program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x26, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x1, 0x0, 0x1000002}})
r1 = fsopen(&(0x7f0000000040)='overlay\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x20, 0xd6e}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa2200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x0, 0x87, '\x00', 0x8}, {0x9, 0x0, 0x2, '\x00', 0xa}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x30}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0xff}]}})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='N', 0x1)
write(r9, &(0x7f0000000100)='100', 0x3)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
[ 94.907788][ T4645] Bluetooth: hci0: command tx timeout
[ 95.257006][ T5320] FAULT_INJECTION: forcing a failure.
[ 95.257006][ T5320] name failslab, interval 1, probability 100, space 0, times 1
[ 95.263299][ T10] FAULT_INJECTION: forcing a failure.
[ 95.263299][ T10] name failslab, interval 1, probability 100, space 0, times 1
[ 95.263362][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 95.263398][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.263418][ T10] Workqueue: events drm_fb_helper_damage_work
[ 95.263531][ T10] Call Trace:
[ 95.263538][ T10]
[ 95.263545][ T10] dump_stack_lvl+0xe8/0x150
[ 95.263566][ T10] should_fail_ex+0x410/0x560
[ 95.263588][ T10] should_failslab+0xa8/0x100
[ 95.263602][ T10] __kmalloc_cache_noprof+0xa3/0x600
[ 95.263618][ T10] ? drm_atomic_commit_alloc+0xa9/0x100
[ 95.263629][ T10] ? drm_atomic_commit_alloc+0xa9/0x100
[ 95.263643][ T10] drm_atomic_commit_alloc+0xa9/0x100
[ 95.263657][ T10] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 95.263677][ T10] ? __lock_acquire+0x747/0x2de0
[ 95.263694][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 95.263721][ T10] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.263744][ T10] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 95.263765][ T10] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.263784][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.263812][ T10] ? lock_acquire+0x115/0x350
[ 95.263830][ T10] ? rcu_is_watching+0x16/0xb0
[ 95.263846][ T10] ? process_scheduled_works+0x97a/0x1630
[ 95.263863][ T10] process_scheduled_works+0xc3d/0x1630
[ 95.263897][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.263949][ T10] ? assign_work+0x3cf/0x5d0
[ 95.263969][ T10] worker_thread+0xa47/0xfb0
[ 95.264002][ T10] kthread+0x38b/0x480
[ 95.264015][ T10] ? __pfx_worker_thread+0x10/0x10
[ 95.264030][ T10] ? __pfx_kthread+0x10/0x10
[ 95.264042][ T10] ret_from_fork+0x514/0xb70
[ 95.264056][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 95.264068][ T10] ? __switch_to+0xc89/0x1420
[ 95.264088][ T10] ? __pfx_kthread+0x10/0x10
[ 95.264101][ T10] ret_from_fork_asm+0x1a/0x30
[ 95.264130][ T10]
[ 95.264440][ T4684] FAULT_INJECTION: forcing a failure.
[ 95.264440][ T4684] name failslab, interval 1, probability 100, space 0, times 1
[ 95.264492][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: klogd Not tainted syzkaller #0 PREEMPT(full)
[ 95.264529][ T4684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.264537][ T4684] Call Trace:
[ 95.264543][ T4684]
[ 95.264548][ T4684] dump_stack_lvl+0xe8/0x150
[ 95.264568][ T4684] should_fail_ex+0x410/0x560
[ 95.264589][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 95.264652][ T4684] should_failslab+0xa8/0x100
[ 95.264666][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 95.264681][ T4684] kmem_cache_alloc_node_noprof+0xa1/0x610
[ 95.264699][ T4684] ? __alloc_skb+0x18d/0x7a0
[ 95.264716][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 95.264735][ T4684] __alloc_skb+0x1db/0x7a0
[ 95.264754][ T4684] alloc_skb_with_frags+0xc6/0x760
[ 95.264772][ T4684] ? kasan_save_track+0x4f/0x80
[ 95.264789][ T4684] ? kasan_save_track+0x3e/0x80
[ 95.264803][ T4684] ? kasan_save_free_info+0x40/0x50
[ 95.264814][ T4684] ? __kasan_slab_free+0x5c/0x80
[ 95.264824][ T4684] ? kfree+0x1c5/0x650
[ 95.264835][ T4684] ? syslog_print+0x57c/0x610
[ 95.264847][ T4684] ? do_syslog+0x583/0x7d0
[ 95.264859][ T4684] ? __x64_sys_syslog+0x7c/0x90
[ 95.264873][ T4684] sock_alloc_send_pskb+0x878/0x990
[ 95.264897][ T4684] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 95.264915][ T4684] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 95.264931][ T4684] unix_dgram_sendmsg+0x4fe/0x1870
[ 95.264948][ T4684] ? lockdep_hardirqs_on+0x7b/0x110
[ 95.264969][ T4684] ? kfree+0x1c5/0x650
[ 95.264982][ T4684] ? syslog_print+0x57c/0x610
[ 95.265033][ T4684] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 95.265050][ T4684] ? aa_sock_msg_perm+0x129/0x210
[ 95.265065][ T4684] ? apparmor_socket_sendmsg+0x98/0x360
[ 95.265083][ T4684] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 95.265098][ T4684] sock_sendmsg_nosec+0x13a/0x180
[ 95.265117][ T4684] __sys_sendto+0x408/0x5a0
[ 95.265135][ T4684] ? bpf_lsm_capable+0x9/0x20
[ 95.265154][ T4684] ? __pfx___sys_sendto+0x10/0x10
[ 95.265185][ T4684] ? rcu_is_watching+0x16/0xb0
[ 95.265204][ T4684] __x64_sys_sendto+0xde/0x100
[ 95.265223][ T4684] do_syscall_64+0x166/0x520
[ 95.265241][ T4684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.265255][ T4684] ? clear_bhb_loop+0x70/0xc0
[ 95.265270][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.265282][ T4684] RIP: 0033:0x7f974d7fc407
[ 95.265295][ T4684] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 95.265304][ T4684] RSP: 002b:00007fff81db8820 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 95.265317][ T4684] RAX: ffffffffffffffda RBX: 00007f974d6acc80 RCX: 00007f974d7fc407
[ 95.265325][ T4684] RDX: 0000000000000055 RSI: 00007fff81db8960 RDI: 0000000000000003
[ 95.265332][ T4684] RBP: 00007fff81db8d90 R08: 0000000000000000 R09: 0000000000000000
[ 95.265338][ T4684] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff81db8da8
[ 95.265345][ T4684] R13: 00007fff81db8960 R14: 000000000000003a R15: 00007fff81db8960
[ 95.265362][ T4684]
[ 95.389886][ T10] ------------[ cut here ]------------
[ 95.389897][ T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 95.389906][ T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10
[ 95.507992][ T10] Modules linked in:
[ 95.509695][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 95.513456][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.517985][ T10] Workqueue: events drm_fb_helper_damage_work
[ 95.520599][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.523735][ T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 95.533285][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246
[ 95.535989][ T10] RAX: 1ffff11003f5841a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 95.539411][ T10] RDX: ffff88801f7a90a0 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 95.542915][ T10] RBP: ffff888000a46008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 95.546336][ T10] R10: dffffc0000000000 R11: fffffbfff1dd6137 R12: ffff88801f7a90a0
[ 95.550010][ T10] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801fac20d0
[ 95.553511][ T10] FS: 0000000000000000(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000
[ 95.557488][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.560361][ T10] CR2: 00007fed80188f58 CR3: 00000000514cd000 CR4: 0000000000352ef0
[ 95.563674][ T10] Call Trace:
[ 95.565165][ T10]
[ 95.567116][ T10] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.569600][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.572358][ T10] ? lock_acquire+0x115/0x350
[ 95.574468][ T10] ? rcu_is_watching+0x16/0xb0
[ 95.577313][ T10] ? process_scheduled_works+0x97a/0x1630
[ 95.579987][ T10] process_scheduled_works+0xc3d/0x1630
[ 95.582360][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.585133][ T10] ? assign_work+0x3cf/0x5d0
[ 95.587270][ T10] worker_thread+0xa47/0xfb0
[ 95.589257][ T10] kthread+0x38b/0x480
[ 95.590926][ T10] ? __pfx_worker_thread+0x10/0x10
[ 95.593112][ T10] ? __pfx_kthread+0x10/0x10
[ 95.595064][ T10] ret_from_fork+0x514/0xb70
[ 95.597187][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 95.599339][ T10] ? __switch_to+0xc89/0x1420
[ 95.601329][ T10] ? __pfx_kthread+0x10/0x10
[ 95.603564][ T10] ret_from_fork_asm+0x1a/0x30
[ 95.606108][ T10]
[ 95.607589][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.610705][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 95.614530][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.618695][ T10] Workqueue: events drm_fb_helper_damage_work
[ 95.621484][ T10] Call Trace:
[ 95.623022][ T10]
[ 95.624377][ T10] vpanic+0x56d/0xa60
[ 95.626182][ T10] ? __pfx__printk+0x10/0x10
[ 95.628614][ T10] ? __pfx_vpanic+0x10/0x10
[ 95.630865][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 95.633170][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 95.635466][ T10] panic+0xc5/0xd0
[ 95.637144][ T10] ? __pfx_panic+0x10/0x10
[ 95.639090][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 95.641262][ T10] __warn+0x315/0x4c0
[ 95.643033][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.645788][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.648563][ T10] __report_bug+0x276/0x570
[ 95.650454][ T10] ? drm_modeset_acquire_fini+0x27/0x180
[ 95.652885][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.655789][ T10] ? __pfx___report_bug+0x10/0x10
[ 95.658166][ T10] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 95.660844][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 95.663520][ T10] report_bug_entry+0x19b/0x290
[ 95.665665][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.668443][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 95.671157][ T10] handle_bug+0xce/0x200
[ 95.673012][ T10] exc_invalid_op+0x1a/0x50
[ 95.675010][ T10] asm_exc_invalid_op+0x1a/0x20
[ 95.677144][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.680214][ T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 95.688157][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246
[ 95.690720][ T10] RAX: 1ffff11003f5841a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 95.694356][ T10] RDX: ffff88801f7a90a0 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 95.698714][ T10] RBP: ffff888000a46008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 95.702152][ T10] R10: dffffc0000000000 R11: fffffbfff1dd6137 R12: ffff88801f7a90a0
[ 95.705512][ T10] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801fac20d0
[ 95.709080][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 95.712006][ T10] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.714599][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.717259][ T10] ? lock_acquire+0x115/0x350
[ 95.719368][ T10] ? rcu_is_watching+0x16/0xb0
[ 95.721513][ T10] ? process_scheduled_works+0x97a/0x1630
[ 95.724082][ T10] process_scheduled_works+0xc3d/0x1630
[ 95.726850][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.730165][ T10] ? assign_work+0x3cf/0x5d0
[ 95.732645][ T10] worker_thread+0xa47/0xfb0
[ 95.734745][ T10] kthread+0x38b/0x480
[ 95.736592][ T10] ? __pfx_worker_thread+0x10/0x10
[ 95.738924][ T10] ? __pfx_kthread+0x10/0x10
[ 95.740951][ T10] ret_from_fork+0x514/0xb70
[ 95.743015][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 95.745208][ T10] ? __switch_to+0xc89/0x1420
[ 95.747269][ T10] ? __pfx_kthread+0x10/0x10
[ 95.749219][ T10] ret_from_fork_asm+0x1a/0x30
[ 95.751271][ T10]
[ 95.753014][ T10] Kernel Offset: disabled
[ 95.754918][ T10] Rebooting in 86400 seconds..