program:
r0 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x1c, 0x48, 0x101, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x14) (async)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
[ 103.716734][ T4652] Bluetooth: hci0: command tx timeout
[ 103.999869][ T5329] ------------[ cut here ]------------
[ 104.002389][ T5329] Memory manager not clean during takedown.
[ 104.004765][ T5329] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5329
[ 104.008679][ T5329] Modules linked in:
[ 104.010601][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.014109][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.018755][ T5329] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 104.020960][ T5329] Code: 4c 89 f7 e8 9e 8e aa fc 49 8b 06 4c 39 f0 75 0e e8 b1 5d 3b fc 5b 41 5e c3 cc cc cc cc cc e8 a3 5d 3b fc 48 8d 3d 9c 01 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 104.029165][ T5329] RSP: 0018:ffffc9000dfa7c80 EFLAGS: 00010293
[ 104.031653][ T5329] RAX: ffffffff858bc77d RBX: ffff888034e35468 RCX: ffff8880341d8000
[ 104.034949][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9063c920
[ 104.038575][ T5329] RBP: ffffffff858a75d0 R08: ffff8880008bc980 R09: ffffffff8c5f1c60
[ 104.042074][ T5329] R10: dffffc0000000000 R11: ffffffff858a75d0 R12: ffff8880008bc980
[ 104.045299][ T5329] R13: dffffc0000000000 R14: ffff888034e354a0 R15: dffffc0000000000
[ 104.048728][ T5329] FS: 000055558d57a540(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000
[ 104.052341][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.055061][ T5329] CR2: 00007fd025f909c0 CR3: 000000001f5e5000 CR4: 0000000000352ef0
[ 104.058294][ T5329] Call Trace:
[ 104.059719][ T5329]
[ 104.060935][ T5329] drm_managed_release+0x208/0x380
[ 104.063014][ T5329] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10
[ 104.065513][ T5329] ? __pfx_virtio_gpu_release+0x10/0x10
[ 104.067865][ T5329] drm_dev_put+0xe0/0x120
[ 104.069811][ T5329] fb_release+0x11d/0x140
[ 104.071596][ T5329] ? __pfx_fb_release+0x10/0x10
[ 104.073541][ T5329] __fput+0x418/0xa50
[ 104.075340][ T5329] task_work_run+0x1d9/0x270
[ 104.077257][ T5329] ? __pfx_task_work_run+0x10/0x10
[ 104.079447][ T5329] exit_to_user_mode_loop+0x1fa/0x730
[ 104.081770][ T5329] ? rcu_is_watching+0x15/0xb0
[ 104.083741][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.086072][ T5329] do_syscall_64+0x353/0x580
[ 104.088149][ T5329] ? clear_bhb_loop+0x40/0x90
[ 104.090177][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.092857][ T5329] RIP: 0033:0x7fe3edb9e019
[ 104.094792][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.103159][ T5329] RSP: 002b:00007ffe13ef7228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 104.106993][ T5329] RAX: 0000000000000000 RBX: 00007fe3ede27da0 RCX: 00007fe3edb9e019
[ 104.110717][ T5329] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 104.114057][ T5329] RBP: 00007fe3ede27da0 R08: 00007fe3ede26128 R09: 0000000000000000
[ 104.117290][ T5329] R10: 0000000000dffd90 R11: 0000000000000246 R12: 00000000000197e6
[ 104.120623][ T5329] R13: 00007fe3ede2609c R14: 00000000000194ef R15: 00007ffe13ef7330
[ 104.123532][ T5329]
[ 104.124871][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 104.127920][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.131516][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.135634][ T5329] Call Trace:
[ 104.137032][ T5329]
[ 104.138265][ T5329] vpanic+0x56c/0xa60
[ 104.139966][ T5329] ? __pfx__printk+0x10/0x10
[ 104.141903][ T5329] ? __pfx_vpanic+0x10/0x10
[ 104.144031][ T5329] ? is_bpf_text_address+0x292/0x2b0
[ 104.146193][ T5329] ? is_bpf_text_address+0x26/0x2b0
[ 104.148220][ T5329] panic+0xc5/0xd0
[ 104.149836][ T5329] ? __pfx_panic+0x10/0x10
[ 104.151761][ T5329] __warn+0x315/0x4c0
[ 104.153451][ T5329] ? drm_mm_takedown+0x54/0x70
[ 104.155484][ T5329] ? drm_mm_takedown+0x54/0x70
[ 104.157481][ T5329] __report_bug+0x276/0x570
[ 104.159438][ T5329] ? fb_release+0x11d/0x140
[ 104.161360][ T5329] ? __fput+0x418/0xa50
[ 104.163169][ T5329] ? task_work_run+0x1d9/0x270
[ 104.165368][ T5329] ? drm_mm_takedown+0x54/0x70
[ 104.167402][ T5329] ? __pfx___report_bug+0x10/0x10
[ 104.169491][ T5329] report_bug_entry+0x19a/0x290
[ 104.171372][ T5329] ? drm_mm_takedown+0x54/0x70
[ 104.173168][ T5329] ? drm_mm_takedown+0x59/0x70
[ 104.174897][ T5329] handle_bug+0xce/0x200
[ 104.176511][ T5329] exc_invalid_op+0x1a/0x50
[ 104.178254][ T5329] asm_exc_invalid_op+0x1a/0x20
[ 104.180149][ T5329] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 104.182215][ T5329] Code: 4c 89 f7 e8 9e 8e aa fc 49 8b 06 4c 39 f0 75 0e e8 b1 5d 3b fc 5b 41 5e c3 cc cc cc cc cc e8 a3 5d 3b fc 48 8d 3d 9c 01 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 104.189556][ T5329] RSP: 0018:ffffc9000dfa7c80 EFLAGS: 00010293
[ 104.191906][ T5329] RAX: ffffffff858bc77d RBX: ffff888034e35468 RCX: ffff8880341d8000
[ 104.194900][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9063c920
[ 104.197978][ T5329] RBP: ffffffff858a75d0 R08: ffff8880008bc980 R09: ffffffff8c5f1c60
[ 104.201065][ T5329] R10: dffffc0000000000 R11: ffffffff858a75d0 R12: ffff8880008bc980
[ 104.204085][ T5329] R13: dffffc0000000000 R14: ffff888034e354a0 R15: dffffc0000000000
[ 104.207302][ T5329] ? __pfx_drm_gem_init_release+0x10/0x10
[ 104.209888][ T5329] ? __pfx_drm_gem_init_release+0x10/0x10
[ 104.212537][ T5329] ? drm_mm_takedown+0x4d/0x70
[ 104.214893][ T5329] drm_managed_release+0x208/0x380
[ 104.217323][ T5329] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10
[ 104.219809][ T5329] ? __pfx_virtio_gpu_release+0x10/0x10
[ 104.221956][ T5329] drm_dev_put+0xe0/0x120
[ 104.223828][ T5329] fb_release+0x11d/0x140
[ 104.225818][ T5329] ? __pfx_fb_release+0x10/0x10
[ 104.228084][ T5329] __fput+0x418/0xa50
[ 104.230230][ T5329] task_work_run+0x1d9/0x270
[ 104.232300][ T5329] ? __pfx_task_work_run+0x10/0x10
[ 104.234210][ T5329] exit_to_user_mode_loop+0x1fa/0x730
[ 104.236115][ T5329] ? rcu_is_watching+0x15/0xb0
[ 104.238041][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.240835][ T5329] do_syscall_64+0x353/0x580
[ 104.243518][ T5329] ? clear_bhb_loop+0x40/0x90
[ 104.246198][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.248673][ T5329] RIP: 0033:0x7fe3edb9e019
[ 104.250385][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.258932][ T5329] RSP: 002b:00007ffe13ef7228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 104.263409][ T5329] RAX: 0000000000000000 RBX: 00007fe3ede27da0 RCX: 00007fe3edb9e019
[ 104.266940][ T5329] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 104.270049][ T5329] RBP: 00007fe3ede27da0 R08: 00007fe3ede26128 R09: 0000000000000000
[ 104.273287][ T5329] R10: 0000000000dffd90 R11: 0000000000000246 R12: 00000000000197e6
[ 104.276271][ T5329] R13: 00007fe3ede2609c R14: 00000000000194ef R15: 00007ffe13ef7330
[ 104.279549][ T5329]
[ 104.281372][ T5329] Kernel Offset: disabled
[ 104.283807][ T5329] Rebooting in 86400 seconds..