program:
socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='N', 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x300, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
write(r1, &(0x7f0000000100)='100', 0x3)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=@sha1={0x1, "23fdcb139c008046fb54b656267785ec9efd2096"}, 0x15, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, 0x0, 0x4}, 0x94)
[ 386.686157][ T4646] Bluetooth: hci0: command tx timeout
[ 386.783915][ T5378] FAULT_INJECTION: forcing a failure.
[ 386.783915][ T5378] name failslab, interval 1, probability 100, space 0, times 1
[ 386.783941][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 386.783954][ T5378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 386.783992][ T5378] Call Trace:
[ 386.783998][ T5378]
[ 386.784005][ T5378] dump_stack_lvl+0xe8/0x150
[ 386.784138][ T5378] should_fail_ex+0x410/0x560
[ 386.784200][ T5378] ? __pfx_sock_alloc_inode+0x10/0x10
[ 386.784266][ T5378] should_failslab+0xa8/0x100
[ 386.784292][ T5378] ? __pfx_sock_alloc_inode+0x10/0x10
[ 386.784303][ T5378] kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[ 386.784321][ T5378] ? __pfx_handle_mm_fault+0x10/0x10
[ 386.784342][ T5378] ? sock_alloc_inode+0x2c/0x1a0
[ 386.784354][ T5378] ? sock_alloc_inode+0x2c/0x1a0
[ 386.784371][ T5378] ? __pfx_sock_alloc_inode+0x10/0x10
[ 386.784383][ T5378] sock_alloc_inode+0x2c/0x1a0
[ 386.784398][ T5378] ? __pfx_sock_alloc_inode+0x10/0x10
[ 386.784410][ T5378] alloc_inode+0x6a/0x1b0
[ 386.784428][ T5378] __sock_create+0x12d/0x9d0
[ 386.784444][ T5378] ? exc_page_fault+0x6a/0xc0
[ 386.784469][ T5378] __sys_socket+0xd6/0x1b0
[ 386.784485][ T5378] __x64_sys_socket+0x7a/0x90
[ 386.784501][ T5378] do_syscall_64+0x166/0x520
[ 386.784515][ T5378] ? trace_irq_disable+0x3b/0x140
[ 386.784538][ T5378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 386.784551][ T5378] ? clear_bhb_loop+0x70/0xc0
[ 386.784567][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 386.784579][ T5378] RIP: 0033:0x7f7dfdf9fa07
[ 386.784592][ T5378] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 386.784602][ T5378] RSP: 002b:00007f7dfeddaf28 EFLAGS: 00000283 ORIG_RAX: 0000000000000029
[ 386.784615][ T5378] RAX: ffffffffffffffda RBX: 00007f7dfe225fa0 RCX: 00007f7dfdf9fa07
[ 386.784624][ T5378] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 386.784631][ T5378] RBP: 00007f7dfe035888 R08: 0000000000000000 R09: 0000000000000000
[ 386.784638][ T5378] R10: 0000200000000300 R11: 0000000000000283 R12: 0000000000000000
[ 386.784646][ T5378] R13: 000000000000002a R14: 0000000000000000 R15: 0000200000000300
[ 386.784666][ T5378]
[ 386.784775][ T5376] FAULT_INJECTION: forcing a failure.
[ 386.784775][ T5376] name failslab, interval 1, probability 100, space 0, times 1
[ 386.784792][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full)
[ 386.784804][ T5376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 386.784811][ T5376] Workqueue: events drm_fb_helper_damage_work
[ 386.784846][ T5376] Call Trace:
[ 386.784851][ T5376]
[ 386.784855][ T5376] dump_stack_lvl+0xe8/0x150
[ 386.784871][ T5376] should_fail_ex+0x410/0x560
[ 386.784889][ T5376] should_failslab+0xa8/0x100
[ 386.784904][ T5376] __kmalloc_cache_noprof+0xa3/0x600
[ 386.784916][ T5376] ? drm_atomic_commit_alloc+0xa9/0x100
[ 386.784941][ T5376] ? drm_atomic_commit_alloc+0xa9/0x100
[ 386.784961][ T5376] drm_atomic_commit_alloc+0xa9/0x100
[ 386.784987][ T5376] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 386.785026][ T5376] ? __lock_acquire+0x747/0x2de0
[ 386.785045][ T5376] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 386.785068][ T5376] ? do_raw_spin_lock+0x12b/0x2f0
[ 386.785093][ T5376] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 386.785132][ T5376] drm_fb_helper_damage_work+0x84c/0xf20
[ 386.785154][ T5376] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 386.785182][ T5376] ? lock_acquire+0x115/0x350
[ 386.785200][ T5376] ? rcu_is_watching+0x16/0xb0
[ 386.785218][ T5376] ? process_scheduled_works+0x97a/0x1630
[ 386.785234][ T5376] process_scheduled_works+0xc3d/0x1630
[ 386.785270][ T5376] ? __pfx_process_scheduled_works+0x10/0x10
[ 386.785288][ T5376] ? assign_work+0x3cf/0x5d0
[ 386.785307][ T5376] worker_thread+0xa47/0xfb0
[ 386.785330][ T5376] ? __kthread_parkme+0x71/0x1f0
[ 386.785359][ T5376] kthread+0x38b/0x480
[ 386.785371][ T5376] ? __pfx_worker_thread+0x10/0x10
[ 386.785385][ T5376] ? __pfx_kthread+0x10/0x10
[ 386.785397][ T5376] ret_from_fork+0x514/0xb70
[ 386.785412][ T5376] ? __pfx_ret_from_fork+0x10/0x10
[ 386.785423][ T5376] ? __switch_to+0xc89/0x1420
[ 386.785465][ T5376] ? __pfx_kthread+0x10/0x10
[ 386.785477][ T5376] ret_from_fork_asm+0x1a/0x30
[ 386.785500][ T5376]
[ 386.785653][ T5376] ------------[ cut here ]------------
[ 386.785659][ T5376] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 386.785668][ T5376] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:7/5376
[ 386.988311][ T5376] Modules linked in:
[ 386.990887][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full)
[ 386.995224][ T5376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 386.999652][ T5376] Workqueue: events drm_fb_helper_damage_work
[ 387.002408][ T5376] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 387.005499][ T5376] Code: 27 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 4a 1a 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 387.013972][ T5376] RSP: 0018:ffffc9000f3b7898 EFLAGS: 00010246
[ 387.016670][ T5376] RAX: 1ffff1100004981a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 387.020005][ T5376] RDX: ffff888000b0be60 RSI: ffffffff8c79f2a0 RDI: ffffffff91867590
[ 387.023471][ T5376] RBP: ffff8880322aa008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 387.026982][ T5376] R10: dffffc0000000000 R11: fffffbfff1fd6197 R12: ffff888000b0be60
[ 387.030426][ T5376] R13: dffffc0000000000 R14: ffffffff8c79f2a0 R15: ffff88800024c0d0
[ 387.034008][ T5376] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 387.037921][ T5376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 387.040568][ T5376] CR2: 00007f7dfeddaf48 CR3: 0000000045561000 CR4: 0000000000352ef0
[ 387.044210][ T5376] Call Trace:
[ 387.045753][ T5376]
[ 387.047049][ T5376] drm_fb_helper_damage_work+0x84c/0xf20
[ 387.051412][ T5376] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 387.053923][ T5376] ? lock_acquire+0x115/0x350
[ 387.055642][ T5376] ? rcu_is_watching+0x16/0xb0
[ 387.057579][ T5376] ? process_scheduled_works+0x97a/0x1630
[ 387.060180][ T5376] process_scheduled_works+0xc3d/0x1630
[ 387.062792][ T5376] ? __pfx_process_scheduled_works+0x10/0x10
[ 387.065479][ T5376] ? assign_work+0x3cf/0x5d0
[ 387.067561][ T5376] worker_thread+0xa47/0xfb0
[ 387.069720][ T5376] ? __kthread_parkme+0x71/0x1f0
[ 387.072071][ T5376] kthread+0x38b/0x480
[ 387.073899][ T5376] ? __pfx_worker_thread+0x10/0x10
[ 387.076262][ T5376] ? __pfx_kthread+0x10/0x10
[ 387.078385][ T5376] ret_from_fork+0x514/0xb70
[ 387.080469][ T5376] ? __pfx_ret_from_fork+0x10/0x10
[ 387.082917][ T5376] ? __switch_to+0xc89/0x1420
[ 387.085084][ T5376] ? __pfx_kthread+0x10/0x10
[ 387.087175][ T5376] ret_from_fork_asm+0x1a/0x30
[ 387.088995][ T5376]
[ 387.090420][ T5376] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 387.093687][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full)
[ 387.097765][ T5376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 387.102095][ T5376] Workqueue: events drm_fb_helper_damage_work
[ 387.104865][ T5376] Call Trace:
[ 387.106434][ T5376]
[ 387.107851][ T5376] vpanic+0x56d/0xa60
[ 387.109643][ T5376] ? __pfx__printk+0x10/0x10
[ 387.111737][ T5376] ? __pfx_vpanic+0x10/0x10
[ 387.113792][ T5376] ? is_bpf_text_address+0x292/0x2b0
[ 387.116242][ T5376] ? is_bpf_text_address+0x26/0x2b0
[ 387.118561][ T5376] panic+0xc5/0xd0
[ 387.120303][ T5376] ? __pfx_panic+0x10/0x10
[ 387.122359][ T5376] ? ret_from_fork_asm+0x1a/0x30
[ 387.124624][ T5376] __warn+0x315/0x4c0
[ 387.126439][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 387.129295][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 387.132135][ T5376] __report_bug+0x276/0x570
[ 387.134114][ T5376] ? drm_modeset_acquire_fini+0x27/0x180
[ 387.136677][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 387.139336][ T5376] ? __pfx___report_bug+0x10/0x10
[ 387.141521][ T5376] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 387.144088][ T5376] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 387.146897][ T5376] report_bug_entry+0x19b/0x290
[ 387.149059][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 387.151890][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 387.154553][ T5376] handle_bug+0xce/0x200
[ 387.156466][ T5376] exc_invalid_op+0x1a/0x50
[ 387.158396][ T5376] asm_exc_invalid_op+0x1a/0x20
[ 387.160547][ T5376] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 387.163627][ T5376] Code: 27 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 4a 1a 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 387.171649][ T5376] RSP: 0018:ffffc9000f3b7898 EFLAGS: 00010246
[ 387.174274][ T5376] RAX: 1ffff1100004981a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 387.177698][ T5376] RDX: ffff888000b0be60 RSI: ffffffff8c79f2a0 RDI: ffffffff91867590
[ 387.181210][ T5376] RBP: ffff8880322aa008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 387.184604][ T5376] R10: dffffc0000000000 R11: fffffbfff1fd6197 R12: ffff888000b0be60
[ 387.187961][ T5376] R13: dffffc0000000000 R14: ffffffff8c79f2a0 R15: ffff88800024c0d0
[ 387.191433][ T5376] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 387.194129][ T5376] drm_fb_helper_damage_work+0x84c/0xf20
[ 387.196629][ T5376] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 387.199289][ T5376] ? lock_acquire+0x115/0x350
[ 387.201412][ T5376] ? rcu_is_watching+0x16/0xb0
[ 387.203597][ T5376] ? process_scheduled_works+0x97a/0x1630
[ 387.206179][ T5376] process_scheduled_works+0xc3d/0x1630
[ 387.208668][ T5376] ? __pfx_process_scheduled_works+0x10/0x10
[ 387.211321][ T5376] ? assign_work+0x3cf/0x5d0
[ 387.213345][ T5376] worker_thread+0xa47/0xfb0
[ 387.215355][ T5376] ? __kthread_parkme+0x71/0x1f0
[ 387.217550][ T5376] kthread+0x38b/0x480
[ 387.219252][ T5376] ? __pfx_worker_thread+0x10/0x10
[ 387.221462][ T5376] ? __pfx_kthread+0x10/0x10
[ 387.223596][ T5376] ret_from_fork+0x514/0xb70
[ 387.225620][ T5376] ? __pfx_ret_from_fork+0x10/0x10
[ 387.227897][ T5376] ? __switch_to+0xc89/0x1420
[ 387.229921][ T5376] ? __pfx_kthread+0x10/0x10
[ 387.231947][ T5376] ret_from_fork_asm+0x1a/0x30
[ 387.234090][ T5376]
[ 387.235924][ T5376] Kernel Offset: disabled
[ 387.237874][ T5376] Rebooting in 86400 seconds..