program:
mkdir(&(0x7f0000000140)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='1', 0x1)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
[ 86.735503][ T4663] Bluetooth: hci0: command tx timeout
[ 86.846018][ T812] cfg80211: failed to load regulatory.db
[ 86.965611][ T5351] Console: switching to colour dummy device 80x25
[ 87.107301][ T5351] ------------[ cut here ]------------
[ 87.107311][ T5351] Memory manager not clean during takedown.
[ 87.107316][ T5351] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5351
[ 87.117249][ T5351] Modules linked in:
[ 87.119240][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.123619][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.128306][ T5351] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 87.130796][ T5351] Code: 4c 89 f7 e8 ce 17 97 fc 49 8b 06 4c 39 f0 75 0e e8 31 b7 1d fc 5b 41 5e e9 59 6f 60 06 cc e8 23 b7 1d fc 48 8d 3d 1c 98 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 87.139797][ T5351] RSP: 0018:ffffc9000e2676f0 EFLAGS: 00010283
[ 87.142691][ T5351] RAX: ffffffff85ab7b0d RBX: ffff88803629d868 RCX: 0000000000100000
[ 87.146318][ T5351] RDX: ffffc9000eeea000 RSI: 0000000000014479 RDI: ffffffff91ca1330
[ 87.149996][ T5351] RBP: ffffffff85aa2f80 R08: ffff888030ba5200 R09: ffffffff8ca20c20
[ 87.153776][ T5351] R10: dffffc0000000000 R11: ffffffff85aa2f80 R12: ffff888030ba5200
[ 87.157477][ T5351] R13: dffffc0000000000 R14: ffff88803629d8a0 R15: dffffc0000000000
[ 87.161127][ T5351] FS: 00007f6380ee66c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 87.165524][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.168504][ T5351] CR2: 00007ff207f909c0 CR3: 000000000fca2000 CR4: 0000000000352ef0
[ 87.172015][ T5351] Call Trace:
[ 87.173732][ T5351]
[ 87.175017][ T5351] drm_managed_release+0x208/0x380
[ 87.177233][ T5351] ? __pfx_virtio_gpu_release+0x10/0x10
[ 87.179588][ T5351] drm_dev_put+0xe0/0x120
[ 87.181491][ T5351] virtio_dev_remove+0x9c/0x1b0
[ 87.183682][ T5351] ? __pfx_virtio_dev_remove+0x10/0x10
[ 87.186063][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 87.188731][ T5351] bus_remove_device+0x444/0x560
[ 87.190729][ T5351] ? __pfx_bus_remove_device+0x10/0x10
[ 87.193990][ T5351] ? kernfs_remove_by_name_ns+0x101/0x140
[ 87.196365][ T5351] device_del+0x524/0x8f0
[ 87.198219][ T5351] ? __pfx_device_del+0x10/0x10
[ 87.200427][ T5351] device_unregister+0x21/0xf0
[ 87.202590][ T5351] unregister_virtio_device+0x37/0x60
[ 87.205448][ T5351] virtio_pci_remove+0x7f/0xf0
[ 87.207504][ T5351] pci_device_remove+0x99/0x1c0
[ 87.209788][ T5351] ? __pfx_pci_device_remove+0x10/0x10
[ 87.212021][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 87.215122][ T5351] pci_stop_bus_device+0xf6/0x120
[ 87.217400][ T5351] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 87.220128][ T5351] remove_store+0xe5/0x150
[ 87.222137][ T5351] ? __pfx_remove_store+0x10/0x10
[ 87.224499][ T5351] ? sysfs_file_kobj+0x1e4/0x230
[ 87.226766][ T5351] ? sysfs_kf_write+0x166/0x260
[ 87.228921][ T5351] ? __pfx_sysfs_kf_write+0x10/0x10
[ 87.231321][ T5351] kernfs_fop_write_iter+0x3a4/0x540
[ 87.233823][ T5351] vfs_write+0x612/0xba0
[ 87.235713][ T5351] ? __pfx_vfs_write+0x10/0x10
[ 87.237863][ T5351] ? __fget_files+0x3a2/0x420
[ 87.239891][ T5351] ? __fget_files+0x2a/0x420
[ 87.241850][ T5351] ? fdget+0x1ac/0x250
[ 87.243802][ T5351] ksys_write+0x150/0x270
[ 87.245667][ T5351] ? __pfx_ksys_write+0x10/0x10
[ 87.247707][ T5351] do_syscall_64+0x16a/0x530
[ 87.249754][ T5351] ? trace_irq_disable+0x3b/0x140
[ 87.251935][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.254516][ T5351] ? clear_bhb_loop+0x70/0xc0
[ 87.256420][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.258897][ T5351] RIP: 0033:0x7f637ffa8f19
[ 87.260882][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.269140][ T5351] RSP: 002b:00007f6380ee5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 87.273443][ T5351] RAX: ffffffffffffffda RBX: 00007f6380225fa0 RCX: 00007f637ffa8f19
[ 87.276936][ T5351] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 87.280424][ T5351] RBP: 00007f6380037f6d R08: 0000000000000000 R09: 0000000000000000
[ 87.283818][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.287024][ T5351] R13: 00007f6380226038 R14: 00007f6380225fa0 R15: 00007ffde7379428
[ 87.290282][ T5351]
[ 87.291625][ T5351] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.294602][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.298240][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.302414][ T5351] Call Trace:
[ 87.303998][ T5351]
[ 87.305333][ T5351] vpanic+0x26f/0x710
[ 87.307118][ T5351] panic+0xc5/0xd0
[ 87.308681][ T5351] ? __pfx_panic+0x10/0x10
[ 87.310578][ T5351] __warn+0x315/0x4c0
[ 87.312503][ T5351] ? drm_mm_takedown+0x54/0x70
[ 87.314698][ T5351] ? drm_mm_takedown+0x54/0x70
[ 87.317070][ T5351] __report_bug+0x276/0x570
[ 87.319143][ T5351] ? bus_remove_device+0x444/0x560
[ 87.321410][ T5351] ? device_del+0x524/0x8f0
[ 87.323487][ T5351] ? device_unregister+0x21/0xf0
[ 87.325663][ T5351] ? drm_mm_takedown+0x54/0x70
[ 87.327611][ T5351] ? __pfx___report_bug+0x10/0x10
[ 87.329783][ T5351] report_bug_entry+0x19b/0x290
[ 87.331966][ T5351] ? drm_mm_takedown+0x54/0x70
[ 87.334122][ T5351] ? drm_mm_takedown+0x59/0x70
[ 87.336202][ T5351] handle_bug+0xce/0x200
[ 87.338042][ T5351] exc_invalid_op+0x1a/0x50
[ 87.339930][ T5351] asm_exc_invalid_op+0x1a/0x20
[ 87.342075][ T5351] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 87.344495][ T5351] Code: 4c 89 f7 e8 ce 17 97 fc 49 8b 06 4c 39 f0 75 0e e8 31 b7 1d fc 5b 41 5e e9 59 6f 60 06 cc e8 23 b7 1d fc 48 8d 3d 1c 98 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 87.352738][ T5351] RSP: 0018:ffffc9000e2676f0 EFLAGS: 00010283
[ 87.355275][ T5351] RAX: ffffffff85ab7b0d RBX: ffff88803629d868 RCX: 0000000000100000
[ 87.358624][ T5351] RDX: ffffc9000eeea000 RSI: 0000000000014479 RDI: ffffffff91ca1330
[ 87.361943][ T5351] RBP: ffffffff85aa2f80 R08: ffff888030ba5200 R09: ffffffff8ca20c20
[ 87.365313][ T5351] R10: dffffc0000000000 R11: ffffffff85aa2f80 R12: ffff888030ba5200
[ 87.368731][ T5351] R13: dffffc0000000000 R14: ffff88803629d8a0 R15: dffffc0000000000
[ 87.371928][ T5351] ? __pfx_drm_gem_init_release+0x10/0x10
[ 87.374300][ T5351] ? __pfx_drm_gem_init_release+0x10/0x10
[ 87.376703][ T5351] ? drm_mm_takedown+0x4d/0x70
[ 87.378746][ T5351] drm_managed_release+0x208/0x380
[ 87.380902][ T5351] ? __pfx_virtio_gpu_release+0x10/0x10
[ 87.383172][ T5351] drm_dev_put+0xe0/0x120
[ 87.384931][ T5351] virtio_dev_remove+0x9c/0x1b0
[ 87.386980][ T5351] ? __pfx_virtio_dev_remove+0x10/0x10
[ 87.389267][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 87.391807][ T5351] bus_remove_device+0x444/0x560
[ 87.394000][ T5351] ? __pfx_bus_remove_device+0x10/0x10
[ 87.396300][ T5351] ? kernfs_remove_by_name_ns+0x101/0x140
[ 87.398664][ T5351] device_del+0x524/0x8f0
[ 87.400508][ T5351] ? __pfx_device_del+0x10/0x10
[ 87.402603][ T5351] device_unregister+0x21/0xf0
[ 87.404619][ T5351] unregister_virtio_device+0x37/0x60
[ 87.406897][ T5351] virtio_pci_remove+0x7f/0xf0
[ 87.409049][ T5351] pci_device_remove+0x99/0x1c0
[ 87.411184][ T5351] ? __pfx_pci_device_remove+0x10/0x10
[ 87.413405][ T5351] device_release_driver_internal+0x42b/0x7d0
[ 87.415956][ T5351] pci_stop_bus_device+0xf6/0x120
[ 87.418113][ T5351] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 87.420894][ T5351] remove_store+0xe5/0x150
[ 87.422844][ T5351] ? __pfx_remove_store+0x10/0x10
[ 87.424969][ T5351] ? sysfs_file_kobj+0x1e4/0x230
[ 87.426964][ T5351] ? sysfs_kf_write+0x166/0x260
[ 87.429069][ T5351] ? __pfx_sysfs_kf_write+0x10/0x10
[ 87.431260][ T5351] kernfs_fop_write_iter+0x3a4/0x540
[ 87.433765][ T5351] vfs_write+0x612/0xba0
[ 87.436245][ T5351] ? __pfx_vfs_write+0x10/0x10
[ 87.438743][ T5351] ? __fget_files+0x3a2/0x420
[ 87.440800][ T5351] ? __fget_files+0x2a/0x420
[ 87.442725][ T5351] ? fdget+0x1ac/0x250
[ 87.444610][ T5351] ksys_write+0x150/0x270
[ 87.446417][ T5351] ? __pfx_ksys_write+0x10/0x10
[ 87.448436][ T5351] do_syscall_64+0x16a/0x530
[ 87.450405][ T5351] ? trace_irq_disable+0x3b/0x140
[ 87.452697][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.455408][ T5351] ? clear_bhb_loop+0x70/0xc0
[ 87.457469][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.459914][ T5351] RIP: 0033:0x7f637ffa8f19
[ 87.461834][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.470088][ T5351] RSP: 002b:00007f6380ee5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 87.473597][ T5351] RAX: ffffffffffffffda RBX: 00007f6380225fa0 RCX: 00007f637ffa8f19
[ 87.477066][ T5351] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 87.480205][ T5351] RBP: 00007f6380037f6d R08: 0000000000000000 R09: 0000000000000000
[ 87.483381][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.486633][ T5351] R13: 00007f6380226038 R14: 00007f6380225fa0 R15: 00007ffde7379428
[ 87.490151][ T5351]
[ 87.491888][ T5351] Kernel Offset: disabled
[ 87.493758][ T5351] Rebooting in 86400 seconds..