program:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='1', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
[ 111.183805][ T5288] Bluetooth: hci0: command tx timeout
[ 111.419610][ T5329] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 111.423463][ T5329] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 111.519350][ T5329] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 111.834137][ T5330] ------------[ cut here ]------------
[ 111.838282][ T5330] Memory manager not clean during takedown.
[ 111.841630][ T5330] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5330
[ 111.846922][ T5330] Modules linked in:
[ 111.848943][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 111.853441][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.859005][ T5330] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 111.862230][ T5330] Code: 4c 89 f7 e8 0e 0c ab fc 49 8b 06 4c 39 f0 75 0e e8 61 d9 3b fc 5b 41 5e e9 19 fe 4a 06 cc e8 53 d9 3b fc 48 8d 3d 0c 84 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 111.872806][ T5330] RSP: 0018:ffffc9000dc87720 EFLAGS: 00010283
[ 111.875923][ T5330] RAX: ffffffff858b498d RBX: ffff888034a53c68 RCX: 0000000000100000
[ 111.879731][ T5330] RDX: ffffc9000f7b1000 RSI: 00000000000113c1 RDI: ffffffff9063cda0
[ 111.884030][ T5330] RBP: ffffffff8589f7e0 R08: ffff88801ae50000 R09: ffffffff8c5f1c60
[ 111.888324][ T5330] R10: dffffc0000000000 R11: ffffffff8589f7e0 R12: ffff88801ae50000
[ 111.893027][ T5330] R13: dffffc0000000000 R14: ffff888034a53ca0 R15: dffffc0000000000
[ 111.899278][ T5330] FS: 00007faedbf8f6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 111.904303][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.907758][ T5330] CR2: 00007f338a661490 CR3: 000000004381c000 CR4: 0000000000352ef0
[ 111.911673][ T5330] Call Trace:
[ 111.913480][ T5330]
[ 111.915147][ T5330] drm_managed_release+0x208/0x380
[ 111.918185][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 111.921703][ T5330] drm_dev_put+0xe0/0x120
[ 111.924164][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 111.927106][ T5330] ? __pfx_virtio_dev_remove+0x10/0x10
[ 111.930406][ T5330] device_release_driver_internal+0x48b/0x880
[ 111.933944][ T5330] bus_remove_device+0x444/0x560
[ 111.936577][ T5330] ? __pfx_bus_remove_device+0x10/0x10
[ 111.939860][ T5330] ? kernfs_remove_by_name_ns+0x101/0x140
[ 111.943178][ T5330] device_del+0x524/0x8f0
[ 111.945483][ T5330] ? __pfx_device_del+0x10/0x10
[ 111.948275][ T5330] device_unregister+0x21/0xf0
[ 111.950830][ T5330] unregister_virtio_device+0x37/0x60
[ 111.953628][ T5330] virtio_pci_remove+0x7f/0xf0
[ 111.956075][ T5330] pci_device_remove+0x99/0x1c0
[ 111.958638][ T5330] ? __pfx_pci_device_remove+0x10/0x10
[ 111.962014][ T5330] device_release_driver_internal+0x48b/0x880
[ 111.965868][ T5330] pci_stop_bus_device+0xf6/0x120
[ 111.968153][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 111.971532][ T5330] remove_store+0xe5/0x150
[ 111.974765][ T5330] ? __pfx_remove_store+0x10/0x10
[ 111.977808][ T5330] ? sysfs_file_kobj+0x1e4/0x230
[ 111.980639][ T5330] ? sysfs_kf_write+0x166/0x260
[ 111.983294][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10
[ 111.986037][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 111.989296][ T5330] vfs_write+0x612/0xba0
[ 111.991813][ T5330] ? __pfx_vfs_write+0x10/0x10
[ 111.994809][ T5330] ? __fget_files+0x2a/0x420
[ 111.997075][ T5330] ksys_write+0x150/0x270
[ 111.999255][ T5330] ? __pfx_ksys_write+0x10/0x10
[ 112.002165][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.006496][ T5330] do_syscall_64+0x174/0x580
[ 112.008789][ T5330] ? trace_irq_disable+0x3b/0x140
[ 112.011053][ T5330] ? clear_bhb_loop+0x40/0x90
[ 112.013420][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.017419][ T5330] RIP: 0033:0x7faedb19e0d9
[ 112.020095][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 112.030325][ T5330] RSP: 002b:00007faedbf8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 112.035033][ T5330] RAX: ffffffffffffffda RBX: 00007faedb426090 RCX: 00007faedb19e0d9
[ 112.038812][ T5330] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000008
[ 112.043280][ T5330] RBP: 00007faedb235024 R08: 0000000000000000 R09: 0000000000000000
[ 112.048254][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 112.052809][ T5330] R13: 00007faedb426128 R14: 00007faedb426090 R15: 00007ffce8927658
[ 112.056663][ T5330]
[ 112.058229][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 112.062626][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 112.067660][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 112.073000][ T5330] Call Trace:
[ 112.074942][ T5330]
[ 112.076799][ T5330] vpanic+0x56c/0xa60
[ 112.079298][ T5330] ? __pfx__printk+0x10/0x10
[ 112.082044][ T5330] ? __pfx_vpanic+0x10/0x10
[ 112.084311][ T5330] ? is_bpf_text_address+0x292/0x2b0
[ 112.086855][ T5330] ? is_bpf_text_address+0x26/0x2b0
[ 112.089947][ T5330] panic+0xc5/0xd0
[ 112.092186][ T5330] ? __pfx_panic+0x10/0x10
[ 112.094869][ T5330] __warn+0x315/0x4c0
[ 112.097218][ T5330] ? drm_mm_takedown+0x54/0x70
[ 112.100150][ T5330] ? drm_mm_takedown+0x54/0x70
[ 112.103129][ T5330] __report_bug+0x276/0x570
[ 112.105614][ T5330] ? drm_mm_takedown+0x54/0x70
[ 112.108023][ T5330] ? __pfx___report_bug+0x10/0x10
[ 112.110858][ T5330] ? drm_mm_takedown+0x59/0x70
[ 112.114209][ T5330] report_bug_entry+0x19a/0x290
[ 112.117058][ T5330] ? drm_mm_takedown+0x54/0x70
[ 112.119597][ T5330] ? drm_mm_takedown+0x59/0x70
[ 112.121929][ T5330] handle_bug+0xce/0x200
[ 112.123909][ T5330] exc_invalid_op+0x1a/0x50
[ 112.126380][ T5330] asm_exc_invalid_op+0x1a/0x20
[ 112.129552][ T5330] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 112.132964][ T5330] Code: 4c 89 f7 e8 0e 0c ab fc 49 8b 06 4c 39 f0 75 0e e8 61 d9 3b fc 5b 41 5e e9 19 fe 4a 06 cc e8 53 d9 3b fc 48 8d 3d 0c 84 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 112.141257][ T5330] RSP: 0018:ffffc9000dc87720 EFLAGS: 00010283
[ 112.144741][ T5330] RAX: ffffffff858b498d RBX: ffff888034a53c68 RCX: 0000000000100000
[ 112.149378][ T5330] RDX: ffffc9000f7b1000 RSI: 00000000000113c1 RDI: ffffffff9063cda0
[ 112.153297][ T5330] RBP: ffffffff8589f7e0 R08: ffff88801ae50000 R09: ffffffff8c5f1c60
[ 112.156620][ T5330] R10: dffffc0000000000 R11: ffffffff8589f7e0 R12: ffff88801ae50000
[ 112.160921][ T5330] R13: dffffc0000000000 R14: ffff888034a53ca0 R15: dffffc0000000000
[ 112.165177][ T5330] ? __pfx_drm_gem_init_release+0x10/0x10
[ 112.167951][ T5330] ? __pfx_drm_gem_init_release+0x10/0x10
[ 112.170970][ T5330] ? drm_mm_takedown+0x4d/0x70
[ 112.173865][ T5330] drm_managed_release+0x208/0x380
[ 112.176776][ T5330] ? __pfx_virtio_gpu_release+0x10/0x10
[ 112.179502][ T5330] drm_dev_put+0xe0/0x120
[ 112.181743][ T5330] virtio_dev_remove+0x9c/0x1b0
[ 112.184158][ T5330] ? __pfx_virtio_dev_remove+0x10/0x10
[ 112.187568][ T5330] device_release_driver_internal+0x48b/0x880
[ 112.191290][ T5330] bus_remove_device+0x444/0x560
[ 112.193477][ T5330] ? __pfx_bus_remove_device+0x10/0x10
[ 112.195933][ T5330] ? kernfs_remove_by_name_ns+0x101/0x140
[ 112.198653][ T5330] device_del+0x524/0x8f0
[ 112.201288][ T5330] ? __pfx_device_del+0x10/0x10
[ 112.204062][ T5330] device_unregister+0x21/0xf0
[ 112.206358][ T5330] unregister_virtio_device+0x37/0x60
[ 112.208984][ T5330] virtio_pci_remove+0x7f/0xf0
[ 112.211629][ T5330] pci_device_remove+0x99/0x1c0
[ 112.214846][ T5330] ? __pfx_pci_device_remove+0x10/0x10
[ 112.217788][ T5330] device_release_driver_internal+0x48b/0x880
[ 112.220656][ T5330] pci_stop_bus_device+0xf6/0x120
[ 112.222945][ T5330] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 112.226518][ T5330] remove_store+0xe5/0x150
[ 112.229198][ T5330] ? __pfx_remove_store+0x10/0x10
[ 112.232043][ T5330] ? sysfs_file_kobj+0x1e4/0x230
[ 112.234438][ T5330] ? sysfs_kf_write+0x166/0x260
[ 112.237102][ T5330] ? __pfx_sysfs_kf_write+0x10/0x10
[ 112.240077][ T5330] kernfs_fop_write_iter+0x3a4/0x540
[ 112.243592][ T5330] vfs_write+0x612/0xba0
[ 112.245789][ T5330] ? __pfx_vfs_write+0x10/0x10
[ 112.247954][ T5330] ? __fget_files+0x2a/0x420
[ 112.250170][ T5330] ksys_write+0x150/0x270
[ 112.252224][ T5330] ? __pfx_ksys_write+0x10/0x10
[ 112.255111][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.258808][ T5330] do_syscall_64+0x174/0x580
[ 112.261110][ T5330] ? trace_irq_disable+0x3b/0x140
[ 112.263522][ T5330] ? clear_bhb_loop+0x40/0x90
[ 112.265915][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.269289][ T5330] RIP: 0033:0x7faedb19e0d9
[ 112.271797][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 112.282184][ T5330] RSP: 002b:00007faedbf8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 112.287098][ T5330] RAX: ffffffffffffffda RBX: 00007faedb426090 RCX: 00007faedb19e0d9
[ 112.291163][ T5330] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000008
[ 112.295768][ T5330] RBP: 00007faedb235024 R08: 0000000000000000 R09: 0000000000000000
[ 112.301015][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 112.304564][ T5330] R13: 00007faedb426128 R14: 00007faedb426090 R15: 00007ffce8927658
[ 112.308379][ T5330]
[ 112.310536][ T5330] Kernel Offset: disabled
[ 112.313046][ T5330] Rebooting in 86400 seconds..