program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x8001, 0x80)
ioctl$EXT4_IOC_SHUTDOWN(r0, 0x8004587d) (async)
write(r2, &(0x7f00000001c0)='1', 0x1)
[ 136.196125][ T5302] Bluetooth: hci0: command tx timeout
[ 136.294721][ T5352] Console: switching to colour dummy device 80x25
[ 136.532775][ T5352] ------------[ cut here ]------------
[ 136.532789][ T5352] Memory manager not clean during takedown.
[ 136.532794][ T5352] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5352
[ 136.542729][ T5352] Modules linked in:
[ 136.545146][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 136.548966][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 136.553710][ T5352] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 136.556544][ T5352] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 136.564839][ T5352] RSP: 0018:ffffc9000f63f6f0 EFLAGS: 00010293
[ 136.567860][ T5352] RAX: ffffffff85ab693d RBX: ffff88803617f068 RCX: ffff8880347bcb00
[ 136.571747][ T5352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 136.575078][ T5352] RBP: ffffffff85aa1db0 R08: ffff888030ad7400 R09: ffffffff8ca213c0
[ 136.578550][ T5352] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888030ad7400
[ 136.582006][ T5352] R13: dffffc0000000000 R14: ffff88803617f0a0 R15: dffffc0000000000
[ 136.585526][ T5352] FS: 00007f0bbb2ab6c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 136.589243][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 136.592362][ T5352] CR2: 0000558642e65660 CR3: 0000000014644000 CR4: 0000000000352ef0
[ 136.595964][ T5352] Call Trace:
[ 136.597466][ T5352]
[ 136.598803][ T5352] drm_managed_release+0x208/0x380
[ 136.601107][ T5352] ? __pfx_virtio_gpu_release+0x10/0x10
[ 136.605198][ T5352] drm_dev_put+0xe0/0x120
[ 136.607135][ T5352] virtio_dev_remove+0x9c/0x1b0
[ 136.609290][ T5352] ? __pfx_virtio_dev_remove+0x10/0x10
[ 136.611743][ T5352] device_release_driver_internal+0x42b/0x7d0
[ 136.614380][ T5352] bus_remove_device+0x444/0x560
[ 136.616558][ T5352] ? __pfx_bus_remove_device+0x10/0x10
[ 136.618958][ T5352] ? kernfs_remove_by_name_ns+0x101/0x140
[ 136.621501][ T5352] device_del+0x524/0x8f0
[ 136.623330][ T5352] ? __pfx_device_del+0x10/0x10
[ 136.625450][ T5352] device_unregister+0x21/0xf0
[ 136.627460][ T5352] unregister_virtio_device+0x37/0x60
[ 136.629963][ T5352] virtio_pci_remove+0x7f/0xf0
[ 136.632115][ T5352] pci_device_remove+0x99/0x1c0
[ 136.634226][ T5352] ? __pfx_pci_device_remove+0x10/0x10
[ 136.636542][ T5352] device_release_driver_internal+0x42b/0x7d0
[ 136.639163][ T5352] pci_stop_bus_device+0xf6/0x120
[ 136.642437][ T5352] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 136.645304][ T5352] remove_store+0xe5/0x150
[ 136.647260][ T5352] ? __pfx_remove_store+0x10/0x10
[ 136.649420][ T5352] ? sysfs_file_kobj+0x1e4/0x230
[ 136.651822][ T5352] ? sysfs_kf_write+0x166/0x260
[ 136.653916][ T5352] ? __pfx_sysfs_kf_write+0x10/0x10
[ 136.656199][ T5352] kernfs_fop_write_iter+0x3a4/0x540
[ 136.658470][ T5352] vfs_write+0x612/0xba0
[ 136.660538][ T5352] ? __pfx_vfs_write+0x10/0x10
[ 136.662593][ T5352] ? __fget_files+0x3a2/0x420
[ 136.664594][ T5352] ? __fget_files+0x2a/0x420
[ 136.666610][ T5352] ? fdget+0x1ac/0x250
[ 136.668360][ T5352] ksys_write+0x150/0x270
[ 136.671487][ T5352] ? __pfx_ksys_write+0x10/0x10
[ 136.673572][ T5352] do_syscall_64+0x16a/0x530
[ 136.675624][ T5352] ? trace_irq_disable+0x3b/0x140
[ 136.677818][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.680844][ T5352] ? clear_bhb_loop+0x70/0xc0
[ 136.682831][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.685278][ T5352] RIP: 0033:0x7f0bba39fb19
[ 136.687186][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 136.695276][ T5352] RSP: 002b:00007f0bbb2aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 136.698769][ T5352] RAX: ffffffffffffffda RBX: 00007f0bba626090 RCX: 00007f0bba39fb19
[ 136.702147][ T5352] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 136.705485][ T5352] RBP: 00007f0bba437b70 R08: 0000000000000000 R09: 0000000000000000
[ 136.708778][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 136.712276][ T5352] R13: 00007f0bba626128 R14: 00007f0bba626090 R15: 00007ffdc6e448c8
[ 136.715642][ T5352]
[ 136.716946][ T5352] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 136.719985][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 136.723764][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 136.727953][ T5352] Call Trace:
[ 136.729353][ T5352]
[ 136.730687][ T5352] vpanic+0x26f/0x710
[ 136.732392][ T5352] panic+0xc5/0xd0
[ 136.734023][ T5352] ? __pfx_panic+0x10/0x10
[ 136.735971][ T5352] __warn+0x315/0x4c0
[ 136.737687][ T5352] ? drm_mm_takedown+0x54/0x70
[ 136.739753][ T5352] ? drm_mm_takedown+0x54/0x70
[ 136.741789][ T5352] __report_bug+0x276/0x570
[ 136.743707][ T5352] ? bus_remove_device+0x444/0x560
[ 136.745831][ T5352] ? device_del+0x524/0x8f0
[ 136.747802][ T5352] ? device_unregister+0x21/0xf0
[ 136.749935][ T5352] ? drm_mm_takedown+0x54/0x70
[ 136.752007][ T5352] ? __pfx___report_bug+0x10/0x10
[ 136.754107][ T5352] report_bug_entry+0x19b/0x290
[ 136.756161][ T5352] ? drm_mm_takedown+0x54/0x70
[ 136.758171][ T5352] ? drm_mm_takedown+0x59/0x70
[ 136.760182][ T5352] handle_bug+0xce/0x200
[ 136.762098][ T5352] exc_invalid_op+0x1a/0x50
[ 136.763924][ T5352] asm_exc_invalid_op+0x1a/0x20
[ 136.766011][ T5352] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 136.768219][ T5352] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 136.776128][ T5352] RSP: 0018:ffffc9000f63f6f0 EFLAGS: 00010293
[ 136.778673][ T5352] RAX: ffffffff85ab693d RBX: ffff88803617f068 RCX: ffff8880347bcb00
[ 136.781926][ T5352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91ca1cb0
[ 136.785186][ T5352] RBP: ffffffff85aa1db0 R08: ffff888030ad7400 R09: ffffffff8ca213c0
[ 136.788442][ T5352] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888030ad7400
[ 136.791769][ T5352] R13: dffffc0000000000 R14: ffff88803617f0a0 R15: dffffc0000000000
[ 136.795143][ T5352] ? __pfx_drm_gem_init_release+0x10/0x10
[ 136.797503][ T5352] ? __pfx_drm_gem_init_release+0x10/0x10
[ 136.799919][ T5352] ? drm_mm_takedown+0x4d/0x70
[ 136.801983][ T5352] drm_managed_release+0x208/0x380
[ 136.804140][ T5352] ? __pfx_virtio_gpu_release+0x10/0x10
[ 136.806423][ T5352] drm_dev_put+0xe0/0x120
[ 136.808280][ T5352] virtio_dev_remove+0x9c/0x1b0
[ 136.810420][ T5352] ? __pfx_virtio_dev_remove+0x10/0x10
[ 136.812684][ T5352] device_release_driver_internal+0x42b/0x7d0
[ 136.815371][ T5352] bus_remove_device+0x444/0x560
[ 136.817485][ T5352] ? __pfx_bus_remove_device+0x10/0x10
[ 136.819801][ T5352] ? kernfs_remove_by_name_ns+0x101/0x140
[ 136.822255][ T5352] device_del+0x524/0x8f0
[ 136.824105][ T5352] ? __pfx_device_del+0x10/0x10
[ 136.826192][ T5352] device_unregister+0x21/0xf0
[ 136.828196][ T5352] unregister_virtio_device+0x37/0x60
[ 136.830504][ T5352] virtio_pci_remove+0x7f/0xf0
[ 136.832489][ T5352] pci_device_remove+0x99/0x1c0
[ 136.834595][ T5352] ? __pfx_pci_device_remove+0x10/0x10
[ 136.836933][ T5352] device_release_driver_internal+0x42b/0x7d0
[ 136.839629][ T5352] pci_stop_bus_device+0xf6/0x120
[ 136.841786][ T5352] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 136.844517][ T5352] remove_store+0xe5/0x150
[ 136.846433][ T5352] ? __pfx_remove_store+0x10/0x10
[ 136.848346][ T5352] ? sysfs_file_kobj+0x1e4/0x230
[ 136.850498][ T5352] ? sysfs_kf_write+0x166/0x260
[ 136.852590][ T5352] ? __pfx_sysfs_kf_write+0x10/0x10
[ 136.854780][ T5352] kernfs_fop_write_iter+0x3a4/0x540
[ 136.857124][ T5352] vfs_write+0x612/0xba0
[ 136.859154][ T5352] ? __pfx_vfs_write+0x10/0x10
[ 136.861231][ T5352] ? __fget_files+0x3a2/0x420
[ 136.863382][ T5352] ? __fget_files+0x2a/0x420
[ 136.865418][ T5352] ? fdget+0x1ac/0x250
[ 136.867156][ T5352] ksys_write+0x150/0x270
[ 136.868995][ T5352] ? __pfx_ksys_write+0x10/0x10
[ 136.871067][ T5352] do_syscall_64+0x16a/0x530
[ 136.873008][ T5352] ? trace_irq_disable+0x3b/0x140
[ 136.875169][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.877697][ T5352] ? clear_bhb_loop+0x70/0xc0
[ 136.879738][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.882249][ T5352] RIP: 0033:0x7f0bba39fb19
[ 136.884228][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 136.892514][ T5352] RSP: 002b:00007f0bbb2aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 136.896063][ T5352] RAX: ffffffffffffffda RBX: 00007f0bba626090 RCX: 00007f0bba39fb19
[ 136.899455][ T5352] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 136.902835][ T5352] RBP: 00007f0bba437b70 R08: 0000000000000000 R09: 0000000000000000
[ 136.906367][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 136.909684][ T5352] R13: 00007f0bba626128 R14: 00007f0bba626090 R15: 00007ffdc6e448c8
[ 136.913089][ T5352]
[ 136.914890][ T5352] Kernel Offset: disabled
[ 136.916709][ T5352] Rebooting in 86400 seconds..