program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x8001, 0x80)
write(r2, &(0x7f00000001c0)='1', 0x1)
[ 76.772097][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.772192][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.962196][ T5341] Console: switching to colour dummy device 80x25
[ 77.189038][ T5341] ------------[ cut here ]------------
[ 77.189053][ T5341] Memory manager not clean during takedown.
[ 77.189058][ T5341] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5341
[ 77.207351][ T5341] Modules linked in:
[ 77.211328][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.216612][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.227265][ T5341] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 77.245344][ T5341] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 77.268222][ T5341] RSP: 0018:ffffc9000f9a76f0 EFLAGS: 00010283
[ 77.282546][ T5341] RAX: ffffffff85ab688d RBX: ffff8880361a9468 RCX: 0000000000100000
[ 77.286463][ T5341] RDX: ffffc9000ef69000 RSI: 0000000000015919 RDI: ffffffff91ca1cd0
[ 77.289802][ T5341] RBP: ffffffff85aa1d00 R08: ffff88803133e200 R09: ffffffff8ca213c0
[ 77.293145][ T5341] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff88803133e200
[ 77.297384][ T5341] R13: dffffc0000000000 R14: ffff8880361a94a0 R15: dffffc0000000000
[ 77.303666][ T5341] FS: 00007fa4267fa6c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 77.309918][ T5341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.314274][ T5341] CR2: 00007fa425bfc6b8 CR3: 00000000447ed000 CR4: 0000000000352ef0
[ 77.320103][ T5341] Call Trace:
[ 77.322323][ T5341]
[ 77.324065][ T5341] drm_managed_release+0x208/0x380
[ 77.326567][ T5341] ? __pfx_virtio_gpu_release+0x10/0x10
[ 77.329105][ T5341] drm_dev_put+0xe0/0x120
[ 77.330989][ T5341] virtio_dev_remove+0x9c/0x1b0
[ 77.333005][ T5341] ? __pfx_virtio_dev_remove+0x10/0x10
[ 77.335080][ T5341] device_release_driver_internal+0x42b/0x7d0
[ 77.339060][ T5341] bus_remove_device+0x444/0x560
[ 77.342146][ T5341] ? __pfx_bus_remove_device+0x10/0x10
[ 77.349165][ T5341] ? kernfs_remove_by_name_ns+0x101/0x140
[ 77.353461][ T5341] device_del+0x524/0x8f0
[ 77.356414][ T5341] ? __pfx_device_del+0x10/0x10
[ 77.360878][ T5341] device_unregister+0x21/0xf0
[ 77.364168][ T5341] unregister_virtio_device+0x37/0x60
[ 77.368690][ T5341] virtio_pci_remove+0x7f/0xf0
[ 77.371751][ T5341] pci_device_remove+0x99/0x1c0
[ 77.374834][ T5341] ? __pfx_pci_device_remove+0x10/0x10
[ 77.381190][ T5341] device_release_driver_internal+0x42b/0x7d0
[ 77.385615][ T5341] pci_stop_bus_device+0xf6/0x120
[ 77.389182][ T5341] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 77.393518][ T5341] remove_store+0xe5/0x150
[ 77.395985][ T5341] ? __pfx_remove_store+0x10/0x10
[ 77.399048][ T5341] ? sysfs_file_kobj+0x1e4/0x230
[ 77.402173][ T5341] ? sysfs_kf_write+0x166/0x260
[ 77.405242][ T5341] ? __pfx_sysfs_kf_write+0x10/0x10
[ 77.408539][ T5341] kernfs_fop_write_iter+0x3a4/0x540
[ 77.411756][ T5341] vfs_write+0x612/0xba0
[ 77.414352][ T5341] ? __pfx_vfs_write+0x10/0x10
[ 77.417418][ T5341] ? __fget_files+0x3a2/0x420
[ 77.421726][ T5341] ? __fget_files+0x2a/0x420
[ 77.425574][ T5341] ? fdget+0x1ac/0x250
[ 77.428104][ T5341] ksys_write+0x150/0x270
[ 77.430856][ T5341] ? __pfx_ksys_write+0x10/0x10
[ 77.433853][ T5341] do_syscall_64+0x16a/0x530
[ 77.436681][ T5341] ? trace_irq_disable+0x3b/0x140
[ 77.438785][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.443128][ T5341] ? clear_bhb_loop+0x70/0xc0
[ 77.446652][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.451256][ T5341] RIP: 0033:0x7fa4259a8f19
[ 77.454388][ T5341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.467770][ T5341] RSP: 002b:00007fa4267f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 77.474506][ T5341] RAX: ffffffffffffffda RBX: 00007fa425c25fa0 RCX: 00007fa4259a8f19
[ 77.478643][ T5341] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 77.482004][ T5341] RBP: 00007fa425a37f6d R08: 0000000000000000 R09: 0000000000000000
[ 77.486623][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.492347][ T5341] R13: 00007fa425c26038 R14: 00007fa425c25fa0 R15: 00007ffe90791ba8
[ 77.497234][ T5341]
[ 77.499296][ T5341] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.504101][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.510547][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.516333][ T5341] Call Trace:
[ 77.518345][ T5341]
[ 77.520226][ T5341] vpanic+0x26f/0x710
[ 77.524853][ T5341] panic+0xc5/0xd0
[ 77.526317][ T5341] ? __pfx_panic+0x10/0x10
[ 77.528696][ T5341] __warn+0x315/0x4c0
[ 77.532387][ T5341] ? drm_mm_takedown+0x54/0x70
[ 77.535320][ T5341] ? drm_mm_takedown+0x54/0x70
[ 77.538266][ T5341] __report_bug+0x276/0x570
[ 77.541140][ T5341] ? bus_remove_device+0x444/0x560
[ 77.558705][ T5341] ? device_del+0x524/0x8f0
[ 77.565821][ T5341] ? device_unregister+0x21/0xf0
[ 77.571107][ T5341] ? drm_mm_takedown+0x54/0x70
[ 77.573297][ T5341] ? __pfx___report_bug+0x10/0x10
[ 77.575669][ T5341] report_bug_entry+0x19b/0x290
[ 77.590597][ T5341] ? drm_mm_takedown+0x54/0x70
[ 77.592575][ T5341] ? drm_mm_takedown+0x59/0x70
[ 77.594831][ T5341] handle_bug+0xce/0x200
[ 77.598957][ T5341] exc_invalid_op+0x1a/0x50
[ 77.603847][ T5341] asm_exc_invalid_op+0x1a/0x20
[ 77.605993][ T5341] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 77.612960][ T5341] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 77.631599][ T5341] RSP: 0018:ffffc9000f9a76f0 EFLAGS: 00010283
[ 77.634185][ T5341] RAX: ffffffff85ab688d RBX: ffff8880361a9468 RCX: 0000000000100000
[ 77.637578][ T5341] RDX: ffffc9000ef69000 RSI: 0000000000015919 RDI: ffffffff91ca1cd0
[ 77.661047][ T5341] RBP: ffffffff85aa1d00 R08: ffff88803133e200 R09: ffffffff8ca213c0
[ 77.664905][ T5341] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff88803133e200
[ 77.684672][ T5341] R13: dffffc0000000000 R14: ffff8880361a94a0 R15: dffffc0000000000
[ 77.697611][ T5341] ? __pfx_drm_gem_init_release+0x10/0x10
[ 77.707254][ T5341] ? __pfx_drm_gem_init_release+0x10/0x10
[ 77.717013][ T5341] ? drm_mm_takedown+0x4d/0x70
[ 77.724690][ T5341] drm_managed_release+0x208/0x380
[ 77.732136][ T5341] ? __pfx_virtio_gpu_release+0x10/0x10
[ 77.734338][ T5341] drm_dev_put+0xe0/0x120
[ 77.736117][ T5341] virtio_dev_remove+0x9c/0x1b0
[ 77.738094][ T5341] ? __pfx_virtio_dev_remove+0x10/0x10
[ 77.740294][ T5341] device_release_driver_internal+0x42b/0x7d0
[ 77.769351][ T5341] bus_remove_device+0x444/0x560
[ 77.778830][ T5341] ? __pfx_bus_remove_device+0x10/0x10
[ 77.788069][ T5341] ? kernfs_remove_by_name_ns+0x101/0x140
[ 77.798897][ T5341] device_del+0x524/0x8f0
[ 77.805633][ T5341] ? __pfx_device_del+0x10/0x10
[ 77.813318][ T5341] device_unregister+0x21/0xf0
[ 77.829060][ T5341] unregister_virtio_device+0x37/0x60
[ 77.832105][ T5341] virtio_pci_remove+0x7f/0xf0
[ 77.835214][ T5341] pci_device_remove+0x99/0x1c0
[ 77.842740][ T5341] ? __pfx_pci_device_remove+0x10/0x10
[ 77.851983][ T5341] device_release_driver_internal+0x42b/0x7d0
[ 77.862256][ T5341] pci_stop_bus_device+0xf6/0x120
[ 77.875623][ T5341] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 77.891731][ T5341] remove_store+0xe5/0x150
[ 77.893949][ T5341] ? __pfx_remove_store+0x10/0x10
[ 77.896442][ T5341] ? sysfs_file_kobj+0x1e4/0x230
[ 77.898914][ T5341] ? sysfs_kf_write+0x166/0x260
[ 77.913541][ T5341] ? __pfx_sysfs_kf_write+0x10/0x10
[ 77.916214][ T5341] kernfs_fop_write_iter+0x3a4/0x540
[ 77.919012][ T5341] vfs_write+0x612/0xba0
[ 77.921264][ T5341] ? __pfx_vfs_write+0x10/0x10
[ 77.923300][ T5341] ? __fget_files+0x3a2/0x420
[ 77.925353][ T5341] ? __fget_files+0x2a/0x420
[ 77.927403][ T5341] ? fdget+0x1ac/0x250
[ 77.929200][ T5341] ksys_write+0x150/0x270
[ 77.945346][ T5341] ? __pfx_ksys_write+0x10/0x10
[ 77.947653][ T5341] do_syscall_64+0x16a/0x530
[ 77.949713][ T5341] ? trace_irq_disable+0x3b/0x140
[ 77.962244][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.964609][ T5341] ? clear_bhb_loop+0x70/0xc0
[ 77.966543][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.968890][ T5341] RIP: 0033:0x7fa4259a8f19
[ 77.977360][ T5341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.993958][ T5341] RSP: 002b:00007fa4267f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 78.005616][ T5341] RAX: ffffffffffffffda RBX: 00007fa425c25fa0 RCX: 00007fa4259a8f19
[ 78.022881][ T5341] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 78.027735][ T5341] RBP: 00007fa425a37f6d R08: 0000000000000000 R09: 0000000000000000
[ 78.042898][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.047637][ T5341] R13: 00007fa425c26038 R14: 00007fa425c25fa0 R15: 00007ffe90791ba8
[ 78.052322][ T5341]
[ 78.062333][ T5341] Kernel Offset: disabled
[ 78.065470][ T5341] Rebooting in 86400 seconds..