program:
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c000380850004"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
getpid()
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7)
read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8)
[ 124.933554][ T4649] Bluetooth: hci0: command tx timeout
[ 125.197329][ T5324] Console: switching to colour dummy device 80x25
[ 125.390449][ T5324] ------------[ cut here ]------------
[ 125.390466][ T5324] Memory manager not clean during takedown.
[ 125.390473][ T5324] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5324
[ 125.401507][ T5324] Modules linked in:
[ 125.403455][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 125.407901][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.414531][ T5324] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 125.417016][ T5324] Code: 4c 89 f7 e8 0e fc a0 fc 49 8b 06 4c 39 f0 75 0e e8 41 59 2f fc 5b 41 5e e9 89 f5 52 06 cc e8 33 59 2f fc 48 8d 3d 9c c2 ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 125.425313][ T5324] RSP: 0018:ffffc9000e22f720 EFLAGS: 00010287
[ 125.427996][ T5324] RAX: ffffffff859893dd RBX: ffff888000ba4c68 RCX: 0000000000100000
[ 125.432247][ T5324] RDX: ffffc9000f6d1000 RSI: 00000000000130ef RDI: ffffffff90865680
[ 125.435902][ T5324] RBP: ffffffff859742f0 R08: ffff88801fbcf100 R09: ffffffff8c8115c0
[ 125.439542][ T5324] R10: dffffc0000000000 R11: ffffffff859742f0 R12: ffff88801fbcf100
[ 125.443658][ T5324] R13: dffffc0000000000 R14: ffff888000ba4ca0 R15: dffffc0000000000
[ 125.447649][ T5324] FS: 00007f57bbd066c0(0000) GS:ffff88808c2bf000(0000) knlGS:0000000000000000
[ 125.452120][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 125.455175][ T5324] CR2: 00007f57baff36b8 CR3: 00000000124f6000 CR4: 0000000000352ef0
[ 125.458776][ T5324] Call Trace:
[ 125.460495][ T5324]
[ 125.461826][ T5324] drm_managed_release+0x208/0x380
[ 125.464153][ T5324] ? __pfx_virtio_gpu_release+0x10/0x10
[ 125.466736][ T5324] drm_dev_put+0xe0/0x120
[ 125.468833][ T5324] virtio_dev_remove+0x9c/0x1b0
[ 125.471062][ T5324] ? __pfx_virtio_dev_remove+0x10/0x10
[ 125.473689][ T5324] device_release_driver_internal+0x48b/0x880
[ 125.476450][ T5324] bus_remove_device+0x444/0x560
[ 125.478953][ T5324] ? __pfx_bus_remove_device+0x10/0x10
[ 125.481579][ T5324] ? kernfs_remove_by_name_ns+0x101/0x140
[ 125.484005][ T5324] device_del+0x524/0x8f0
[ 125.485994][ T5324] ? __pfx_device_del+0x10/0x10
[ 125.488162][ T5324] device_unregister+0x21/0xf0
[ 125.490500][ T5324] unregister_virtio_device+0x37/0x60
[ 125.493244][ T5324] virtio_pci_remove+0x7f/0xf0
[ 125.495876][ T5324] pci_device_remove+0x99/0x1c0
[ 125.499136][ T5324] ? __pfx_pci_device_remove+0x10/0x10
[ 125.502068][ T5324] device_release_driver_internal+0x48b/0x880
[ 125.505197][ T5324] pci_stop_bus_device+0xf6/0x120
[ 125.508070][ T5324] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 125.511461][ T5324] remove_store+0xe5/0x150
[ 125.513571][ T5324] ? __pfx_remove_store+0x10/0x10
[ 125.515801][ T5324] ? sysfs_file_kobj+0x1e4/0x230
[ 125.518060][ T5324] ? sysfs_kf_write+0x166/0x260
[ 125.520484][ T5324] ? __pfx_sysfs_kf_write+0x10/0x10
[ 125.523121][ T5324] kernfs_fop_write_iter+0x3a4/0x540
[ 125.526038][ T5324] vfs_write+0x612/0xba0
[ 125.528141][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 125.530399][ T5324] ? __fget_files+0x2a/0x420
[ 125.532461][ T5324] ksys_write+0x150/0x270
[ 125.534338][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 125.536698][ T5324] do_syscall_64+0x166/0x520
[ 125.538981][ T5324] ? trace_irq_disable+0x3b/0x140
[ 125.541665][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.545318][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 125.547660][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.550407][ T5324] RIP: 0033:0x7f57bad9e159
[ 125.552423][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.562633][ T5324] RSP: 002b:00007f57bbd05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.566350][ T5324] RAX: ffffffffffffffda RBX: 00007f57bb026090 RCX: 00007f57bad9e159
[ 125.570108][ T5324] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 125.574020][ T5324] RBP: 00007f57bae3506b R08: 0000000000000000 R09: 0000000000000000
[ 125.578474][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.582026][ T5324] R13: 00007f57bb026128 R14: 00007f57bb026090 R15: 00007ffdb565f938
[ 125.585573][ T5324]
[ 125.586998][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 125.590147][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 125.593855][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.598209][ T5324] Call Trace:
[ 125.599789][ T5324]
[ 125.601319][ T5324] vpanic+0x56d/0xa60
[ 125.603202][ T5324] ? __pfx__printk+0x10/0x10
[ 125.605298][ T5324] ? __pfx_vpanic+0x10/0x10
[ 125.607501][ T5324] ? is_bpf_text_address+0x292/0x2b0
[ 125.609753][ T5324] ? is_bpf_text_address+0x26/0x2b0
[ 125.612062][ T5324] panic+0xc5/0xd0
[ 125.613679][ T5324] ? __pfx_panic+0x10/0x10
[ 125.615496][ T5324] __warn+0x315/0x4c0
[ 125.617222][ T5324] ? drm_mm_takedown+0x54/0x70
[ 125.619521][ T5324] ? drm_mm_takedown+0x54/0x70
[ 125.622074][ T5324] __report_bug+0x276/0x570
[ 125.624506][ T5324] ? virtio_dev_remove+0x9c/0x1b0
[ 125.627053][ T5324] ? device_release_driver_internal+0x48b/0x880
[ 125.629832][ T5324] ? bus_remove_device+0x444/0x560
[ 125.632054][ T5324] ? drm_mm_takedown+0x54/0x70
[ 125.634241][ T5324] ? __pfx___report_bug+0x10/0x10
[ 125.636515][ T5324] ? do_syscall_64+0x166/0x520
[ 125.638686][ T5324] report_bug_entry+0x19b/0x290
[ 125.640851][ T5324] ? drm_mm_takedown+0x54/0x70
[ 125.642984][ T5324] ? drm_mm_takedown+0x59/0x70
[ 125.645144][ T5324] handle_bug+0xce/0x200
[ 125.647166][ T5324] exc_invalid_op+0x1a/0x50
[ 125.649516][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 125.651907][ T5324] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 125.654767][ T5324] Code: 4c 89 f7 e8 0e fc a0 fc 49 8b 06 4c 39 f0 75 0e e8 41 59 2f fc 5b 41 5e e9 89 f5 52 06 cc e8 33 59 2f fc 48 8d 3d 9c c2 ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 125.663329][ T5324] RSP: 0018:ffffc9000e22f720 EFLAGS: 00010287
[ 125.666027][ T5324] RAX: ffffffff859893dd RBX: ffff888000ba4c68 RCX: 0000000000100000
[ 125.669603][ T5324] RDX: ffffc9000f6d1000 RSI: 00000000000130ef RDI: ffffffff90865680
[ 125.672825][ T5324] RBP: ffffffff859742f0 R08: ffff88801fbcf100 R09: ffffffff8c8115c0
[ 125.675868][ T5324] R10: dffffc0000000000 R11: ffffffff859742f0 R12: ffff88801fbcf100
[ 125.679214][ T5324] R13: dffffc0000000000 R14: ffff888000ba4ca0 R15: dffffc0000000000
[ 125.682517][ T5324] ? __pfx_drm_gem_init_release+0x10/0x10
[ 125.684807][ T5324] ? __pfx_drm_gem_init_release+0x10/0x10
[ 125.687251][ T5324] ? drm_mm_takedown+0x4d/0x70
[ 125.689438][ T5324] drm_managed_release+0x208/0x380
[ 125.691780][ T5324] ? __pfx_virtio_gpu_release+0x10/0x10
[ 125.694260][ T5324] drm_dev_put+0xe0/0x120
[ 125.696235][ T5324] virtio_dev_remove+0x9c/0x1b0
[ 125.698511][ T5324] ? __pfx_virtio_dev_remove+0x10/0x10
[ 125.701231][ T5324] device_release_driver_internal+0x48b/0x880
[ 125.704104][ T5324] bus_remove_device+0x444/0x560
[ 125.706451][ T5324] ? __pfx_bus_remove_device+0x10/0x10
[ 125.708879][ T5324] ? kernfs_remove_by_name_ns+0x101/0x140
[ 125.711644][ T5324] device_del+0x524/0x8f0
[ 125.713596][ T5324] ? __pfx_device_del+0x10/0x10
[ 125.715819][ T5324] device_unregister+0x21/0xf0
[ 125.717971][ T5324] unregister_virtio_device+0x37/0x60
[ 125.720426][ T5324] virtio_pci_remove+0x7f/0xf0
[ 125.722974][ T5324] pci_device_remove+0x99/0x1c0
[ 125.726013][ T5324] ? __pfx_pci_device_remove+0x10/0x10
[ 125.729160][ T5324] device_release_driver_internal+0x48b/0x880
[ 125.732064][ T5324] pci_stop_bus_device+0xf6/0x120
[ 125.734366][ T5324] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 125.737330][ T5324] remove_store+0xe5/0x150
[ 125.739323][ T5324] ? __pfx_remove_store+0x10/0x10
[ 125.741626][ T5324] ? sysfs_file_kobj+0x1e4/0x230
[ 125.743766][ T5324] ? sysfs_kf_write+0x166/0x260
[ 125.746055][ T5324] ? __pfx_sysfs_kf_write+0x10/0x10
[ 125.748421][ T5324] kernfs_fop_write_iter+0x3a4/0x540
[ 125.750995][ T5324] vfs_write+0x612/0xba0
[ 125.753126][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 125.755637][ T5324] ? __fget_files+0x2a/0x420
[ 125.757977][ T5324] ksys_write+0x150/0x270
[ 125.759991][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 125.762325][ T5324] do_syscall_64+0x166/0x520
[ 125.764485][ T5324] ? trace_irq_disable+0x3b/0x140
[ 125.766853][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.769837][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 125.772465][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.775784][ T5324] RIP: 0033:0x7f57bad9e159
[ 125.777774][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.786759][ T5324] RSP: 002b:00007f57bbd05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 125.790841][ T5324] RAX: ffffffffffffffda RBX: 00007f57bb026090 RCX: 00007f57bad9e159
[ 125.794713][ T5324] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[ 125.798454][ T5324] RBP: 00007f57bae3506b R08: 0000000000000000 R09: 0000000000000000
[ 125.802140][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.806223][ T5324] R13: 00007f57bb026128 R14: 00007f57bb026090 R15: 00007ffdb565f938
[ 125.810537][ T5324]
[ 125.812413][ T5324] Kernel Offset: disabled
[ 125.814397][ T5324] Rebooting in 86400 seconds..