program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) swapon(&(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x48000) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x2, 0x10000, 0x7fffffff, 0x4, 0x401}, &(0x7f00000002c0)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x2, 0x10000, 0x7fffffff, 0x4, 0x401}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000300)={r2, 0x2}, 0x8) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x8001, 0x80) write(r4, &(0x7f00000001c0)='1', 0x1) (async) write(r4, &(0x7f00000001c0)='1', 0x1) [ 91.370100][ T4665] Bluetooth: hci0: command tx timeout [ 91.539898][ T5349] Console: switching to colour dummy device 80x25 [ 91.685885][ T5349] ------------[ cut here ]------------ [ 91.685900][ T5349] Memory manager not clean during takedown. [ 91.685904][ T5349] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5349 [ 91.695711][ T5349] Modules linked in: [ 91.697463][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 91.700872][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.705119][ T5349] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 91.707491][ T5349] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 91.716578][ T5349] RSP: 0018:ffffc9000e3af6f0 EFLAGS: 00010293 [ 91.719217][ T5349] RAX: ffffffff85ab688d RBX: ffff8880361c1c68 RCX: ffff88803351cb00 [ 91.723802][ T5349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cd0 [ 91.727224][ T5349] RBP: ffffffff85aa1d00 R08: ffff8880312de300 R09: ffffffff8ca213c0 [ 91.730763][ T5349] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff8880312de300 [ 91.734332][ T5349] R13: dffffc0000000000 R14: ffff8880361c1ca0 R15: dffffc0000000000 [ 91.737802][ T5349] FS: 00007f23af2de6c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000 [ 91.741698][ T5349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.744656][ T5349] CR2: 00007ffe7adeb040 CR3: 0000000041995000 CR4: 0000000000352ef0 [ 91.748010][ T5349] Call Trace: [ 91.749469][ T5349] [ 91.750881][ T5349] drm_managed_release+0x208/0x380 [ 91.753283][ T5349] ? __pfx_virtio_gpu_release+0x10/0x10 [ 91.755763][ T5349] drm_dev_put+0xe0/0x120 [ 91.757659][ T5349] virtio_dev_remove+0x9c/0x1b0 [ 91.759798][ T5349] ? __pfx_virtio_dev_remove+0x10/0x10 [ 91.762010][ T5349] device_release_driver_internal+0x42b/0x7d0 [ 91.764658][ T5349] bus_remove_device+0x444/0x560 [ 91.766729][ T5349] ? __pfx_bus_remove_device+0x10/0x10 [ 91.768951][ T5349] ? kernfs_remove_by_name_ns+0x101/0x140 [ 91.771221][ T5349] device_del+0x524/0x8f0 [ 91.773186][ T5349] ? __pfx_device_del+0x10/0x10 [ 91.775252][ T5349] device_unregister+0x21/0xf0 [ 91.777236][ T5349] unregister_virtio_device+0x37/0x60 [ 91.779511][ T5349] virtio_pci_remove+0x7f/0xf0 [ 91.781638][ T5349] pci_device_remove+0x99/0x1c0 [ 91.783936][ T5349] ? __pfx_pci_device_remove+0x10/0x10 [ 91.786331][ T5349] device_release_driver_internal+0x42b/0x7d0 [ 91.789055][ T5349] pci_stop_bus_device+0xf6/0x120 [ 91.791324][ T5349] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 91.794306][ T5349] remove_store+0xe5/0x150 [ 91.796253][ T5349] ? __pfx_remove_store+0x10/0x10 [ 91.798484][ T5349] ? sysfs_file_kobj+0x1e4/0x230 [ 91.800740][ T5349] ? sysfs_kf_write+0x166/0x260 [ 91.803126][ T5349] ? __pfx_sysfs_kf_write+0x10/0x10 [ 91.805411][ T5349] kernfs_fop_write_iter+0x3a4/0x540 [ 91.807771][ T5349] vfs_write+0x612/0xba0 [ 91.809695][ T5349] ? __pfx_vfs_write+0x10/0x10 [ 91.811848][ T5349] ? __fget_files+0x3a2/0x420 [ 91.814453][ T5349] ? __fget_files+0x2a/0x420 [ 91.816594][ T5349] ? fdget+0x1ac/0x250 [ 91.818449][ T5349] ksys_write+0x150/0x270 [ 91.820421][ T5349] ? __pfx_ksys_write+0x10/0x10 [ 91.822833][ T5349] do_syscall_64+0x16a/0x530 [ 91.824860][ T5349] ? trace_irq_disable+0x3b/0x140 [ 91.826900][ T5349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.829548][ T5349] ? clear_bhb_loop+0x70/0xc0 [ 91.831581][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.834262][ T5349] RIP: 0033:0x7f23ae3a8f19 [ 91.836248][ T5349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.844622][ T5349] RSP: 002b:00007f23af2ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.848225][ T5349] RAX: ffffffffffffffda RBX: 00007f23ae626090 RCX: 00007f23ae3a8f19 [ 91.851368][ T5349] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 91.855066][ T5349] RBP: 00007f23ae437f6d R08: 0000000000000000 R09: 0000000000000000 [ 91.858443][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.861822][ T5349] R13: 00007f23ae626128 R14: 00007f23ae626090 R15: 00007ffe7adeac48 [ 91.865465][ T5349] [ 91.866869][ T5349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.870076][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 91.874052][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.878445][ T5349] Call Trace: [ 91.879932][ T5349] [ 91.881242][ T5349] vpanic+0x26f/0x710 [ 91.883033][ T5349] panic+0xc5/0xd0 [ 91.884732][ T5349] ? __pfx_panic+0x10/0x10 [ 91.886752][ T5349] __warn+0x315/0x4c0 [ 91.888570][ T5349] ? drm_mm_takedown+0x54/0x70 [ 91.890697][ T5349] ? drm_mm_takedown+0x54/0x70 [ 91.892850][ T5349] __report_bug+0x276/0x570 [ 91.894874][ T5349] ? bus_remove_device+0x444/0x560 [ 91.897156][ T5349] ? device_del+0x524/0x8f0 [ 91.899550][ T5349] ? device_unregister+0x21/0xf0 [ 91.902355][ T5349] ? drm_mm_takedown+0x54/0x70 [ 91.905091][ T5349] ? __pfx___report_bug+0x10/0x10 [ 91.907501][ T5349] report_bug_entry+0x19b/0x290 [ 91.909674][ T5349] ? drm_mm_takedown+0x54/0x70 [ 91.911856][ T5349] ? drm_mm_takedown+0x59/0x70 [ 91.913975][ T5349] handle_bug+0xce/0x200 [ 91.915842][ T5349] exc_invalid_op+0x1a/0x50 [ 91.917844][ T5349] asm_exc_invalid_op+0x1a/0x20 [ 91.920027][ T5349] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 91.922417][ T5349] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 91.930636][ T5349] RSP: 0018:ffffc9000e3af6f0 EFLAGS: 00010293 [ 91.933246][ T5349] RAX: ffffffff85ab688d RBX: ffff8880361c1c68 RCX: ffff88803351cb00 [ 91.936825][ T5349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cd0 [ 91.940326][ T5349] RBP: ffffffff85aa1d00 R08: ffff8880312de300 R09: ffffffff8ca213c0 [ 91.943875][ T5349] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff8880312de300 [ 91.947371][ T5349] R13: dffffc0000000000 R14: ffff8880361c1ca0 R15: dffffc0000000000 [ 91.950847][ T5349] ? __pfx_drm_gem_init_release+0x10/0x10 [ 91.953369][ T5349] ? __pfx_drm_gem_init_release+0x10/0x10 [ 91.955981][ T5349] ? drm_mm_takedown+0x4d/0x70 [ 91.957910][ T5349] drm_managed_release+0x208/0x380 [ 91.960060][ T5349] ? __pfx_virtio_gpu_release+0x10/0x10 [ 91.962314][ T5349] drm_dev_put+0xe0/0x120 [ 91.964104][ T5349] virtio_dev_remove+0x9c/0x1b0 [ 91.966039][ T5349] ? __pfx_virtio_dev_remove+0x10/0x10 [ 91.968251][ T5349] device_release_driver_internal+0x42b/0x7d0 [ 91.970740][ T5349] bus_remove_device+0x444/0x560 [ 91.972924][ T5349] ? __pfx_bus_remove_device+0x10/0x10 [ 91.975399][ T5349] ? kernfs_remove_by_name_ns+0x101/0x140 [ 91.977840][ T5349] device_del+0x524/0x8f0 [ 91.979765][ T5349] ? __pfx_device_del+0x10/0x10 [ 91.981868][ T5349] device_unregister+0x21/0xf0 [ 91.983903][ T5349] unregister_virtio_device+0x37/0x60 [ 91.986174][ T5349] virtio_pci_remove+0x7f/0xf0 [ 91.988357][ T5349] pci_device_remove+0x99/0x1c0 [ 91.990549][ T5349] ? __pfx_pci_device_remove+0x10/0x10 [ 91.992995][ T5349] device_release_driver_internal+0x42b/0x7d0 [ 91.995780][ T5349] pci_stop_bus_device+0xf6/0x120 [ 91.998018][ T5349] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 92.000798][ T5349] remove_store+0xe5/0x150 [ 92.002798][ T5349] ? __pfx_remove_store+0x10/0x10 [ 92.005112][ T5349] ? sysfs_file_kobj+0x1e4/0x230 [ 92.007294][ T5349] ? sysfs_kf_write+0x166/0x260 [ 92.009385][ T5349] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.011635][ T5349] kernfs_fop_write_iter+0x3a4/0x540 [ 92.013951][ T5349] vfs_write+0x612/0xba0 [ 92.015861][ T5349] ? __pfx_vfs_write+0x10/0x10 [ 92.017945][ T5349] ? __fget_files+0x3a2/0x420 [ 92.020000][ T5349] ? __fget_files+0x2a/0x420 [ 92.022014][ T5349] ? fdget+0x1ac/0x250 [ 92.023818][ T5349] ksys_write+0x150/0x270 [ 92.025666][ T5349] ? __pfx_ksys_write+0x10/0x10 [ 92.027811][ T5349] do_syscall_64+0x16a/0x530 [ 92.029867][ T5349] ? trace_irq_disable+0x3b/0x140 [ 92.032069][ T5349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.034743][ T5349] ? clear_bhb_loop+0x70/0xc0 [ 92.036792][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.039375][ T5349] RIP: 0033:0x7f23ae3a8f19 [ 92.041374][ T5349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.049525][ T5349] RSP: 002b:00007f23af2ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.053160][ T5349] RAX: ffffffffffffffda RBX: 00007f23ae626090 RCX: 00007f23ae3a8f19 [ 92.056622][ T5349] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 92.060018][ T5349] RBP: 00007f23ae437f6d R08: 0000000000000000 R09: 0000000000000000 [ 92.063378][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.066757][ T5349] R13: 00007f23ae626128 R14: 00007f23ae626090 R15: 00007ffe7adeac48 [ 92.070100][ T5349] [ 92.071798][ T5349] Kernel Offset: disabled [ 92.073653][ T5349] Rebooting in 86400 seconds..