program: mkdir(&(0x7f0000000140)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) [ 110.441424][ T4665] Bluetooth: hci0: command tx timeout [ 110.610513][ T5340] Console: switching to colour dummy device 80x25 [ 110.802706][ T5340] ------------[ cut here ]------------ [ 110.802720][ T5340] Memory manager not clean during takedown. [ 110.802872][ T5340] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5340 [ 110.813189][ T5340] Modules linked in: [ 110.815078][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.818995][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.823151][ T5340] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 110.825357][ T5340] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 110.833417][ T5340] RSP: 0018:ffffc9000f5bf6f0 EFLAGS: 00010283 [ 110.836044][ T5340] RAX: ffffffff85ab688d RBX: ffff8880361bcc68 RCX: 0000000000100000 [ 110.839405][ T5340] RDX: ffffc9000ed12000 RSI: 0000000000014c82 RDI: ffffffff91ca1cd0 [ 110.842985][ T5340] RBP: ffffffff85aa1d00 R08: ffff88803133e280 R09: ffffffff8ca213c0 [ 110.846136][ T5340] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff88803133e280 [ 110.849559][ T5340] R13: dffffc0000000000 R14: ffff8880361bcca0 R15: dffffc0000000000 [ 110.853657][ T5340] FS: 00007f34636836c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000 [ 110.858023][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.861894][ T5340] CR2: 00007f34629fc6b8 CR3: 000000001464b000 CR4: 0000000000352ef0 [ 110.865495][ T5340] Call Trace: [ 110.867008][ T5340] [ 110.868349][ T5340] drm_managed_release+0x208/0x380 [ 110.870617][ T5340] ? __pfx_virtio_gpu_release+0x10/0x10 [ 110.873215][ T5340] drm_dev_put+0xe0/0x120 [ 110.875172][ T5340] virtio_dev_remove+0x9c/0x1b0 [ 110.877371][ T5340] ? __pfx_virtio_dev_remove+0x10/0x10 [ 110.879664][ T5340] device_release_driver_internal+0x42b/0x7d0 [ 110.882326][ T5340] bus_remove_device+0x444/0x560 [ 110.884723][ T5340] ? __pfx_bus_remove_device+0x10/0x10 [ 110.887279][ T5340] ? kernfs_remove_by_name_ns+0x101/0x140 [ 110.889870][ T5340] device_del+0x524/0x8f0 [ 110.891699][ T5340] ? __pfx_device_del+0x10/0x10 [ 110.894550][ T5340] device_unregister+0x21/0xf0 [ 110.896515][ T5340] unregister_virtio_device+0x37/0x60 [ 110.898691][ T5340] virtio_pci_remove+0x7f/0xf0 [ 110.900819][ T5340] pci_device_remove+0x99/0x1c0 [ 110.903182][ T5340] ? __pfx_pci_device_remove+0x10/0x10 [ 110.905648][ T5340] device_release_driver_internal+0x42b/0x7d0 [ 110.908371][ T5340] pci_stop_bus_device+0xf6/0x120 [ 110.910577][ T5340] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 110.913726][ T5340] remove_store+0xe5/0x150 [ 110.915769][ T5340] ? __pfx_remove_store+0x10/0x10 [ 110.918082][ T5340] ? sysfs_file_kobj+0x1e4/0x230 [ 110.920314][ T5340] ? sysfs_kf_write+0x166/0x260 [ 110.922557][ T5340] ? __pfx_sysfs_kf_write+0x10/0x10 [ 110.925000][ T5340] kernfs_fop_write_iter+0x3a4/0x540 [ 110.927439][ T5340] vfs_write+0x612/0xba0 [ 110.929358][ T5340] ? __pfx_vfs_write+0x10/0x10 [ 110.931414][ T5340] ? __fget_files+0x3a2/0x420 [ 110.933531][ T5340] ? __fget_files+0x2a/0x420 [ 110.935547][ T5340] ? fdget+0x1ac/0x250 [ 110.937311][ T5340] ksys_write+0x150/0x270 [ 110.939194][ T5340] ? __pfx_ksys_write+0x10/0x10 [ 110.941278][ T5340] do_syscall_64+0x16a/0x530 [ 110.943521][ T5340] ? trace_irq_disable+0x3b/0x140 [ 110.945895][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.948545][ T5340] ? clear_bhb_loop+0x70/0xc0 [ 110.950501][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.953192][ T5340] RIP: 0033:0x7f34627a8f19 [ 110.955173][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.963736][ T5340] RSP: 002b:00007f3463682fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.967381][ T5340] RAX: ffffffffffffffda RBX: 00007f3462a25fa0 RCX: 00007f34627a8f19 [ 110.970815][ T5340] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 110.974608][ T5340] RBP: 00007f3462837f6d R08: 0000000000000000 R09: 0000000000000000 [ 110.977942][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.981246][ T5340] R13: 00007f3462a26038 R14: 00007f3462a25fa0 R15: 00007ffe15e201a8 [ 110.984808][ T5340] [ 110.986138][ T5340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.989328][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.993353][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.997752][ T5340] Call Trace: [ 110.999322][ T5340] [ 111.000614][ T5340] vpanic+0x26f/0x710 [ 111.002374][ T5340] panic+0xc5/0xd0 [ 111.004020][ T5340] ? __pfx_panic+0x10/0x10 [ 111.005970][ T5340] __warn+0x315/0x4c0 [ 111.007703][ T5340] ? drm_mm_takedown+0x54/0x70 [ 111.009780][ T5340] ? drm_mm_takedown+0x54/0x70 [ 111.011863][ T5340] __report_bug+0x276/0x570 [ 111.013718][ T5340] ? bus_remove_device+0x444/0x560 [ 111.015903][ T5340] ? device_del+0x524/0x8f0 [ 111.017890][ T5340] ? device_unregister+0x21/0xf0 [ 111.020088][ T5340] ? drm_mm_takedown+0x54/0x70 [ 111.022197][ T5340] ? __pfx___report_bug+0x10/0x10 [ 111.024495][ T5340] report_bug_entry+0x19b/0x290 [ 111.026893][ T5340] ? drm_mm_takedown+0x54/0x70 [ 111.029068][ T5340] ? drm_mm_takedown+0x59/0x70 [ 111.031257][ T5340] handle_bug+0xce/0x200 [ 111.033311][ T5340] exc_invalid_op+0x1a/0x50 [ 111.035855][ T5340] asm_exc_invalid_op+0x1a/0x20 [ 111.038118][ T5340] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 111.040411][ T5340] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 111.048712][ T5340] RSP: 0018:ffffc9000f5bf6f0 EFLAGS: 00010283 [ 111.051398][ T5340] RAX: ffffffff85ab688d RBX: ffff8880361bcc68 RCX: 0000000000100000 [ 111.054836][ T5340] RDX: ffffc9000ed12000 RSI: 0000000000014c82 RDI: ffffffff91ca1cd0 [ 111.058259][ T5340] RBP: ffffffff85aa1d00 R08: ffff88803133e280 R09: ffffffff8ca213c0 [ 111.061909][ T5340] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff88803133e280 [ 111.065413][ T5340] R13: dffffc0000000000 R14: ffff8880361bcca0 R15: dffffc0000000000 [ 111.069015][ T5340] ? __pfx_drm_gem_init_release+0x10/0x10 [ 111.071509][ T5340] ? __pfx_drm_gem_init_release+0x10/0x10 [ 111.074009][ T5340] ? drm_mm_takedown+0x4d/0x70 [ 111.076036][ T5340] drm_managed_release+0x208/0x380 [ 111.078294][ T5340] ? __pfx_virtio_gpu_release+0x10/0x10 [ 111.080661][ T5340] drm_dev_put+0xe0/0x120 [ 111.082487][ T5340] virtio_dev_remove+0x9c/0x1b0 [ 111.084558][ T5340] ? __pfx_virtio_dev_remove+0x10/0x10 [ 111.086901][ T5340] device_release_driver_internal+0x42b/0x7d0 [ 111.089454][ T5340] bus_remove_device+0x444/0x560 [ 111.091586][ T5340] ? __pfx_bus_remove_device+0x10/0x10 [ 111.094008][ T5340] ? kernfs_remove_by_name_ns+0x101/0x140 [ 111.096502][ T5340] device_del+0x524/0x8f0 [ 111.098462][ T5340] ? __pfx_device_del+0x10/0x10 [ 111.100608][ T5340] device_unregister+0x21/0xf0 [ 111.102518][ T5340] unregister_virtio_device+0x37/0x60 [ 111.104787][ T5340] virtio_pci_remove+0x7f/0xf0 [ 111.106959][ T5340] pci_device_remove+0x99/0x1c0 [ 111.109120][ T5340] ? __pfx_pci_device_remove+0x10/0x10 [ 111.111579][ T5340] device_release_driver_internal+0x42b/0x7d0 [ 111.114121][ T5340] pci_stop_bus_device+0xf6/0x120 [ 111.116228][ T5340] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 111.118969][ T5340] remove_store+0xe5/0x150 [ 111.120900][ T5340] ? __pfx_remove_store+0x10/0x10 [ 111.123134][ T5340] ? sysfs_file_kobj+0x1e4/0x230 [ 111.125293][ T5340] ? sysfs_kf_write+0x166/0x260 [ 111.127498][ T5340] ? __pfx_sysfs_kf_write+0x10/0x10 [ 111.129732][ T5340] kernfs_fop_write_iter+0x3a4/0x540 [ 111.132017][ T5340] vfs_write+0x612/0xba0 [ 111.133940][ T5340] ? __pfx_vfs_write+0x10/0x10 [ 111.135917][ T5340] ? __fget_files+0x3a2/0x420 [ 111.138050][ T5340] ? __fget_files+0x2a/0x420 [ 111.140079][ T5340] ? fdget+0x1ac/0x250 [ 111.141891][ T5340] ksys_write+0x150/0x270 [ 111.143726][ T5340] ? __pfx_ksys_write+0x10/0x10 [ 111.145757][ T5340] do_syscall_64+0x16a/0x530 [ 111.147761][ T5340] ? trace_irq_disable+0x3b/0x140 [ 111.149832][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.152271][ T5340] ? clear_bhb_loop+0x70/0xc0 [ 111.154325][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.156986][ T5340] RIP: 0033:0x7f34627a8f19 [ 111.159036][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.167585][ T5340] RSP: 002b:00007f3463682fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.171254][ T5340] RAX: ffffffffffffffda RBX: 00007f3462a25fa0 RCX: 00007f34627a8f19 [ 111.174869][ T5340] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 111.178733][ T5340] RBP: 00007f3462837f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.182179][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.185583][ T5340] R13: 00007f3462a26038 R14: 00007f3462a25fa0 R15: 00007ffe15e201a8 [ 111.189013][ T5340] [ 111.190802][ T5340] Kernel Offset: disabled [ 111.192742][ T5340] Rebooting in 86400 seconds..