program:
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='N', 0x1)
write(r1, &(0x7f0000000100)='100', 0x3)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x1000, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f00000011c0)}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r4, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r4, 0x5)
write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a)
[ 80.185460][ T5276] Bluetooth: hci0: command tx timeout
[ 80.265661][ T5299] FAULT_INJECTION: forcing a failure.
[ 80.265661][ T5299] name failslab, interval 1, probability 100, space 0, times 1
[ 80.265726][ T5299] CPU: 0 UID: 0 PID: 5299 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 80.265757][ T5299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 80.265766][ T5299] Workqueue: events drm_fb_helper_damage_work
[ 80.265855][ T5299] Call Trace:
[ 80.265860][ T5299]
[ 80.265867][ T5299] dump_stack_lvl+0xe8/0x150
[ 80.265887][ T5299] should_fail_ex+0x410/0x560
[ 80.265907][ T5299] should_failslab+0xa8/0x100
[ 80.265921][ T5299] __kmalloc_cache_noprof+0xa3/0x600
[ 80.265940][ T5299] ? drm_atomic_commit_alloc+0xa9/0x100
[ 80.265951][ T5299] ? drm_atomic_commit_alloc+0xa9/0x100
[ 80.265967][ T5299] drm_atomic_commit_alloc+0xa9/0x100
[ 80.265980][ T5299] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 80.265999][ T5299] ? __lock_acquire+0x6df/0x2e50
[ 80.266015][ T5299] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 80.266041][ T5299] ? do_raw_spin_lock+0x12b/0x2f0
[ 80.266064][ T5299] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 80.266083][ T5299] drm_fb_helper_damage_work+0x84c/0xf20
[ 80.266113][ T5299] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 80.266140][ T5299] ? lock_acquire+0x115/0x350
[ 80.266158][ T5299] ? rcu_is_watching+0x16/0xb0
[ 80.266173][ T5299] ? process_scheduled_works+0x97a/0x1630
[ 80.266190][ T5299] process_scheduled_works+0xc3d/0x1630
[ 80.266222][ T5299] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.266242][ T5299] ? assign_work+0x3cf/0x5d0
[ 80.266260][ T5299] worker_thread+0xa47/0xfb0
[ 80.266285][ T5299] ? __kthread_parkme+0x71/0x1f0
[ 80.266328][ T5299] kthread+0x38b/0x480
[ 80.266341][ T5299] ? __pfx_worker_thread+0x10/0x10
[ 80.266355][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.266368][ T5299] ret_from_fork+0x514/0xb70
[ 80.266382][ T5299] ? __pfx_ret_from_fork+0x10/0x10
[ 80.266393][ T5299] ? __switch_to+0xc89/0x1420
[ 80.266411][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.266423][ T5299] ret_from_fork_asm+0x1a/0x30
[ 80.266451][ T5299]
[ 80.266576][ T5299] ------------[ cut here ]------------
[ 80.266601][ T5299] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 80.266630][ T5299] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:5/5299
[ 80.369086][ T5299] Modules linked in:
[ 80.371431][ T5299] CPU: 0 UID: 0 PID: 5299 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 80.375385][ T5299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 80.380016][ T5299] Workqueue: events drm_fb_helper_damage_work
[ 80.382781][ T5299] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 80.385857][ T5299] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 80.394185][ T5299] RSP: 0018:ffffc9000def7898 EFLAGS: 00010246
[ 80.396910][ T5299] RAX: 1ffff11003ed441a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 80.400010][ T5299] RDX: ffff88801f454900 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0
[ 80.403193][ T5299] RBP: ffff88801d23a008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 80.406638][ T5299] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f454900
[ 80.409884][ T5299] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6a20d0
[ 80.413952][ T5299] FS: 0000000000000000(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 80.418776][ T5299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.421750][ T5299] CR2: 00007f530e61f650 CR3: 0000000042a6e000 CR4: 0000000000352ef0
[ 80.425332][ T5299] Call Trace:
[ 80.426799][ T5299]
[ 80.428117][ T5299] drm_fb_helper_damage_work+0x84c/0xf20
[ 80.430618][ T5299] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 80.433271][ T5299] ? lock_acquire+0x115/0x350
[ 80.435519][ T5299] ? rcu_is_watching+0x16/0xb0
[ 80.437877][ T5299] ? process_scheduled_works+0x97a/0x1630
[ 80.440284][ T5299] process_scheduled_works+0xc3d/0x1630
[ 80.442489][ T5299] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.445232][ T5299] ? assign_work+0x3cf/0x5d0
[ 80.447088][ T5299] worker_thread+0xa47/0xfb0
[ 80.449046][ T5299] ? __kthread_parkme+0x71/0x1f0
[ 80.451197][ T5299] kthread+0x38b/0x480
[ 80.452939][ T5299] ? __pfx_worker_thread+0x10/0x10
[ 80.455191][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.457124][ T5299] ret_from_fork+0x514/0xb70
[ 80.459026][ T5299] ? __pfx_ret_from_fork+0x10/0x10
[ 80.461222][ T5299] ? __switch_to+0xc89/0x1420
[ 80.463403][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.465540][ T5299] ret_from_fork_asm+0x1a/0x30
[ 80.467609][ T5299]
[ 80.468993][ T5299] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 80.472041][ T5299] CPU: 0 UID: 0 PID: 5299 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 80.475888][ T5299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 80.480042][ T5299] Workqueue: events drm_fb_helper_damage_work
[ 80.482559][ T5299] Call Trace:
[ 80.483934][ T5299]
[ 80.485167][ T5299] vpanic+0x56d/0xa60
[ 80.486851][ T5299] ? __pfx__printk+0x10/0x10
[ 80.488823][ T5299] ? __pfx_vpanic+0x10/0x10
[ 80.490804][ T5299] ? is_bpf_text_address+0x292/0x2b0
[ 80.493035][ T5299] ? is_bpf_text_address+0x26/0x2b0
[ 80.495217][ T5299] panic+0xc5/0xd0
[ 80.496832][ T5299] ? __pfx_panic+0x10/0x10
[ 80.498782][ T5299] ? ret_from_fork_asm+0x1a/0x30
[ 80.500975][ T5299] __warn+0x315/0x4c0
[ 80.502661][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 80.505318][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 80.508069][ T5299] __report_bug+0x276/0x570
[ 80.510053][ T5299] ? drm_modeset_acquire_fini+0x27/0x180
[ 80.512444][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 80.515078][ T5299] ? __pfx___report_bug+0x10/0x10
[ 80.517216][ T5299] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 80.519795][ T5299] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 80.522577][ T5299] report_bug_entry+0x19b/0x290
[ 80.524760][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 80.527468][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 80.530168][ T5299] handle_bug+0xce/0x200
[ 80.532038][ T5299] exc_invalid_op+0x1a/0x50
[ 80.533983][ T5299] asm_exc_invalid_op+0x1a/0x20
[ 80.536033][ T5299] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 80.539017][ T5299] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 80.547278][ T5299] RSP: 0018:ffffc9000def7898 EFLAGS: 00010246
[ 80.549973][ T5299] RAX: 1ffff11003ed441a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 80.553316][ T5299] RDX: ffff88801f454900 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0
[ 80.556774][ T5299] RBP: ffff88801d23a008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 80.560139][ T5299] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f454900
[ 80.563462][ T5299] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6a20d0
[ 80.566688][ T5299] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 80.569298][ T5299] drm_fb_helper_damage_work+0x84c/0xf20
[ 80.571815][ T5299] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 80.574437][ T5299] ? lock_acquire+0x115/0x350
[ 80.576512][ T5299] ? rcu_is_watching+0x16/0xb0
[ 80.578636][ T5299] ? process_scheduled_works+0x97a/0x1630
[ 80.581153][ T5299] process_scheduled_works+0xc3d/0x1630
[ 80.583519][ T5299] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.586086][ T5299] ? assign_work+0x3cf/0x5d0
[ 80.587969][ T5299] worker_thread+0xa47/0xfb0
[ 80.589907][ T5299] ? __kthread_parkme+0x71/0x1f0
[ 80.592107][ T5299] kthread+0x38b/0x480
[ 80.593901][ T5299] ? __pfx_worker_thread+0x10/0x10
[ 80.596005][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.597987][ T5299] ret_from_fork+0x514/0xb70
[ 80.599906][ T5299] ? __pfx_ret_from_fork+0x10/0x10
[ 80.602053][ T5299] ? __switch_to+0xc89/0x1420
[ 80.604056][ T5299] ? __pfx_kthread+0x10/0x10
[ 80.606126][ T5299] ret_from_fork_asm+0x1a/0x30
[ 80.608284][ T5299]
[ 80.610095][ T5299] Kernel Offset: disabled
[ 80.612535][ T5299] Rebooting in 86400 seconds..