program: newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) mq_open(&(0x7f0000001e00)=',\x00', 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @pix_mp={0x5, 0x4, 0x30324c4a, 0x3, 0x4, [{0x8, 0x6}, {0x5, 0x4323}, {0x8, 0x10000}, {0x8001, 0x3}, {0xfffffc00}, {0x4, 0x5}, {0x7fffffff, 0x9}, {0x10000000, 0x83d4}], 0x7, 0x81, 0x2, 0x0, 0x6}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000500)="f0000000", 0x4, 0x10) pwrite64(r4, &(0x7f0000000600)="0200", 0x2, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000140)=0x2) read(r7, &(0x7f0000000c00)=""/1000, 0x3e8) mq_unlink(&(0x7f0000001f40)=',\x00') [ 92.967434][ T5276] Bluetooth: hci0: command tx timeout [ 92.981332][ T803] cfg80211: failed to load regulatory.db [ 93.279867][ T5317] Console: switching to colour dummy device 80x25 [ 93.509129][ T5317] ============================================================================= [ 93.509628][ T5317] [ 93.509636][ T5317] ====================================================== [ 93.509640][ T5317] WARNING: possible circular locking dependency detected [ 93.509645][ T5317] syzkaller #0 Not tainted [ 93.509651][ T5317] ------------------------------------------------------ [ 93.509655][ T5317] syz.0.0/5317 is trying to acquire lock: [ 93.509660][ T5317] ffffffff8eb4bf40 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 93.509738][ T5317] [ 93.509738][ T5317] but task is already holding lock: [ 93.509742][ T5317] ffff88801af8ed98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 93.509768][ T5317] [ 93.509768][ T5317] which lock already depends on the new lock. [ 93.509768][ T5317] [ 93.509771][ T5317] [ 93.509771][ T5317] the existing dependency chain (in reverse order) is: [ 93.509775][ T5317] [ 93.509775][ T5317] -> #4 (&n->list_lock){-.-.}-{3:3}: [ 93.509789][ T5317] _raw_spin_lock_irqsave+0x40/0x60 [ 93.509834][ T5317] get_from_partial_node+0x54/0x4c0 [ 93.509846][ T5317] ___slab_alloc+0xbe/0x950 [ 93.509853][ T5317] kmem_cache_alloc_noprof+0x135/0x5f0 [ 93.509864][ T5317] fill_pool+0x165/0x610 [ 93.509906][ T5317] debug_object_activate+0x38d/0x420 [ 93.509917][ T5317] insert_work+0x35/0x330 [ 93.509927][ T5317] __queue_work+0xcd8/0x10a0 [ 93.509938][ T5317] queue_work_on+0x106/0x1d0 [ 93.509949][ T5317] call_usermodehelper_exec+0x28e/0x4b0 [ 93.509958][ T5317] kobject_uevent_env+0x685/0x9e0 [ 93.509964][ T5317] device_add+0x544/0xb80 [ 93.509974][ T5317] device_create+0x269/0x300 [ 93.509982][ T5317] msr_device_create+0x33/0x50 [ 93.509995][ T5317] cpuhp_invoke_callback+0x434/0x810 [ 93.510002][ T5317] cpuhp_thread_fun+0x362/0x780 [ 93.510008][ T5317] smpboot_thread_fn+0x57c/0xa80 [ 93.510021][ T5317] kthread+0x388/0x470 [ 93.510032][ T5317] ret_from_fork+0x514/0xb70 [ 93.510043][ T5317] ret_from_fork_asm+0x1a/0x30 [ 93.510056][ T5317] [ 93.510056][ T5317] -> #3 (&pool->lock){-.-.}-{2:2}: [ 93.510069][ T5317] _raw_spin_lock+0x2e/0x40 [ 93.510078][ T5317] __queue_work+0x72f/0x10a0 [ 93.510088][ T5317] queue_work_on+0x106/0x1d0 [ 93.510098][ T5317] rpm_suspend+0xeca/0x17b0 [ 93.510110][ T5317] __pm_runtime_idle+0x12f/0x1a0 [ 93.510121][ T5317] __device_attach+0x355/0x450 [ 93.510134][ T5317] device_initial_probe+0xa1/0xd0 [ 93.510142][ T5317] bus_probe_device+0x12a/0x220 [ 93.510153][ T5317] device_add+0x7d7/0xb80 [ 93.510165][ T5317] serial_base_port_add+0x18f/0x270 [ 93.510175][ T5317] serial_core_register_port+0x37f/0x2840 [ 93.510186][ T5317] serial8250_register_8250_port+0x16b4/0x2090 [ 93.510197][ T5317] serial_pnp_probe+0x56a/0x7f0 [ 93.510210][ T5317] pnp_device_probe+0x30b/0x4c0 [ 93.510220][ T5317] really_probe+0x254/0xae0 [ 93.510228][ T5317] __driver_probe_device+0x1e8/0x360 [ 93.510237][ T5317] driver_probe_device+0x4f/0x240 [ 93.510245][ T5317] __driver_attach+0x339/0x600 [ 93.510255][ T5317] bus_for_each_dev+0x23b/0x2c0 [ 93.510265][ T5317] bus_add_driver+0x345/0x670 [ 93.510276][ T5317] driver_register+0x23a/0x320 [ 93.510285][ T5317] serial8250_init+0x8f/0x160 [ 93.510372][ T5317] do_one_initcall+0x250/0x870 [ 93.510384][ T5317] do_initcall_level+0x10a/0x1a0 [ 93.510397][ T5317] do_initcalls+0x59/0xa0 [ 93.510409][ T5317] kernel_init_freeable+0x29d/0x3e0 [ 93.510422][ T5317] kernel_init+0x1d/0x1d0 [ 93.510436][ T5317] ret_from_fork+0x514/0xb70 [ 93.510448][ T5317] ret_from_fork_asm+0x1a/0x30 [ 93.510460][ T5317] [ 93.510460][ T5317] -> #2 (&dev->power.lock){-...}-{3:3}: [ 93.510470][ T5317] _raw_spin_lock_irqsave+0x40/0x60 [ 93.510476][ T5317] __pm_runtime_resume+0x10f/0x180 [ 93.510485][ T5317] __uart_start+0x171/0x460 [ 93.510494][ T5317] uart_write+0x251/0x9f0 [ 93.510502][ T5317] n_tty_write+0xd49/0x11e0 [ 93.510508][ T5317] file_tty_write+0x509/0x9c0 [ 93.510516][ T5317] vfs_write+0x612/0xba0 [ 93.510524][ T5317] ksys_write+0x150/0x270 [ 93.510532][ T5317] do_syscall_64+0x174/0x580 [ 93.510544][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.510552][ T5317] [ 93.510552][ T5317] -> #1 (&port_lock_key){-...}-{3:3}: [ 93.510564][ T5317] _raw_spin_lock_irqsave+0x40/0x60 [ 93.510576][ T5317] serial8250_console_write+0x153/0x1ba0 [ 93.510591][ T5317] console_flush_all+0x6ea/0xaf0 [ 93.510602][ T5317] console_unlock+0xd1/0x1c0 [ 93.510616][ T5317] vprintk_emit+0x485/0x560 [ 93.510628][ T5317] _printk+0xdd/0x130 [ 93.510634][ T5317] register_console+0xbc3/0xfc0 [ 93.510640][ T5317] univ8250_console_init+0x3a/0x70 [ 93.510648][ T5317] console_init+0x10b/0x4a0 [ 93.510655][ T5317] start_kernel+0x238/0x3e0 [ 93.510662][ T5317] x86_64_start_reservations+0x24/0x30 [ 93.510668][ T5317] x86_64_start_kernel+0x137/0x1b0 [ 93.510674][ T5317] common_startup_64+0x13e/0x157 [ 93.510683][ T5317] [ 93.510683][ T5317] -> #0 (console_owner){....}-{0:0}: [ 93.510695][ T5317] __lock_acquire+0x1520/0x2cf0 [ 93.510707][ T5317] lock_acquire+0x106/0x350 [ 93.510717][ T5317] console_flush_all+0x693/0xaf0 [ 93.510726][ T5317] console_unlock+0xd1/0x1c0 [ 93.510739][ T5317] vprintk_emit+0x485/0x560 [ 93.510752][ T5317] _printk+0xdd/0x130 [ 93.510760][ T5317] __slab_bug+0x6e/0xd0 [ 93.510769][ T5317] slab_bug+0x57/0x80 [ 93.510779][ T5317] list_slab_objects+0x35/0x1a0 [ 93.510789][ T5317] __kmem_cache_shutdown+0x1a5/0x2a0 [ 93.510800][ T5317] kmem_cache_destroy+0x98/0x180 [ 93.510813][ T5317] virtio_gpu_free_vbufs+0x40/0x70 [ 93.510824][ T5317] virtio_gpu_release+0x55/0x140 [ 93.510831][ T5317] drm_dev_put+0xa9/0x120 [ 93.510841][ T5317] virtio_dev_remove+0x9c/0x1b0 [ 93.510850][ T5317] device_release_driver_internal+0x48b/0x880 [ 93.510860][ T5317] bus_remove_device+0x444/0x560 [ 93.510872][ T5317] device_del+0x524/0x8f0 [ 93.510885][ T5317] device_unregister+0x21/0xf0 [ 93.510899][ T5317] unregister_virtio_device+0x37/0x60 [ 93.510908][ T5317] virtio_pci_remove+0x7f/0xf0 [ 93.510920][ T5317] pci_device_remove+0x99/0x1c0 [ 93.510929][ T5317] device_release_driver_internal+0x48b/0x880 [ 93.510938][ T5317] pci_stop_bus_device+0xf6/0x120 [ 93.510950][ T5317] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 93.510963][ T5317] remove_store+0xe5/0x150 [ 93.510977][ T5317] kernfs_fop_write_iter+0x3a4/0x540 [ 93.511000][ T5317] vfs_write+0x612/0xba0 [ 93.511011][ T5317] ksys_write+0x150/0x270 [ 93.511024][ T5317] do_syscall_64+0x174/0x580 [ 93.511036][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.511045][ T5317] [ 93.511045][ T5317] other info that might help us debug this: [ 93.511045][ T5317] [ 93.511048][ T5317] Chain exists of: [ 93.511048][ T5317] console_owner --> &pool->lock --> &n->list_lock [ 93.511048][ T5317] [ 93.511063][ T5317] Possible unsafe locking scenario: [ 93.511063][ T5317] [ 93.511066][ T5317] CPU0 CPU1 [ 93.511070][ T5317] ---- ---- [ 93.511073][ T5317] lock(&n->list_lock); [ 93.511081][ T5317] lock(&pool->lock); [ 93.511089][ T5317] lock(&n->list_lock); [ 93.511097][ T5317] lock(console_owner); [ 93.511103][ T5317] [ 93.511103][ T5317] *** DEADLOCK *** [ 93.511103][ T5317] [ 93.511106][ T5317] 11 locks held by syz.0.0/5317: [ 93.511112][ T5317] #0: ffff88803fa7bd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 93.511137][ T5317] #1: ffff88801245a450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 93.511168][ T5317] #2: ffff8880122ef480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 93.511197][ T5317] #3: ffffffff8f39ac60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x13/0xb0 [ 93.511225][ T5317] #4: ffff88801f8681f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 93.511249][ T5317] #5: ffff8880331801b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 93.511271][ T5317] #6: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x60/0x180 [ 93.511299][ T5317] #7: ffffffff8ec69f88 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x6e/0x180 [ 93.511326][ T5317] #8: ffff88801af8ed98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x111/0x2a0 [ 93.511352][ T5317] #9: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 93.511375][ T5317] #10: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 93.511394][ T5317] [ 93.511394][ T5317] stack backtrace: [ 93.511400][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.511410][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.511416][ T5317] Call Trace: [ 93.511420][ T5317] [ 93.511455][ T5317] dump_stack_lvl+0xe8/0x150 [ 93.511472][ T5317] print_circular_bug+0x2e1/0x300 [ 93.511489][ T5317] check_noncircular+0x12e/0x150 [ 93.511506][ T5317] __lock_acquire+0x1520/0x2cf0 [ 93.511522][ T5317] ? console_flush_all+0x123/0xaf0 [ 93.511531][ T5317] lock_acquire+0x106/0x350 [ 93.511541][ T5317] ? console_flush_all+0x123/0xaf0 [ 93.511552][ T5317] ? do_raw_spin_unlock+0x4d/0x210 [ 93.511561][ T5317] ? console_flush_all+0x123/0xaf0 [ 93.511570][ T5317] console_flush_all+0x693/0xaf0 [ 93.511579][ T5317] ? console_flush_all+0x123/0xaf0 [ 93.511590][ T5317] ? console_flush_all+0x123/0xaf0 [ 93.511600][ T5317] ? __pfx_console_flush_all+0x10/0x10 [ 93.511611][ T5317] ? is_printk_cpu_sync_owner+0x32/0x40 [ 93.511624][ T5317] console_unlock+0xd1/0x1c0 [ 93.511637][ T5317] ? __pfx_console_unlock+0x10/0x10 [ 93.511647][ T5317] ? _raw_spin_unlock+0x40/0x50 [ 93.511654][ T5317] ? _printk+0xdd/0x130 [ 93.511662][ T5317] vprintk_emit+0x485/0x560 [ 93.511678][ T5317] ? __pfx_vprintk_emit+0x10/0x10 [ 93.511695][ T5317] _printk+0xdd/0x130 [ 93.511705][ T5317] ? __lock_acquire+0x683/0x2cf0 [ 93.511719][ T5317] ? __pfx__printk+0x10/0x10 [ 93.511729][ T5317] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.511740][ T5317] __slab_bug+0x6e/0xd0 [ 93.511753][ T5317] slab_bug+0x57/0x80 [ 93.511764][ T5317] list_slab_objects+0x35/0x1a0 [ 93.511775][ T5317] __kmem_cache_shutdown+0x1a5/0x2a0 [ 93.511787][ T5317] ? virtio_gpu_free_vbufs+0x40/0x70 [ 93.511799][ T5317] kmem_cache_destroy+0x98/0x180 [ 93.511815][ T5317] virtio_gpu_free_vbufs+0x40/0x70 [ 93.511826][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.511834][ T5317] virtio_gpu_release+0x55/0x140 [ 93.511843][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 93.511851][ T5317] drm_dev_put+0xa9/0x120 [ 93.511906][ T5317] virtio_dev_remove+0x9c/0x1b0 [ 93.511917][ T5317] ? __pfx_virtio_dev_remove+0x10/0x10 [ 93.511928][ T5317] device_release_driver_internal+0x48b/0x880 [ 93.511939][ T5317] bus_remove_device+0x444/0x560 [ 93.511954][ T5317] ? __pfx_bus_remove_device+0x10/0x10 [ 93.511967][ T5317] ? kernfs_remove_by_name_ns+0x101/0x140 [ 93.511982][ T5317] device_del+0x524/0x8f0 [ 93.512006][ T5317] ? __pfx_device_del+0x10/0x10 [ 93.512022][ T5317] device_unregister+0x21/0xf0 [ 93.512038][ T5317] unregister_virtio_device+0x37/0x60 [ 93.512048][ T5317] virtio_pci_remove+0x7f/0xf0 [ 93.512058][ T5317] pci_device_remove+0x99/0x1c0 [ 93.512069][ T5317] ? __pfx_pci_device_remove+0x10/0x10 [ 93.512079][ T5317] device_release_driver_internal+0x48b/0x880 [ 93.512091][ T5317] pci_stop_bus_device+0xf6/0x120 [ 93.512105][ T5317] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 93.512120][ T5317] remove_store+0xe5/0x150 [ 93.512135][ T5317] ? __pfx_remove_store+0x10/0x10 [ 93.512147][ T5317] ? sysfs_file_kobj+0x1e4/0x230 [ 93.512157][ T5317] ? sysfs_kf_write+0x166/0x260 [ 93.512168][ T5317] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.512177][ T5317] kernfs_fop_write_iter+0x3a4/0x540 [ 93.512193][ T5317] vfs_write+0x612/0xba0 [ 93.512207][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 93.512221][ T5317] ? __fget_files+0x2a/0x420 [ 93.512233][ T5317] ksys_write+0x150/0x270 [ 93.512246][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 93.512259][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.512268][ T5317] do_syscall_64+0x174/0x580 [ 93.512281][ T5317] ? trace_irq_disable+0x3b/0x140 [ 93.512294][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 93.512306][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.512317][ T5317] RIP: 0033:0x7f8b4a19e0d9 [ 93.512328][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.512336][ T5317] RSP: 002b:00007f8b465d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.512346][ T5317] RAX: ffffffffffffffda RBX: 00007f8b4a426090 RCX: 00007f8b4a19e0d9 [ 93.512353][ T5317] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007 [ 93.512360][ T5317] RBP: 00007f8b4a235024 R08: 0000000000000000 R09: 0000000000000000 [ 93.512366][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.512372][ T5317] R13: 00007f8b4a426128 R14: 00007f8b4a426090 R15: 00007ffd546cfed8 [ 93.512382][ T5317] [ 94.047168][ T5317] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 94.051213][ T5317] ----------------------------------------------------------------------------- [ 94.051213][ T5317] [ 94.056204][ T5317] Object 0xffff88801d3118c0 @offset=2240 [ 94.059043][ T5317] Slab 0xffffea000074c440 objects=14 used=1 fp=0xffff88801d3119d8 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 94.064697][ T5317] ------------[ cut here ]------------ [ 94.066976][ T5317] 1 [ 94.066985][ T5317] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#0: syz.0.0/5317 [ 94.071540][ T5317] Modules linked in: [ 94.073182][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 94.077285][ T5317] Tainted: [B]=BAD_PAGE [ 94.079015][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.083210][ T5317] RIP: 0010:__slab_err+0x15/0x20 [ 94.085375][ T5317] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.092944][ T5317] RSP: 0018:ffffc9000f71f6d8 EFLAGS: 00010083 [ 94.095850][ T5317] RAX: ffffffff8186dc3a RBX: ffff888034c76dc0 RCX: 0000000000100000 [ 94.099947][ T5317] RDX: ffffc90020001000 RSI: 0000000000067df0 RDI: 0000000000067df1 [ 94.103449][ T5317] RBP: ffffea00004aca90 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 94.107102][ T5317] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00004a4050 [ 94.110536][ T5317] R13: ffffea000074c440 R14: ffffc9000f71f6f0 R15: ffff88801af8ed80 [ 94.113776][ T5317] FS: 00007f8b465d46c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 94.117362][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.120194][ T5317] CR2: 00007f08561909c0 CR3: 000000001204c000 CR4: 0000000000352ef0 [ 94.123345][ T5317] Call Trace: [ 94.124751][ T5317] [ 94.125964][ T5317] __kmem_cache_shutdown+0x1a5/0x2a0 [ 94.128161][ T5317] ? virtio_gpu_free_vbufs+0x40/0x70 [ 94.130290][ T5317] kmem_cache_destroy+0x98/0x180 [ 94.132343][ T5317] virtio_gpu_free_vbufs+0x40/0x70 [ 94.134474][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 94.136781][ T5317] virtio_gpu_release+0x55/0x140 [ 94.138817][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 94.140965][ T5317] drm_dev_put+0xa9/0x120 [ 94.142755][ T5317] virtio_dev_remove+0x9c/0x1b0 [ 94.144829][ T5317] ? __pfx_virtio_dev_remove+0x10/0x10 [ 94.147105][ T5317] device_release_driver_internal+0x48b/0x880 [ 94.149553][ T5317] bus_remove_device+0x444/0x560 [ 94.151558][ T5317] ? __pfx_bus_remove_device+0x10/0x10 [ 94.153824][ T5317] ? kernfs_remove_by_name_ns+0x101/0x140 [ 94.156179][ T5317] device_del+0x524/0x8f0 [ 94.158085][ T5317] ? __pfx_device_del+0x10/0x10 [ 94.160132][ T5317] device_unregister+0x21/0xf0 [ 94.162200][ T5317] unregister_virtio_device+0x37/0x60 [ 94.164401][ T5317] virtio_pci_remove+0x7f/0xf0 [ 94.166476][ T5317] pci_device_remove+0x99/0x1c0 [ 94.169075][ T5317] ? __pfx_pci_device_remove+0x10/0x10 [ 94.171444][ T5317] device_release_driver_internal+0x48b/0x880 [ 94.173912][ T5317] pci_stop_bus_device+0xf6/0x120 [ 94.175960][ T5317] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 94.178547][ T5317] remove_store+0xe5/0x150 [ 94.180359][ T5317] ? __pfx_remove_store+0x10/0x10 [ 94.182254][ T5317] ? sysfs_file_kobj+0x1e4/0x230 [ 94.183969][ T5317] ? sysfs_kf_write+0x166/0x260 [ 94.185766][ T5317] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.187949][ T5317] kernfs_fop_write_iter+0x3a4/0x540 [ 94.190175][ T5317] vfs_write+0x612/0xba0 [ 94.191906][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 94.193850][ T5317] ? __fget_files+0x2a/0x420 [ 94.195751][ T5317] ksys_write+0x150/0x270 [ 94.197478][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 94.199529][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.202108][ T5317] do_syscall_64+0x174/0x580 [ 94.204132][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.206260][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.208264][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.210860][ T5317] RIP: 0033:0x7f8b4a19e0d9 [ 94.213955][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.222038][ T5317] RSP: 002b:00007f8b465d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.225367][ T5317] RAX: ffffffffffffffda RBX: 00007f8b4a426090 RCX: 00007f8b4a19e0d9 [ 94.228072][ T5317] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007 [ 94.230824][ T5317] RBP: 00007f8b4a235024 R08: 0000000000000000 R09: 0000000000000000 [ 94.234251][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.237579][ T5317] R13: 00007f8b4a426128 R14: 00007f8b4a426090 R15: 00007ffd546cfed8 [ 94.240808][ T5317] [ 94.242060][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.245271][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Tainted: G B syzkaller #0 PREEMPT(full) [ 94.249436][ T5317] Tainted: [B]=BAD_PAGE [ 94.251250][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.255471][ T5317] Call Trace: [ 94.256926][ T5317] [ 94.258190][ T5317] vpanic+0x56c/0xa60 [ 94.259744][ T5317] ? __pfx__printk+0x10/0x10 [ 94.261588][ T5317] ? __pfx_vpanic+0x10/0x10 [ 94.263389][ T5317] ? is_bpf_text_address+0x292/0x2b0 [ 94.265448][ T5317] ? is_bpf_text_address+0x26/0x2b0 [ 94.267548][ T5317] panic+0xc5/0xd0 [ 94.269191][ T5317] ? __pfx_panic+0x10/0x10 [ 94.271076][ T5317] __warn+0x315/0x4c0 [ 94.272786][ T5317] ? __slab_err+0x15/0x20 [ 94.274656][ T5317] ? __slab_err+0x15/0x20 [ 94.276546][ T5317] __report_bug+0x276/0x570 [ 94.278511][ T5317] ? do_raw_spin_unlock+0x4d/0x210 [ 94.280588][ T5317] ? __slab_err+0x15/0x20 [ 94.282312][ T5317] ? __pfx___report_bug+0x10/0x10 [ 94.284266][ T5317] ? __wake_up_klogd+0xe6/0x120 [ 94.286240][ T5317] ? vprintk_emit+0x4eb/0x560 [ 94.288266][ T5317] ? __pfx_vprintk_emit+0x10/0x10 [ 94.290379][ T5317] ? _printk+0xdd/0x130 [ 94.292095][ T5317] ? __slab_err+0x15/0x20 [ 94.293888][ T5317] report_bug+0x16a/0x220 [ 94.295755][ T5317] ? __slab_err+0x15/0x20 [ 94.297622][ T5317] ? __slab_err+0x17/0x20 [ 94.299545][ T5317] handle_bug+0x9c/0x200 [ 94.301322][ T5317] exc_invalid_op+0x1a/0x50 [ 94.303000][ T5317] asm_exc_invalid_op+0x1a/0x20 [ 94.305022][ T5317] RIP: 0010:__slab_err+0x15/0x20 [ 94.306989][ T5317] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 2b 00 00 00 bf 05 00 00 00 be 01 00 00 00 e8 fc a7 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.314122][ T5317] RSP: 0018:ffffc9000f71f6d8 EFLAGS: 00010083 [ 94.316520][ T5317] RAX: ffffffff8186dc3a RBX: ffff888034c76dc0 RCX: 0000000000100000 [ 94.319817][ T5317] RDX: ffffc90020001000 RSI: 0000000000067df0 RDI: 0000000000067df1 [ 94.323185][ T5317] RBP: ffffea00004aca90 R08: ffffffff9373f0c7 R09: 1ffffffff26e7e18 [ 94.326520][ T5317] R10: dffffc0000000000 R11: fffffbfff26e7e19 R12: ffffea00004a4050 [ 94.329845][ T5317] R13: ffffea000074c440 R14: ffffc9000f71f6f0 R15: ffff88801af8ed80 [ 94.333158][ T5317] ? add_taint+0x9a/0xe0 [ 94.335012][ T5317] ? __slab_err+0x14/0x20 [ 94.336710][ T5317] __kmem_cache_shutdown+0x1a5/0x2a0 [ 94.338885][ T5317] ? virtio_gpu_free_vbufs+0x40/0x70 [ 94.340975][ T5317] kmem_cache_destroy+0x98/0x180 [ 94.343121][ T5317] virtio_gpu_free_vbufs+0x40/0x70 [ 94.346489][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 94.348760][ T5317] virtio_gpu_release+0x55/0x140 [ 94.350818][ T5317] ? __pfx_virtio_gpu_release+0x10/0x10 [ 94.353171][ T5317] drm_dev_put+0xa9/0x120 [ 94.355098][ T5317] virtio_dev_remove+0x9c/0x1b0 [ 94.357229][ T5317] ? __pfx_virtio_dev_remove+0x10/0x10 [ 94.359558][ T5317] device_release_driver_internal+0x48b/0x880 [ 94.362178][ T5317] bus_remove_device+0x444/0x560 [ 94.364358][ T5317] ? __pfx_bus_remove_device+0x10/0x10 [ 94.366728][ T5317] ? kernfs_remove_by_name_ns+0x101/0x140 [ 94.369259][ T5317] device_del+0x524/0x8f0 [ 94.371109][ T5317] ? __pfx_device_del+0x10/0x10 [ 94.373174][ T5317] device_unregister+0x21/0xf0 [ 94.375213][ T5317] unregister_virtio_device+0x37/0x60 [ 94.377464][ T5317] virtio_pci_remove+0x7f/0xf0 [ 94.379453][ T5317] pci_device_remove+0x99/0x1c0 [ 94.381594][ T5317] ? __pfx_pci_device_remove+0x10/0x10 [ 94.383919][ T5317] device_release_driver_internal+0x48b/0x880 [ 94.386444][ T5317] pci_stop_bus_device+0xf6/0x120 [ 94.388632][ T5317] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 94.391390][ T5317] remove_store+0xe5/0x150 [ 94.393270][ T5317] ? __pfx_remove_store+0x10/0x10 [ 94.395388][ T5317] ? sysfs_file_kobj+0x1e4/0x230 [ 94.397525][ T5317] ? sysfs_kf_write+0x166/0x260 [ 94.399768][ T5317] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.402007][ T5317] kernfs_fop_write_iter+0x3a4/0x540 [ 94.404181][ T5317] vfs_write+0x612/0xba0 [ 94.405983][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 94.408019][ T5317] ? __fget_files+0x2a/0x420 [ 94.410020][ T5317] ksys_write+0x150/0x270 [ 94.411853][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 94.413891][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.416350][ T5317] do_syscall_64+0x174/0x580 [ 94.418298][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.422015][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.424971][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.427806][ T5317] RIP: 0033:0x7f8b4a19e0d9 [ 94.430385][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.439630][ T5317] RSP: 002b:00007f8b465d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.443999][ T5317] RAX: ffffffffffffffda RBX: 00007f8b4a426090 RCX: 00007f8b4a19e0d9 [ 94.447384][ T5317] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000007 [ 94.451297][ T5317] RBP: 00007f8b4a235024 R08: 0000000000000000 R09: 0000000000000000 [ 94.454632][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.458026][ T5317] R13: 00007f8b4a426128 R14: 00007f8b4a426090 R15: 00007ffd546cfed8 [ 94.461422][ T5317] [ 94.463134][ T5317] Kernel Offset: disabled [ 94.465001][ T5317] Rebooting in 86400 seconds..