c5b9e159 [ 86.681648][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.690247][ T5320] RSP: 002b:00007ffff4af9088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.694099][ T5320] RAX: 0000000000000000 RBX: 00007f77c5e27da0 RCX: 00007f77c5b9e159 [ 86.697575][ T5320] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 86.700979][ T5320] RBP: 00007f77c5e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 86.704684][ T5320] R10: 00007f77c5e27cb0 R11: 0000000000000246 R12: 000000000001517c [ 86.708149][ T5320] R13: 00007f77c5e2618c R14: 0000000000014fdb R15: 00007f77c5e26180 [ 86.711708][ T5320] [ 86.713222][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.716623][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.720574][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.725255][ T5320] Call Trace: [ 86.727129][ T5320] [ 86.728604][ T5320] vpanic+0x56d/0xa60 [ 86.730447][ T5320] ? __pfx__printk+0x10/0x10 [ 86.732562][ T5320] ? __pfx_vpanic+0x10/0x10 [ 86.734504][ T5320] ? is_bpf_text_address+0x292/0x2b0 [ 86.736800][ T5320] ? is_bpf_text_address+0x26/0x2b0 [ 86.739150][ T5320] panic+0xc5/0xd0 [ 86.740821][ T5320] ? __pfx_panic+0x10/0x10 [ 86.742767][ T5320] __warn+0x315/0x4c0 [ 86.744507][ T5320] ? __mutex_lock+0x12e2/0x1550 [ 86.746714][ T5320] ? __mutex_lock+0x12e2/0x1550 [ 86.748838][ T5320] __report_bug+0x276/0x570 [ 86.750699][ T5320] ? __mutex_lock+0x12e2/0x1550 [ 86.752718][ T5320] ? __pfx___report_bug+0x10/0x10 [ 86.754794][ T5320] ? drm_client_buffer_delete+0x113/0x2d0 [ 86.757079][ T5320] report_bug_entry+0x19b/0x290 [ 86.759042][ T5320] ? __mutex_lock+0x12e9/0x1550 [ 86.760969][ T5320] ? __mutex_lock+0x12ee/0x1550 [ 86.762818][ T5320] handle_bug+0xce/0x200 [ 86.764693][ T5320] exc_invalid_op+0x1a/0x50 [ 86.766780][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 86.768959][ T5320] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 86.771473][ T5320] Code: 73 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 32 92 04 00 75 13 48 8d 3d ae 2e 95 04 48 c7 c6 60 10 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 86.780162][ T5320] RSP: 0018:ffffc9000efcfae0 EFLAGS: 00010246 [ 86.783073][ T5320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880331e8000 [ 86.786671][ T5320] RDX: 0000000000000000 RSI: ffffffff8c0d1060 RDI: ffffffff907d6f90 [ 86.790102][ T5320] RBP: ffffc9000efcfc80 R08: ffffffff907a7383 R09: 1ffffffff20f4e70 [ 86.793524][ T5320] R10: dffffc0000000000 R11: fffffbfff20f4e71 R12: ffff888034ed51c0 [ 86.797473][ T5320] R13: 0000000000000000 R14: 1ffff92001df9f70 R15: 0000000000000000 [ 86.800952][ T5320] ? kfree+0x1c5/0x650 [ 86.802628][ T5320] ? drm_mode_rmfb+0x561/0x7a0 [ 86.804657][ T5320] ? drm_gem_fb_destroy+0x1c9/0x200 [ 86.806914][ T5320] ? virtio_gpu_free_object+0x90/0x1d0 [ 86.809390][ T5320] ? drm_mode_rmfb+0x561/0x7a0 [ 86.811467][ T5320] ? __pfx___mutex_lock+0x10/0x10 [ 86.813660][ T5320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.816087][ T5320] virtio_gpu_free_object+0x90/0x1d0 [ 86.818376][ T5320] drm_client_buffer_delete+0x183/0x2d0 [ 86.820735][ T5320] drm_fbdev_shmem_fb_destroy+0xb5/0xe0 [ 86.823082][ T5320] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 86.825763][ T5320] fb_release+0x11d/0x140 [ 86.827622][ T5320] ? __pfx_fb_release+0x10/0x10 [ 86.829663][ T5320] __fput+0x418/0xa50 [ 86.831374][ T5320] task_work_run+0x1d9/0x270 [ 86.833449][ T5320] ? __pfx_task_work_run+0x10/0x10 [ 86.835745][ T5320] exit_to_user_mode_loop+0x204/0x770 [ 86.838027][ T5320] ? rcu_is_watching+0x16/0xb0 [ 86.840113][ T5320] do_syscall_64+0x328/0x520 [ 86.842020][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.844626][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 86.846819][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.849425][ T5320] RIP: 0033:0x7f77c5b9e159 [ 86.851383][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.859549][ T5320] RSP: 002b:00007ffff4af9088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.863212][ T5320] RAX: 0000000000000000 RBX: 00007f77c5e27da0 RCX: 00007f77c5b9e159 [ 86.866606][ T5320] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 86.869934][ T5320] RBP: 00007f77c5e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 86.873400][ T5320] R10: 00007f77c5e27cb0 R11: 0000000000000246 R12: 000000000001517c [ 86.876862][ T5320] R13: 00007f77c5e2618c R14: 0000000000014fdb R15: 00007f77c5e26180 [ 86.879999][ T5320] [ 86.881716][ T5320] Kernel Offset: disabled [ 86.883505][ T5320] Rebooting in 86400 seconds..