program:
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000280)='./sys/bus/pci/rescan\x00', 0x400, 0x18)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0)
read(r1, &(0x7f0000000400)=""/256, 0x100)
write(r0, &(0x7f00000000c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x2000000, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r3, &(0x7f0000000200)='my omain / 64\n', 0xe)
write(r2, &(0x7f0000000700)="3100d9", 0x3)
[ 104.310305][ T5301] Bluetooth: hci0: command tx timeout
[ 104.566526][ T5353] Console: switching to colour dummy device 80x25
[ 104.742874][ T5353] ------------[ cut here ]------------
[ 104.742938][ T5353] Memory manager not clean during takedown.
[ 104.742956][ T5353] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5353
[ 104.761707][ T5353] Modules linked in:
[ 104.763926][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.767651][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.772026][ T5353] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 104.774034][ T5353] Code: 4c 89 f7 e8 ae 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 d1 cb 1d fc 5b 41 5e c3 cc cc cc cc cc e8 c3 cb 1d fc 48 8d 3d 8c c8 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 104.784524][ T5353] RSP: 0018:ffffc9000dba76f0 EFLAGS: 00010283
[ 104.787150][ T5353] RAX: ffffffff85ab53fd RBX: ffff888036145868 RCX: 0000000000100000
[ 104.790843][ T5353] RDX: ffffc9000eef2000 RSI: 0000000000014807 RDI: ffffffff91ca1c90
[ 104.794385][ T5353] RBP: ffffffff85aa0870 R08: ffff88803136c280 R09: ffffffff8ca213c0
[ 104.797702][ T5353] R10: dffffc0000000000 R11: ffffffff85aa0870 R12: ffff88803136c280
[ 104.801259][ T5353] R13: dffffc0000000000 R14: ffff8880361458a0 R15: dffffc0000000000
[ 104.804590][ T5353] FS: 00007f7b265da6c0(0000) GS:ffff88808a9fa000(0000) knlGS:0000000000000000
[ 104.808252][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.811013][ T5353] CR2: 0000560ae3e5c848 CR3: 000000001341e000 CR4: 0000000000352ef0
[ 104.814566][ T5353] Call Trace:
[ 104.816182][ T5353]
[ 104.817592][ T5353] drm_managed_release+0x208/0x380
[ 104.820275][ T5353] ? __pfx_virtio_gpu_release+0x10/0x10
[ 104.822980][ T5353] drm_dev_put+0xe0/0x120
[ 104.824928][ T5353] virtio_dev_remove+0x9c/0x1b0
[ 104.827115][ T5353] ? __pfx_virtio_dev_remove+0x10/0x10
[ 104.829647][ T5353] device_release_driver_internal+0x42b/0x7d0
[ 104.832970][ T5353] bus_remove_device+0x444/0x560
[ 104.835191][ T5353] ? __pfx_bus_remove_device+0x10/0x10
[ 104.837623][ T5353] ? kernfs_remove_by_name_ns+0x101/0x140
[ 104.840834][ T5353] device_del+0x524/0x8f0
[ 104.842819][ T5353] ? __pfx_device_del+0x10/0x10
[ 104.845102][ T5353] device_unregister+0x21/0xf0
[ 104.847253][ T5353] unregister_virtio_device+0x37/0x60
[ 104.849785][ T5353] virtio_pci_remove+0x7f/0xf0
[ 104.852009][ T5353] pci_device_remove+0x99/0x1c0
[ 104.854204][ T5353] ? __pfx_pci_device_remove+0x10/0x10
[ 104.856555][ T5353] device_release_driver_internal+0x42b/0x7d0
[ 104.859407][ T5353] pci_stop_bus_device+0xf6/0x120
[ 104.861716][ T5353] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 104.864624][ T5353] remove_store+0xe5/0x150
[ 104.866697][ T5353] ? __pfx_remove_store+0x10/0x10
[ 104.869195][ T5353] ? sysfs_file_kobj+0x1e4/0x230
[ 104.871431][ T5353] ? sysfs_kf_write+0x166/0x260
[ 104.873644][ T5353] ? __pfx_sysfs_kf_write+0x10/0x10
[ 104.876073][ T5353] kernfs_fop_write_iter+0x3a4/0x540
[ 104.878484][ T5353] vfs_write+0x612/0xba0
[ 104.880772][ T5353] ? __pfx_vfs_write+0x10/0x10
[ 104.883047][ T5353] ? __fget_files+0x3a2/0x420
[ 104.885239][ T5353] ? __fget_files+0x2a/0x420
[ 104.887305][ T5353] ? fdget+0x1ac/0x250
[ 104.889298][ T5353] ksys_write+0x150/0x270
[ 104.891142][ T5353] ? __pfx_ksys_write+0x10/0x10
[ 104.893229][ T5353] do_syscall_64+0x166/0x520
[ 104.895387][ T5353] ? trace_irq_disable+0x3b/0x140
[ 104.897547][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.900359][ T5353] ? clear_bhb_loop+0x70/0xc0
[ 104.902351][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.904857][ T5353] RIP: 0033:0x7f7b2579fb19
[ 104.906842][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.916149][ T5353] RSP: 002b:00007f7b265d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 104.919822][ T5353] RAX: ffffffffffffffda RBX: 00007f7b25a25fa0 RCX: 00007f7b2579fb19
[ 104.923081][ T5353] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 104.926358][ T5353] RBP: 00007f7b25837b70 R08: 0000000000000000 R09: 0000000000000000
[ 104.930149][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.933735][ T5353] R13: 00007f7b25a26038 R14: 00007f7b25a25fa0 R15: 00007ffe61ce52d8
[ 104.937702][ T5353]
[ 104.939568][ T5353] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 104.942721][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.946553][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.950703][ T5353] Call Trace:
[ 104.952131][ T5353]
[ 104.957268][ T5353] vpanic+0x26f/0x710
[ 104.959106][ T5353] panic+0xc5/0xd0
[ 104.960801][ T5353] ? __pfx_panic+0x10/0x10
[ 104.962789][ T5353] __warn+0x315/0x4c0
[ 104.964488][ T5353] ? drm_mm_takedown+0x54/0x70
[ 104.966558][ T5353] ? drm_mm_takedown+0x54/0x70
[ 104.968678][ T5353] __report_bug+0x276/0x570
[ 104.970719][ T5353] ? bus_remove_device+0x444/0x560
[ 104.973029][ T5353] ? device_del+0x524/0x8f0
[ 104.975160][ T5353] ? device_unregister+0x21/0xf0
[ 104.977336][ T5353] ? drm_mm_takedown+0x54/0x70
[ 104.979520][ T5353] ? __pfx___report_bug+0x10/0x10
[ 104.981872][ T5353] report_bug_entry+0x19b/0x290
[ 104.984171][ T5353] ? drm_mm_takedown+0x54/0x70
[ 104.986378][ T5353] ? drm_mm_takedown+0x59/0x70
[ 104.988656][ T5353] handle_bug+0xce/0x200
[ 104.990599][ T5353] exc_invalid_op+0x1a/0x50
[ 104.992711][ T5353] asm_exc_invalid_op+0x1a/0x20
[ 104.994930][ T5353] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 104.997333][ T5353] Code: 4c 89 f7 e8 ae 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 d1 cb 1d fc 5b 41 5e c3 cc cc cc cc cc e8 c3 cb 1d fc 48 8d 3d 8c c8 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 105.006139][ T5353] RSP: 0018:ffffc9000dba76f0 EFLAGS: 00010283
[ 105.008963][ T5353] RAX: ffffffff85ab53fd RBX: ffff888036145868 RCX: 0000000000100000
[ 105.012107][ T5353] RDX: ffffc9000eef2000 RSI: 0000000000014807 RDI: ffffffff91ca1c90
[ 105.015157][ T5353] RBP: ffffffff85aa0870 R08: ffff88803136c280 R09: ffffffff8ca213c0
[ 105.018413][ T5353] R10: dffffc0000000000 R11: ffffffff85aa0870 R12: ffff88803136c280
[ 105.021956][ T5353] R13: dffffc0000000000 R14: ffff8880361458a0 R15: dffffc0000000000
[ 105.025856][ T5353] ? __pfx_drm_gem_init_release+0x10/0x10
[ 105.028370][ T5353] ? __pfx_drm_gem_init_release+0x10/0x10
[ 105.030941][ T5353] ? drm_mm_takedown+0x4d/0x70
[ 105.033121][ T5353] drm_managed_release+0x208/0x380
[ 105.035463][ T5353] ? __pfx_virtio_gpu_release+0x10/0x10
[ 105.037823][ T5353] drm_dev_put+0xe0/0x120
[ 105.039931][ T5353] virtio_dev_remove+0x9c/0x1b0
[ 105.042568][ T5353] ? __pfx_virtio_dev_remove+0x10/0x10
[ 105.045254][ T5353] device_release_driver_internal+0x42b/0x7d0
[ 105.047588][ T5353] bus_remove_device+0x444/0x560
[ 105.049565][ T5353] ? __pfx_bus_remove_device+0x10/0x10
[ 105.051664][ T5353] ? kernfs_remove_by_name_ns+0x101/0x140
[ 105.054198][ T5353] device_del+0x524/0x8f0
[ 105.056062][ T5353] ? __pfx_device_del+0x10/0x10
[ 105.058112][ T5353] device_unregister+0x21/0xf0
[ 105.060125][ T5353] unregister_virtio_device+0x37/0x60
[ 105.062340][ T5353] virtio_pci_remove+0x7f/0xf0
[ 105.064323][ T5353] pci_device_remove+0x99/0x1c0
[ 105.066251][ T5353] ? __pfx_pci_device_remove+0x10/0x10
[ 105.068643][ T5353] device_release_driver_internal+0x42b/0x7d0
[ 105.071206][ T5353] pci_stop_bus_device+0xf6/0x120
[ 105.073145][ T5353] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 105.075804][ T5353] remove_store+0xe5/0x150
[ 105.077716][ T5353] ? __pfx_remove_store+0x10/0x10
[ 105.079929][ T5353] ? sysfs_file_kobj+0x1e4/0x230
[ 105.082115][ T5353] ? sysfs_kf_write+0x166/0x260
[ 105.084079][ T5353] ? __pfx_sysfs_kf_write+0x10/0x10
[ 105.086171][ T5353] kernfs_fop_write_iter+0x3a4/0x540
[ 105.088581][ T5353] vfs_write+0x612/0xba0
[ 105.090358][ T5353] ? __pfx_vfs_write+0x10/0x10
[ 105.092333][ T5353] ? __fget_files+0x3a2/0x420
[ 105.094325][ T5353] ? __fget_files+0x2a/0x420
[ 105.096288][ T5353] ? fdget+0x1ac/0x250
[ 105.098030][ T5353] ksys_write+0x150/0x270
[ 105.099897][ T5353] ? __pfx_ksys_write+0x10/0x10
[ 105.101925][ T5353] do_syscall_64+0x166/0x520
[ 105.103956][ T5353] ? trace_irq_disable+0x3b/0x140
[ 105.106105][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.108736][ T5353] ? clear_bhb_loop+0x70/0xc0
[ 105.110760][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.113364][ T5353] RIP: 0033:0x7f7b2579fb19
[ 105.115233][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.123784][ T5353] RSP: 002b:00007f7b265d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 105.127078][ T5353] RAX: ffffffffffffffda RBX: 00007f7b25a25fa0 RCX: 00007f7b2579fb19
[ 105.130275][ T5353] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 105.133484][ T5353] RBP: 00007f7b25837b70 R08: 0000000000000000 R09: 0000000000000000
[ 105.136716][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.139897][ T5353] R13: 00007f7b25a26038 R14: 00007f7b25a25fa0 R15: 00007ffe61ce52d8
[ 105.143241][ T5353]
[ 105.145037][ T5353] Kernel Offset: disabled
[ 105.146917][ T5353] Rebooting in 86400 seconds..