program: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x10, 0x38, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000006c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000400)={r1, 0x1ff, 0x2, r1}) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='devices.list\x00', 0x26e1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000440)={0x3, "ada3d1"}, 0x6) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') [ 95.692153][ T4667] Bluetooth: hci0: command tx timeout [ 95.783314][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 96.014952][ T5345] Console: switching to colour dummy device 80x25 [ 96.057681][ T5354] cover enable write trace failed, mode=0 [ 96.057709][ T5354] (errno 9) [ 96.148620][ T5345] ------------[ cut here ]------------ [ 96.148635][ T5345] Memory manager not clean during takedown. [ 96.148640][ T5345] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5345 [ 96.158844][ T5345] Modules linked in: [ 96.160608][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.164422][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.168790][ T5345] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 96.171270][ T5345] Code: 4c 89 f7 e8 5e 63 97 fc 49 8b 06 4c 39 f0 75 0e e8 21 c0 1e fc 5b 41 5e e9 d9 97 5f 06 cc e8 13 c0 1e fc 48 8d 3d ac a2 1f 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 96.179439][ T5345] RSP: 0018:ffffc9000e7376f0 EFLAGS: 00010287 [ 96.182062][ T5345] RAX: ffffffff85aa618d RBX: ffff888036540c68 RCX: 0000000000100000 [ 96.185507][ T5345] RDX: ffffc9000ef8a000 RSI: 0000000000015159 RDI: ffffffff91ca0440 [ 96.188907][ T5345] RBP: ffffffff85a91600 R08: ffff888030461900 R09: ffffffff8ca212c0 [ 96.192359][ T5345] R10: dffffc0000000000 R11: ffffffff85a91600 R12: ffff888030461900 [ 96.195716][ T5345] R13: dffffc0000000000 R14: ffff888036540ca0 R15: dffffc0000000000 [ 96.199257][ T5345] FS: 00007f92cc42c6c0(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000 [ 96.203125][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.205980][ T5345] CR2: 00007f08cae4ad50 CR3: 00000000453ce000 CR4: 0000000000352ef0 [ 96.209616][ T5345] Call Trace: [ 96.211119][ T5345] [ 96.212387][ T5345] drm_managed_release+0x208/0x380 [ 96.214602][ T5345] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.217102][ T5345] drm_dev_put+0xe0/0x120 [ 96.220704][ T5345] virtio_dev_remove+0x9c/0x1b0 [ 96.223192][ T5345] ? __pfx_virtio_dev_remove+0x10/0x10 [ 96.225543][ T5345] device_release_driver_internal+0x42b/0x7d0 [ 96.228158][ T5345] bus_remove_device+0x444/0x560 [ 96.230767][ T5345] ? __pfx_bus_remove_device+0x10/0x10 [ 96.233143][ T5345] ? kernfs_remove_by_name_ns+0x101/0x140 [ 96.235240][ T5345] device_del+0x524/0x8f0 [ 96.236886][ T5345] ? __pfx_device_del+0x10/0x10 [ 96.239166][ T5345] device_unregister+0x21/0xf0 [ 96.241269][ T5345] unregister_virtio_device+0x37/0x60 [ 96.243649][ T5345] virtio_pci_remove+0x7f/0xf0 [ 96.245791][ T5345] pci_device_remove+0x99/0x1c0 [ 96.247926][ T5345] ? __pfx_pci_device_remove+0x10/0x10 [ 96.250385][ T5345] device_release_driver_internal+0x42b/0x7d0 [ 96.253012][ T5345] pci_stop_bus_device+0xf6/0x120 [ 96.255156][ T5345] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 96.257946][ T5345] remove_store+0xe5/0x150 [ 96.259978][ T5345] ? __pfx_remove_store+0x10/0x10 [ 96.262146][ T5345] ? sysfs_file_kobj+0x1e4/0x230 [ 96.264235][ T5345] ? sysfs_kf_write+0x166/0x260 [ 96.266341][ T5345] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.268659][ T5345] kernfs_fop_write_iter+0x3a4/0x540 [ 96.271107][ T5345] vfs_write+0x612/0xba0 [ 96.272940][ T5345] ? __pfx_vfs_write+0x10/0x10 [ 96.275007][ T5345] ? __fget_files+0x3a2/0x420 [ 96.277103][ T5345] ? __fget_files+0x2a/0x420 [ 96.279266][ T5345] ? fdget+0x1ac/0x250 [ 96.281052][ T5345] ksys_write+0x150/0x270 [ 96.282987][ T5345] ? __pfx_ksys_write+0x10/0x10 [ 96.285240][ T5345] do_syscall_64+0x166/0x520 [ 96.287329][ T5345] ? trace_irq_disable+0x3b/0x140 [ 96.289726][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.292346][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 96.294397][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.296980][ T5345] RIP: 0033:0x7f92cb59fb19 [ 96.299113][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.307181][ T5345] RSP: 002b:00007f92cc42bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.310841][ T5345] RAX: ffffffffffffffda RBX: 00007f92cb825fa0 RCX: 00007f92cb59fb19 [ 96.314275][ T5345] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 96.317776][ T5345] RBP: 00007f92cb637af8 R08: 0000000000000000 R09: 0000000000000000 [ 96.321345][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.325202][ T5345] R13: 00007f92cb826038 R14: 00007f92cb825fa0 R15: 00007ffff6d00328 [ 96.328604][ T5345] [ 96.330361][ T5345] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.333455][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.337341][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.341687][ T5345] Call Trace: [ 96.343163][ T5345] [ 96.344393][ T5345] vpanic+0x26f/0x710 [ 96.345909][ T5345] panic+0xc5/0xd0 [ 96.347382][ T5345] ? __pfx_panic+0x10/0x10 [ 96.349458][ T5345] __warn+0x315/0x4c0 [ 96.351255][ T5345] ? drm_mm_takedown+0x54/0x70 [ 96.353371][ T5345] ? drm_mm_takedown+0x54/0x70 [ 96.355461][ T5345] __report_bug+0x276/0x570 [ 96.357465][ T5345] ? bus_remove_device+0x444/0x560 [ 96.359696][ T5345] ? device_del+0x524/0x8f0 [ 96.361756][ T5345] ? device_unregister+0x21/0xf0 [ 96.363912][ T5345] ? drm_mm_takedown+0x54/0x70 [ 96.366050][ T5345] ? __pfx___report_bug+0x10/0x10 [ 96.368272][ T5345] report_bug_entry+0x19b/0x290 [ 96.370429][ T5345] ? drm_mm_takedown+0x54/0x70 [ 96.372509][ T5345] ? drm_mm_takedown+0x59/0x70 [ 96.374603][ T5345] handle_bug+0xce/0x200 [ 96.376596][ T5345] exc_invalid_op+0x1a/0x50 [ 96.378662][ T5345] asm_exc_invalid_op+0x1a/0x20 [ 96.380684][ T5345] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 96.382956][ T5345] Code: 4c 89 f7 e8 5e 63 97 fc 49 8b 06 4c 39 f0 75 0e e8 21 c0 1e fc 5b 41 5e e9 d9 97 5f 06 cc e8 13 c0 1e fc 48 8d 3d ac a2 1f 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 96.391120][ T5345] RSP: 0018:ffffc9000e7376f0 EFLAGS: 00010287 [ 96.393706][ T5345] RAX: ffffffff85aa618d RBX: ffff888036540c68 RCX: 0000000000100000 [ 96.397095][ T5345] RDX: ffffc9000ef8a000 RSI: 0000000000015159 RDI: ffffffff91ca0440 [ 96.400512][ T5345] RBP: ffffffff85a91600 R08: ffff888030461900 R09: ffffffff8ca212c0 [ 96.403899][ T5345] R10: dffffc0000000000 R11: ffffffff85a91600 R12: ffff888030461900 [ 96.407283][ T5345] R13: dffffc0000000000 R14: ffff888036540ca0 R15: dffffc0000000000 [ 96.410628][ T5345] ? __pfx_drm_gem_init_release+0x10/0x10 [ 96.413022][ T5345] ? __pfx_drm_gem_init_release+0x10/0x10 [ 96.415434][ T5345] ? drm_mm_takedown+0x4d/0x70 [ 96.417490][ T5345] drm_managed_release+0x208/0x380 [ 96.419696][ T5345] ? __pfx_virtio_gpu_release+0x10/0x10 [ 96.422057][ T5345] drm_dev_put+0xe0/0x120 [ 96.423928][ T5345] virtio_dev_remove+0x9c/0x1b0 [ 96.426004][ T5345] ? __pfx_virtio_dev_remove+0x10/0x10 [ 96.428338][ T5345] device_release_driver_internal+0x42b/0x7d0 [ 96.430785][ T5345] bus_remove_device+0x444/0x560 [ 96.432985][ T5345] ? __pfx_bus_remove_device+0x10/0x10 [ 96.435364][ T5345] ? kernfs_remove_by_name_ns+0x101/0x140 [ 96.437792][ T5345] device_del+0x524/0x8f0 [ 96.439669][ T5345] ? __pfx_device_del+0x10/0x10 [ 96.441762][ T5345] device_unregister+0x21/0xf0 [ 96.443939][ T5345] unregister_virtio_device+0x37/0x60 [ 96.446189][ T5345] virtio_pci_remove+0x7f/0xf0 [ 96.448215][ T5345] pci_device_remove+0x99/0x1c0 [ 96.450360][ T5345] ? __pfx_pci_device_remove+0x10/0x10 [ 96.452889][ T5345] device_release_driver_internal+0x42b/0x7d0 [ 96.455605][ T5345] pci_stop_bus_device+0xf6/0x120 [ 96.457910][ T5345] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 96.460725][ T5345] remove_store+0xe5/0x150 [ 96.462707][ T5345] ? __pfx_remove_store+0x10/0x10 [ 96.464852][ T5345] ? sysfs_file_kobj+0x1e4/0x230 [ 96.466981][ T5345] ? sysfs_kf_write+0x166/0x260 [ 96.469147][ T5345] ? __pfx_sysfs_kf_write+0x10/0x10 [ 96.471432][ T5345] kernfs_fop_write_iter+0x3a4/0x540 [ 96.473723][ T5345] vfs_write+0x612/0xba0 [ 96.475540][ T5345] ? __pfx_vfs_write+0x10/0x10 [ 96.477646][ T5345] ? __fget_files+0x3a2/0x420 [ 96.479606][ T5345] ? __fget_files+0x2a/0x420 [ 96.481595][ T5345] ? fdget+0x1ac/0x250 [ 96.483372][ T5345] ksys_write+0x150/0x270 [ 96.485262][ T5345] ? __pfx_ksys_write+0x10/0x10 [ 96.487325][ T5345] do_syscall_64+0x166/0x520 [ 96.489400][ T5345] ? trace_irq_disable+0x3b/0x140 [ 96.491647][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.494351][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 96.496340][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.498674][ T5345] RIP: 0033:0x7f92cb59fb19 [ 96.500675][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.508826][ T5345] RSP: 002b:00007f92cc42bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.512381][ T5345] RAX: ffffffffffffffda RBX: 00007f92cb825fa0 RCX: 00007f92cb59fb19 [ 96.515728][ T5345] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 96.519089][ T5345] RBP: 00007f92cb637af8 R08: 0000000000000000 R09: 0000000000000000 [ 96.522417][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.525839][ T5345] R13: 00007f92cb826038 R14: 00007f92cb825fa0 R15: 00007ffff6d00328 [ 96.529222][ T5345] [ 96.531004][ T5345] Kernel Offset: disabled [ 96.532671][ T5345] Rebooting in 86400 seconds..