program:
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]})
[ 94.872413][ T5282] Bluetooth: hci0: command tx timeout
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xcd000)
[ 95.354662][ T5316] Console: switching to colour dummy device 80x25
[ 95.495291][ T5316] ------------[ cut here ]------------
[ 95.495305][ T5316] Memory manager not clean during takedown.
[ 95.495310][ T5316] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5316
[ 95.505138][ T5316] Modules linked in:
[ 95.507705][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.511501][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.515572][ T5316] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 95.517892][ T5316] Code: 4c 89 f7 e8 9e 2a a1 fc 49 8b 06 4c 39 f0 75 0e e8 f1 82 2f fc 5b 41 5e c3 cc cc cc cc cc e8 e3 82 2f fc 48 8d 3d 9c dc ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 95.525242][ T5316] RSP: 0018:ffffc9000e37f720 EFLAGS: 00010287
[ 95.527870][ T5316] RAX: ffffffff85986a2d RBX: ffff888000ab8468 RCX: 0000000000100000
[ 95.531144][ T5316] RDX: ffffc9000ec32000 RSI: 0000000000013b7a RDI: ffffffff908646d0
[ 95.534699][ T5316] RBP: ffffffff85971940 R08: ffff88801fb17380 R09: ffffffff8c8110c0
[ 95.538429][ T5316] R10: dffffc0000000000 R11: ffffffff85971940 R12: ffff88801fb17380
[ 95.541896][ T5316] R13: dffffc0000000000 R14: ffff888000ab84a0 R15: dffffc0000000000
[ 95.545382][ T5316] FS: 00007fb33f4b66c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 95.549450][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.552368][ T5316] CR2: 00007fb33f4bf230 CR3: 0000000012327000 CR4: 0000000000352ef0
[ 95.555925][ T5316] Call Trace:
[ 95.557530][ T5316]
[ 95.559021][ T5316] drm_managed_release+0x208/0x380
[ 95.561440][ T5316] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.563969][ T5316] drm_dev_put+0xe0/0x120
[ 95.565992][ T5316] virtio_dev_remove+0x9c/0x1b0
[ 95.568216][ T5316] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.570755][ T5316] device_release_driver_internal+0x48b/0x880
[ 95.573416][ T5316] bus_remove_device+0x444/0x560
[ 95.575631][ T5316] ? __pfx_bus_remove_device+0x10/0x10
[ 95.578054][ T5316] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.580569][ T5316] device_del+0x524/0x8f0
[ 95.582593][ T5316] ? __pfx_device_del+0x10/0x10
[ 95.584711][ T5316] device_unregister+0x21/0xf0
[ 95.586896][ T5316] unregister_virtio_device+0x37/0x60
[ 95.589372][ T5316] virtio_pci_remove+0x7f/0xf0
[ 95.591496][ T5316] pci_device_remove+0x99/0x1c0
[ 95.593645][ T5316] ? __pfx_pci_device_remove+0x10/0x10
[ 95.596061][ T5316] device_release_driver_internal+0x48b/0x880
[ 95.598804][ T5316] pci_stop_bus_device+0xf6/0x120
[ 95.600945][ T5316] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.603558][ T5316] remove_store+0xe5/0x150
[ 95.605778][ T5316] ? __pfx_remove_store+0x10/0x10
[ 95.608157][ T5316] ? sysfs_file_kobj+0x1e4/0x230
[ 95.610197][ T5316] ? sysfs_kf_write+0x166/0x260
[ 95.612366][ T5316] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.614571][ T5316] kernfs_fop_write_iter+0x3a4/0x540
[ 95.616869][ T5316] vfs_write+0x612/0xba0
[ 95.618754][ T5316] ? __pfx_vfs_write+0x10/0x10
[ 95.620880][ T5316] ? __fget_files+0x2a/0x420
[ 95.622999][ T5316] ksys_write+0x150/0x270
[ 95.624915][ T5316] ? __pfx_ksys_write+0x10/0x10
[ 95.627028][ T5316] do_syscall_64+0x166/0x520
[ 95.629160][ T5316] ? trace_irq_disable+0x3b/0x140
[ 95.631434][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.634212][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 95.636366][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.639086][ T5316] RIP: 0033:0x7fb33e59e159
[ 95.641082][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.649448][ T5316] RSP: 002b:00007fb33f4b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.653092][ T5316] RAX: ffffffffffffffda RBX: 00007fb33e825fa0 RCX: 00007fb33e59e159
[ 95.656601][ T5316] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[ 95.660051][ T5316] RBP: 00007fb33e63506b R08: 0000000000000000 R09: 0000000000000000
[ 95.663520][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.667047][ T5316] R13: 00007fb33e826038 R14: 00007fb33e825fa0 R15: 00007ffd70c0d9d8
[ 95.670574][ T5316]
[ 95.672013][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.675153][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.679000][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.683263][ T5316] Call Trace:
[ 95.684693][ T5316]
[ 95.685964][ T5316] vpanic+0x56d/0xa60
[ 95.687617][ T5316] ? __pfx__printk+0x10/0x10
[ 95.689631][ T5316] ? __pfx_vpanic+0x10/0x10
[ 95.691660][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 95.693896][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 95.696076][ T5316] panic+0xc5/0xd0
[ 95.697672][ T5316] ? __pfx_panic+0x10/0x10
[ 95.699579][ T5316] __warn+0x315/0x4c0
[ 95.701273][ T5316] ? drm_mm_takedown+0x54/0x70
[ 95.703367][ T5316] ? drm_mm_takedown+0x54/0x70
[ 95.705449][ T5316] __report_bug+0x276/0x570
[ 95.707336][ T5316] ? virtio_dev_remove+0x9c/0x1b0
[ 95.709521][ T5316] ? device_release_driver_internal+0x48b/0x880
[ 95.712219][ T5316] ? bus_remove_device+0x444/0x560
[ 95.714349][ T5316] ? drm_mm_takedown+0x54/0x70
[ 95.716352][ T5316] ? __pfx___report_bug+0x10/0x10
[ 95.718461][ T5316] ? do_syscall_64+0x166/0x520
[ 95.720459][ T5316] report_bug_entry+0x19b/0x290
[ 95.722448][ T5316] ? drm_mm_takedown+0x54/0x70
[ 95.724386][ T5316] ? drm_mm_takedown+0x59/0x70
[ 95.726388][ T5316] handle_bug+0xce/0x200
[ 95.728135][ T5316] exc_invalid_op+0x1a/0x50
[ 95.730070][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 95.732162][ T5316] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 95.734483][ T5316] Code: 4c 89 f7 e8 9e 2a a1 fc 49 8b 06 4c 39 f0 75 0e e8 f1 82 2f fc 5b 41 5e c3 cc cc cc cc cc e8 e3 82 2f fc 48 8d 3d 9c dc ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 95.742473][ T5316] RSP: 0018:ffffc9000e37f720 EFLAGS: 00010287
[ 95.744998][ T5316] RAX: ffffffff85986a2d RBX: ffff888000ab8468 RCX: 0000000000100000
[ 95.748276][ T5316] RDX: ffffc9000ec32000 RSI: 0000000000013b7a RDI: ffffffff908646d0
[ 95.751565][ T5316] RBP: ffffffff85971940 R08: ffff88801fb17380 R09: ffffffff8c8110c0
[ 95.754922][ T5316] R10: dffffc0000000000 R11: ffffffff85971940 R12: ffff88801fb17380
[ 95.758290][ T5316] R13: dffffc0000000000 R14: ffff888000ab84a0 R15: dffffc0000000000
[ 95.761633][ T5316] ? __pfx_drm_gem_init_release+0x10/0x10
[ 95.764113][ T5316] ? __pfx_drm_gem_init_release+0x10/0x10
[ 95.766572][ T5316] ? drm_mm_takedown+0x4d/0x70
[ 95.768609][ T5316] drm_managed_release+0x208/0x380
[ 95.770784][ T5316] ? __pfx_virtio_gpu_release+0x10/0x10
[ 95.773126][ T5316] drm_dev_put+0xe0/0x120
[ 95.774940][ T5316] virtio_dev_remove+0x9c/0x1b0
[ 95.777012][ T5316] ? __pfx_virtio_dev_remove+0x10/0x10
[ 95.779335][ T5316] device_release_driver_internal+0x48b/0x880
[ 95.781876][ T5316] bus_remove_device+0x444/0x560
[ 95.783978][ T5316] ? __pfx_bus_remove_device+0x10/0x10
[ 95.786340][ T5316] ? kernfs_remove_by_name_ns+0x101/0x140
[ 95.788751][ T5316] device_del+0x524/0x8f0
[ 95.790571][ T5316] ? __pfx_device_del+0x10/0x10
[ 95.792593][ T5316] device_unregister+0x21/0xf0
[ 95.794606][ T5316] unregister_virtio_device+0x37/0x60
[ 95.796838][ T5316] virtio_pci_remove+0x7f/0xf0
[ 95.798899][ T5316] pci_device_remove+0x99/0x1c0
[ 95.801002][ T5316] ? __pfx_pci_device_remove+0x10/0x10
[ 95.803291][ T5316] device_release_driver_internal+0x48b/0x880
[ 95.805889][ T5316] pci_stop_bus_device+0xf6/0x120
[ 95.808084][ T5316] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 95.810766][ T5316] remove_store+0xe5/0x150
[ 95.812791][ T5316] ? __pfx_remove_store+0x10/0x10
[ 95.815044][ T5316] ? sysfs_file_kobj+0x1e4/0x230
[ 95.817367][ T5316] ? sysfs_kf_write+0x166/0x260
[ 95.819539][ T5316] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.821829][ T5316] kernfs_fop_write_iter+0x3a4/0x540
[ 95.824342][ T5316] vfs_write+0x612/0xba0
[ 95.826227][ T5316] ? __pfx_vfs_write+0x10/0x10
[ 95.828329][ T5316] ? __fget_files+0x2a/0x420
[ 95.830297][ T5316] ksys_write+0x150/0x270
[ 95.832203][ T5316] ? __pfx_ksys_write+0x10/0x10
[ 95.834353][ T5316] do_syscall_64+0x166/0x520
[ 95.836387][ T5316] ? trace_irq_disable+0x3b/0x140
[ 95.838640][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.841279][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 95.843338][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.845854][ T5316] RIP: 0033:0x7fb33e59e159
[ 95.847844][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.856513][ T5316] RSP: 002b:00007fb33f4b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.860557][ T5316] RAX: ffffffffffffffda RBX: 00007fb33e825fa0 RCX: 00007fb33e59e159
[ 95.864263][ T5316] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[ 95.867718][ T5316] RBP: 00007fb33e63506b R08: 0000000000000000 R09: 0000000000000000
[ 95.871208][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.874630][ T5316] R13: 00007fb33e826038 R14: 00007fb33e825fa0 R15: 00007ffd70c0d9d8
[ 95.878151][ T5316]
[ 95.879917][ T5316] Kernel Offset: disabled
[ 95.881832][ T5316] Rebooting in 86400 seconds..