program:
mkdir(&(0x7f0000000140)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fb)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='27', 0x2)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000002c0)={0x6000000d})
write(r0, &(0x7f0000000440)='1', 0x1)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
[ 88.519739][ T48] Bluetooth: hci0: command tx timeout
[ 88.539293][ T11] cfg80211: failed to load regulatory.db
[ 88.801358][ T5337] FAULT_INJECTION: forcing a failure.
[ 88.801358][ T5337] name failslab, interval 1, probability 0, space 0, times 1
[ 88.801383][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.801396][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.801403][ T5337] Call Trace:
[ 88.801433][ T5337]
[ 88.801459][ T5337] dump_stack_lvl+0xe8/0x150
[ 88.801583][ T5337] should_fail_ex+0x3eb/0x540
[ 88.801668][ T5337] should_failslab+0xa8/0x100
[ 88.801702][ T5337] ? __kernfs_new_node+0xe6/0x980
[ 88.801742][ T5337] kmem_cache_alloc_noprof+0x9c/0x600
[ 88.801756][ T5337] ? kstrdup+0x81/0x100
[ 88.801768][ T5337] ? __kernfs_new_node+0xe6/0x980
[ 88.801784][ T5337] __kernfs_new_node+0xe6/0x980
[ 88.801795][ T5337] ? __lock_acquire+0x747/0x2de0
[ 88.801823][ T5337] ? lock_acquire+0x115/0x350
[ 88.801839][ T5337] ? __pfx___kernfs_new_node+0x10/0x10
[ 88.801850][ T5337] ? lock_acquire+0x115/0x350
[ 88.801865][ T5337] ? kernfs_root+0x1c/0x230
[ 88.801885][ T5337] ? kernfs_root+0x1c/0x230
[ 88.801901][ T5337] ? kernfs_root+0x1c/0x230
[ 88.801915][ T5337] ? kernfs_root+0x1c/0x230
[ 88.801934][ T5337] kernfs_new_node+0xea/0x140
[ 88.801949][ T5337] kernfs_create_link+0xe3/0x240
[ 88.801965][ T5337] sysfs_do_create_link_sd+0x83/0x110
[ 88.801982][ T5337] device_add_class_symlinks+0x1cf/0x240
[ 88.802012][ T5337] device_add+0x467/0xb80
[ 88.802030][ T5337] wakeup_source_sysfs_add+0x1d3/0x2c0
[ 88.802054][ T5337] wakeup_source_register+0x17f/0x380
[ 88.802075][ T5337] ep_insert+0xfaf/0x1af0
[ 88.802101][ T5337] ? __pfx_ep_insert+0x10/0x10
[ 88.802125][ T5337] ? bpf_lsm_capable+0x9/0x20
[ 88.802140][ T5337] ? security_capable+0x7e/0x2c0
[ 88.802160][ T5337] do_epoll_ctl_file+0x8c2/0xee0
[ 88.802181][ T5337] ? __pfx_do_epoll_ctl_file+0x10/0x10
[ 88.802200][ T5337] ? __fget_files+0x3a2/0x420
[ 88.802213][ T5337] ? __fget_files+0x2a/0x420
[ 88.802228][ T5337] ? fdget+0x1ac/0x250
[ 88.802242][ T5337] __se_sys_epoll_ctl+0x162/0x230
[ 88.802261][ T5337] ? __pfx___se_sys_epoll_ctl+0x10/0x10
[ 88.802282][ T5337] do_syscall_64+0x16a/0x530
[ 88.802351][ T5337] ? trace_irq_disable+0x3b/0x140
[ 88.802367][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.802379][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 88.802395][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.802405][ T5337] RIP: 0033:0x7faf0f99fb19
[ 88.802418][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.802427][ T5337] RSP: 002b:00007faf10935fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 88.802452][ T5337] RAX: ffffffffffffffda RBX: 00007faf0fc25fa0 RCX: 00007faf0f99fb19
[ 88.802460][ T5337] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006
[ 88.802467][ T5337] RBP: 00007faf0fa37b70 R08: 0000000000000000 R09: 0000000000000000
[ 88.802474][ T5337] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[ 88.802481][ T5337] R13: 00007faf0fc26038 R14: 00007faf0fc25fa0 R15: 00007ffffd5389c8
[ 88.802502][ T5337]
[ 89.005675][ T5337] Console: switching to colour dummy device 80x25
[ 89.118979][ T5337] ------------[ cut here ]------------
[ 89.118995][ T5337] Memory manager not clean during takedown.
[ 89.119000][ T5337] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.0.0/5337
[ 89.128216][ T5337] Modules linked in:
[ 89.130229][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 89.134039][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.138937][ T5337] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 89.141733][ T5337] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 89.150637][ T5337] RSP: 0018:ffffc9000de2f6f0 EFLAGS: 00010287
[ 89.153381][ T5337] RAX: ffffffff85ab693d RBX: ffff8880361cd068 RCX: 0000000000100000
[ 89.156767][ T5337] RDX: ffffc9000ef0a000 RSI: 0000000000014492 RDI: ffffffff91ca1cb0
[ 89.160468][ T5337] RBP: ffffffff85aa1db0 R08: ffff888031324500 R09: ffffffff8ca213c0
[ 89.164392][ T5337] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888031324500
[ 89.168984][ T5337] R13: dffffc0000000000 R14: ffff8880361cd0a0 R15: dffffc0000000000
[ 89.182491][ T5337] FS: 00007faf109366c0(0000) GS:ffff88808a9f9000(0000) knlGS:0000000000000000
[ 89.186181][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.190765][ T5337] CR2: 00007fc5945909c0 CR3: 0000000013a1a000 CR4: 0000000000352ef0
[ 89.194176][ T5337] Call Trace:
[ 89.195566][ T5337]
[ 89.196807][ T5337] drm_managed_release+0x208/0x380
[ 89.199273][ T5337] ? __pfx_virtio_gpu_release+0x10/0x10
[ 89.201750][ T5337] drm_dev_put+0xe0/0x120
[ 89.203668][ T5337] virtio_dev_remove+0x9c/0x1b0
[ 89.205767][ T5337] ? __pfx_virtio_dev_remove+0x10/0x10
[ 89.211597][ T5337] device_release_driver_internal+0x42b/0x7d0
[ 89.214831][ T5337] bus_remove_device+0x444/0x560
[ 89.217625][ T5337] ? __pfx_bus_remove_device+0x10/0x10
[ 89.220123][ T5337] ? kernfs_remove_by_name_ns+0x101/0x140
[ 89.222616][ T5337] device_del+0x524/0x8f0
[ 89.224538][ T5337] ? __pfx_device_del+0x10/0x10
[ 89.226668][ T5337] device_unregister+0x21/0xf0
[ 89.230825][ T5337] unregister_virtio_device+0x37/0x60
[ 89.232887][ T5337] virtio_pci_remove+0x7f/0xf0
[ 89.234755][ T5337] pci_device_remove+0x99/0x1c0
[ 89.236616][ T5337] ? __pfx_pci_device_remove+0x10/0x10
[ 89.238902][ T5337] device_release_driver_internal+0x42b/0x7d0
[ 89.241177][ T5337] pci_stop_bus_device+0xf6/0x120
[ 89.243045][ T5337] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 89.245556][ T5337] remove_store+0xe5/0x150
[ 89.247462][ T5337] ? __pfx_remove_store+0x10/0x10
[ 89.249728][ T5337] ? sysfs_file_kobj+0x1e4/0x230
[ 89.251765][ T5337] ? sysfs_kf_write+0x166/0x260
[ 89.253880][ T5337] ? __pfx_sysfs_kf_write+0x10/0x10
[ 89.255822][ T5337] kernfs_fop_write_iter+0x3a4/0x540
[ 89.257869][ T5337] vfs_write+0x612/0xba0
[ 89.259752][ T5337] ? __pfx_vfs_write+0x10/0x10
[ 89.261932][ T5337] ? __fget_files+0x3a2/0x420
[ 89.264037][ T5337] ? __fget_files+0x2a/0x420
[ 89.268509][ T5337] ? fdget+0x1ac/0x250
[ 89.270307][ T5337] ksys_write+0x150/0x270
[ 89.272226][ T5337] ? __pfx_ksys_write+0x10/0x10
[ 89.274421][ T5337] do_syscall_64+0x16a/0x530
[ 89.276545][ T5337] ? trace_irq_disable+0x3b/0x140
[ 89.278936][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.281690][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 89.283823][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.286348][ T5337] RIP: 0033:0x7faf0f99fb19
[ 89.288297][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.296149][ T5337] RSP: 002b:00007faf10935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 89.299988][ T5337] RAX: ffffffffffffffda RBX: 00007faf0fc25fa0 RCX: 00007faf0f99fb19
[ 89.303166][ T5337] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 89.306247][ T5337] RBP: 00007faf0fa37b70 R08: 0000000000000000 R09: 0000000000000000
[ 89.309495][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.312800][ T5337] R13: 00007faf0fc26038 R14: 00007faf0fc25fa0 R15: 00007ffffd5389c8
[ 89.316113][ T5337]
[ 89.318860][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 89.322097][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 89.325992][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.330214][ T5337] Call Trace:
[ 89.331668][ T5337]
[ 89.332924][ T5337] vpanic+0x26f/0x710
[ 89.334653][ T5337] panic+0xc5/0xd0
[ 89.336302][ T5337] ? __pfx_panic+0x10/0x10
[ 89.338242][ T5337] __warn+0x315/0x4c0
[ 89.339986][ T5337] ? drm_mm_takedown+0x54/0x70
[ 89.342006][ T5337] ? drm_mm_takedown+0x54/0x70
[ 89.344119][ T5337] __report_bug+0x276/0x570
[ 89.346178][ T5337] ? device_del+0x524/0x8f0
[ 89.348207][ T5337] ? drm_mm_takedown+0x54/0x70
[ 89.350361][ T5337] ? __pfx___report_bug+0x10/0x10
[ 89.352553][ T5337] report_bug_entry+0x19b/0x290
[ 89.354683][ T5337] ? drm_mm_takedown+0x54/0x70
[ 89.356764][ T5337] ? drm_mm_takedown+0x59/0x70
[ 89.358728][ T5337] handle_bug+0xce/0x200
[ 89.360587][ T5337] exc_invalid_op+0x1a/0x50
[ 89.362474][ T5337] asm_exc_invalid_op+0x1a/0x20
[ 89.364507][ T5337] RIP: 0010:drm_mm_takedown+0x54/0x70
[ 89.366804][ T5337] Code: 4c 89 f7 e8 be 1b 97 fc 49 8b 06 4c 39 f0 75 0e e8 01 c9 1d fc 5b 41 5e c3 cc cc cc cc cc e8 f3 c8 1d fc 48 8d 3d 6c b3 1e 0c <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f
[ 89.373914][ T5337] RSP: 0018:ffffc9000de2f6f0 EFLAGS: 00010287
[ 89.376230][ T5337] RAX: ffffffff85ab693d RBX: ffff8880361cd068 RCX: 0000000000100000
[ 89.379588][ T5337] RDX: ffffc9000ef0a000 RSI: 0000000000014492 RDI: ffffffff91ca1cb0
[ 89.382756][ T5337] RBP: ffffffff85aa1db0 R08: ffff888031324500 R09: ffffffff8ca213c0
[ 89.385647][ T5337] R10: dffffc0000000000 R11: ffffffff85aa1db0 R12: ffff888031324500
[ 89.388667][ T5337] R13: dffffc0000000000 R14: ffff8880361cd0a0 R15: dffffc0000000000
[ 89.391883][ T5337] ? __pfx_drm_gem_init_release+0x10/0x10
[ 89.394268][ T5337] ? __pfx_drm_gem_init_release+0x10/0x10
[ 89.396653][ T5337] ? drm_mm_takedown+0x4d/0x70
[ 89.398696][ T5337] drm_managed_release+0x208/0x380
[ 89.400944][ T5337] ? __pfx_virtio_gpu_release+0x10/0x10
[ 89.403274][ T5337] drm_dev_put+0xe0/0x120
[ 89.405101][ T5337] virtio_dev_remove+0x9c/0x1b0
[ 89.407199][ T5337] ? __pfx_virtio_dev_remove+0x10/0x10
[ 89.409642][ T5337] device_release_driver_internal+0x42b/0x7d0
[ 89.412338][ T5337] bus_remove_device+0x444/0x560
[ 89.414451][ T5337] ? __pfx_bus_remove_device+0x10/0x10
[ 89.416752][ T5337] ? kernfs_remove_by_name_ns+0x101/0x140
[ 89.419236][ T5337] device_del+0x524/0x8f0
[ 89.421201][ T5337] ? __pfx_device_del+0x10/0x10
[ 89.423371][ T5337] device_unregister+0x21/0xf0
[ 89.425428][ T5337] unregister_virtio_device+0x37/0x60
[ 89.427662][ T5337] virtio_pci_remove+0x7f/0xf0
[ 89.429669][ T5337] pci_device_remove+0x99/0x1c0
[ 89.431676][ T5337] ? __pfx_pci_device_remove+0x10/0x10
[ 89.434001][ T5337] device_release_driver_internal+0x42b/0x7d0
[ 89.436546][ T5337] pci_stop_bus_device+0xf6/0x120
[ 89.438646][ T5337] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 89.441168][ T5337] remove_store+0xe5/0x150
[ 89.443031][ T5337] ? __pfx_remove_store+0x10/0x10
[ 89.445146][ T5337] ? sysfs_file_kobj+0x1e4/0x230
[ 89.447171][ T5337] ? sysfs_kf_write+0x166/0x260
[ 89.449229][ T5337] ? __pfx_sysfs_kf_write+0x10/0x10
[ 89.451396][ T5337] kernfs_fop_write_iter+0x3a4/0x540
[ 89.453598][ T5337] vfs_write+0x612/0xba0
[ 89.455404][ T5337] ? __pfx_vfs_write+0x10/0x10
[ 89.457510][ T5337] ? __fget_files+0x3a2/0x420
[ 89.459655][ T5337] ? __fget_files+0x2a/0x420
[ 89.461686][ T5337] ? fdget+0x1ac/0x250
[ 89.463447][ T5337] ksys_write+0x150/0x270
[ 89.465256][ T5337] ? __pfx_ksys_write+0x10/0x10
[ 89.467366][ T5337] do_syscall_64+0x16a/0x530
[ 89.469326][ T5337] ? trace_irq_disable+0x3b/0x140
[ 89.471384][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.474338][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 89.476399][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.478803][ T5337] RIP: 0033:0x7faf0f99fb19
[ 89.480722][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.488911][ T5337] RSP: 002b:00007faf10935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 89.492655][ T5337] RAX: ffffffffffffffda RBX: 00007faf0fc25fa0 RCX: 00007faf0f99fb19
[ 89.496072][ T5337] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 89.499511][ T5337] RBP: 00007faf0fa37b70 R08: 0000000000000000 R09: 0000000000000000
[ 89.503039][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.506407][ T5337] R13: 00007faf0fc26038 R14: 00007faf0fc25fa0 R15: 00007ffffd5389c8
[ 89.509619][ T5337]
[ 89.511378][ T5337] Kernel Offset: disabled
[ 89.513142][ T5337] Rebooting in 86400 seconds..