program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000005600)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x118, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x7010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x8b, 0x40, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x56, 0x4}, [@power_domain={0x11, 0x24, 0x10, 0x3, 0x0, 0x8, 0xb, "9f80635214c8cae2"}, @source_unit={0xc, 0x24, 0xb, 0xd0, 0x3, 0x5, 0x3, 0x2}, @mixer_unit={0x7, 0x24, 0x5, 0x5, 0xe, "a384"}, @processing_unit={0x15, 0x24, 0x9, 0x5, 0x6, [0x0, 0x1, 0x2, 0x0]}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x5, 0x1, 0x2, 0x5, 0x1, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3, "a2e849486f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x4, 0x26}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x6c, 0x6, {0xa, 0x25, 0x25, 0x7fffffff, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9c, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x80, 0xd, 0x1, "63d0ac"}, @as_header={0x17, 0x24, 0x1, 0xbe, 0xe3, 0x9, 0x1, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x0, 0x6, {0xa, 0x25, 0x25, 0x8, 0x6c, 0x4}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x7d, 0x1, 0x4, 0x40, 0x5}, 0x23, &(0x7f0000000500)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "88bf77f250ad0a978c9c687edb2eb2f5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x5, 0x4}]}, 0x1, [{0xe7, &(0x7f0000000540)=@string={0xe7, 0x3, "c5e9b10739f2a9e5a0de7b99f2f2cf4c37593ef2500bc350670c8b9828358463402374a3adedba362dfdbd2c35ebf7453cfe486cd9f8f3b1c3df5ee0027cda13d2e73fce754381ac10f47e2666871fcb7a3936586300b1ebeffd682c1b47c04f44dfb41836b99c46aeb1941bbcd6d738734889c2dcdcf5b45e9aaffb703e39ca5ce7a7475f4005ebcc99e8c0b4f2a9202f45e637f386e0c56d943fb3924708bdbe2e11af48036c4e0295c781191c2d61f6b27ca81c823891e211dba38dc587bdfe9886a6788688e27d5dc1a706fa326e7b4675518c93520961b9d3b5bbaa282a9659b34e66"}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000005640)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000005680)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000056c0)='./sys/bus/pci/rescan\x00', 0x8001, 0x80)
write(r1, &(0x7f0000005700)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='+p', 0x2)
[ 103.159099][ T5317] Bluetooth: hci0: command tx timeout
[ 103.348572][ T1028] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 103.348591][ T1028] ata1: failed to read log page 10h (errno=-5)
[ 103.348602][ T1028] ata1.00: NCQ disabled due to excessive errors
[ 103.348609][ T1028] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0
[ 103.348619][ T1028] ata1.00: irq_stat 0x41000008
[ 103.348629][ T1028] ata1.00: failed command: WRITE FPDMA QUEUED
[ 103.348637][ T1028] ata1.00: cmd 61/38:58:0e:0f:08/16:00:00:00:00/40 tag 11 ncq dma 2912256 ou
[ 103.348637][ T1028] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 103.348665][ T1028] ata1.00: status: { DRDY }
[ 103.348672][ T1028] ata1.00: error: { ABRT }
[ 103.349678][ T1028] ata1.00: configured for UDMA/100
[ 103.350124][ T1028] ata1: EH complete
[ 103.476570][ T1375] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 103.784798][ T1375] usb 5-1: Using ep0 maxpacket: 32
[ 103.836181][ T1375] usb 5-1: New USB device found: idVendor=0499, idProduct=7010, bcdDevice=0.40
[ 103.864847][ T1375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.864867][ T1375] usb 5-1: Product: syz
[ 103.864875][ T1375] usb 5-1: Manufacturer: syz
[ 103.864882][ T1375] usb 5-1: SerialNumber: syz
[ 104.328122][ T5359] Console: switching to colour dummy device 80x25
[ 105.151355][ T5359] ------------[ cut here ]------------
[ 105.151399][ T5359] Memory manager not clean during takedown.
[ 105.151498][ T5359] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5359
[ 105.182728][ T5359] Modules linked in:
[ 105.185390][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.193091][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.222499][ T5359] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 105.247193][ T5359] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 105.280800][ T5359] RSP: 0018:ffffc9000dd9f6f0 EFLAGS: 00010287
[ 105.284815][ T5359] RAX: ffffffff85ab688d RBX: ffff8880364f3068 RCX: 0000000000100000
[ 105.288516][ T5359] RDX: ffffc9000ef5a000 RSI: 000000000001cb86 RDI: ffffffff91ca1cd0
[ 105.292169][ T5359] RBP: ffffffff85aa1d00 R08: ffff888031688480 R09: ffffffff8ca213c0
[ 105.298640][ T5359] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff888031688480
[ 105.304601][ T5359] R13: dffffc0000000000 R14: ffff8880364f30a0 R15: dffffc0000000000
[ 105.310329][ T5359] FS: 00007f5b58cb46c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 105.316210][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 105.322593][ T5359] CR2: 00007fe124f909c0 CR3: 000000005200a000 CR4: 0000000000352ef0
[ 105.327610][ T5359] Call Trace:
[ 105.331354][ T5359]
[ 105.333001][ T5359] drm_managed_release+0x208/0x380
[ 105.336932][ T5359] ? __pfx_virtio_gpu_release+0x10/0x10
[ 105.341417][ T5359] drm_dev_put+0xe0/0x120
[ 105.344646][ T5359] virtio_dev_remove+0x9c/0x1b0
[ 105.350376][ T5359] ? __pfx_virtio_dev_remove+0x10/0x10
[ 105.353968][ T5359] device_release_driver_internal+0x42b/0x7d0
[ 105.358833][ T5359] bus_remove_device+0x444/0x560
[ 105.364584][ T5359] ? __pfx_bus_remove_device+0x10/0x10
[ 105.369790][ T5359] ? kernfs_remove_by_name_ns+0x101/0x140
[ 105.392709][ T5359] device_del+0x524/0x8f0
[ 105.396508][ T5359] ? __pfx_device_del+0x10/0x10
[ 105.398893][ T5359] device_unregister+0x21/0xf0
[ 105.401208][ T5359] unregister_virtio_device+0x37/0x60
[ 105.404079][ T5359] virtio_pci_remove+0x7f/0xf0
[ 105.406474][ T5359] pci_device_remove+0x99/0x1c0
[ 105.408900][ T5359] ? __pfx_pci_device_remove+0x10/0x10
[ 105.411486][ T5359] device_release_driver_internal+0x42b/0x7d0
[ 105.414467][ T5359] pci_stop_bus_device+0xf6/0x120
[ 105.418398][ T5359] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 105.423078][ T5359] remove_store+0xe5/0x150
[ 105.426969][ T5359] ? __pfx_remove_store+0x10/0x10
[ 105.434556][ T5359] ? sysfs_file_kobj+0x1e4/0x230
[ 105.438300][ T5359] ? sysfs_kf_write+0x166/0x260
[ 105.442220][ T5359] ? __pfx_sysfs_kf_write+0x10/0x10
[ 105.450667][ T5359] kernfs_fop_write_iter+0x3a4/0x540
[ 105.454428][ T5359] vfs_write+0x612/0xba0
[ 105.467550][ T5359] ? __pfx_vfs_write+0x10/0x10
[ 105.471505][ T5359] ? __fget_files+0x3a2/0x420
[ 105.475076][ T5359] ? __fget_files+0x2a/0x420
[ 105.486283][ T5359] ? fdget+0x1ac/0x250
[ 105.489045][ T5359] ksys_write+0x150/0x270
[ 105.492164][ T5359] ? __pfx_ksys_write+0x10/0x10
[ 105.498303][ T5359] do_syscall_64+0x16a/0x530
[ 105.501811][ T5359] ? trace_irq_disable+0x3b/0x140
[ 105.506217][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.511229][ T5359] ? clear_bhb_loop+0x70/0xc0
[ 105.513688][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.516911][ T5359] RIP: 0033:0x7f5b57da8f19
[ 105.519214][ T5359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.541056][ T5359] RSP: 002b:00007f5b58cb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 105.562794][ T5359] RAX: ffffffffffffffda RBX: 00007f5b58025fa0 RCX: 00007f5b57da8f19
[ 105.567232][ T5359] RDX: 0000000000000001 RSI: 0000200000005680 RDI: 0000000000000004
[ 105.573721][ T5359] RBP: 00007f5b57e37f6d R08: 0000000000000000 R09: 0000000000000000
[ 105.578056][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.581694][ T5359] R13: 00007f5b58026038 R14: 00007f5b58025fa0 R15: 00007fff47c33778
[ 105.600593][ T5359]
[ 105.602105][ T5359] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 105.611566][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.616503][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.620724][ T5359] Call Trace:
[ 105.622165][ T5359]
[ 105.623439][ T5359] vpanic+0x26f/0x710
[ 105.636496][ T5359] panic+0xc5/0xd0
[ 105.638317][ T5359] ? __pfx_panic+0x10/0x10
[ 105.640384][ T5359] __warn+0x315/0x4c0
[ 105.642257][ T5359] ? drm_mm_takedown+0x54/0x70
[ 105.653438][ T5359] ? drm_mm_takedown+0x54/0x70
[ 105.655692][ T5359] __report_bug+0x276/0x570
[ 105.657654][ T5359] ? bus_remove_device+0x444/0x560
[ 105.666722][ T5359] ? device_del+0x524/0x8f0
[ 105.671655][ T5359] ? device_unregister+0x21/0xf0
[ 105.677277][ T5359] ? drm_mm_takedown+0x54/0x70
[ 105.681883][ T5359] ? __pfx___report_bug+0x10/0x10
[ 105.688656][ T5359] report_bug_entry+0x19b/0x290
[ 105.691278][ T5359] ? drm_mm_takedown+0x54/0x70
[ 105.694473][ T5359] ? drm_mm_takedown+0x59/0x70
[ 105.697920][ T5359] handle_bug+0xce/0x200
[ 105.704990][ T5359] exc_invalid_op+0x1a/0x50
[ 105.707791][ T5359] asm_exc_invalid_op+0x1a/0x20
[ 105.716435][ T5359] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 105.725610][ T5359] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 105.747693][ T5359] RSP: 0018:ffffc9000dd9f6f0 EFLAGS: 00010287
[ 105.760003][ T5359] RAX: ffffffff85ab688d RBX: ffff8880364f3068 RCX: 0000000000100000
[ 105.764334][ T5359] RDX: ffffc9000ef5a000 RSI: 000000000001cb86 RDI: ffffffff91ca1cd0
[ 105.774907][ T5359] RBP: ffffffff85aa1d00 R08: ffff888031688480 R09: ffffffff8ca213c0
[ 105.782221][ T5359] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff888031688480
[ 105.798171][ T5359] R13: dffffc0000000000 R14: ffff8880364f30a0 R15: dffffc0000000000
[ 105.801453][ T5359] ? __pfx_drm_gem_init_release+0x10/0x10
[ 105.807150][ T5359] ? __pfx_drm_gem_init_release+0x10/0x10
[ 105.809803][ T5359] ? drm_mm_takedown+0x4d/0x70
[ 105.818113][ T5359] drm_managed_release+0x208/0x380
[ 105.820274][ T5359] ? __pfx_virtio_gpu_release+0x10/0x10
[ 105.822560][ T5359] drm_dev_put+0xe0/0x120
[ 105.840117][ T5359] virtio_dev_remove+0x9c/0x1b0
[ 105.842338][ T5359] ? __pfx_virtio_dev_remove+0x10/0x10
[ 105.845038][ T5359] device_release_driver_internal+0x42b/0x7d0
[ 105.848331][ T5359] bus_remove_device+0x444/0x560
[ 105.851029][ T5359] ? __pfx_bus_remove_device+0x10/0x10
[ 105.867585][ T5359] ? kernfs_remove_by_name_ns+0x101/0x140
[ 105.870917][ T5359] device_del+0x524/0x8f0
[ 105.873435][ T5359] ? __pfx_device_del+0x10/0x10
[ 105.875608][ T5359] device_unregister+0x21/0xf0
[ 105.877577][ T5359] unregister_virtio_device+0x37/0x60
[ 105.879958][ T5359] virtio_pci_remove+0x7f/0xf0
[ 105.882530][ T5359] pci_device_remove+0x99/0x1c0
[ 105.897368][ T5359] ? __pfx_pci_device_remove+0x10/0x10
[ 105.900150][ T5359] device_release_driver_internal+0x42b/0x7d0
[ 105.902834][ T5359] pci_stop_bus_device+0xf6/0x120
[ 105.905085][ T5359] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 105.907976][ T5359] remove_store+0xe5/0x150
[ 105.909892][ T5359] ? __pfx_remove_store+0x10/0x10
[ 105.912032][ T5359] ? sysfs_file_kobj+0x1e4/0x230
[ 105.924662][ T5359] ? sysfs_kf_write+0x166/0x260
[ 105.927174][ T5359] ? __pfx_sysfs_kf_write+0x10/0x10
[ 105.929366][ T5359] kernfs_fop_write_iter+0x3a4/0x540
[ 105.931621][ T5359] vfs_write+0x612/0xba0
[ 105.933399][ T5359] ? __pfx_vfs_write+0x10/0x10
[ 105.941304][ T5359] ? __fget_files+0x3a2/0x420
[ 105.943494][ T5359] ? __fget_files+0x2a/0x420
[ 105.961270][ T5359] ? fdget+0x1ac/0x250
[ 105.963166][ T5359] ksys_write+0x150/0x270
[ 105.965334][ T5359] ? __pfx_ksys_write+0x10/0x10
[ 105.968075][ T5359] do_syscall_64+0x16a/0x530
[ 105.970352][ T5359] ? trace_irq_disable+0x3b/0x140
[ 105.988589][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.991493][ T5359] ? clear_bhb_loop+0x70/0xc0
[ 105.993452][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.995933][ T5359] RIP: 0033:0x7f5b57da8f19
[ 105.997790][ T5359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.023095][ T5359] RSP: 002b:00007f5b58cb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 106.026717][ T5359] RAX: ffffffffffffffda RBX: 00007f5b58025fa0 RCX: 00007f5b57da8f19
[ 106.029924][ T5359] RDX: 0000000000000001 RSI: 0000200000005680 RDI: 0000000000000004
[ 106.033167][ T5359] RBP: 00007f5b57e37f6d R08: 0000000000000000 R09: 0000000000000000
[ 106.036890][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.060547][ T5359] R13: 00007f5b58026038 R14: 00007f5b58025fa0 R15: 00007fff47c33778
[ 106.064617][ T5359]
[ 106.066873][ T5359] Kernel Offset: disabled
[ 106.069016][ T5359] Rebooting in 86400 seconds..