program:
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x40)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000280)={0x2, "2de6942e30987adc62e035a0fa25c7c4ae6e96fd95cda8be9f0f4ff2cf60443f1aeb0c7da44ed3305aa39ca9141b97110bcf22f913dad7746a486193cc7bb973", {0xc83, 0x6}})
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000340)={[{@type={'type', 0x3d, "3cca73d9"}}, {@part={'part', 0x3d, 0x80}}, {}, {@umask={'umask', 0x3d, 0xd}}, {@part={'part', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@umask={'umask', 0x3d, 0x540c}}]}, 0x1, 0x2b5, &(0x7f0000000740)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)="3100d9", 0x3)
[ 102.552452][ T5307] Bluetooth: hci0: command tx timeout
[ 102.705663][ T5351] loop0: detected capacity change from 0 to 64
[ 102.723842][ T5351] hfs: get root inode failed
[ 102.845570][ T5351] Console: switching to colour dummy device 80x25
[ 103.019528][ T5351] ------------[ cut here ]------------
[ 103.019544][ T5351] Memory manager not clean during takedown.
[ 103.019614][ T5351] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5351
[ 103.029455][ T5351] Modules linked in:
[ 103.030869][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.034212][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.038025][ T5351] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 103.040209][ T5351] Code: 4c 89 f7 e8 2e 28 97 fc 49 8b 06 4c 39 f0 75 0e e8 51 d8 1d fc 5b 41 5e c3 cc cc cc cc cc e8 43 d8 1d fc 48 8d 3d fc d3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 103.048354][ T5351] RSP: 0018:ffffc9000f89f6f0 EFLAGS: 00010283
[ 103.050765][ T5351] RAX: ffffffff85ab477d RBX: ffff88803618f868 RCX: 0000000000100000
[ 103.053953][ T5351] RDX: ffffc9000ef72000 RSI: 000000000001523c RDI: ffffffff91ca1b80
[ 103.057177][ T5351] RBP: ffffffff85a9fbf0 R08: ffff888030bb6400 R09: ffffffff8ca212c0
[ 103.060465][ T5351] R10: dffffc0000000000 R11: ffffffff85a9fbf0 R12: ffff888030bb6400
[ 103.064019][ T5351] R13: dffffc0000000000 R14: ffff88803618f8a0 R15: dffffc0000000000
[ 103.067480][ T5351] FS: 00007f7cce5a76c0(0000) GS:ffff88808a9fa000(0000) knlGS:0000000000000000
[ 103.071181][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.074271][ T5351] CR2: 00007f7ccd9fb6b8 CR3: 0000000013851000 CR4: 0000000000352ef0
[ 103.077659][ T5351] Call Trace:
[ 103.079155][ T5351]
[ 103.080554][ T5351] drm_managed_release+0x208/0x380
[ 103.083251][ T5351] ? __pfx_virtio_gpu_release+0x10/0x10
[ 103.085550][ T5351] drm_dev_put+0xe0/0x120
[ 103.087412][ T5351] virtio_dev_remove+0x9c/0x1b0
[ 103.089501][ T5351] ? __pfx_virtio_dev_remove+0x10/0x10
[ 103.091873][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 103.094675][ T5351] bus_remove_device+0x444/0x560
[ 103.096824][ T5351] ? __pfx_bus_remove_device+0x10/0x10
[ 103.099102][ T5351] ? kernfs_remove_by_name_ns+0x101/0x140
[ 103.101463][ T5351] device_del+0x524/0x8f0
[ 103.103412][ T5351] ? __pfx_device_del+0x10/0x10
[ 103.105529][ T5351] device_unregister+0x21/0xf0
[ 103.107614][ T5351] unregister_virtio_device+0x37/0x60
[ 103.109833][ T5351] virtio_pci_remove+0x7f/0xf0
[ 103.111825][ T5351] pci_device_remove+0x99/0x1c0
[ 103.114085][ T5351] ? __pfx_pci_device_remove+0x10/0x10
[ 103.116317][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 103.118813][ T5351] pci_stop_bus_device+0xf6/0x120
[ 103.120922][ T5351] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 103.123723][ T5351] remove_store+0xe5/0x150
[ 103.125587][ T5351] ? __pfx_remove_store+0x10/0x10
[ 103.127690][ T5351] ? sysfs_file_kobj+0x1e4/0x230
[ 103.129760][ T5351] ? sysfs_kf_write+0x166/0x260
[ 103.131947][ T5351] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.134393][ T5351] kernfs_fop_write_iter+0x3a4/0x540
[ 103.136596][ T5351] vfs_write+0x612/0xba0
[ 103.138272][ T5351] ? __pfx_vfs_write+0x10/0x10
[ 103.140165][ T5351] ? __fget_files+0x3a2/0x420
[ 103.142160][ T5351] ? __fget_files+0x2a/0x420
[ 103.144143][ T5351] ? fdget+0x1ac/0x250
[ 103.145965][ T5351] ksys_write+0x150/0x270
[ 103.147782][ T5351] ? __pfx_ksys_write+0x10/0x10
[ 103.149884][ T5351] do_syscall_64+0x166/0x520
[ 103.152608][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.155209][ T5351] ? clear_bhb_loop+0x70/0xc0
[ 103.157060][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.159393][ T5351] RIP: 0033:0x7f7ccd79fb19
[ 103.161157][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.169258][ T5351] RSP: 002b:00007f7cce5a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.177144][ T5351] RAX: ffffffffffffffda RBX: 00007f7ccda25fa0 RCX: 00007f7ccd79fb19
[ 103.180596][ T5351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 103.184532][ T5351] RBP: 00007f7ccd837b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.187885][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.190877][ T5351] R13: 00007f7ccda26038 R14: 00007f7ccda25fa0 R15: 00007ffcf65a3f08
[ 103.194129][ T5351]
[ 103.195427][ T5351] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.198372][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.202151][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.206397][ T5351] Call Trace:
[ 103.207854][ T5351]
[ 103.209090][ T5351] vpanic+0x26f/0x710
[ 103.210833][ T5351] panic+0xc5/0xd0
[ 103.212562][ T5351] ? __pfx_panic+0x10/0x10
[ 103.214609][ T5351] __warn+0x315/0x4c0
[ 103.216461][ T5351] ? drm_mm_takedown+0x54/0x70
[ 103.218601][ T5351] ? drm_mm_takedown+0x54/0x70
[ 103.220815][ T5351] __report_bug+0x276/0x570
[ 103.222902][ T5351] ? bus_remove_device+0x444/0x560
[ 103.225034][ T5351] ? device_del+0x524/0x8f0
[ 103.226852][ T5351] ? device_unregister+0x21/0xf0
[ 103.228679][ T5351] ? drm_mm_takedown+0x54/0x70
[ 103.230544][ T5351] ? __pfx___report_bug+0x10/0x10
[ 103.232751][ T5351] report_bug_entry+0x19b/0x290
[ 103.234999][ T5351] ? drm_mm_takedown+0x54/0x70
[ 103.236912][ T5351] ? drm_mm_takedown+0x59/0x70
[ 103.238923][ T5351] handle_bug+0xce/0x200
[ 103.240670][ T5351] exc_invalid_op+0x1a/0x50
[ 103.242686][ T5351] asm_exc_invalid_op+0x1a/0x20
[ 103.244845][ T5351] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 103.247229][ T5351] Code: 4c 89 f7 e8 2e 28 97 fc 49 8b 06 4c 39 f0 75 0e e8 51 d8 1d fc 5b 41 5e c3 cc cc cc cc cc e8 43 d8 1d fc 48 8d 3d fc d3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 103.255609][ T5351] RSP: 0018:ffffc9000f89f6f0 EFLAGS: 00010283
[ 103.258208][ T5351] RAX: ffffffff85ab477d RBX: ffff88803618f868 RCX: 0000000000100000
[ 103.261445][ T5351] RDX: ffffc9000ef72000 RSI: 000000000001523c RDI: ffffffff91ca1b80
[ 103.264796][ T5351] RBP: ffffffff85a9fbf0 R08: ffff888030bb6400 R09: ffffffff8ca212c0
[ 103.268250][ T5351] R10: dffffc0000000000 R11: ffffffff85a9fbf0 R12: ffff888030bb6400
[ 103.271610][ T5351] R13: dffffc0000000000 R14: ffff88803618f8a0 R15: dffffc0000000000
[ 103.275139][ T5351] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.277686][ T5351] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.280192][ T5351] ? drm_mm_takedown+0x4d/0x70
[ 103.282306][ T5351] drm_managed_release+0x208/0x380
[ 103.284644][ T5351] ? __pfx_virtio_gpu_release+0x10/0x10
[ 103.287088][ T5351] drm_dev_put+0xe0/0x120
[ 103.289061][ T5351] virtio_dev_remove+0x9c/0x1b0
[ 103.291270][ T5351] ? __pfx_virtio_dev_remove+0x10/0x10
[ 103.293762][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 103.296517][ T5351] bus_remove_device+0x444/0x560
[ 103.298703][ T5351] ? __pfx_bus_remove_device+0x10/0x10
[ 103.301118][ T5351] ? kernfs_remove_by_name_ns+0x101/0x140
[ 103.303488][ T5351] device_del+0x524/0x8f0
[ 103.305431][ T5351] ? __pfx_device_del+0x10/0x10
[ 103.307607][ T5351] device_unregister+0x21/0xf0
[ 103.309713][ T5351] unregister_virtio_device+0x37/0x60
[ 103.311917][ T5351] virtio_pci_remove+0x7f/0xf0
[ 103.313908][ T5351] pci_device_remove+0x99/0x1c0
[ 103.315875][ T5351] ? __pfx_pci_device_remove+0x10/0x10
[ 103.318148][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 103.320771][ T5351] pci_stop_bus_device+0xf6/0x120
[ 103.322934][ T5351] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 103.325468][ T5351] remove_store+0xe5/0x150
[ 103.327396][ T5351] ? __pfx_remove_store+0x10/0x10
[ 103.329521][ T5351] ? sysfs_file_kobj+0x1e4/0x230
[ 103.331701][ T5351] ? sysfs_kf_write+0x166/0x260
[ 103.333802][ T5351] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.336145][ T5351] kernfs_fop_write_iter+0x3a4/0x540
[ 103.338453][ T5351] vfs_write+0x612/0xba0
[ 103.340301][ T5351] ? __pfx_vfs_write+0x10/0x10
[ 103.342406][ T5351] ? __fget_files+0x3a2/0x420
[ 103.344474][ T5351] ? __fget_files+0x2a/0x420
[ 103.346594][ T5351] ? fdget+0x1ac/0x250
[ 103.348456][ T5351] ksys_write+0x150/0x270
[ 103.350421][ T5351] ? __pfx_ksys_write+0x10/0x10
[ 103.352669][ T5351] do_syscall_64+0x166/0x520
[ 103.354830][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.357595][ T5351] ? clear_bhb_loop+0x70/0xc0
[ 103.359649][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.362098][ T5351] RIP: 0033:0x7f7ccd79fb19
[ 103.363979][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.372471][ T5351] RSP: 002b:00007f7cce5a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.376255][ T5351] RAX: ffffffffffffffda RBX: 00007f7ccda25fa0 RCX: 00007f7ccd79fb19
[ 103.379857][ T5351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 103.383411][ T5351] RBP: 00007f7ccd837b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.386923][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.390308][ T5351] R13: 00007f7ccda26038 R14: 00007f7ccda25fa0 R15: 00007ffcf65a3f08
[ 103.393860][ T5351]
[ 103.395698][ T5351] Kernel Offset: disabled
[ 103.397648][ T5351] Rebooting in 86400 seconds..