program:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='1', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
[ 123.834960][ T5295] Bluetooth: hci0: command tx timeout
[ 124.507317][ T5334] ------------[ cut here ]------------
[ 124.511148][ T5334] Memory manager not clean during takedown.
[ 124.514236][ T5334] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5334
[ 124.518866][ T5334] Modules linked in:
[ 124.521162][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 124.526077][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.530313][ T5334] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 124.532891][ T5334] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 124.540901][ T5334] RSP: 0018:ffffc9000fc47720 EFLAGS: 00010283
[ 124.543931][ T5334] RAX: ffffffff858b47fd RBX: ffff888034bb1068 RCX: 0000000000100000
[ 124.548349][ T5334] RDX: ffffc9000f269000 RSI: 0000000000011b19 RDI: ffffffff9063cda0
[ 124.552178][ T5334] RBP: ffffffff8589f650 R08: ffff888034eb5780 R09: ffffffff8c5f1c60
[ 124.556231][ T5334] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff888034eb5780
[ 124.559883][ T5334] R13: dffffc0000000000 R14: ffff888034bb10a0 R15: dffffc0000000000
[ 124.562918][ T5334] FS: 00007f71e889b6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 124.566551][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 124.570448][ T5334] CR2: 00007f20505909c0 CR3: 0000000012083000 CR4: 0000000000352ef0
[ 124.575834][ T5334] Call Trace:
[ 124.577436][ T5334]
[ 124.579172][ T5334] drm_managed_release+0x208/0x380
[ 124.582301][ T5334] ? __pfx_virtio_gpu_release+0x10/0x10
[ 124.585813][ T5334] drm_dev_put+0xe0/0x120
[ 124.588268][ T5334] virtio_dev_remove+0x9c/0x1b0
[ 124.590709][ T5334] ? __pfx_virtio_dev_remove+0x10/0x10
[ 124.593635][ T5334] device_release_driver_internal+0x48b/0x880
[ 124.596946][ T5334] bus_remove_device+0x444/0x560
[ 124.599764][ T5334] ? __pfx_bus_remove_device+0x10/0x10
[ 124.602999][ T5334] ? kernfs_remove_by_name_ns+0x101/0x140
[ 124.605847][ T5334] device_del+0x524/0x8f0
[ 124.608312][ T5334] ? __pfx_device_del+0x10/0x10
[ 124.611281][ T5334] device_unregister+0x21/0xf0
[ 124.614295][ T5334] unregister_virtio_device+0x37/0x60
[ 124.616997][ T5334] virtio_pci_remove+0x7f/0xf0
[ 124.619371][ T5334] pci_device_remove+0x99/0x1c0
[ 124.622389][ T5334] ? __pfx_pci_device_remove+0x10/0x10
[ 124.625357][ T5334] device_release_driver_internal+0x48b/0x880
[ 124.628049][ T5334] pci_stop_bus_device+0xf6/0x120
[ 124.629955][ T5334] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 124.632681][ T5334] remove_store+0xe5/0x150
[ 124.634772][ T5334] ? __pfx_remove_store+0x10/0x10
[ 124.637492][ T5334] ? sysfs_file_kobj+0x1e4/0x230
[ 124.640233][ T5334] ? sysfs_kf_write+0x166/0x260
[ 124.642885][ T5334] ? __pfx_sysfs_kf_write+0x10/0x10
[ 124.645208][ T5334] kernfs_fop_write_iter+0x3a4/0x540
[ 124.647874][ T5334] vfs_write+0x612/0xba0
[ 124.650277][ T5334] ? __pfx_vfs_write+0x10/0x10
[ 124.653158][ T5334] ? __fget_files+0x2a/0x420
[ 124.655579][ T5334] ksys_write+0x150/0x270
[ 124.657562][ T5334] ? __pfx_ksys_write+0x10/0x10
[ 124.659686][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.662632][ T5334] do_syscall_64+0x174/0x580
[ 124.665054][ T5334] ? trace_irq_disable+0x3b/0x140
[ 124.667337][ T5334] ? clear_bhb_loop+0x40/0x90
[ 124.669521][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.672164][ T5334] RIP: 0033:0x7f71e799e019
[ 124.674255][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 124.683923][ T5334] RSP: 002b:00007f71e889afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.687585][ T5334] RAX: ffffffffffffffda RBX: 00007f71e7c25fa0 RCX: 00007f71e799e019
[ 124.691076][ T5334] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005
[ 124.695422][ T5334] RBP: 00007f71e7a3500c R08: 0000000000000000 R09: 0000000000000000
[ 124.699442][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.703069][ T5334] R13: 00007f71e7c26038 R14: 00007f71e7c25fa0 R15: 00007ffed88c79d8
[ 124.706634][ T5334]
[ 124.708193][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 124.712115][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 124.717136][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.722011][ T5334] Call Trace:
[ 124.723583][ T5334]
[ 124.724951][ T5334] vpanic+0x56c/0xa60
[ 124.726935][ T5334] ? __pfx__printk+0x10/0x10
[ 124.729554][ T5334] ? __pfx_vpanic+0x10/0x10
[ 124.732353][ T5334] ? is_bpf_text_address+0x292/0x2b0
[ 124.735170][ T5334] ? is_bpf_text_address+0x26/0x2b0
[ 124.737582][ T5334] panic+0xc5/0xd0
[ 124.739257][ T5334] ? __pfx_panic+0x10/0x10
[ 124.741584][ T5334] __warn+0x315/0x4c0
[ 124.743746][ T5334] ? drm_mm_takedown+0x54/0x70
[ 124.746746][ T5334] ? drm_mm_takedown+0x54/0x70
[ 124.749606][ T5334] __report_bug+0x276/0x570
[ 124.751852][ T5334] ? virtio_dev_remove+0x9c/0x1b0
[ 124.754135][ T5334] ? device_release_driver_internal+0x48b/0x880
[ 124.757069][ T5334] ? bus_remove_device+0x444/0x560
[ 124.759760][ T5334] ? drm_mm_takedown+0x54/0x70
[ 124.762632][ T5334] ? __pfx___report_bug+0x10/0x10
[ 124.765487][ T5334] ? do_syscall_64+0x174/0x580
[ 124.767900][ T5334] report_bug_entry+0x19a/0x290
[ 124.770146][ T5334] ? drm_mm_takedown+0x54/0x70
[ 124.772318][ T5334] ? drm_mm_takedown+0x59/0x70
[ 124.774580][ T5334] handle_bug+0xce/0x200
[ 124.776748][ T5334] exc_invalid_op+0x1a/0x50
[ 124.779018][ T5334] asm_exc_invalid_op+0x1a/0x20
[ 124.781424][ T5334] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 124.783860][ T5334] Code: 4c 89 f7 e8 de 0f ab fc 49 8b 06 4c 39 f0 75 0e e8 31 dd 3b fc 5b 41 5e c3 cc cc cc cc cc e8 23 dd 3b fc 48 8d 3d 9c 85 d8 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 124.793007][ T5334] RSP: 0018:ffffc9000fc47720 EFLAGS: 00010283
[ 124.795836][ T5334] RAX: ffffffff858b47fd RBX: ffff888034bb1068 RCX: 0000000000100000
[ 124.799700][ T5334] RDX: ffffc9000f269000 RSI: 0000000000011b19 RDI: ffffffff9063cda0
[ 124.803553][ T5334] RBP: ffffffff8589f650 R08: ffff888034eb5780 R09: ffffffff8c5f1c60
[ 124.807057][ T5334] R10: dffffc0000000000 R11: ffffffff8589f650 R12: ffff888034eb5780
[ 124.810319][ T5334] R13: dffffc0000000000 R14: ffff888034bb10a0 R15: dffffc0000000000
[ 124.814116][ T5334] ? __pfx_drm_gem_init_release+0x10/0x10
[ 124.816951][ T5334] ? __pfx_drm_gem_init_release+0x10/0x10
[ 124.819762][ T5334] ? drm_mm_takedown+0x4d/0x70
[ 124.822500][ T5334] drm_managed_release+0x208/0x380
[ 124.825692][ T5334] ? __pfx_virtio_gpu_release+0x10/0x10
[ 124.828676][ T5334] drm_dev_put+0xe0/0x120
[ 124.830829][ T5334] virtio_dev_remove+0x9c/0x1b0
[ 124.833312][ T5334] ? __pfx_virtio_dev_remove+0x10/0x10
[ 124.835940][ T5334] device_release_driver_internal+0x48b/0x880
[ 124.838557][ T5334] bus_remove_device+0x444/0x560
[ 124.840706][ T5334] ? __pfx_bus_remove_device+0x10/0x10
[ 124.843456][ T5334] ? kernfs_remove_by_name_ns+0x101/0x140
[ 124.846471][ T5334] device_del+0x524/0x8f0
[ 124.848858][ T5334] ? __pfx_device_del+0x10/0x10
[ 124.851162][ T5334] device_unregister+0x21/0xf0
[ 124.853283][ T5334] unregister_virtio_device+0x37/0x60
[ 124.855554][ T5334] virtio_pci_remove+0x7f/0xf0
[ 124.857835][ T5334] pci_device_remove+0x99/0x1c0
[ 124.860341][ T5334] ? __pfx_pci_device_remove+0x10/0x10
[ 124.863190][ T5334] device_release_driver_internal+0x48b/0x880
[ 124.866076][ T5334] pci_stop_bus_device+0xf6/0x120
[ 124.868287][ T5334] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 124.871229][ T5334] remove_store+0xe5/0x150
[ 124.873673][ T5334] ? __pfx_remove_store+0x10/0x10
[ 124.876373][ T5334] ? sysfs_file_kobj+0x1e4/0x230
[ 124.878911][ T5334] ? sysfs_kf_write+0x166/0x260
[ 124.881322][ T5334] ? __pfx_sysfs_kf_write+0x10/0x10
[ 124.883887][ T5334] kernfs_fop_write_iter+0x3a4/0x540
[ 124.886475][ T5334] vfs_write+0x612/0xba0
[ 124.888498][ T5334] ? __pfx_vfs_write+0x10/0x10
[ 124.890961][ T5334] ? __fget_files+0x2a/0x420
[ 124.893216][ T5334] ksys_write+0x150/0x270
[ 124.895237][ T5334] ? __pfx_ksys_write+0x10/0x10
[ 124.897827][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.900999][ T5334] do_syscall_64+0x174/0x580
[ 124.903200][ T5334] ? trace_irq_disable+0x3b/0x140
[ 124.905354][ T5334] ? clear_bhb_loop+0x40/0x90
[ 124.907356][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.910497][ T5334] RIP: 0033:0x7f71e799e019
[ 124.913852][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 124.923332][ T5334] RSP: 002b:00007f71e889afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 124.928026][ T5334] RAX: ffffffffffffffda RBX: 00007f71e7c25fa0 RCX: 00007f71e799e019
[ 124.932525][ T5334] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005
[ 124.935966][ T5334] RBP: 00007f71e7a3500c R08: 0000000000000000 R09: 0000000000000000
[ 124.939522][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.944545][ T5334] R13: 00007f71e7c26038 R14: 00007f71e7c25fa0 R15: 00007ffed88c79d8
[ 124.948418][ T5334]
[ 124.950308][ T5334] Kernel Offset: disabled
[ 124.952578][ T5334] Rebooting in 86400 seconds..