program:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='1', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
[ 93.277699][ T44] Bluetooth: hci0: command tx timeout
[ 93.302236][ T1239] cfg80211: failed to load regulatory.db
[ 93.739530][ T5328] ------------[ cut here ]------------
[ 93.744451][ T5328] Memory manager not clean during takedown.
[ 93.747403][ T5328] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5328
[ 93.753969][ T5328] Modules linked in:
[ 93.757352][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.761953][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.767054][ T5328] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 93.770631][ T5328] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 93.780456][ T5328] RSP: 0018:ffffc9000e307720 EFLAGS: 00010287
[ 93.784178][ T5328] RAX: ffffffff858b47fd RBX: ffff888034c7cc68 RCX: 0000000000100000
[ 93.788923][ T5328] RDX: ffffc9000ec5a000 RSI: 0000000000011c21 RDI: ffffffff9063cda0
[ 93.792694][ T5328] RBP: ffffffff8589f650 R08: ffff88801ae55080 R09: ffffffff8c5f1c60
[ 93.796700][ T5328] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff88801ae55080
[ 93.801867][ T5328] R13: dffffc0000000000 R14: ffff888034c7cca0 R15: dffffc0000000000
[ 93.805331][ T5328] FS: 00007faa7658a6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 93.809787][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 93.813815][ T5328] CR2: 00007f0ee04c89c0 CR3: 0000000013243000 CR4: 0000000000352ef0
[ 93.818380][ T5328] Call Trace:
[ 93.820102][ T5328]
[ 93.821557][ T5328] drm_managed_release+0x208/0x380
[ 93.823995][ T5328] ? __pfx_virtio_gpu_release+0x10/0x10
[ 93.827121][ T5328] drm_dev_put+0xe0/0x120
[ 93.830211][ T5328] virtio_dev_remove+0x9c/0x1b0
[ 93.833218][ T5328] ? __pfx_virtio_dev_remove+0x10/0x10
[ 93.835445][ T5328] device_release_driver_internal+0x48b/0x880
[ 93.837887][ T5328] bus_remove_device+0x444/0x560
[ 93.840378][ T5328] ? __pfx_bus_remove_device+0x10/0x10
[ 93.843661][ T5328] ? kernfs_remove_by_name_ns+0x101/0x140
[ 93.846762][ T5328] device_del+0x524/0x8f0
[ 93.848949][ T5328] ? __pfx_device_del+0x10/0x10
[ 93.850969][ T5328] device_unregister+0x21/0xf0
[ 93.852778][ T5328] unregister_virtio_device+0x37/0x60
[ 93.855897][ T5328] virtio_pci_remove+0x7f/0xf0
[ 93.860102][ T5328] pci_device_remove+0x99/0x1c0
[ 93.862620][ T5328] ? __pfx_pci_device_remove+0x10/0x10
[ 93.864974][ T5328] device_release_driver_internal+0x48b/0x880
[ 93.867559][ T5328] pci_stop_bus_device+0xf6/0x120
[ 93.869929][ T5328] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 93.873833][ T5328] remove_store+0xe5/0x150
[ 93.876347][ T5328] ? __pfx_remove_store+0x10/0x10
[ 93.878885][ T5328] ? __pfx_sysfs_kf_write+0x10/0x10
[ 93.881287][ T5328] ? __pfx_remove_store+0x10/0x10
[ 93.883737][ T5328] ? dev_attr_store+0x4f/0x90
[ 93.886562][ T5328] ? __pfx_sysfs_kf_write+0x10/0x10
[ 93.889759][ T5328] kernfs_fop_write_iter+0x3a4/0x540
[ 93.892311][ T5328] vfs_write+0x612/0xba0
[ 93.894039][ T5328] ? __pfx_vfs_write+0x10/0x10
[ 93.895970][ T5328] ? __fget_files+0x2a/0x420
[ 93.898021][ T5328] ksys_write+0x150/0x270
[ 93.900475][ T5328] ? __pfx_ksys_write+0x10/0x10
[ 93.903154][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.906031][ T5328] do_syscall_64+0x174/0x580
[ 93.910139][ T5328] ? trace_irq_disable+0x3b/0x140
[ 93.912669][ T5328] ? clear_bhb_loop+0x40/0x90
[ 93.914813][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.917734][ T5328] RIP: 0033:0x7faa7579e019
[ 93.919896][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.929507][ T5328] RSP: 002b:00007faa76589fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.933532][ T5328] RAX: ffffffffffffffda RBX: 00007faa75a25fa0 RCX: 00007faa7579e019
[ 93.937297][ T5328] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005
[ 93.942043][ T5328] RBP: 00007faa7583500c R08: 0000000000000000 R09: 0000000000000000
[ 93.945839][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.949348][ T5328] R13: 00007faa75a26038 R14: 00007faa75a25fa0 R15: 00007fff9895c328
[ 93.953665][ T5328]
[ 93.955880][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 93.960180][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.964279][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.970624][ T5328] Call Trace:
[ 93.972621][ T5328]
[ 93.974211][ T5328] vpanic+0x56c/0xa60
[ 93.975997][ T5328] ? __pfx__printk+0x10/0x10
[ 93.978119][ T5328] ? __pfx_vpanic+0x10/0x10
[ 93.980587][ T5328] ? is_bpf_text_address+0x292/0x2b0
[ 93.983584][ T5328] ? is_bpf_text_address+0x26/0x2b0
[ 93.986953][ T5328] panic+0xc5/0xd0
[ 93.989310][ T5328] ? __pfx_panic+0x10/0x10
[ 93.991345][ T5328] __warn+0x315/0x4c0
[ 93.993096][ T5328] ? drm_mm_takedown+0x54/0x70
[ 93.995510][ T5328] ? drm_mm_takedown+0x54/0x70
[ 93.998447][ T5328] __report_bug+0x276/0x570
[ 94.001046][ T5328] ? virtio_dev_remove+0x9c/0x1b0
[ 94.003675][ T5328] ? device_release_driver_internal+0x48b/0x880
[ 94.006767][ T5328] ? bus_remove_device+0x444/0x560
[ 94.009415][ T5328] ? drm_mm_takedown+0x54/0x70
[ 94.012142][ T5328] ? __pfx___report_bug+0x10/0x10
[ 94.015129][ T5328] ? do_syscall_64+0x174/0x580
[ 94.017777][ T5328] report_bug_entry+0x19a/0x290
[ 94.020353][ T5328] ? drm_mm_takedown+0x54/0x70
[ 94.022847][ T5328] ? drm_mm_takedown+0x59/0x70
[ 94.025536][ T5328] handle_bug+0xce/0x200
[ 94.027748][ T5328] exc_invalid_op+0x1a/0x50
[ 94.029901][ T5328] asm_exc_invalid_op+0x1a/0x20
[ 94.032223][ T5328] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 94.034818][ T5328] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 94.044163][ T5328] RSP: 0018:ffffc9000e307720 EFLAGS: 00010287
[ 94.046942][ T5328] RAX: ffffffff858b47fd RBX: ffff888034c7cc68 RCX: 0000000000100000
[ 94.050496][ T5328] RDX: ffffc9000ec5a000 RSI: 0000000000011c21 RDI: ffffffff9063cda0
[ 94.054298][ T5328] RBP: ffffffff8589f650 R08: ffff88801ae55080 R09: ffffffff8c5f1c60
[ 94.058097][ T5328] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff88801ae55080
[ 94.061562][ T5328] R13: dffffc0000000000 R14: ffff888034c7cca0 R15: dffffc0000000000
[ 94.065091][ T5328] ? __pfx_drm_gem_init_release+0x10/0x10
[ 94.067900][ T5328] ? __pfx_drm_gem_init_release+0x10/0x10
[ 94.070603][ T5328] ? drm_mm_takedown+0x4d/0x70
[ 94.072954][ T5328] drm_managed_release+0x208/0x380
[ 94.075187][ T5328] ? __pfx_virtio_gpu_release+0x10/0x10
[ 94.077800][ T5328] drm_dev_put+0xe0/0x120
[ 94.079854][ T5328] virtio_dev_remove+0x9c/0x1b0
[ 94.082026][ T5328] ? __pfx_virtio_dev_remove+0x10/0x10
[ 94.084366][ T5328] device_release_driver_internal+0x48b/0x880
[ 94.086921][ T5328] bus_remove_device+0x444/0x560
[ 94.089004][ T5328] ? __pfx_bus_remove_device+0x10/0x10
[ 94.091271][ T5328] ? kernfs_remove_by_name_ns+0x101/0x140
[ 94.093713][ T5328] device_del+0x524/0x8f0
[ 94.095401][ T5328] ? __pfx_device_del+0x10/0x10
[ 94.097534][ T5328] device_unregister+0x21/0xf0
[ 94.099529][ T5328] unregister_virtio_device+0x37/0x60
[ 94.101792][ T5328] virtio_pci_remove+0x7f/0xf0
[ 94.103738][ T5328] pci_device_remove+0x99/0x1c0
[ 94.105645][ T5328] ? __pfx_pci_device_remove+0x10/0x10
[ 94.107887][ T5328] device_release_driver_internal+0x48b/0x880
[ 94.110318][ T5328] pci_stop_bus_device+0xf6/0x120
[ 94.112355][ T5328] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.114961][ T5328] remove_store+0xe5/0x150
[ 94.116932][ T5328] ? __pfx_remove_store+0x10/0x10
[ 94.119125][ T5328] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.121138][ T5328] ? __pfx_remove_store+0x10/0x10
[ 94.123310][ T5328] ? dev_attr_store+0x4f/0x90
[ 94.125688][ T5328] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.128445][ T5328] kernfs_fop_write_iter+0x3a4/0x540
[ 94.131391][ T5328] vfs_write+0x612/0xba0
[ 94.133730][ T5328] ? __pfx_vfs_write+0x10/0x10
[ 94.135880][ T5328] ? __fget_files+0x2a/0x420
[ 94.137858][ T5328] ksys_write+0x150/0x270
[ 94.139838][ T5328] ? __pfx_ksys_write+0x10/0x10
[ 94.142213][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.145515][ T5328] do_syscall_64+0x174/0x580
[ 94.148134][ T5328] ? trace_irq_disable+0x3b/0x140
[ 94.150737][ T5328] ? clear_bhb_loop+0x40/0x90
[ 94.153487][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.156646][ T5328] RIP: 0033:0x7faa7579e019
[ 94.158928][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.168398][ T5328] RSP: 002b:00007faa76589fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.172331][ T5328] RAX: ffffffffffffffda RBX: 00007faa75a25fa0 RCX: 00007faa7579e019
[ 94.175746][ T5328] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005
[ 94.179826][ T5328] RBP: 00007faa7583500c R08: 0000000000000000 R09: 0000000000000000
[ 94.183679][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.187618][ T5328] R13: 00007faa75a26038 R14: 00007faa75a25fa0 R15: 00007fff9895c328
[ 94.191577][ T5328]
[ 94.193661][ T5328] Kernel Offset: disabled
[ 94.195836][ T5328] Rebooting in 86400 seconds..