program:
mkdir(&(0x7f0000000140)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000340), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000340), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='1', 0x1)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
[ 102.370969][ T5301] Bluetooth: hci0: command tx timeout
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x272000)
[ 102.629850][ T5354] Console: switching to colour dummy device 80x25
[ 102.860562][ T5354] ------------[ cut here ]------------
[ 102.860576][ T5354] Memory manager not clean during takedown.
[ 102.860583][ T5354] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5354
[ 102.870274][ T5354] Modules linked in:
[ 102.872175][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.875779][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.880378][ T5354] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 102.882976][ T5354] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 102.891426][ T5354] RSP: 0018:ffffc90000ef76f0 EFLAGS: 00010293
[ 102.894031][ T5354] RAX: ffffffff85ab693d RBX: ffff8880361cf068 RCX: ffff888013d8cb00
[ 102.898261][ T5354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 102.901613][ T5354] RBP: ffffffff85aa1db0 R08: ffff888031386300 R09: ffffffff8ca213c0
[ 102.904951][ T5354] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888031386300
[ 102.908528][ T5354] R13: dffffc0000000000 R14: ffff8880361cf0a0 R15: dffffc0000000000
[ 102.912131][ T5354] FS: 00007f885bc026c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 102.916184][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.919466][ T5354] CR2: 00007f36d0ac0980 CR3: 0000000013647000 CR4: 0000000000352ef0
[ 102.922862][ T5354] Call Trace:
[ 102.924286][ T5354]
[ 102.925589][ T5354] drm_managed_release+0x208/0x380
[ 102.927942][ T5354] ? __pfx_virtio_gpu_release+0x10/0x10
[ 102.930557][ T5354] drm_dev_put+0xe0/0x120
[ 102.932495][ T5354] virtio_dev_remove+0x9c/0x1b0
[ 102.934687][ T5354] ? __pfx_virtio_dev_remove+0x10/0x10
[ 102.937099][ T5354] device_release_driver_internal+0x42b/0x7d0
[ 102.939991][ T5354] bus_remove_device+0x444/0x560
[ 102.942255][ T5354] ? __pfx_bus_remove_device+0x10/0x10
[ 102.944602][ T5354] ? kernfs_remove_by_name_ns+0x101/0x140
[ 102.950409][ T5354] device_del+0x524/0x8f0
[ 102.952162][ T5354] ? __pfx_device_del+0x10/0x10
[ 102.954130][ T5354] device_unregister+0x21/0xf0
[ 102.956071][ T5354] unregister_virtio_device+0x37/0x60
[ 102.958441][ T5354] virtio_pci_remove+0x7f/0xf0
[ 102.960448][ T5354] pci_device_remove+0x99/0x1c0
[ 102.962630][ T5354] ? __pfx_pci_device_remove+0x10/0x10
[ 102.965062][ T5354] device_release_driver_internal+0x42b/0x7d0
[ 102.967852][ T5354] pci_stop_bus_device+0xf6/0x120
[ 102.970193][ T5354] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 102.973042][ T5354] remove_store+0xe5/0x150
[ 102.975083][ T5354] ? __pfx_remove_store+0x10/0x10
[ 102.977493][ T5354] ? sysfs_file_kobj+0x1e4/0x230
[ 102.979839][ T5354] ? sysfs_kf_write+0x166/0x260
[ 102.982045][ T5354] ? __pfx_sysfs_kf_write+0x10/0x10
[ 102.984339][ T5354] kernfs_fop_write_iter+0x3a4/0x540
[ 102.986653][ T5354] vfs_write+0x612/0xba0
[ 102.989083][ T5354] ? __pfx_vfs_write+0x10/0x10
[ 102.991257][ T5354] ? __fget_files+0x3a2/0x420
[ 102.993368][ T5354] ? __fget_files+0x2a/0x420
[ 102.995387][ T5354] ? fdget+0x1ac/0x250
[ 102.997651][ T5354] ksys_write+0x150/0x270
[ 102.999634][ T5354] ? __pfx_ksys_write+0x10/0x10
[ 103.001946][ T5354] do_syscall_64+0x16a/0x530
[ 103.004063][ T5354] ? trace_irq_disable+0x3b/0x140
[ 103.008574][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.011807][ T5354] ? clear_bhb_loop+0x70/0xc0
[ 103.013961][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.016389][ T5354] RIP: 0033:0x7f885ad9fb19
[ 103.018224][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.026807][ T5354] RSP: 002b:00007f885bc01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.030652][ T5354] RAX: ffffffffffffffda RBX: 00007f885b026090 RCX: 00007f885ad9fb19
[ 103.034176][ T5354] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 103.037667][ T5354] RBP: 00007f885ae37b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.041123][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.044685][ T5354] R13: 00007f885b026128 R14: 00007f885b026090 R15: 00007ffe63cfcc68
[ 103.048297][ T5354]
[ 103.049712][ T5354] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.052806][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.056611][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.060999][ T5354] Call Trace:
[ 103.062384][ T5354]
[ 103.063647][ T5354] vpanic+0x26f/0x710
[ 103.065424][ T5354] panic+0xc5/0xd0
[ 103.067056][ T5354] ? __pfx_panic+0x10/0x10
[ 103.069082][ T5354] __warn+0x315/0x4c0
[ 103.070800][ T5354] ? drm_mm_takedown+0x54/0x70
[ 103.073004][ T5354] ? drm_mm_takedown+0x54/0x70
[ 103.075151][ T5354] __report_bug+0x276/0x570
[ 103.077162][ T5354] ? bus_remove_device+0x444/0x560
[ 103.079273][ T5354] ? device_del+0x524/0x8f0
[ 103.081316][ T5354] ? device_unregister+0x21/0xf0
[ 103.083380][ T5354] ? drm_mm_takedown+0x54/0x70
[ 103.085535][ T5354] ? __pfx___report_bug+0x10/0x10
[ 103.087872][ T5354] report_bug_entry+0x19b/0x290
[ 103.090003][ T5354] ? drm_mm_takedown+0x54/0x70
[ 103.092227][ T5354] ? drm_mm_takedown+0x59/0x70
[ 103.094358][ T5354] handle_bug+0xce/0x200
[ 103.096140][ T5354] exc_invalid_op+0x1a/0x50
[ 103.098099][ T5354] asm_exc_invalid_op+0x1a/0x20
[ 103.100244][ T5354] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 103.102574][ T5354] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 103.110923][ T5354] RSP: 0018:ffffc90000ef76f0 EFLAGS: 00010293
[ 103.113630][ T5354] RAX: ffffffff85ab693d RBX: ffff8880361cf068 RCX: ffff888013d8cb00
[ 103.116974][ T5354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 103.120308][ T5354] RBP: ffffffff85aa1db0 R08: ffff888031386300 R09: ffffffff8ca213c0
[ 103.123678][ T5354] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888031386300
[ 103.127195][ T5354] R13: dffffc0000000000 R14: ffff8880361cf0a0 R15: dffffc0000000000
[ 103.130729][ T5354] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.133158][ T5354] ? __pfx_drm_gem_init_release+0x10/0x10
[ 103.135393][ T5354] ? drm_mm_takedown+0x4d/0x70
[ 103.137299][ T5354] drm_managed_release+0x208/0x380
[ 103.139264][ T5354] ? __pfx_virtio_gpu_release+0x10/0x10
[ 103.141442][ T5354] drm_dev_put+0xe0/0x120
[ 103.143002][ T5354] virtio_dev_remove+0x9c/0x1b0
[ 103.144894][ T5354] ? __pfx_virtio_dev_remove+0x10/0x10
[ 103.147152][ T5354] device_release_driver_internal+0x42b/0x7d0
[ 103.149730][ T5354] bus_remove_device+0x444/0x560
[ 103.151818][ T5354] ? __pfx_bus_remove_device+0x10/0x10
[ 103.154050][ T5354] ? kernfs_remove_by_name_ns+0x101/0x140
[ 103.156306][ T5354] device_del+0x524/0x8f0
[ 103.158152][ T5354] ? __pfx_device_del+0x10/0x10
[ 103.160223][ T5354] device_unregister+0x21/0xf0
[ 103.162241][ T5354] unregister_virtio_device+0x37/0x60
[ 103.164535][ T5354] virtio_pci_remove+0x7f/0xf0
[ 103.166557][ T5354] pci_device_remove+0x99/0x1c0
[ 103.168583][ T5354] ? __pfx_pci_device_remove+0x10/0x10
[ 103.170850][ T5354] device_release_driver_internal+0x42b/0x7d0
[ 103.173401][ T5354] pci_stop_bus_device+0xf6/0x120
[ 103.175531][ T5354] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 103.178248][ T5354] remove_store+0xe5/0x150
[ 103.180156][ T5354] ? __pfx_remove_store+0x10/0x10
[ 103.182232][ T5354] ? sysfs_file_kobj+0x1e4/0x230
[ 103.184286][ T5354] ? sysfs_kf_write+0x166/0x260
[ 103.186403][ T5354] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.188581][ T5354] kernfs_fop_write_iter+0x3a4/0x540
[ 103.190916][ T5354] vfs_write+0x612/0xba0
[ 103.192783][ T5354] ? __pfx_vfs_write+0x10/0x10
[ 103.194877][ T5354] ? __fget_files+0x3a2/0x420
[ 103.196918][ T5354] ? __fget_files+0x2a/0x420
[ 103.198908][ T5354] ? fdget+0x1ac/0x250
[ 103.200655][ T5354] ksys_write+0x150/0x270
[ 103.202553][ T5354] ? __pfx_ksys_write+0x10/0x10
[ 103.204679][ T5354] do_syscall_64+0x16a/0x530
[ 103.206739][ T5354] ? trace_irq_disable+0x3b/0x140
[ 103.208923][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.211526][ T5354] ? clear_bhb_loop+0x70/0xc0
[ 103.213578][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.215897][ T5354] RIP: 0033:0x7f885ad9fb19
[ 103.217735][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.225888][ T5354] RSP: 002b:00007f885bc01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.229454][ T5354] RAX: ffffffffffffffda RBX: 00007f885b026090 RCX: 00007f885ad9fb19
[ 103.232729][ T5354] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 103.236154][ T5354] RBP: 00007f885ae37b70 R08: 0000000000000000 R09: 0000000000000000
[ 103.239509][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.242848][ T5354] R13: 00007f885b026128 R14: 00007f885b026090 R15: 00007ffe63cfcc68
[ 103.246217][ T5354]
[ 103.247966][ T5354] Kernel Offset: disabled
[ 103.249808][ T5354] Rebooting in 86400 seconds..