program:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000061c0), 0x0, 0x10000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='9', 0x1) (fail_nth: 2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(r2, &(0x7f0000000100)='N', 0x1)
write(r3, &(0x7f0000000100)='1', 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
[ 102.945531][ T4646] Bluetooth: hci0: command tx timeout
[ 103.078026][ T5324] FAULT_INJECTION: forcing a failure.
[ 103.078026][ T5324] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 103.078111][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.078144][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.078152][ T5324] Call Trace:
[ 103.078158][ T5324]
[ 103.078163][ T5324] dump_stack_lvl+0xe8/0x150
[ 103.078226][ T5324] should_fail_ex+0x410/0x560
[ 103.078278][ T5324] _copy_from_iter+0x1d3/0x1660
[ 103.078303][ T5324] ? __pfx__copy_from_iter+0x10/0x10
[ 103.078317][ T5324] ? trace_kmalloc+0x2a/0xf0
[ 103.078329][ T5324] ? __kmalloc_noprof+0x38c/0x720
[ 103.078338][ T5324] ? __kmalloc_noprof+0x1ab/0x720
[ 103.078348][ T5324] ? kernfs_fop_write_iter+0x157/0x540
[ 103.078364][ T5324] kernfs_fop_write_iter+0x19a/0x540
[ 103.078379][ T5324] vfs_write+0x612/0xba0
[ 103.078400][ T5324] ? __pfx_vfs_write+0x10/0x10
[ 103.078418][ T5324] ? __fget_files+0x2a/0x420
[ 103.078437][ T5324] ksys_write+0x150/0x270
[ 103.078454][ T5324] ? __pfx_ksys_write+0x10/0x10
[ 103.078475][ T5324] do_syscall_64+0x166/0x520
[ 103.078523][ T5324] ? trace_irq_disable+0x3b/0x140
[ 103.078534][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.078547][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 103.078579][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.078593][ T5324] RIP: 0033:0x7fcaddd9e159
[ 103.078605][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.078614][ T5324] RSP: 002b:00007fcadebc3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.078628][ T5324] RAX: ffffffffffffffda RBX: 00007fcade025fa0 RCX: 00007fcaddd9e159
[ 103.078636][ T5324] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 103.078643][ T5324] RBP: 00007fcadebc4050 R08: 0000000000000000 R09: 0000000000000000
[ 103.078649][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 103.078655][ T5324] R13: 00007fcade026038 R14: 00007fcade025fa0 R15: 00007ffd152f6ae8
[ 103.078674][ T5324]
[ 103.157208][ T9] FAULT_INJECTION: forcing a failure.
[ 103.157208][ T9] name failslab, interval 1, probability 1, space 0, times 1
[ 103.157234][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.157246][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.157254][ T9] Workqueue: events drm_fb_helper_damage_work
[ 103.157278][ T9] Call Trace:
[ 103.157283][ T9]
[ 103.157289][ T9] dump_stack_lvl+0xe8/0x150
[ 103.157309][ T9] should_fail_ex+0x410/0x560
[ 103.157329][ T9] should_failslab+0xa8/0x100
[ 103.157343][ T9] __kmalloc_noprof+0xfe/0x720
[ 103.157359][ T9] ? __kasan_kmalloc+0x93/0xb0
[ 103.157376][ T9] ? drm_atomic_commit_init+0x9e/0x370
[ 103.157386][ T9] ? drm_atomic_commit_init+0x9e/0x370
[ 103.157398][ T9] drm_atomic_commit_init+0x9e/0x370
[ 103.157406][ T9] drm_atomic_commit_alloc+0xbc/0x100
[ 103.157414][ T9] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 103.157426][ T9] ? __lock_acquire+0x6df/0x2e50
[ 103.157436][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 103.157457][ T9] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.157472][ T9] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 103.157490][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 103.157513][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 103.157540][ T9] ? lock_acquire+0x115/0x350
[ 103.157555][ T9] ? rcu_is_watching+0x16/0xb0
[ 103.157571][ T9] ? process_scheduled_works+0x97a/0x1630
[ 103.157586][ T9] process_scheduled_works+0xc3d/0x1630
[ 103.157621][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.157641][ T9] ? assign_work+0x3cf/0x5d0
[ 103.157656][ T9] worker_thread+0xa47/0xfb0
[ 103.157683][ T9] kthread+0x38b/0x480
[ 103.157695][ T9] ? __pfx_worker_thread+0x10/0x10
[ 103.157709][ T9] ? __pfx_kthread+0x10/0x10
[ 103.157722][ T9] ret_from_fork+0x514/0xb70
[ 103.157736][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 103.157746][ T9] ? __switch_to+0xc89/0x1420
[ 103.157765][ T9] ? __pfx_kthread+0x10/0x10
[ 103.157778][ T9] ret_from_fork_asm+0x1a/0x30
[ 103.157806][ T9]
[ 103.159143][ T9] ------------[ cut here ]------------
[ 103.159153][ T9] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 103.159162][ T9] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:0/9
[ 103.282408][ T9] Modules linked in:
[ 103.284356][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.288480][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.292851][ T9] Workqueue: events drm_fb_helper_damage_work
[ 103.295597][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 103.298907][ T9] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 3a 28 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 103.307286][ T9] RSP: 0018:ffffc9000022f898 EFLAGS: 00010246
[ 103.309905][ T9] RAX: 1ffff11003ed541a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 103.313506][ T9] RDX: ffff88801f3e0e60 RSI: ffffffff8c79ae40 RDI: ffffffff908618a0
[ 103.316935][ T9] RBP: ffff88801d292008 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 103.320236][ T9] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: ffff88801f3e0e60
[ 103.323452][ T9] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6aa0d0
[ 103.327019][ T9] FS: 0000000000000000(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 103.330587][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.333942][ T9] CR2: 00007fcaddfd6140 CR3: 000000004faaa000 CR4: 0000000000352ef0
[ 103.338353][ T9] Call Trace:
[ 103.339930][ T9]
[ 103.341315][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 103.344022][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 103.347195][ T9] ? lock_acquire+0x115/0x350
[ 103.349298][ T9] ? rcu_is_watching+0x16/0xb0
[ 103.351193][ T9] ? process_scheduled_works+0x97a/0x1630
[ 103.353660][ T9] process_scheduled_works+0xc3d/0x1630
[ 103.355930][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.358459][ T9] ? assign_work+0x3cf/0x5d0
[ 103.360248][ T9] worker_thread+0xa47/0xfb0
[ 103.362163][ T9] kthread+0x38b/0x480
[ 103.363804][ T9] ? __pfx_worker_thread+0x10/0x10
[ 103.366026][ T9] ? __pfx_kthread+0x10/0x10
[ 103.368649][ T9] ret_from_fork+0x514/0xb70
[ 103.371174][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 103.374005][ T9] ? __switch_to+0xc89/0x1420
[ 103.376097][ T9] ? __pfx_kthread+0x10/0x10
[ 103.378249][ T9] ret_from_fork_asm+0x1a/0x30
[ 103.380293][ T9]
[ 103.381692][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.384595][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.388380][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.392590][ T9] Workqueue: events drm_fb_helper_damage_work
[ 103.395277][ T9] Call Trace:
[ 103.396654][ T9]
[ 103.397939][ T9] vpanic+0x56d/0xa60
[ 103.399767][ T9] ? __pfx__printk+0x10/0x10
[ 103.401774][ T9] ? __pfx_vpanic+0x10/0x10
[ 103.403758][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 103.406466][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 103.409307][ T9] panic+0xc5/0xd0
[ 103.411387][ T9] ? __pfx_panic+0x10/0x10
[ 103.413617][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 103.415792][ T9] __warn+0x315/0x4c0
[ 103.417550][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 103.420266][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 103.422845][ T9] __report_bug+0x276/0x570
[ 103.425464][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 103.428014][ T9] ? __pfx___report_bug+0x10/0x10
[ 103.430083][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 103.432569][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 103.435203][ T9] report_bug_entry+0x19b/0x290
[ 103.437315][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 103.440044][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 103.442815][ T9] handle_bug+0xce/0x200
[ 103.444720][ T9] exc_invalid_op+0x1a/0x50
[ 103.446681][ T9] asm_exc_invalid_op+0x1a/0x20
[ 103.448814][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 103.451732][ T9] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 3a 28 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 103.459772][ T9] RSP: 0018:ffffc9000022f898 EFLAGS: 00010246
[ 103.462332][ T9] RAX: 1ffff11003ed541a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 103.465576][ T9] RDX: ffff88801f3e0e60 RSI: ffffffff8c79ae40 RDI: ffffffff908618a0
[ 103.468914][ T9] RBP: ffff88801d292008 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 103.472242][ T9] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: ffff88801f3e0e60
[ 103.475363][ T9] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6aa0d0
[ 103.478654][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 103.481284][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 103.483742][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 103.486241][ T9] ? lock_acquire+0x115/0x350
[ 103.488202][ T9] ? rcu_is_watching+0x16/0xb0
[ 103.490225][ T9] ? process_scheduled_works+0x97a/0x1630
[ 103.492742][ T9] process_scheduled_works+0xc3d/0x1630
[ 103.495071][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.497668][ T9] ? assign_work+0x3cf/0x5d0
[ 103.499610][ T9] worker_thread+0xa47/0xfb0
[ 103.501612][ T9] kthread+0x38b/0x480
[ 103.503300][ T9] ? __pfx_worker_thread+0x10/0x10
[ 103.505493][ T9] ? __pfx_kthread+0x10/0x10
[ 103.507419][ T9] ret_from_fork+0x514/0xb70
[ 103.509397][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 103.511561][ T9] ? __switch_to+0xc89/0x1420
[ 103.513627][ T9] ? __pfx_kthread+0x10/0x10
[ 103.515605][ T9] ret_from_fork_asm+0x1a/0x30
[ 103.517629][ T9]
[ 103.519304][ T9] Kernel Offset: disabled
[ 103.521131][ T9] Rebooting in 86400 seconds..