program:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x58, 0x4)
recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x6}], 0x400020e, 0x10000, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x200})
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='9', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
write(r4, &(0x7f0000000100)='N', 0x1)
write(r5, &(0x7f0000000100)='1', 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0)
[ 123.319934][ T5288] Bluetooth: hci0: command tx timeout
[ 123.533688][ T5325] FAULT_INJECTION: forcing a failure.
[ 123.533688][ T5325] name failslab, interval 1, probability 1, space 0, times 1
[ 123.539268][ T807] FAULT_INJECTION: forcing a failure.
[ 123.539268][ T807] name failslab, interval 1, probability 1, space 0, times 1
[ 123.539295][ T807] CPU: 0 UID: 0 PID: 807 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 123.539310][ T807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.539318][ T807] Workqueue: events drm_fb_helper_damage_work
[ 123.539435][ T807] Call Trace:
[ 123.539442][ T807]
[ 123.539448][ T807] dump_stack_lvl+0xe8/0x150
[ 123.539469][ T807] should_fail_ex+0x410/0x560
[ 123.539491][ T807] should_failslab+0xa8/0x100
[ 123.539506][ T807] __kmalloc_cache_noprof+0xa3/0x600
[ 123.539524][ T807] ? drm_atomic_commit_alloc+0xa9/0x100
[ 123.539536][ T807] ? drm_atomic_commit_alloc+0xa9/0x100
[ 123.539553][ T807] drm_atomic_commit_alloc+0xa9/0x100
[ 123.539567][ T807] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 123.539587][ T807] ? __lock_acquire+0x6df/0x2e50
[ 123.539605][ T807] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 123.539632][ T807] ? do_raw_spin_lock+0x12b/0x2f0
[ 123.539658][ T807] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 123.539678][ T807] drm_fb_helper_damage_work+0x84c/0xf20
[ 123.539701][ T807] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 123.539729][ T807] ? lock_acquire+0x115/0x350
[ 123.539747][ T807] ? rcu_is_watching+0x16/0xb0
[ 123.539762][ T807] ? process_scheduled_works+0x97a/0x1630
[ 123.539780][ T807] process_scheduled_works+0xc3d/0x1630
[ 123.539818][ T807] ? __pfx_process_scheduled_works+0x10/0x10
[ 123.539839][ T807] ? assign_work+0x3cf/0x5d0
[ 123.539879][ T807] worker_thread+0xa47/0xfb0
[ 123.539925][ T807] kthread+0x38b/0x480
[ 123.539938][ T807] ? __pfx_worker_thread+0x10/0x10
[ 123.539952][ T807] ? __pfx_kthread+0x10/0x10
[ 123.539966][ T807] ret_from_fork+0x514/0xb70
[ 123.539981][ T807] ? __pfx_ret_from_fork+0x10/0x10
[ 123.539993][ T807] ? __switch_to+0xc89/0x1420
[ 123.540012][ T807] ? __pfx_kthread+0x10/0x10
[ 123.540025][ T807] ret_from_fork_asm+0x1a/0x30
[ 123.540054][ T807]
[ 123.540133][ T807] ------------[ cut here ]------------
[ 123.540140][ T807] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 123.540148][ T807] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:2/807
[ 123.637426][ T807] Modules linked in:
[ 123.639153][ T807] CPU: 0 UID: 0 PID: 807 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 123.643231][ T807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.647665][ T807] Workqueue: events drm_fb_helper_damage_work
[ 123.650404][ T807] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 123.653641][ T807] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 123.662012][ T807] RSP: 0018:ffffc90004397898 EFLAGS: 00010246
[ 123.664653][ T807] RAX: 1ffff11003ed741a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 123.668005][ T807] RDX: ffff88801f47b900 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0
[ 123.671375][ T807] RBP: ffff88801d294008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 123.674995][ T807] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f47b900
[ 123.678368][ T807] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6ba0d0
[ 123.681918][ T807] FS: 0000000000000000(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 123.685774][ T807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 123.688611][ T807] CR2: 0000000000000000 CR3: 0000000050a84000 CR4: 0000000000352ef0
[ 123.692224][ T807] Call Trace:
[ 123.693720][ T807]
[ 123.695025][ T807] drm_fb_helper_damage_work+0x84c/0xf20
[ 123.697491][ T807] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 123.700340][ T807] ? lock_acquire+0x115/0x350
[ 123.702591][ T807] ? rcu_is_watching+0x16/0xb0
[ 123.704763][ T807] ? process_scheduled_works+0x97a/0x1630
[ 123.707289][ T807] process_scheduled_works+0xc3d/0x1630
[ 123.709679][ T807] ? __pfx_process_scheduled_works+0x10/0x10
[ 123.712543][ T807] ? assign_work+0x3cf/0x5d0
[ 123.714644][ T807] worker_thread+0xa47/0xfb0
[ 123.716661][ T807] kthread+0x38b/0x480
[ 123.718388][ T807] ? __pfx_worker_thread+0x10/0x10
[ 123.720674][ T807] ? __pfx_kthread+0x10/0x10
[ 123.722904][ T807] ret_from_fork+0x514/0xb70
[ 123.724862][ T807] ? __pfx_ret_from_fork+0x10/0x10
[ 123.727200][ T807] ? __switch_to+0xc89/0x1420
[ 123.729264][ T807] ? __pfx_kthread+0x10/0x10
[ 123.731342][ T807] ret_from_fork_asm+0x1a/0x30
[ 123.733655][ T807]
[ 123.735087][ T807] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 123.738328][ T807] CPU: 0 UID: 0 PID: 807 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 123.742456][ T807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.746933][ T807] Workqueue: events drm_fb_helper_damage_work
[ 123.749680][ T807] Call Trace:
[ 123.751150][ T807]
[ 123.752494][ T807] vpanic+0x56d/0xa60
[ 123.754308][ T807] ? __pfx__printk+0x10/0x10
[ 123.756500][ T807] ? __pfx_vpanic+0x10/0x10
[ 123.758583][ T807] ? is_bpf_text_address+0x292/0x2b0
[ 123.760985][ T807] ? is_bpf_text_address+0x26/0x2b0
[ 123.763202][ T807] panic+0xc5/0xd0
[ 123.764903][ T807] ? __pfx_panic+0x10/0x10
[ 123.766852][ T807] ? ret_from_fork_asm+0x1a/0x30
[ 123.769067][ T807] __warn+0x315/0x4c0
[ 123.770871][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 123.773572][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 123.776396][ T807] __report_bug+0x276/0x570
[ 123.778445][ T807] ? drm_modeset_acquire_fini+0x27/0x180
[ 123.780746][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 123.783449][ T807] ? __pfx___report_bug+0x10/0x10
[ 123.785673][ T807] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 123.788165][ T807] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 123.790889][ T807] report_bug_entry+0x19b/0x290
[ 123.792959][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 123.795448][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 123.797998][ T807] handle_bug+0xce/0x200
[ 123.799792][ T807] exc_invalid_op+0x1a/0x50
[ 123.801671][ T807] asm_exc_invalid_op+0x1a/0x20
[ 123.803807][ T807] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 123.806745][ T807] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 123.815081][ T807] RSP: 0018:ffffc90004397898 EFLAGS: 00010246
[ 123.817717][ T807] RAX: 1ffff11003ed741a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 123.821052][ T807] RDX: ffff88801f47b900 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0
[ 123.824462][ T807] RBP: ffff88801d294008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 123.827930][ T807] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f47b900
[ 123.831410][ T807] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6ba0d0
[ 123.834896][ T807] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 123.837669][ T807] drm_fb_helper_damage_work+0x84c/0xf20
[ 123.840128][ T807] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 123.842758][ T807] ? lock_acquire+0x115/0x350
[ 123.844932][ T807] ? rcu_is_watching+0x16/0xb0
[ 123.847018][ T807] ? process_scheduled_works+0x97a/0x1630
[ 123.849602][ T807] process_scheduled_works+0xc3d/0x1630
[ 123.852060][ T807] ? __pfx_process_scheduled_works+0x10/0x10
[ 123.854704][ T807] ? assign_work+0x3cf/0x5d0
[ 123.856817][ T807] worker_thread+0xa47/0xfb0
[ 123.858804][ T807] kthread+0x38b/0x480
[ 123.860561][ T807] ? __pfx_worker_thread+0x10/0x10
[ 123.862770][ T807] ? __pfx_kthread+0x10/0x10
[ 123.864759][ T807] ret_from_fork+0x514/0xb70
[ 123.866829][ T807] ? __pfx_ret_from_fork+0x10/0x10
[ 123.869086][ T807] ? __switch_to+0xc89/0x1420
[ 123.871079][ T807] ? __pfx_kthread+0x10/0x10
[ 123.873086][ T807] ret_from_fork_asm+0x1a/0x30
[ 123.875125][ T807]
[ 123.876912][ T807] Kernel Offset: disabled
[ 123.878774][ T807] Rebooting in 86400 seconds..