program:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='1', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
[ 132.862402][ T5306] Bluetooth: hci0: command tx timeout
[ 133.162557][ T5342] ------------[ cut here ]------------
[ 133.165222][ T5342] Memory manager not clean during takedown.
[ 133.167845][ T5342] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5342
[ 133.172491][ T5342] Modules linked in:
[ 133.174681][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 133.179580][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 133.185116][ T5342] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 133.187654][ T5342] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 133.197819][ T5342] RSP: 0018:ffffc9000ffb7720 EFLAGS: 00010283
[ 133.200881][ T5342] RAX: ffffffff858b47fd RBX: ffff888034a62868 RCX: 0000000000100000
[ 133.204135][ T5342] RDX: ffffc9000ec99000 RSI: 0000000000011cb2 RDI: ffffffff9063cda0
[ 133.207585][ T5342] RBP: ffffffff8589f650 R08: ffff88801ae45100 R09: ffffffff8c5f1c60
[ 133.211700][ T5342] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff88801ae45100
[ 133.215324][ T5342] R13: dffffc0000000000 R14: ffff888034a628a0 R15: dffffc0000000000
[ 133.218768][ T5342] FS: 00007f84b2a966c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 133.222766][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 133.225513][ T5342] CR2: 00007f408c3909c0 CR3: 000000003feef000 CR4: 0000000000352ef0
[ 133.228792][ T5342] Call Trace:
[ 133.230354][ T5342]
[ 133.231658][ T5342] drm_managed_release+0x208/0x380
[ 133.233824][ T5342] ? __pfx_virtio_gpu_release+0x10/0x10
[ 133.236118][ T5342] drm_dev_put+0xe0/0x120
[ 133.237841][ T5342] virtio_dev_remove+0x9c/0x1b0
[ 133.240056][ T5342] ? __pfx_virtio_dev_remove+0x10/0x10
[ 133.242250][ T5342] device_release_driver_internal+0x48b/0x880
[ 133.244649][ T5342] bus_remove_device+0x444/0x560
[ 133.246723][ T5342] ? __pfx_bus_remove_device+0x10/0x10
[ 133.249057][ T5342] ? kernfs_remove_by_name_ns+0x101/0x140
[ 133.251422][ T5342] device_del+0x524/0x8f0
[ 133.253196][ T5342] ? __pfx_device_del+0x10/0x10
[ 133.255176][ T5342] device_unregister+0x21/0xf0
[ 133.257219][ T5342] unregister_virtio_device+0x37/0x60
[ 133.259591][ T5342] virtio_pci_remove+0x7f/0xf0
[ 133.261522][ T5342] pci_device_remove+0x99/0x1c0
[ 133.263486][ T5342] ? __pfx_pci_device_remove+0x10/0x10
[ 133.265763][ T5342] device_release_driver_internal+0x48b/0x880
[ 133.268527][ T5342] pci_stop_bus_device+0xf6/0x120
[ 133.270777][ T5342] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 133.273638][ T5342] remove_store+0xe5/0x150
[ 133.275645][ T5342] ? __pfx_remove_store+0x10/0x10
[ 133.277952][ T5342] ? sysfs_file_kobj+0x1e4/0x230
[ 133.280343][ T5342] ? sysfs_kf_write+0x166/0x260
[ 133.282610][ T5342] ? __pfx_sysfs_kf_write+0x10/0x10
[ 133.285610][ T5342] kernfs_fop_write_iter+0x3a4/0x540
[ 133.289566][ T5342] vfs_write+0x612/0xba0
[ 133.292006][ T5342] ? __pfx_vfs_write+0x10/0x10
[ 133.294342][ T5342] ? __fget_files+0x2a/0x420
[ 133.296442][ T5342] ksys_write+0x150/0x270
[ 133.298622][ T5342] ? __pfx_ksys_write+0x10/0x10
[ 133.302103][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.305377][ T5342] do_syscall_64+0x174/0x580
[ 133.307753][ T5342] ? trace_irq_disable+0x3b/0x140
[ 133.310524][ T5342] ? clear_bhb_loop+0x40/0x90
[ 133.313009][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.316323][ T5342] RIP: 0033:0x7f84b1b9e019
[ 133.318845][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 133.328331][ T5342] RSP: 002b:00007f84b2a95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 133.332902][ T5342] RAX: ffffffffffffffda RBX: 00007f84b1e25fa0 RCX: 00007f84b1b9e019
[ 133.337950][ T5342] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000006
[ 133.343915][ T5342] RBP: 00007f84b1c3500c R08: 0000000000000000 R09: 0000000000000000
[ 133.348790][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 133.353634][ T5342] R13: 00007f84b1e26038 R14: 00007f84b1e25fa0 R15: 00007ffcbc95a7a8
[ 133.357189][ T5342]
[ 133.358904][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 133.363705][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 133.368677][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 133.373525][ T5342] Call Trace:
[ 133.375261][ T5342]
[ 133.376812][ T5342] vpanic+0x56c/0xa60
[ 133.379250][ T5342] ? __pfx__printk+0x10/0x10
[ 133.381791][ T5342] ? __pfx_vpanic+0x10/0x10
[ 133.384226][ T5342] ? is_bpf_text_address+0x292/0x2b0
[ 133.386806][ T5342] ? is_bpf_text_address+0x26/0x2b0
[ 133.389661][ T5342] panic+0xc5/0xd0
[ 133.392116][ T5342] ? __pfx_panic+0x10/0x10
[ 133.395075][ T5342] __warn+0x315/0x4c0
[ 133.397229][ T5342] ? drm_mm_takedown+0x54/0x70
[ 133.399491][ T5342] ? drm_mm_takedown+0x54/0x70
[ 133.401789][ T5342] __report_bug+0x276/0x570
[ 133.404357][ T5342] ? virtio_dev_remove+0x9c/0x1b0
[ 133.408225][ T5342] ? device_release_driver_internal+0x48b/0x880
[ 133.411736][ T5342] ? bus_remove_device+0x444/0x560
[ 133.414161][ T5342] ? drm_mm_takedown+0x54/0x70
[ 133.416611][ T5342] ? __pfx___report_bug+0x10/0x10
[ 133.419326][ T5342] ? do_syscall_64+0x174/0x580
[ 133.422607][ T5342] report_bug_entry+0x19a/0x290
[ 133.425578][ T5342] ? drm_mm_takedown+0x54/0x70
[ 133.428026][ T5342] ? drm_mm_takedown+0x59/0x70
[ 133.430315][ T5342] handle_bug+0xce/0x200
[ 133.432292][ T5342] exc_invalid_op+0x1a/0x50
[ 133.434521][ T5342] asm_exc_invalid_op+0x1a/0x20
[ 133.437091][ T5342] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 133.440098][ T5342] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 133.448723][ T5342] RSP: 0018:ffffc9000ffb7720 EFLAGS: 00010283
[ 133.451760][ T5342] RAX: ffffffff858b47fd RBX: ffff888034a62868 RCX: 0000000000100000
[ 133.456220][ T5342] RDX: ffffc9000ec99000 RSI: 0000000000011cb2 RDI: ffffffff9063cda0
[ 133.460006][ T5342] RBP: ffffffff8589f650 R08: ffff88801ae45100 R09: ffffffff8c5f1c60
[ 133.463744][ T5342] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff88801ae45100
[ 133.467833][ T5342] R13: dffffc0000000000 R14: ffff888034a628a0 R15: dffffc0000000000
[ 133.471751][ T5342] ? __pfx_drm_gem_init_release+0x10/0x10
[ 133.474455][ T5342] ? __pfx_drm_gem_init_release+0x10/0x10
[ 133.477083][ T5342] ? drm_mm_takedown+0x4d/0x70
[ 133.479867][ T5342] drm_managed_release+0x208/0x380
[ 133.483194][ T5342] ? __pfx_virtio_gpu_release+0x10/0x10
[ 133.486633][ T5342] drm_dev_put+0xe0/0x120
[ 133.489271][ T5342] virtio_dev_remove+0x9c/0x1b0
[ 133.492478][ T5342] ? __pfx_virtio_dev_remove+0x10/0x10
[ 133.496082][ T5342] device_release_driver_internal+0x48b/0x880
[ 133.499127][ T5342] bus_remove_device+0x444/0x560
[ 133.501569][ T5342] ? __pfx_bus_remove_device+0x10/0x10
[ 133.504429][ T5342] ? kernfs_remove_by_name_ns+0x101/0x140
[ 133.507396][ T5342] device_del+0x524/0x8f0
[ 133.509613][ T5342] ? __pfx_device_del+0x10/0x10
[ 133.512160][ T5342] device_unregister+0x21/0xf0
[ 133.514627][ T5342] unregister_virtio_device+0x37/0x60
[ 133.517103][ T5342] virtio_pci_remove+0x7f/0xf0
[ 133.519484][ T5342] pci_device_remove+0x99/0x1c0
[ 133.522032][ T5342] ? __pfx_pci_device_remove+0x10/0x10
[ 133.524871][ T5342] device_release_driver_internal+0x48b/0x880
[ 133.527966][ T5342] pci_stop_bus_device+0xf6/0x120
[ 133.530617][ T5342] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 133.534216][ T5342] remove_store+0xe5/0x150
[ 133.536732][ T5342] ? __pfx_remove_store+0x10/0x10
[ 133.539286][ T5342] ? sysfs_file_kobj+0x1e4/0x230
[ 133.541906][ T5342] ? sysfs_kf_write+0x166/0x260
[ 133.544576][ T5342] ? __pfx_sysfs_kf_write+0x10/0x10
[ 133.547415][ T5342] kernfs_fop_write_iter+0x3a4/0x540
[ 133.550385][ T5342] vfs_write+0x612/0xba0
[ 133.553063][ T5342] ? __pfx_vfs_write+0x10/0x10
[ 133.555694][ T5342] ? __fget_files+0x2a/0x420
[ 133.557982][ T5342] ksys_write+0x150/0x270
[ 133.560197][ T5342] ? __pfx_ksys_write+0x10/0x10
[ 133.562937][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.566458][ T5342] do_syscall_64+0x174/0x580
[ 133.568791][ T5342] ? trace_irq_disable+0x3b/0x140
[ 133.571201][ T5342] ? clear_bhb_loop+0x40/0x90
[ 133.573531][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.576325][ T5342] RIP: 0033:0x7f84b1b9e019
[ 133.578513][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 133.587162][ T5342] RSP: 002b:00007f84b2a95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 133.591939][ T5342] RAX: ffffffffffffffda RBX: 00007f84b1e25fa0 RCX: 00007f84b1b9e019
[ 133.596461][ T5342] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000006
[ 133.600237][ T5342] RBP: 00007f84b1c3500c R08: 0000000000000000 R09: 0000000000000000
[ 133.604557][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 133.609057][ T5342] R13: 00007f84b1e26038 R14: 00007f84b1e25fa0 R15: 00007ffcbc95a7a8
[ 133.612857][ T5342]
[ 133.614962][ T5342] Kernel Offset: disabled
[ 133.617566][ T5342] Rebooting in 86400 seconds..