program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x2}, {0xc, 0x4}}}}, 0x8) (async)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x8001, 0x80)
write(r2, &(0x7f00000001c0)='1', 0x1)
[ 87.314842][ T5302] Bluetooth: hci0: command tx timeout
[ 87.346271][ T1372] cfg80211: failed to load regulatory.db
[ 88.332592][ T5344] Console: switching to colour dummy device 80x25
[ 88.690921][ T5344] ------------[ cut here ]------------
[ 88.690935][ T5344] Memory manager not clean during takedown.
[ 88.690940][ T5344] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5344
[ 88.724888][ T5344] Modules linked in:
[ 88.726996][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.748405][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.752593][ T5344] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 88.755297][ T5344] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 88.791353][ T5344] RSP: 0018:ffffc9000db7f6f0 EFLAGS: 00010293
[ 88.793885][ T5344] RAX: ffffffff85ab693d RBX: ffff8880362fc468 RCX: ffff888037cca580
[ 88.797739][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 88.825313][ T5344] RBP: ffffffff85aa1db0 R08: ffff88803134b400 R09: ffffffff8ca213c0
[ 88.828994][ T5344] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff88803134b400
[ 88.832706][ T5344] R13: dffffc0000000000 R14: ffff8880362fc4a0 R15: dffffc0000000000
[ 88.851731][ T5344] FS: 00007ffabf7516c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 88.857167][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.860937][ T5344] CR2: 00007f26e6d909c0 CR3: 0000000041a10000 CR4: 0000000000352ef0
[ 88.865644][ T5344] Call Trace:
[ 88.867131][ T5344]
[ 88.868415][ T5344] drm_managed_release+0x208/0x380
[ 88.871592][ T5344] ? __pfx_virtio_gpu_release+0x10/0x10
[ 88.890592][ T5344] drm_dev_put+0xe0/0x120
[ 88.893226][ T5344] virtio_dev_remove+0x9c/0x1b0
[ 88.897039][ T5344] ? __pfx_virtio_dev_remove+0x10/0x10
[ 88.901799][ T5344] device_release_driver_internal+0x42b/0x7d0
[ 88.905528][ T5344] bus_remove_device+0x444/0x560
[ 88.909999][ T5344] ? __pfx_bus_remove_device+0x10/0x10
[ 88.913998][ T5344] ? kernfs_remove_by_name_ns+0x101/0x140
[ 88.918750][ T5344] device_del+0x524/0x8f0
[ 88.922547][ T5344] ? __pfx_device_del+0x10/0x10
[ 88.925530][ T5344] device_unregister+0x21/0xf0
[ 88.929304][ T5344] unregister_virtio_device+0x37/0x60
[ 88.982293][ T5344] virtio_pci_remove+0x7f/0xf0
[ 88.984322][ T5344] pci_device_remove+0x99/0x1c0
[ 88.986415][ T5344] ? __pfx_pci_device_remove+0x10/0x10
[ 88.988654][ T5344] device_release_driver_internal+0x42b/0x7d0
[ 88.991547][ T5344] pci_stop_bus_device+0xf6/0x120
[ 88.993740][ T5344] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 88.996387][ T5344] remove_store+0xe5/0x150
[ 88.998201][ T5344] ? __pfx_remove_store+0x10/0x10
[ 89.000324][ T5344] ? sysfs_file_kobj+0x1e4/0x230
[ 89.002811][ T5344] ? sysfs_kf_write+0x166/0x260
[ 89.006523][ T5344] ? __pfx_sysfs_kf_write+0x10/0x10
[ 89.009627][ T5344] kernfs_fop_write_iter+0x3a4/0x540
[ 89.011911][ T5344] vfs_write+0x612/0xba0
[ 89.013715][ T5344] ? __pfx_vfs_write+0x10/0x10
[ 89.016937][ T5344] ? __fget_files+0x3a2/0x420
[ 89.020342][ T5344] ? __fget_files+0x2a/0x420
[ 89.022926][ T5344] ? fdget+0x1ac/0x250
[ 89.025279][ T5344] ksys_write+0x150/0x270
[ 89.027455][ T5344] ? __pfx_ksys_write+0x10/0x10
[ 89.033087][ T5344] do_syscall_64+0x16a/0x530
[ 89.038599][ T5344] ? trace_irq_disable+0x3b/0x140
[ 89.041324][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.043909][ T5344] ? clear_bhb_loop+0x70/0xc0
[ 89.046854][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.053026][ T5344] RIP: 0033:0x7ffabe79fb19
[ 89.055818][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.064606][ T5344] RSP: 002b:00007ffabf750fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 89.067649][ T5344] RAX: ffffffffffffffda RBX: 00007ffabea25fa0 RCX: 00007ffabe79fb19
[ 89.073790][ T5344] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 89.078888][ T5344] RBP: 00007ffabe837b70 R08: 0000000000000000 R09: 0000000000000000
[ 89.084008][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.089208][ T5344] R13: 00007ffabea26038 R14: 00007ffabea25fa0 R15: 00007ffe63479948
[ 89.094792][ T5344]
[ 89.096473][ T5344] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 89.100389][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 89.105839][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.111838][ T5344] Call Trace:
[ 89.114164][ T5344]
[ 89.116012][ T5344] vpanic+0x26f/0x710
[ 89.117792][ T5344] panic+0xc5/0xd0
[ 89.119287][ T5344] ? __pfx_panic+0x10/0x10
[ 89.121142][ T5344] __warn+0x315/0x4c0
[ 89.122604][ T5344] ? drm_mm_takedown+0x54/0x70
[ 89.124380][ T5344] ? drm_mm_takedown+0x54/0x70
[ 89.126102][ T5344] __report_bug+0x276/0x570
[ 89.127742][ T5344] ? bus_remove_device+0x444/0x560
[ 89.130948][ T5344] ? device_del+0x524/0x8f0
[ 89.133674][ T5344] ? device_unregister+0x21/0xf0
[ 89.136646][ T5344] ? drm_mm_takedown+0x54/0x70
[ 89.139908][ T5344] ? __pfx___report_bug+0x10/0x10
[ 89.143938][ T5344] report_bug_entry+0x19b/0x290
[ 89.148531][ T5344] ? drm_mm_takedown+0x54/0x70
[ 89.153924][ T5344] ? drm_mm_takedown+0x59/0x70
[ 89.157695][ T5344] handle_bug+0xce/0x200
[ 89.160863][ T5344] exc_invalid_op+0x1a/0x50
[ 89.163966][ T5344] asm_exc_invalid_op+0x1a/0x20
[ 89.167128][ T5344] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 89.173728][ T5344] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 89.188879][ T5344] RSP: 0018:ffffc9000db7f6f0 EFLAGS: 00010293
[ 89.195337][ T5344] RAX: ffffffff85ab693d RBX: ffff8880362fc468 RCX: ffff888037cca580
[ 89.200885][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 89.206859][ T5344] RBP: ffffffff85aa1db0 R08: ffff88803134b400 R09: ffffffff8ca213c0
[ 89.213853][ T5344] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff88803134b400
[ 89.218115][ T5344] R13: dffffc0000000000 R14: ffff8880362fc4a0 R15: dffffc0000000000
[ 89.221419][ T5344] ? __pfx_drm_gem_init_release+0x10/0x10
[ 89.223792][ T5344] ? __pfx_drm_gem_init_release+0x10/0x10
[ 89.226165][ T5344] ? drm_mm_takedown+0x4d/0x70
[ 89.228629][ T5344] drm_managed_release+0x208/0x380
[ 89.233601][ T5344] ? __pfx_virtio_gpu_release+0x10/0x10
[ 89.237223][ T5344] drm_dev_put+0xe0/0x120
[ 89.240942][ T5344] virtio_dev_remove+0x9c/0x1b0
[ 89.244642][ T5344] ? __pfx_virtio_dev_remove+0x10/0x10
[ 89.247977][ T5344] device_release_driver_internal+0x42b/0x7d0
[ 89.252628][ T5344] bus_remove_device+0x444/0x560
[ 89.255584][ T5344] ? __pfx_bus_remove_device+0x10/0x10
[ 89.258884][ T5344] ? kernfs_remove_by_name_ns+0x101/0x140
[ 89.263809][ T5344] device_del+0x524/0x8f0
[ 89.267511][ T5344] ? __pfx_device_del+0x10/0x10
[ 89.271577][ T5344] device_unregister+0x21/0xf0
[ 89.274732][ T5344] unregister_virtio_device+0x37/0x60
[ 89.277477][ T5344] virtio_pci_remove+0x7f/0xf0
[ 89.294172][ T5344] pci_device_remove+0x99/0x1c0
[ 89.296237][ T5344] ? __pfx_pci_device_remove+0x10/0x10
[ 89.299077][ T5344] device_release_driver_internal+0x42b/0x7d0
[ 89.302344][ T5344] pci_stop_bus_device+0xf6/0x120
[ 89.305127][ T5344] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 89.308663][ T5344] remove_store+0xe5/0x150
[ 89.326412][ T5344] ? __pfx_remove_store+0x10/0x10
[ 89.328804][ T5344] ? sysfs_file_kobj+0x1e4/0x230
[ 89.331450][ T5344] ? sysfs_kf_write+0x166/0x260
[ 89.334176][ T5344] ? __pfx_sysfs_kf_write+0x10/0x10
[ 89.336547][ T5344] kernfs_fop_write_iter+0x3a4/0x540
[ 89.338762][ T5344] vfs_write+0x612/0xba0
[ 89.340564][ T5344] ? __pfx_vfs_write+0x10/0x10
[ 89.342619][ T5344] ? __fget_files+0x3a2/0x420
[ 89.344614][ T5344] ? __fget_files+0x2a/0x420
[ 89.362035][ T5344] ? fdget+0x1ac/0x250
[ 89.363983][ T5344] ksys_write+0x150/0x270
[ 89.366588][ T5344] ? __pfx_ksys_write+0x10/0x10
[ 89.369119][ T5344] do_syscall_64+0x16a/0x530
[ 89.371753][ T5344] ? trace_irq_disable+0x3b/0x140
[ 89.389248][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.392282][ T5344] ? clear_bhb_loop+0x70/0xc0
[ 89.394561][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.397610][ T5344] RIP: 0033:0x7ffabe79fb19
[ 89.400171][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.428354][ T5344] RSP: 002b:00007ffabf750fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 89.434072][ T5344] RAX: ffffffffffffffda RBX: 00007ffabea25fa0 RCX: 00007ffabe79fb19
[ 89.438040][ T5344] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 89.441845][ T5344] RBP: 00007ffabe837b70 R08: 0000000000000000 R09: 0000000000000000
[ 89.444878][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.448003][ T5344] R13: 00007ffabea26038 R14: 00007ffabea25fa0 R15: 00007ffe63479948
[ 89.452424][ T5344]
[ 89.454509][ T5344] Kernel Offset: disabled
[ 89.456904][ T5344] Rebooting in 86400 seconds..