program:
mkdir(&(0x7f0000000140)='./sys\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='3', 0x1)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000002c0)={0xa30000, 0x3, 0x8, r0, 0x0, &(0x7f0000000300)={0x990966, 0x6, '\x00', @value=0x10001}})
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./security\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)="04080076657273696f6e00020500000004080070726f66696c6500070504002f3a6f00041700666c616773000702000000000200000000020000000008", 0x3d)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
[ 102.580603][ T5307] Bluetooth: hci0: command tx timeout
[ 102.830374][ T5350] Console: switching to colour dummy device 80x25
[ 102.869191][ T27] audit: type=1400 audit(1794202186.884:2): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/:o" pid=5349 comm="syz.0.0" name="/:o" offset=35
[ 102.980133][ T5350] ------------[ cut here ]------------
[ 102.980148][ T5350] Memory manager not clean during takedown.
[ 102.980153][ T5350] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5350
[ 102.990415][ T5350] Modules linked in:
[ 102.992744][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.996975][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.001643][ T5350] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 103.003945][ T5350] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 103.011967][ T5350] RSP: 0018:ffffc9000e2d76f0 EFLAGS: 00010287
[ 103.014561][ T5350] RAX: ffffffff85ab693d RBX: ffff8880361f7068 RCX: 0000000000100000
[ 103.018218][ T5350] RDX: ffffc9000ef1a000 RSI: 0000000000015183 RDI: ffffffff91ca1cb0
[ 103.021374][ T5350] RBP: ffffffff85aa1db0 R08: ffff8880316a1280 R09: ffffffff8ca213c0
[ 103.024493][ T5350] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff8880316a1280
[ 103.027849][ T5350] R13: dffffc0000000000 R14: ffff8880361f70a0 R15: dffffc0000000000
[ 103.031717][ T5350] FS: 00007f196e5a66c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 103.035702][ T5350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.038700][ T5350] CR2: 00007f196e5af150 CR3: 00000000138ff000 CR4: 0000000000352ef0
[ 103.042106][ T5350] Call Trace:
[ 103.043546][ T5350]
[ 103.044725][ T5350] drm_managed_release+0x208/0x380
[ 103.046887][ T5350] ? __pfx_virtio_gpu_release+0x10/0x10
[ 103.049779][ T5350] drm_dev_put+0xe0/0x120
[ 103.051963][ T5350] virtio_dev_remove+0x9c/0x1b0
[ 103.054172][ T5350] ? __pfx_virtio_dev_remove+0x10/0x10
[ 103.056731][ T5350] device_release_driver_internal+0x42b/0x7d0
[ 103.059228][ T5350] bus_remove_device+0x444/0x560
[ 103.061321][ T5350] ? __pfx_bus_remove_device+0x10/0x10
[ 103.063678][ T5350] ? kernfs_remove_by_name_ns+0x101/0x140
[ 103.065983][ T5350] device_del+0x524/0x8f0
[ 103.068036][ T5350] ? __pfx_device_del+0x10/0x10
[ 103.070248][ T5350] device_unregister+0x21/0xf0
[ 103.072411][ T5350] unregister_virtio_device+0x37/0x60
[ 103.074807][ T5350] virtio_pci_remove+0x7f/0xf0
[ 103.076928][ T5350] pci_device_remove+0x99/0x1c0
[ 103.079301][ T5350] ? __pfx_pci_device_remove+0x10/0x10
[ 103.081830][ T5350] device_release_driver_internal+0x42b/0x7d0
[ 103.084598][ T5350] pci_stop_bus_device+0xf6/0x120
[ 103.086965][ T5350] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 103.090448][ T5350] remove_store+0xe5/0x150
[ 103.092469][ T5350] ? __pfx_remove_store+0x10/0x10
[ 103.094621][ T5350] ? sysfs_file_kobj+0x1e4/0x230
[ 103.096622][ T5350] ? sysfs_kf_write+0x166/0x260
[ 103.099263][ T5350] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.101621][ T5350] kernfs_fop_write_iter+0x3a4/0x540
[ 103.103910][ T5350] vfs_write+0x612/0xba0
[ 103.105656][ T5350] ? __pfx_vfs_write+0x10/0x10
[ 103.107977][ T5350] ? __fget_files+0x3a2/0x420
[ 103.110093][ T5350] ? __fget_files+0x2a/0x420
[ 103.112075][ T5350] ? fdget+0x1ac/0x250
[ 103.113806][ T5350] ksys_write+0x150/0x270
[ 103.115571][ T5350] ? __pfx_ksys_write+0x10/0x10
[ 103.117465][ T5350] do_syscall_64+0x16a/0x530
[ 103.119421][ T5350] ? trace_irq_disable+0x3b/0x140
[ 103.121240][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.123664][ T5350] ? clear_bhb_loop+0x70/0xc0
[ 103.125673][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.128328][ T5350] RIP: 0033:0x7f196d79fb19
[ 103.130316][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.138394][ T5350] RSP: 002b:00007f196e5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.141748][ T5350] RAX: ffffffffffffffda RBX: 00007f196da25fa0 RCX: 00007f196d79fb19
[ 103.145009][ T5350] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005
[ 103.148438][ T5350] RBP: 00007f196d837b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.151833][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.155903][ T5350] R13: 00007f196da26038 R14: 00007f196da25fa0 R15: 00007ffcf5f214c8
[ 103.159547][ T5350]
[ 103.160981][ T5350] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.164338][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.168392][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.173030][ T5350] Call Trace:
[ 103.174556][ T5350]
[ 103.175921][ T5350] vpanic+0x26f/0x710
[ 103.177740][ T5350] panic+0xc5/0xd0
[ 103.179466][ T5350] ? __pfx_panic+0x10/0x10
[ 103.181562][ T5350] __warn+0x315/0x4c0
[ 103.183377][ T5350] ? drm_mm_takedown+0x54/0x70
[ 103.185464][ T5350] ? drm_mm_takedown+0x54/0x70
[ 103.187723][ T5350] __report_bug+0x276/0x570
[ 103.190050][ T5350] ? bus_remove_device+0x444/0x560
[ 103.192545][ T5350] ? device_del+0x524/0x8f0
[ 103.194725][ T5350] ? device_unregister+0x21/0xf0
[ 103.197211][ T5350] ? drm_mm_takedown+0x54/0x70
[ 103.199463][ T5350] ? __pfx___report_bug+0x10/0x10
[ 103.201919][ T5350] report_bug_entry+0x19b/0x290
[ 103.204490][ T5350] ? drm_mm_takedown+0x54/0x70
[ 103.206903][ T5350] ? drm_mm_takedown+0x59/0x70
[ 103.209089][ T5350] handle_bug+0xce/0x200
[ 103.211002][ T5350] exc_invalid_op+0x1a/0x50
[ 103.213094][ T5350] asm_exc_invalid_op+0x1a/0x20
[ 103.215283][ T5350] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 103.217641][ T5350] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 103.226169][ T5350] RSP: 0018:ffffc9000e2d76f0 EFLAGS: 00010287
[ 103.228927][ T5350] RAX: ffffffff85ab693d RBX: ffff8880361f7068 RCX: 0000000000100000
[ 103.232182][ T5350] RDX: ffffc9000ef1a000 RSI: 0000000000015183 RDI: ffffffff91ca1cb0
[ 103.235495][ T5350] RBP: ffffffff85aa1db0 R08: ffff8880316a1280 R09: ffffffff8ca213c0
[ 103.238998][ T5350] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff8880316a1280
[ 103.242553][ T5350] R13: dffffc0000000000 R14: ffff8880361f70a0 R15: dffffc0000000000
[ 103.245982][ T5350] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.248510][ T5350] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.251033][ T5350] ? drm_mm_takedown+0x4d/0x70
[ 103.253197][ T5350] drm_managed_release+0x208/0x380
[ 103.255510][ T5350] ? __pfx_virtio_gpu_release+0x10/0x10
[ 103.257878][ T5350] drm_dev_put+0xe0/0x120
[ 103.259862][ T5350] virtio_dev_remove+0x9c/0x1b0
[ 103.262050][ T5350] ? __pfx_virtio_dev_remove+0x10/0x10
[ 103.264429][ T5350] device_release_driver_internal+0x42b/0x7d0
[ 103.267086][ T5350] bus_remove_device+0x444/0x560
[ 103.269291][ T5350] ? __pfx_bus_remove_device+0x10/0x10
[ 103.271683][ T5350] ? kernfs_remove_by_name_ns+0x101/0x140
[ 103.274329][ T5350] device_del+0x524/0x8f0
[ 103.276395][ T5350] ? __pfx_device_del+0x10/0x10
[ 103.278638][ T5350] device_unregister+0x21/0xf0
[ 103.280858][ T5350] unregister_virtio_device+0x37/0x60
[ 103.283316][ T5350] virtio_pci_remove+0x7f/0xf0
[ 103.285475][ T5350] pci_device_remove+0x99/0x1c0
[ 103.287676][ T5350] ? __pfx_pci_device_remove+0x10/0x10
[ 103.290049][ T5350] device_release_driver_internal+0x42b/0x7d0
[ 103.292843][ T5350] pci_stop_bus_device+0xf6/0x120
[ 103.295085][ T5350] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 103.298038][ T5350] remove_store+0xe5/0x150
[ 103.299824][ T5350] ? __pfx_remove_store+0x10/0x10
[ 103.301891][ T5350] ? sysfs_file_kobj+0x1e4/0x230
[ 103.304126][ T5350] ? sysfs_kf_write+0x166/0x260
[ 103.306352][ T5350] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.308657][ T5350] kernfs_fop_write_iter+0x3a4/0x540
[ 103.311005][ T5350] vfs_write+0x612/0xba0
[ 103.312870][ T5350] ? __pfx_vfs_write+0x10/0x10
[ 103.314961][ T5350] ? __fget_files+0x3a2/0x420
[ 103.316992][ T5350] ? __fget_files+0x2a/0x420
[ 103.319140][ T5350] ? fdget+0x1ac/0x250
[ 103.321034][ T5350] ksys_write+0x150/0x270
[ 103.323055][ T5350] ? __pfx_ksys_write+0x10/0x10
[ 103.325296][ T5350] do_syscall_64+0x16a/0x530
[ 103.327364][ T5350] ? trace_irq_disable+0x3b/0x140
[ 103.329577][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.332329][ T5350] ? clear_bhb_loop+0x70/0xc0
[ 103.334418][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.337059][ T5350] RIP: 0033:0x7f196d79fb19
[ 103.338946][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.346654][ T5350] RSP: 002b:00007f196e5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.350869][ T5350] RAX: ffffffffffffffda RBX: 00007f196da25fa0 RCX: 00007f196d79fb19
[ 103.353979][ T5350] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005
[ 103.357369][ T5350] RBP: 00007f196d837b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.360963][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.364011][ T5350] R13: 00007f196da26038 R14: 00007f196da25fa0 R15: 00007ffcf5f214c8
[ 103.367307][ T5350]
[ 103.369043][ T5350] Kernel Offset: disabled
[ 103.370803][ T5350] Rebooting in 86400 seconds..