program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x60}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) [ 95.414790][ T5299] Bluetooth: hci0: command tx timeout [ 95.663318][ T5342] Console: switching to colour dummy device 80x25 [ 95.846787][ T5342] ------------[ cut here ]------------ [ 95.846797][ T5342] Memory manager not clean during takedown. [ 95.846802][ T5342] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5342 [ 95.855910][ T5342] Modules linked in: [ 95.857724][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.861554][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.865832][ T5342] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 95.868041][ T5342] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 95.875935][ T5342] RSP: 0018:ffffc9000f97f6f0 EFLAGS: 00010283 [ 95.878529][ T5342] RAX: ffffffff85ab688d RBX: ffff88803652ec68 RCX: 0000000000100000 [ 95.881663][ T5342] RDX: ffffc9000ef32000 RSI: 000000000001562b RDI: ffffffff91ca1cd0 [ 95.885048][ T5342] RBP: ffffffff85aa1d00 R08: ffff888030e87480 R09: ffffffff8ca213c0 [ 95.888553][ T5342] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff888030e87480 [ 95.891877][ T5342] R13: dffffc0000000000 R14: ffff88803652eca0 R15: dffffc0000000000 [ 95.895703][ T5342] FS: 00007fd5a3ded6c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000 [ 95.899466][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.902170][ T5342] CR2: 00005652ee8aa078 CR3: 0000000013ad2000 CR4: 0000000000352ef0 [ 95.905350][ T5342] Call Trace: [ 95.906704][ T5342] [ 95.907970][ T5342] drm_managed_release+0x208/0x380 [ 95.910320][ T5342] ? __pfx_virtio_gpu_release+0x10/0x10 [ 95.912936][ T5342] drm_dev_put+0xe0/0x120 [ 95.914949][ T5342] virtio_dev_remove+0x9c/0x1b0 [ 95.916917][ T5342] ? __pfx_virtio_dev_remove+0x10/0x10 [ 95.919188][ T5342] device_release_driver_internal+0x42b/0x7d0 [ 95.921745][ T5342] bus_remove_device+0x444/0x560 [ 95.923884][ T5342] ? __pfx_bus_remove_device+0x10/0x10 [ 95.926198][ T5342] ? kernfs_remove_by_name_ns+0x101/0x140 [ 95.928764][ T5342] device_del+0x524/0x8f0 [ 95.930691][ T5342] ? __pfx_device_del+0x10/0x10 [ 95.932802][ T5342] device_unregister+0x21/0xf0 [ 95.934788][ T5342] unregister_virtio_device+0x37/0x60 [ 95.937016][ T5342] virtio_pci_remove+0x7f/0xf0 [ 95.939220][ T5342] pci_device_remove+0x99/0x1c0 [ 95.941282][ T5342] ? __pfx_pci_device_remove+0x10/0x10 [ 95.943564][ T5342] device_release_driver_internal+0x42b/0x7d0 [ 95.946263][ T5342] pci_stop_bus_device+0xf6/0x120 [ 95.948498][ T5342] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 95.951307][ T5342] remove_store+0xe5/0x150 [ 95.953316][ T5342] ? __pfx_remove_store+0x10/0x10 [ 95.955533][ T5342] ? sysfs_file_kobj+0x1e4/0x230 [ 95.957785][ T5342] ? sysfs_kf_write+0x166/0x260 [ 95.960290][ T5342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.962912][ T5342] kernfs_fop_write_iter+0x3a4/0x540 [ 95.965382][ T5342] vfs_write+0x612/0xba0 [ 95.967123][ T5342] ? __pfx_vfs_write+0x10/0x10 [ 95.969190][ T5342] ? __fget_files+0x3a2/0x420 [ 95.971136][ T5342] ? __fget_files+0x2a/0x420 [ 95.973180][ T5342] ? fdget+0x1ac/0x250 [ 95.975044][ T5342] ksys_write+0x150/0x270 [ 95.977027][ T5342] ? __pfx_ksys_write+0x10/0x10 [ 95.979289][ T5342] do_syscall_64+0x16a/0x530 [ 95.981282][ T5342] ? trace_irq_disable+0x3b/0x140 [ 95.983391][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.985932][ T5342] ? clear_bhb_loop+0x70/0xc0 [ 95.987941][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.990499][ T5342] RIP: 0033:0x7fd5a79a8f19 [ 95.992348][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.000358][ T5342] RSP: 002b:00007fd5a3decfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.003799][ T5342] RAX: ffffffffffffffda RBX: 00007fd5a7c25fa0 RCX: 00007fd5a79a8f19 [ 96.007069][ T5342] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 96.010630][ T5342] RBP: 00007fd5a7a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 96.014145][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.017972][ T5342] R13: 00007fd5a7c26038 R14: 00007fd5a7c25fa0 R15: 00007ffccebceee8 [ 96.021949][ T5342] [ 96.023430][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.026521][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.030310][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.034613][ T5342] Call Trace: [ 96.036208][ T5342] [ 96.037590][ T5342] vpanic+0x26f/0x710 [ 96.039271][ T5342] panic+0xc5/0xd0 [ 96.040860][ T5342] ? __pfx_panic+0x10/0x10 [ 96.042909][ T5342] __warn+0x315/0x4c0 [ 96.044652][ T5342] ? drm_mm_takedown+0x54/0x70 [ 96.046721][ T5342] ? drm_mm_takedown+0x54/0x70 [ 96.048734][ T5342] __report_bug+0x276/0x570 [ 96.050691][ T5342] ? bus_remove_device+0x444/0x560 [ 96.052798][ T5342] ? device_del+0x524/0x8f0 [ 96.054806][ T5342] ? device_unregister+0x21/0xf0 [ 96.056970][ T5342] ? drm_mm_takedown+0x54/0x70 [ 96.059039][ T5342] ? __pfx___report_bug+0x10/0x10 [ 96.061296][ T5342] report_bug_entry+0x19b/0x290 [ 96.063320][ T5342] ? drm_mm_takedown+0x54/0x70 [ 96.065457][ T5342] ? drm_mm_takedown+0x59/0x70 [ 96.067589][ T5342] handle_bug+0xce/0x200 [ 96.069438][ T5342] exc_invalid_op+0x1a/0x50 [ 96.071488][ T5342] asm_exc_invalid_op+0x1a/0x20 [ 96.073547][ T5342] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 96.075804][ T5342] Code: 4c 89 f7 e8 9e 19 97 fc 49 8b 06 4c 39 f0 75 0e e8 b1 c9 1d fc 5b 41 5e e9 d9 71 60 06 cc e8 a3 c9 1d fc 48 8d 3d 3c b4 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 96.083494][ T5342] RSP: 0018:ffffc9000f97f6f0 EFLAGS: 00010283 [ 96.086349][ T5342] RAX: ffffffff85ab688d RBX: ffff88803652ec68 RCX: 0000000000100000 [ 96.089617][ T5342] RDX: ffffc9000ef32000 RSI: 000000000001562b RDI: ffffffff91ca1cd0 [ 96.092729][ T5342] RBP: ffffffff85aa1d00 R08: ffff888030e87480 R09: ffffffff8ca213c0 [ 96.096284][ T5342] R10: dffffc0000000000 R11: ffffffff85aa1d00 R12: ffff888030e87480 [ 96.099626][ T5342] R13: dffffc0000000000 R14: ffff88803652eca0 R15: dffffc0000000000 [ 96.103015][ T5342] ? __pfx_drm_gem_init_release+0x10/0x10 [ 96.105543][ T5342] ? __pfx_drm_gem_init_release+0x10/0x10 [ 96.108055][ T5342] ? drm_mm_takedown+0x4d/0x70 [ 96.110176][ T5342] drm_managed_release+0x208/0x380 [ 96.112359][ T5342] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.114746][ T5342] drm_dev_put+0xe0/0x120 [ 96.116631][ T5342] virtio_dev_remove+0x9c/0x1b0 [ 96.118674][ T5342] ? __pfx_virtio_dev_remove+0x10/0x10 [ 96.121079][ T5342] device_release_driver_internal+0x42b/0x7d0 [ 96.123742][ T5342] bus_remove_device+0x444/0x560 [ 96.125980][ T5342] ? __pfx_bus_remove_device+0x10/0x10 [ 96.128716][ T5342] ? kernfs_remove_by_name_ns+0x101/0x140 [ 96.131691][ T5342] device_del+0x524/0x8f0 [ 96.133640][ T5342] ? __pfx_device_del+0x10/0x10 [ 96.135774][ T5342] device_unregister+0x21/0xf0 [ 96.137899][ T5342] unregister_virtio_device+0x37/0x60 [ 96.140263][ T5342] virtio_pci_remove+0x7f/0xf0 [ 96.142447][ T5342] pci_device_remove+0x99/0x1c0 [ 96.144645][ T5342] ? __pfx_pci_device_remove+0x10/0x10 [ 96.147033][ T5342] device_release_driver_internal+0x42b/0x7d0 [ 96.149719][ T5342] pci_stop_bus_device+0xf6/0x120 [ 96.151846][ T5342] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 96.154667][ T5342] remove_store+0xe5/0x150 [ 96.156693][ T5342] ? __pfx_remove_store+0x10/0x10 [ 96.158853][ T5342] ? sysfs_file_kobj+0x1e4/0x230 [ 96.161331][ T5342] ? sysfs_kf_write+0x166/0x260 [ 96.163755][ T5342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.166007][ T5342] kernfs_fop_write_iter+0x3a4/0x540 [ 96.168348][ T5342] vfs_write+0x612/0xba0 [ 96.170231][ T5342] ? __pfx_vfs_write+0x10/0x10 [ 96.172353][ T5342] ? __fget_files+0x3a2/0x420 [ 96.174461][ T5342] ? __fget_files+0x2a/0x420 [ 96.176543][ T5342] ? fdget+0x1ac/0x250 [ 96.178352][ T5342] ksys_write+0x150/0x270 [ 96.180358][ T5342] ? __pfx_ksys_write+0x10/0x10 [ 96.182586][ T5342] do_syscall_64+0x16a/0x530 [ 96.184955][ T5342] ? trace_irq_disable+0x3b/0x140 [ 96.187175][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.189815][ T5342] ? clear_bhb_loop+0x70/0xc0 [ 96.191833][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.194436][ T5342] RIP: 0033:0x7fd5a79a8f19 [ 96.196532][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.204611][ T5342] RSP: 002b:00007fd5a3decfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.208287][ T5342] RAX: ffffffffffffffda RBX: 00007fd5a7c25fa0 RCX: 00007fd5a79a8f19 [ 96.211786][ T5342] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 96.215291][ T5342] RBP: 00007fd5a7a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 96.218714][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.222204][ T5342] R13: 00007fd5a7c26038 R14: 00007fd5a7c25fa0 R15: 00007ffccebceee8 [ 96.225587][ T5342] [ 96.227348][ T5342] Kernel Offset: disabled [ 96.229263][ T5342] Rebooting in 86400 seconds..