program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
lseek(r0, 0x7, 0x4)
[ 85.656048][ T44] Bluetooth: hci0: command tx timeout
[ 85.678012][ T5308] Console: switching to colour dummy device 80x25
[ 85.832896][ T5308] ------------[ cut here ]------------
[ 85.835791][ T5308] Memory manager not clean during takedown.
[ 85.838299][ T5308] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5308
[ 85.842606][ T5308] Modules linked in:
[ 85.844676][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.848522][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.852706][ T5308] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 85.855170][ T5308] Code: 4c 89 f7 e8 9e fb aa fc 49 8b 06 4c 39 f0 75 0e e8 a1 c6 3b fc 5b 41 5e e9 c9 7d 4a 06 cc e8 93 c6 3b fc 48 8d 3d 4c 32 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 85.863732][ T5308] RSP: 0018:ffffc9000e1cf720 EFLAGS: 00010287
[ 85.866461][ T5308] RAX: ffffffff858b4b1d RBX: ffff888034da9868 RCX: 0000000000100000
[ 85.869704][ T5308] RDX: ffffc9000eb02000 RSI: 0000000000013373 RDI: ffffffff90637d70
[ 85.873631][ T5308] RBP: ffffffff8589f970 R08: ffff88803485bf80 R09: ffffffff8c5efd60
[ 85.877373][ T5308] R10: dffffc0000000000 R11: ffffffff8589f970 R12: ffff88803485bf80
[ 85.880780][ T5308] R13: dffffc0000000000 R14: ffff888034da98a0 R15: dffffc0000000000
[ 85.884380][ T5308] FS: 00007f895f1c16c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 85.888030][ T5308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.890797][ T5308] CR2: 00005576a7102660 CR3: 0000000012162000 CR4: 0000000000352ef0
[ 85.894445][ T5308] Call Trace:
[ 85.896013][ T5308]
[ 85.897327][ T5308] drm_managed_release+0x208/0x380
[ 85.899548][ T5308] ? __pfx_virtio_gpu_release+0x10/0x10
[ 85.902047][ T5308] drm_dev_put+0xe0/0x120
[ 85.904002][ T5308] virtio_dev_remove+0x9c/0x1b0
[ 85.906144][ T5308] ? __pfx_virtio_dev_remove+0x10/0x10
[ 85.908485][ T5308] device_release_driver_internal+0x48b/0x880
[ 85.911200][ T5308] bus_remove_device+0x444/0x560
[ 85.913607][ T5308] ? __pfx_bus_remove_device+0x10/0x10
[ 85.915958][ T5308] ? kernfs_remove_by_name_ns+0x101/0x140
[ 85.918421][ T5308] device_del+0x524/0x8f0
[ 85.920380][ T5308] ? __pfx_device_del+0x10/0x10
[ 85.922628][ T5308] device_unregister+0x21/0xf0
[ 85.924916][ T5308] unregister_virtio_device+0x37/0x60
[ 85.927278][ T5308] virtio_pci_remove+0x7f/0xf0
[ 85.929442][ T5308] pci_device_remove+0x99/0x1c0
[ 85.931488][ T5308] ? __pfx_pci_device_remove+0x10/0x10
[ 85.933852][ T5308] device_release_driver_internal+0x48b/0x880
[ 85.936572][ T5308] pci_stop_bus_device+0xf6/0x120
[ 85.938700][ T5308] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 85.941379][ T5308] remove_store+0xe5/0x150
[ 85.943483][ T5308] ? __pfx_remove_store+0x10/0x10
[ 85.945748][ T5308] ? sysfs_file_kobj+0x1e4/0x230
[ 85.947860][ T5308] ? sysfs_kf_write+0x166/0x260
[ 85.950123][ T5308] ? __pfx_sysfs_kf_write+0x10/0x10
[ 85.952572][ T5308] kernfs_fop_write_iter+0x3a4/0x540
[ 85.954976][ T5308] vfs_write+0x612/0xba0
[ 85.956799][ T5308] ? __pfx_vfs_write+0x10/0x10
[ 85.958875][ T5308] ? __fget_files+0x2a/0x420
[ 85.960959][ T5308] ksys_write+0x150/0x270
[ 85.962856][ T5308] ? __pfx_ksys_write+0x10/0x10
[ 85.965163][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.967803][ T5308] do_syscall_64+0x174/0x580
[ 85.969938][ T5308] ? trace_irq_disable+0x3b/0x140
[ 85.972242][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 85.974683][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.977112][ T5308] RIP: 0033:0x7f895e39e0d9
[ 85.978845][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.987837][ T5308] RSP: 002b:00007f895f1c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 85.991582][ T5308] RAX: ffffffffffffffda RBX: 00007f895e625fa0 RCX: 00007f895e39e0d9
[ 85.996270][ T5308] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 85.999745][ T5308] RBP: 00007f895e435024 R08: 0000000000000000 R09: 0000000000000000
[ 86.003146][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.006548][ T5308] R13: 00007f895e626038 R14: 00007f895e625fa0 R15: 00007ffcff05cbc8
[ 86.009940][ T5308]
[ 86.011304][ T5308] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.014376][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.018173][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.022347][ T5308] Call Trace:
[ 86.023842][ T5308]
[ 86.025345][ T5308] vpanic+0x56c/0xa60
[ 86.027129][ T5308] ? __pfx__printk+0x10/0x10
[ 86.029253][ T5308] ? __pfx_vpanic+0x10/0x10
[ 86.031314][ T5308] ? is_bpf_text_address+0x292/0x2b0
[ 86.034161][ T5308] ? is_bpf_text_address+0x26/0x2b0
[ 86.036481][ T5308] panic+0xc5/0xd0
[ 86.038043][ T5308] ? __pfx_panic+0x10/0x10
[ 86.039916][ T5308] __warn+0x315/0x4c0
[ 86.041708][ T5308] ? drm_mm_takedown+0x54/0x70
[ 86.043792][ T5308] ? drm_mm_takedown+0x54/0x70
[ 86.045768][ T5308] __report_bug+0x276/0x570
[ 86.047733][ T5308] ? virtio_dev_remove+0x9c/0x1b0
[ 86.049971][ T5308] ? device_release_driver_internal+0x48b/0x880
[ 86.052703][ T5308] ? bus_remove_device+0x444/0x560
[ 86.054932][ T5308] ? drm_mm_takedown+0x54/0x70
[ 86.056907][ T5308] ? __pfx___report_bug+0x10/0x10
[ 86.058982][ T5308] ? do_syscall_64+0x174/0x580
[ 86.061055][ T5308] report_bug_entry+0x19a/0x290
[ 86.063019][ T5308] ? drm_mm_takedown+0x54/0x70
[ 86.065087][ T5308] ? drm_mm_takedown+0x59/0x70
[ 86.067112][ T5308] handle_bug+0xce/0x200
[ 86.069016][ T5308] exc_invalid_op+0x1a/0x50
[ 86.071026][ T5308] asm_exc_invalid_op+0x1a/0x20
[ 86.073220][ T5308] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 86.075545][ T5308] Code: 4c 89 f7 e8 9e fb aa fc 49 8b 06 4c 39 f0 75 0e e8 a1 c6 3b fc 5b 41 5e e9 c9 7d 4a 06 cc e8 93 c6 3b fc 48 8d 3d 4c 32 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 86.084175][ T5308] RSP: 0018:ffffc9000e1cf720 EFLAGS: 00010287
[ 86.086928][ T5308] RAX: ffffffff858b4b1d RBX: ffff888034da9868 RCX: 0000000000100000
[ 86.090304][ T5308] RDX: ffffc9000eb02000 RSI: 0000000000013373 RDI: ffffffff90637d70
[ 86.094296][ T5308] RBP: ffffffff8589f970 R08: ffff88803485bf80 R09: ffffffff8c5efd60
[ 86.097841][ T5308] R10: dffffc0000000000 R11: ffffffff8589f970 R12: ffff88803485bf80
[ 86.101190][ T5308] R13: dffffc0000000000 R14: ffff888034da98a0 R15: dffffc0000000000
[ 86.104634][ T5308] ? __pfx_drm_gem_init_release+0x10/0x10
[ 86.107598][ T5308] ? __pfx_drm_gem_init_release+0x10/0x10
[ 86.110115][ T5308] ? drm_mm_takedown+0x4d/0x70
[ 86.112236][ T5308] drm_managed_release+0x208/0x380
[ 86.115070][ T5308] ? __pfx_virtio_gpu_release+0x10/0x10
[ 86.117609][ T5308] drm_dev_put+0xe0/0x120
[ 86.119443][ T5308] virtio_dev_remove+0x9c/0x1b0
[ 86.122101][ T5308] ? __pfx_virtio_dev_remove+0x10/0x10
[ 86.125151][ T5308] device_release_driver_internal+0x48b/0x880
[ 86.128501][ T5308] bus_remove_device+0x444/0x560
[ 86.131154][ T5308] ? __pfx_bus_remove_device+0x10/0x10
[ 86.133587][ T5308] ? kernfs_remove_by_name_ns+0x101/0x140
[ 86.135965][ T5308] device_del+0x524/0x8f0
[ 86.137992][ T5308] ? __pfx_device_del+0x10/0x10
[ 86.140621][ T5308] device_unregister+0x21/0xf0
[ 86.143243][ T5308] unregister_virtio_device+0x37/0x60
[ 86.145775][ T5308] virtio_pci_remove+0x7f/0xf0
[ 86.147834][ T5308] pci_device_remove+0x99/0x1c0
[ 86.150128][ T5308] ? __pfx_pci_device_remove+0x10/0x10
[ 86.152457][ T5308] device_release_driver_internal+0x48b/0x880
[ 86.154981][ T5308] pci_stop_bus_device+0xf6/0x120
[ 86.157031][ T5308] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 86.159767][ T5308] remove_store+0xe5/0x150
[ 86.161708][ T5308] ? __pfx_remove_store+0x10/0x10
[ 86.163878][ T5308] ? sysfs_file_kobj+0x1e4/0x230
[ 86.166058][ T5308] ? sysfs_kf_write+0x166/0x260
[ 86.168108][ T5308] ? __pfx_sysfs_kf_write+0x10/0x10
[ 86.170391][ T5308] kernfs_fop_write_iter+0x3a4/0x540
[ 86.172750][ T5308] vfs_write+0x612/0xba0
[ 86.174608][ T5308] ? __pfx_vfs_write+0x10/0x10
[ 86.176881][ T5308] ? __fget_files+0x2a/0x420
[ 86.178956][ T5308] ksys_write+0x150/0x270
[ 86.180847][ T5308] ? __pfx_ksys_write+0x10/0x10
[ 86.182979][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.185557][ T5308] do_syscall_64+0x174/0x580
[ 86.187603][ T5308] ? trace_irq_disable+0x3b/0x140
[ 86.189754][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 86.191747][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.194292][ T5308] RIP: 0033:0x7f895e39e0d9
[ 86.196263][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.204389][ T5308] RSP: 002b:00007f895f1c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.207942][ T5308] RAX: ffffffffffffffda RBX: 00007f895e625fa0 RCX: 00007f895e39e0d9
[ 86.211377][ T5308] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 86.215059][ T5308] RBP: 00007f895e435024 R08: 0000000000000000 R09: 0000000000000000
[ 86.218532][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.222001][ T5308] R13: 00007f895e626038 R14: 00007f895e625fa0 R15: 00007ffcff05cbc8
[ 86.225509][ T5308]
[ 86.227316][ T5308] Kernel Offset: disabled
[ 86.229243][ T5308] Rebooting in 86400 seconds..