program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x542}, 0xef) writev(r3, &(0x7f0000000880)=[{&(0x7f00000003c0)="827e5760467e253fb9124fb881ffa4edb095e1c65d673333fe3e38005f21cbd86b0ccfc9525da8862079edd52f3808e51e9338c6246cea643ba1df4434aa8322e48fb93f7188570846792522a225fcdf33eef6bb078c85e5f172fa3c84eba544568847744a97fd4ed02cb9729944d3154915e27dbd404a261cd4f18dd8d58d3a26e529cb47f1b811ade8bce5f6eb9361bc318ee888772116e79127b1fca5b0cfd05f6246b3f98512878b26b3820c4c8233a1667469959bedcc3fb39884706265f9d8849b0323c54e37a518ee5029ea82d5194f69f91a049c8cdc951663cab51fc470bc", 0xe3}, {&(0x7f0000000500)="217c87771e5b4ce221227710715e4a3f6eaa3fc50b21b3ba97ff4a01a1c8c17d2445bc446452708cb57b1e4bf2b15103faf7e17b74", 0x35}, {&(0x7f0000000540)="346883ca971894c44cb688025dc59735ce6704789c1814a816c76d0243ea8999c4b2919a1260ba0be8c0ee05091873708b325b1514c06d8ca236e3d6af98f23b6bcf6af104107411927feacc32536f50e01ae3fe95f382c351f64117930f7f6664e997480e964f2ec030d948ebad292882043286f9d85df6270f9bcc5be5bf13779090dba5b81c6f1d70751e2f97d5e1943df7c33645073d150ca2fed6e38bd004b1f6f7bb0b00fc8b7e013a81a07e674366c40c1f03ab301e5c727c62f728ff8de975f3535549", 0xc7}, {&(0x7f0000000640)="325cd496d062eae907", 0x9}, {&(0x7f0000000680)="5eefa7e7988b8639011b29bcdfd9df88642b4f61eed22de035329c5434e6d7433dad71b452bf0777ab27c8bb8202ff4775c6d4081f54968627ead3de25a3a3b1c4706aed9c29bafed822ceadbd", 0x4d}, {&(0x7f0000000700)="16b1e2cb5038873d1c316993e5c793a280aff6ccb43184a2cd41540eb1b2765b3e93cb5c49128f309797281c644bb86177a84591bd22cd92743a294b26b2c8e8502a4971702eedc347884b827dcf0e33033a93fbd2b98d2057ac4b6793ebc66b60b5fe6e88c1eefe0bbbf3aa7e8697ad44a1550ee36f5ab3827b26eac63e3780dd048be5395b7170285ee54ec7d97479745a22a753f3c85a760ba2694cedd767f46342cc452e6258e2bc61491b04dbdbcd6a13389b590dd13c8131bb486a453f47e401", 0xc3}], 0x6) write(r1, &(0x7f0000000180)='0000:00:01.0\x00', 0xd) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='intel_ish_ipc\x00', 0xe) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/intel_ish_ipc\x00', 0x8882, 0x141) r9 = openat(r8, &(0x7f0000000340)='bind\x00', 0x0, 0x0) write(r9, &(0x7f0000000380)='0000:00:01.0\x00', 0xd) [ 94.875907][ T4650] Bluetooth: hci0: command tx timeout [ 95.171245][ T5327] Console: switching to colour dummy device 80x25 [ 95.403146][ T5327] ------------[ cut here ]------------ [ 95.403157][ T5327] Memory manager not clean during takedown. [ 95.403162][ T5327] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5327 [ 95.412036][ T5327] Modules linked in: [ 95.414172][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.417939][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.421906][ T5327] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 95.424428][ T5327] Code: 4c 89 f7 e8 9e 2a a1 fc 49 8b 06 4c 39 f0 75 0e e8 f1 82 2f fc 5b 41 5e c3 cc cc cc cc cc e8 e3 82 2f fc 48 8d 3d 9c dc ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 95.433648][ T5327] RSP: 0018:ffffc9000e137800 EFLAGS: 00010287 [ 95.436269][ T5327] RAX: ffffffff85986a2d RBX: ffff888031283868 RCX: 0000000000100000 [ 95.439721][ T5327] RDX: ffffc9000f529000 RSI: 000000000001363e RDI: ffffffff908646d0 [ 95.443152][ T5327] RBP: ffffffff85971940 R08: ffff88801fb28200 R09: ffffffff8c8110c0 [ 95.446539][ T5327] R10: dffffc0000000000 R11: ffffffff85971940 R12: ffff88801fb28200 [ 95.449888][ T5327] R13: dffffc0000000000 R14: ffff8880312838a0 R15: dffffc0000000000 [ 95.453056][ T5327] FS: 00007fb3f392f6c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000 [ 95.456848][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.459530][ T5327] CR2: 00007f5b07b909c0 CR3: 0000000011fe6000 CR4: 0000000000352ef0 [ 95.462618][ T5327] Call Trace: [ 95.464111][ T5327] [ 95.465285][ T5327] drm_managed_release+0x208/0x380 [ 95.467348][ T5327] ? __pfx_virtio_gpu_release+0x10/0x10 [ 95.469576][ T5327] drm_dev_put+0xe0/0x120 [ 95.471407][ T5327] virtio_dev_remove+0x9c/0x1b0 [ 95.473472][ T5327] ? __pfx_virtio_dev_remove+0x10/0x10 [ 95.475674][ T5327] device_release_driver_internal+0x48b/0x880 [ 95.478192][ T5327] bus_remove_device+0x444/0x560 [ 95.480251][ T5327] ? __pfx_bus_remove_device+0x10/0x10 [ 95.482519][ T5327] ? kernfs_remove_by_name_ns+0x101/0x140 [ 95.485785][ T5327] device_del+0x524/0x8f0 [ 95.488100][ T5327] ? __pfx_device_del+0x10/0x10 [ 95.490572][ T5327] device_unregister+0x21/0xf0 [ 95.492607][ T5327] unregister_virtio_device+0x37/0x60 [ 95.495038][ T5327] virtio_pci_remove+0x7f/0xf0 [ 95.497095][ T5327] pci_device_remove+0x99/0x1c0 [ 95.499613][ T5327] ? __pfx_pci_device_remove+0x10/0x10 [ 95.502469][ T5327] device_release_driver_internal+0x48b/0x880 [ 95.505533][ T5327] unbind_store+0x1a1/0x1d0 [ 95.507750][ T5327] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.510257][ T5327] kernfs_fop_write_iter+0x3a4/0x540 [ 95.512679][ T5327] vfs_write+0x612/0xba0 [ 95.514694][ T5327] ? __pfx_vfs_write+0x10/0x10 [ 95.516844][ T5327] ? __fget_files+0x2a/0x420 [ 95.518979][ T5327] ksys_write+0x150/0x270 [ 95.520918][ T5327] ? __pfx_ksys_write+0x10/0x10 [ 95.523139][ T5327] do_syscall_64+0x166/0x520 [ 95.525300][ T5327] ? trace_irq_disable+0x3b/0x140 [ 95.527585][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.530374][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 95.532550][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.535269][ T5327] RIP: 0033:0x7fb3f299e159 [ 95.537286][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.545670][ T5327] RSP: 002b:00007fb3f392efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.549241][ T5327] RAX: ffffffffffffffda RBX: 00007fb3f2c26090 RCX: 00007fb3f299e159 [ 95.552644][ T5327] RDX: 000000000000000d RSI: 0000200000000180 RDI: 0000000000000004 [ 95.556164][ T5327] RBP: 00007fb3f2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.559482][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.562810][ T5327] R13: 00007fb3f2c26128 R14: 00007fb3f2c26090 R15: 00007ffde0c9fb18 [ 95.566559][ T5327] [ 95.567753][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.570067][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.573338][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.576829][ T5327] Call Trace: [ 95.578299][ T5327] [ 95.579664][ T5327] vpanic+0x56d/0xa60 [ 95.581343][ T5327] ? __pfx__printk+0x10/0x10 [ 95.583367][ T5327] ? __pfx_vpanic+0x10/0x10 [ 95.585358][ T5327] ? is_bpf_text_address+0x292/0x2b0 [ 95.587762][ T5327] ? is_bpf_text_address+0x26/0x2b0 [ 95.590023][ T5327] panic+0xc5/0xd0 [ 95.591671][ T5327] ? __pfx_panic+0x10/0x10 [ 95.593663][ T5327] __warn+0x315/0x4c0 [ 95.595262][ T5327] ? drm_mm_takedown+0x54/0x70 [ 95.597210][ T5327] ? drm_mm_takedown+0x54/0x70 [ 95.599112][ T5327] __report_bug+0x276/0x570 [ 95.601116][ T5327] ? virtio_dev_remove+0x9c/0x1b0 [ 95.603510][ T5327] ? device_release_driver_internal+0x48b/0x880 [ 95.606099][ T5327] ? bus_remove_device+0x444/0x560 [ 95.608358][ T5327] ? drm_mm_takedown+0x54/0x70 [ 95.610425][ T5327] ? __pfx___report_bug+0x10/0x10 [ 95.612556][ T5327] report_bug_entry+0x19b/0x290 [ 95.614603][ T5327] ? drm_mm_takedown+0x54/0x70 [ 95.616678][ T5327] ? drm_mm_takedown+0x59/0x70 [ 95.618651][ T5327] handle_bug+0xce/0x200 [ 95.620521][ T5327] exc_invalid_op+0x1a/0x50 [ 95.622564][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 95.624646][ T5327] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 95.627001][ T5327] Code: 4c 89 f7 e8 9e 2a a1 fc 49 8b 06 4c 39 f0 75 0e e8 f1 82 2f fc 5b 41 5e c3 cc cc cc cc cc e8 e3 82 2f fc 48 8d 3d 9c dc ed 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 95.634778][ T5327] RSP: 0018:ffffc9000e137800 EFLAGS: 00010287 [ 95.637037][ T5327] RAX: ffffffff85986a2d RBX: ffff888031283868 RCX: 0000000000100000 [ 95.640163][ T5327] RDX: ffffc9000f529000 RSI: 000000000001363e RDI: ffffffff908646d0 [ 95.643501][ T5327] RBP: ffffffff85971940 R08: ffff88801fb28200 R09: ffffffff8c8110c0 [ 95.646677][ T5327] R10: dffffc0000000000 R11: ffffffff85971940 R12: ffff88801fb28200 [ 95.649956][ T5327] R13: dffffc0000000000 R14: ffff8880312838a0 R15: dffffc0000000000 [ 95.653232][ T5327] ? __pfx_drm_gem_init_release+0x10/0x10 [ 95.655608][ T5327] ? __pfx_drm_gem_init_release+0x10/0x10 [ 95.657983][ T5327] ? drm_mm_takedown+0x4d/0x70 [ 95.659959][ T5327] drm_managed_release+0x208/0x380 [ 95.662027][ T5327] ? __pfx_virtio_gpu_release+0x10/0x10 [ 95.664351][ T5327] drm_dev_put+0xe0/0x120 [ 95.666157][ T5327] virtio_dev_remove+0x9c/0x1b0 [ 95.668177][ T5327] ? __pfx_virtio_dev_remove+0x10/0x10 [ 95.670492][ T5327] device_release_driver_internal+0x48b/0x880 [ 95.673091][ T5327] bus_remove_device+0x444/0x560 [ 95.675206][ T5327] ? __pfx_bus_remove_device+0x10/0x10 [ 95.677563][ T5327] ? kernfs_remove_by_name_ns+0x101/0x140 [ 95.679825][ T5327] device_del+0x524/0x8f0 [ 95.681549][ T5327] ? __pfx_device_del+0x10/0x10 [ 95.683521][ T5327] device_unregister+0x21/0xf0 [ 95.685413][ T5327] unregister_virtio_device+0x37/0x60 [ 95.687525][ T5327] virtio_pci_remove+0x7f/0xf0 [ 95.689408][ T5327] pci_device_remove+0x99/0x1c0 [ 95.691425][ T5327] ? __pfx_pci_device_remove+0x10/0x10 [ 95.693728][ T5327] device_release_driver_internal+0x48b/0x880 [ 95.696251][ T5327] unbind_store+0x1a1/0x1d0 [ 95.698166][ T5327] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.700358][ T5327] kernfs_fop_write_iter+0x3a4/0x540 [ 95.702591][ T5327] vfs_write+0x612/0xba0 [ 95.704324][ T5327] ? __pfx_vfs_write+0x10/0x10 [ 95.706356][ T5327] ? __fget_files+0x2a/0x420 [ 95.708385][ T5327] ksys_write+0x150/0x270 [ 95.710290][ T5327] ? __pfx_ksys_write+0x10/0x10 [ 95.712352][ T5327] do_syscall_64+0x166/0x520 [ 95.714469][ T5327] ? trace_irq_disable+0x3b/0x140 [ 95.716732][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.719373][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 95.721522][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.724152][ T5327] RIP: 0033:0x7fb3f299e159 [ 95.726135][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.734706][ T5327] RSP: 002b:00007fb3f392efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.738465][ T5327] RAX: ffffffffffffffda RBX: 00007fb3f2c26090 RCX: 00007fb3f299e159 [ 95.741865][ T5327] RDX: 000000000000000d RSI: 0000200000000180 RDI: 0000000000000004 [ 95.745178][ T5327] RBP: 00007fb3f2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.748504][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.751866][ T5327] R13: 00007fb3f2c26128 R14: 00007fb3f2c26090 R15: 00007ffde0c9fb18 [ 95.755337][ T5327] [ 95.757109][ T5327] Kernel Offset: disabled [ 95.759030][ T5327] Rebooting in 86400 seconds..