program:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x200})
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
write(r3, &(0x7f0000000100)='N', 0x1)
write(r4, &(0x7f0000000100)='1', 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f00000023c0))
lstat(&(0x7f0000000040)='./tracing\x00', 0x0)
[ 78.972064][ T5277] Bluetooth: hci0: command tx timeout
[ 79.090134][ T5314] FAULT_INJECTION: forcing a failure.
[ 79.090134][ T5314] name failslab, interval 1, probability 1, space 0, times 1
[ 79.098509][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.098546][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.098566][ T5314] Call Trace:
[ 79.098574][ T5314]
[ 79.098580][ T5314] dump_stack_lvl+0xe8/0x150
[ 79.098693][ T5314] should_fail_ex+0x410/0x560
[ 79.098778][ T5314] should_failslab+0xa8/0x100
[ 79.098833][ T5314] __kmalloc_cache_noprof+0xa3/0x600
[ 79.098852][ T5314] ? kmem_cache_alloc_noprof+0x31f/0x600
[ 79.098869][ T5314] ? trace_create_new_event+0x26d/0x7a0
[ 79.098898][ T5314] ? eventfs_create_dir+0x70/0x3d0
[ 79.098956][ T5314] ? eventfs_create_dir+0x70/0x3d0
[ 79.098977][ T5314] eventfs_create_dir+0x70/0x3d0
[ 79.098996][ T5314] ? trace_create_new_event+0x617/0x7a0
[ 79.099011][ T5314] event_create_dir+0x7bf/0xb60
[ 79.099032][ T5314] event_trace_add_tracer+0x1b4/0x3b0
[ 79.099047][ T5314] trace_array_create_dir+0x77/0x160
[ 79.099071][ T5314] trace_array_create_systems+0xb3c/0xe60
[ 79.099091][ T5314] instance_mkdir+0xd5/0x140
[ 79.099110][ T5314] tracefs_syscall_mkdir+0x11a/0x190
[ 79.099129][ T5314] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 79.099143][ T5314] ? generic_permission+0x2bf/0x670
[ 79.099166][ T5314] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 79.099181][ T5314] vfs_mkdir+0x40c/0x620
[ 79.099205][ T5314] filename_mkdirat+0x285/0x510
[ 79.099226][ T5314] ? __pfx_filename_mkdirat+0x10/0x10
[ 79.099245][ T5314] ? do_getname+0x151/0x250
[ 79.099260][ T5314] __se_sys_mkdirat+0x35/0x150
[ 79.099279][ T5314] do_syscall_64+0x166/0x520
[ 79.099379][ T5314] ? trace_irq_disable+0x3b/0x140
[ 79.099391][ T5314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.099415][ T5314] ? clear_bhb_loop+0x70/0xc0
[ 79.099429][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.099443][ T5314] RIP: 0033:0x7f663f19e159
[ 79.099457][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.099470][ T5314] RSP: 002b:00007f663b5f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 79.099484][ T5314] RAX: ffffffffffffffda RBX: 00007f663f425fa0 RCX: 00007f663f19e159
[ 79.099492][ T5314] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 79.099501][ T5314] RBP: 00007f663f235024 R08: 0000000000000000 R09: 0000000000000000
[ 79.099509][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.099516][ T5314] R13: 00007f663f426038 R14: 00007f663f425fa0 R15: 00007ffe61a75d08
[ 79.099534][ T5314]
[ 79.157856][ T4684] FAULT_INJECTION: forcing a failure.
[ 79.157856][ T4684] name failslab, interval 1, probability 1, space 0, times 1
[ 79.157880][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: klogd Not tainted syzkaller #0 PREEMPT(full)
[ 79.157894][ T4684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.157901][ T4684] Call Trace:
[ 79.157906][ T4684]
[ 79.157912][ T4684] dump_stack_lvl+0xe8/0x150
[ 79.157957][ T4684] should_fail_ex+0x410/0x560
[ 79.157979][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 79.158032][ T4684] should_failslab+0xa8/0x100
[ 79.158046][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 79.158061][ T4684] kmem_cache_alloc_node_noprof+0xa1/0x610
[ 79.158085][ T4684] ? __alloc_skb+0x18d/0x7a0
[ 79.158101][ T4684] ? __alloc_skb+0x1db/0x7a0
[ 79.158122][ T4684] __alloc_skb+0x1db/0x7a0
[ 79.158142][ T4684] alloc_skb_with_frags+0xc6/0x760
[ 79.158159][ T4684] ? __lock_acquire+0x747/0x2de0
[ 79.158180][ T4684] sock_alloc_send_pskb+0x878/0x990
[ 79.158205][ T4684] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 79.158219][ T4684] ? sock_def_readable+0xae/0x550
[ 79.158237][ T4684] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 79.158253][ T4684] unix_dgram_sendmsg+0x4fe/0x1870
[ 79.158296][ T4684] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 79.158314][ T4684] ? aa_sock_msg_perm+0x129/0x210
[ 79.158341][ T4684] ? apparmor_socket_sendmsg+0x98/0x360
[ 79.158358][ T4684] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 79.158371][ T4684] sock_sendmsg_nosec+0x13a/0x180
[ 79.158388][ T4684] __sys_sendto+0x408/0x5a0
[ 79.158402][ T4684] ? bpf_lsm_capable+0x9/0x20
[ 79.158419][ T4684] ? __pfx___sys_sendto+0x10/0x10
[ 79.158441][ T4684] ? ktime_get+0x1f5/0x220
[ 79.158461][ T4684] ? rcu_is_watching+0x16/0xb0
[ 79.158479][ T4684] __x64_sys_sendto+0xde/0x100
[ 79.158496][ T4684] do_syscall_64+0x166/0x520
[ 79.158515][ T4684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.158526][ T4684] ? clear_bhb_loop+0x70/0xc0
[ 79.158540][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.158551][ T4684] RIP: 0033:0x7f3d9a96b407
[ 79.158563][ T4684] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 79.158573][ T4684] RSP: 002b:00007ffc553b35d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 79.158587][ T4684] RAX: ffffffffffffffda RBX: 00007f3d9a81bc80 RCX: 00007f3d9a96b407
[ 79.158596][ T4684] RDX: 000000000000007f RSI: 00007ffc553b3710 RDI: 0000000000000003
[ 79.158603][ T4684] RBP: 00007ffc553b3b40 R08: 0000000000000000 R09: 0000000000000000
[ 79.158610][ T4684] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc553b3b58
[ 79.158618][ T4684] R13: 00007ffc553b3710 R14: 0000000000000064 R15: 00007ffc553b3710
[ 79.158637][ T4684]
[ 79.196343][ T5312] FAULT_INJECTION: forcing a failure.
[ 79.196343][ T5312] name failslab, interval 1, probability 1, space 0, times 1
[ 79.196369][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 79.196383][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.196390][ T5312] Workqueue: events drm_fb_helper_damage_work
[ 79.196456][ T5312] Call Trace:
[ 79.196461][ T5312]
[ 79.196469][ T5312] dump_stack_lvl+0xe8/0x150
[ 79.196488][ T5312] should_fail_ex+0x410/0x560
[ 79.196511][ T5312] should_failslab+0xa8/0x100
[ 79.196525][ T5312] __kmalloc_noprof+0xfe/0x720
[ 79.196542][ T5312] ? __kasan_kmalloc+0x93/0xb0
[ 79.196553][ T5312] ? drm_atomic_commit_init+0x9e/0x370
[ 79.196575][ T5312] ? drm_atomic_commit_init+0x9e/0x370
[ 79.196590][ T5312] drm_atomic_commit_init+0x9e/0x370
[ 79.196606][ T5312] drm_atomic_commit_alloc+0xbc/0x100
[ 79.196619][ T5312] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 79.196647][ T5312] ? __lock_acquire+0x747/0x2de0
[ 79.196662][ T5312] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 79.196689][ T5312] ? do_raw_spin_lock+0x12b/0x2f0
[ 79.196713][ T5312] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 79.196734][ T5312] drm_fb_helper_damage_work+0x84c/0xf20
[ 79.196751][ T5312] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 79.196778][ T5312] ? lock_acquire+0x115/0x350
[ 79.196796][ T5312] ? rcu_is_watching+0x16/0xb0
[ 79.196813][ T5312] ? process_scheduled_works+0x97a/0x1630
[ 79.196828][ T5312] process_scheduled_works+0xc3d/0x1630
[ 79.196863][ T5312] ? __pfx_process_scheduled_works+0x10/0x10
[ 79.196883][ T5312] ? assign_work+0x3cf/0x5d0
[ 79.196919][ T5312] worker_thread+0xa47/0xfb0
[ 79.196945][ T5312] ? __kthread_parkme+0x71/0x1f0
[ 79.196969][ T5312] kthread+0x38b/0x480
[ 79.196982][ T5312] ? __pfx_worker_thread+0x10/0x10
[ 79.196997][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.197010][ T5312] ret_from_fork+0x514/0xb70
[ 79.197024][ T5312] ? __pfx_ret_from_fork+0x10/0x10
[ 79.197037][ T5312] ? __switch_to+0xc89/0x1420
[ 79.197054][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.197073][ T5312] ret_from_fork_asm+0x1a/0x30
[ 79.197100][ T5312]
[ 79.197528][ T5312] ------------[ cut here ]------------
[ 79.197536][ T5312] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 79.197545][ T5312] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:6/5312
[ 79.445685][ T5312] Modules linked in:
[ 79.447652][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 79.451506][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.455174][ T5312] Workqueue: events drm_fb_helper_damage_work
[ 79.457864][ T5312] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 79.460720][ T5312] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 79.468619][ T5312] RSP: 0018:ffffc9000ef6f898 EFLAGS: 00010246
[ 79.471247][ T5312] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 79.474625][ T5312] RDX: ffff88801f3dbea0 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 79.478013][ T5312] RBP: ffff888034e00008 R08: ffffffff907a427f R09: 1ffffffff20f484f
[ 79.481086][ T5312] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffff88801f3dbea0
[ 79.484159][ T5312] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0
[ 79.487595][ T5312] FS: 0000000000000000(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000
[ 79.491507][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.494134][ T5312] CR2: 000055557ad7fc48 CR3: 000000004ff95000 CR4: 0000000000352ef0
[ 79.497575][ T5312] Call Trace:
[ 79.499111][ T5312]
[ 79.500470][ T5312] drm_fb_helper_damage_work+0x84c/0xf20
[ 79.502851][ T5312] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 79.505477][ T5312] ? lock_acquire+0x115/0x350
[ 79.507495][ T5312] ? rcu_is_watching+0x16/0xb0
[ 79.509664][ T5312] ? process_scheduled_works+0x97a/0x1630
[ 79.512101][ T5312] process_scheduled_works+0xc3d/0x1630
[ 79.514614][ T5312] ? __pfx_process_scheduled_works+0x10/0x10
[ 79.517341][ T5312] ? assign_work+0x3cf/0x5d0
[ 79.519388][ T5312] worker_thread+0xa47/0xfb0
[ 79.521443][ T5312] ? __kthread_parkme+0x71/0x1f0
[ 79.523595][ T5312] kthread+0x38b/0x480
[ 79.525452][ T5312] ? __pfx_worker_thread+0x10/0x10
[ 79.527801][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.529869][ T5312] ret_from_fork+0x514/0xb70
[ 79.531862][ T5312] ? __pfx_ret_from_fork+0x10/0x10
[ 79.533979][ T5312] ? __switch_to+0xc89/0x1420
[ 79.536009][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.538132][ T5312] ret_from_fork_asm+0x1a/0x30
[ 79.540244][ T5312]
[ 79.541484][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.544468][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 79.548278][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.552419][ T5312] Workqueue: events drm_fb_helper_damage_work
[ 79.554961][ T5312] Call Trace:
[ 79.556392][ T5312]
[ 79.557699][ T5312] vpanic+0x56d/0xa60
[ 79.559451][ T5312] ? __pfx__printk+0x10/0x10
[ 79.561282][ T5312] ? __pfx_vpanic+0x10/0x10
[ 79.563167][ T5312] ? is_bpf_text_address+0x292/0x2b0
[ 79.565358][ T5312] ? is_bpf_text_address+0x26/0x2b0
[ 79.567560][ T5312] panic+0xc5/0xd0
[ 79.569133][ T5312] ? __pfx_panic+0x10/0x10
[ 79.571004][ T5312] ? ret_from_fork_asm+0x1a/0x30
[ 79.573149][ T5312] __warn+0x315/0x4c0
[ 79.574711][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 79.577302][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 79.579907][ T5312] __report_bug+0x276/0x570
[ 79.581800][ T5312] ? drm_modeset_acquire_fini+0x27/0x180
[ 79.584136][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 79.586698][ T5312] ? __pfx___report_bug+0x10/0x10
[ 79.588889][ T5312] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 79.591499][ T5312] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 79.594225][ T5312] report_bug_entry+0x19b/0x290
[ 79.596332][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 79.598897][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 79.601326][ T5312] handle_bug+0xce/0x200
[ 79.603252][ T5312] exc_invalid_op+0x1a/0x50
[ 79.605248][ T5312] asm_exc_invalid_op+0x1a/0x20
[ 79.607262][ T5312] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 79.610061][ T5312] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 79.617587][ T5312] RSP: 0018:ffffc9000ef6f898 EFLAGS: 00010246
[ 79.620013][ T5312] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 79.623245][ T5312] RDX: ffff88801f3dbea0 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 79.626615][ T5312] RBP: ffff888034e00008 R08: ffffffff907a427f R09: 1ffffffff20f484f
[ 79.629792][ T5312] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffff88801f3dbea0
[ 79.633097][ T5312] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0
[ 79.636580][ T5312] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 79.639346][ T5312] drm_fb_helper_damage_work+0x84c/0xf20
[ 79.641827][ T5312] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 79.644428][ T5312] ? lock_acquire+0x115/0x350
[ 79.646441][ T5312] ? rcu_is_watching+0x16/0xb0
[ 79.648586][ T5312] ? process_scheduled_works+0x97a/0x1630
[ 79.651052][ T5312] process_scheduled_works+0xc3d/0x1630
[ 79.653409][ T5312] ? __pfx_process_scheduled_works+0x10/0x10
[ 79.655914][ T5312] ? assign_work+0x3cf/0x5d0
[ 79.657848][ T5312] worker_thread+0xa47/0xfb0
[ 79.659894][ T5312] ? __kthread_parkme+0x71/0x1f0
[ 79.662012][ T5312] kthread+0x38b/0x480
[ 79.663817][ T5312] ? __pfx_worker_thread+0x10/0x10
[ 79.665954][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.667794][ T5312] ret_from_fork+0x514/0xb70
[ 79.669874][ T5312] ? __pfx_ret_from_fork+0x10/0x10
[ 79.672043][ T5312] ? __switch_to+0xc89/0x1420
[ 79.673965][ T5312] ? __pfx_kthread+0x10/0x10
[ 79.675736][ T5312] ret_from_fork_asm+0x1a/0x30
[ 79.677701][ T5312]
[ 79.679388][ T5312] Kernel Offset: disabled
[ 79.681123][ T5312] Rebooting in 86400 seconds..