program:
ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000))
inotify_init()
mknod$loop(0x0, 0x800, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x4000, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x100000000)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
write(r2, &(0x7f0000000100)='N', 0x1)
write(r3, &(0x7f0000000100)='1', 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)

[  101.059488][ T5316] FAULT_INJECTION: forcing a failure.
[  101.059488][ T5316] name failslab, interval 1, probability 1, space 0, times 1
[  101.059576][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[  101.059591][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.059606][ T5316] Call Trace:
[  101.059612][ T5316]  <TASK>
[  101.059618][ T5316]  dump_stack_lvl+0xe8/0x150
[  101.059805][ T5316]  should_fail_ex+0x410/0x560
[  101.059893][ T5316]  should_failslab+0xa8/0x100
[  101.059931][ T5316]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  101.059961][ T5316]  ? __d_lookup+0x66/0x790
[  101.059991][ T5316]  ? __d_alloc+0x37/0x6f0
[  101.060007][ T5316]  ? __d_alloc+0x37/0x6f0
[  101.060029][ T5316]  __d_alloc+0x37/0x6f0
[  101.060049][ T5316]  d_alloc+0x4b/0x190
[  101.060066][ T5316]  ? lookup_one_qstr_excl+0xc4/0x360
[  101.060085][ T5316]  lookup_one_qstr_excl+0xd8/0x360
[  101.060102][ T5316]  ? lookup_noperm_common+0x245/0x430
[  101.060120][ T5316]  start_dirop+0x5c/0x90
[  101.060137][ T5316]  simple_start_creating+0xcc/0x110
[  101.060170][ T5316]  ? __pfx_simple_start_creating+0x10/0x10
[  101.060189][ T5316]  ? mntput+0x65/0xc0
[  101.060206][ T5316]  tracefs_start_creating+0x95/0x120
[  101.060246][ T5316]  tracefs_create_file+0xa4/0x620
[  101.060263][ T5316]  ? do_raw_spin_unlock+0x4d/0x200
[  101.060307][ T5316]  trace_create_file+0x32/0x70
[  101.060343][ T5316]  create_event_toplevel_files+0x6e/0x1a0
[  101.060361][ T5316]  event_trace_add_tracer+0x8a/0x3b0
[  101.060377][ T5316]  trace_array_create_dir+0x77/0x160
[  101.060393][ T5316]  trace_array_create_systems+0xb3c/0xe60
[  101.060412][ T5316]  instance_mkdir+0xd5/0x140
[  101.060431][ T5316]  tracefs_syscall_mkdir+0x11a/0x190
[  101.060449][ T5316]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[  101.060466][ T5316]  ? generic_permission+0x2bf/0x670
[  101.060486][ T5316]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  101.060521][ T5316]  vfs_mkdir+0x40c/0x620
[  101.060547][ T5316]  filename_mkdirat+0x285/0x510
[  101.060569][ T5316]  ? __pfx_filename_mkdirat+0x10/0x10
[  101.060589][ T5316]  ? do_getname+0x151/0x250
[  101.060603][ T5316]  __se_sys_mkdirat+0x35/0x150
[  101.060624][ T5316]  do_syscall_64+0x166/0x520
[  101.060744][ T5316]  ? trace_irq_disable+0x3b/0x140
[  101.060759][ T5316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.060774][ T5316]  ? clear_bhb_loop+0x70/0xc0
[  101.060789][ T5316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.060802][ T5316] RIP: 0033:0x7fd1e3f9e159
[  101.060827][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.060847][ T5316] RSP: 002b:00007fd1e4e8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  101.060862][ T5316] RAX: ffffffffffffffda RBX: 00007fd1e4225fa0 RCX: 00007fd1e3f9e159
[  101.060871][ T5316] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  101.060880][ T5316] RBP: 00007fd1e403503b R08: 0000000000000000 R09: 0000000000000000
[  101.060887][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.060894][ T5316] R13: 00007fd1e4226038 R14: 00007fd1e4225fa0 R15: 00007fff1b9b65f8
[  101.060913][ T5316]  </TASK>
[  101.146274][   T10] FAULT_INJECTION: forcing a failure.
[  101.146274][   T10] name failslab, interval 1, probability 1, space 0, times 1
[  101.146299][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.146312][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.146319][   T10] Workqueue: events drm_fb_helper_damage_work
[  101.146361][   T10] Call Trace:
[  101.146367][   T10]  <TASK>
[  101.146374][   T10]  dump_stack_lvl+0xe8/0x150
[  101.146392][   T10]  should_fail_ex+0x410/0x560
[  101.146413][   T10]  should_failslab+0xa8/0x100
[  101.146427][   T10]  __kmalloc_noprof+0xfe/0x720
[  101.146442][   T10]  ? __kmalloc_noprof+0x1ab/0x720
[  101.146455][   T10]  ? drm_atomic_commit_init+0x10f/0x370
[  101.146467][   T10]  ? drm_atomic_commit_init+0x10f/0x370
[  101.146482][   T10]  drm_atomic_commit_init+0x10f/0x370
[  101.146496][   T10]  drm_atomic_commit_alloc+0xbc/0x100
[  101.146509][   T10]  drm_atomic_helper_dirtyfb+0x129/0xfd0
[  101.146527][   T10]  ? __lock_acquire+0x747/0x2de0
[  101.146543][   T10]  ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[  101.146568][   T10]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.146590][   T10]  drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[  101.146608][   T10]  drm_fb_helper_damage_work+0x84c/0xf20
[  101.146627][   T10]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  101.146648][   T10]  ? lock_acquire+0x115/0x350
[  101.146666][   T10]  ? rcu_is_watching+0x16/0xb0
[  101.146691][   T10]  ? process_scheduled_works+0x97a/0x1630
[  101.146716][   T10]  process_scheduled_works+0xc3d/0x1630
[  101.146746][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.146765][   T10]  ? assign_work+0x3cf/0x5d0
[  101.146781][   T10]  worker_thread+0xa47/0xfb0
[  101.146813][   T10]  kthread+0x38b/0x480
[  101.146824][   T10]  ? __pfx_worker_thread+0x10/0x10
[  101.146838][   T10]  ? __pfx_kthread+0x10/0x10
[  101.146850][   T10]  ret_from_fork+0x514/0xb70
[  101.146895][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  101.146907][   T10]  ? __switch_to+0xc89/0x1420
[  101.146925][   T10]  ? __pfx_kthread+0x10/0x10
[  101.146937][   T10]  ret_from_fork_asm+0x1a/0x30
[  101.146961][   T10]  </TASK>
[  101.147092][   T10] ------------[ cut here ]------------
[  101.147098][   T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[  101.147106][   T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10
[  101.304827][   T10] Modules linked in:
[  101.306597][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.310657][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.315263][   T10] Workqueue: events drm_fb_helper_damage_work
[  101.318135][   T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[  101.321253][   T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 aa da 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[  101.329632][   T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246
[  101.332473][   T10] RAX: 1ffff11003f5441a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[  101.336010][   T10] RDX: ffff88801f79a120 RSI: ffffffff8c79c640 RDI: ffffffff908636e0
[  101.339696][   T10] RBP: ffff8880009e8008 R08: ffffffff907a577f R09: 1ffffffff20f4aef
[  101.343377][   T10] R10: dffffc0000000000 R11: fffffbfff20f4af0 R12: ffff88801f79a120
[  101.347010][   T10] R13: dffffc0000000000 R14: ffffffff8c79c640 R15: ffff88801faa20d0
[  101.350496][   T10] FS:  0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000
[  101.354659][   T10] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.358307][   T10] CR2: 00007fd1e4e97230 CR3: 0000000012cb5000 CR4: 0000000000352ef0
[  101.362461][   T10] Call Trace:
[  101.363968][   T10]  <TASK>
[  101.365300][   T10]  drm_fb_helper_damage_work+0x84c/0xf20
[  101.368183][   T10]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  101.371857][   T10]  ? lock_acquire+0x115/0x350
[  101.374175][   T10]  ? rcu_is_watching+0x16/0xb0
[  101.376271][   T10]  ? process_scheduled_works+0x97a/0x1630
[  101.378661][   T10]  process_scheduled_works+0xc3d/0x1630
[  101.381068][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.383306][   T10]  ? assign_work+0x3cf/0x5d0
[  101.385063][   T10]  worker_thread+0xa47/0xfb0
[  101.386723][   T10]  kthread+0x38b/0x480
[  101.388195][   T10]  ? __pfx_worker_thread+0x10/0x10
[  101.390011][   T10]  ? __pfx_kthread+0x10/0x10
[  101.391788][   T10]  ret_from_fork+0x514/0xb70
[  101.393420][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  101.395176][   T10]  ? __switch_to+0xc89/0x1420
[  101.396949][   T10]  ? __pfx_kthread+0x10/0x10
[  101.398845][   T10]  ret_from_fork_asm+0x1a/0x30
[  101.400927][   T10]  </TASK>
[  101.402385][   T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  101.405305][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.409619][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.413856][   T10] Workqueue: events drm_fb_helper_damage_work
[  101.416616][   T10] Call Trace:
[  101.418292][   T10]  <TASK>
[  101.419791][   T10]  vpanic+0x56d/0xa60
[  101.421847][   T10]  ? __pfx__printk+0x10/0x10
[  101.423956][   T10]  ? __pfx_vpanic+0x10/0x10
[  101.425829][   T10]  ? is_bpf_text_address+0x292/0x2b0
[  101.428107][   T10]  ? is_bpf_text_address+0x26/0x2b0
[  101.430319][   T10]  panic+0xc5/0xd0
[  101.431953][   T10]  ? __pfx_panic+0x10/0x10
[  101.433862][   T10]  ? ret_from_fork_asm+0x1a/0x30
[  101.436020][   T10]  __warn+0x315/0x4c0
[  101.437834][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[  101.440688][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[  101.443455][   T10]  __report_bug+0x276/0x570
[  101.445545][   T10]  ? drm_modeset_acquire_fini+0x27/0x180
[  101.448068][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[  101.450150][   T10]  ? __pfx___report_bug+0x10/0x10
[  101.452270][   T10]  ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[  101.454749][   T10]  ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[  101.457522][   T10]  report_bug_entry+0x19b/0x290
[  101.459690][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[  101.462557][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[  101.465916][   T10]  handle_bug+0xce/0x200
[  101.467915][   T10]  exc_invalid_op+0x1a/0x50
[  101.469962][   T10]  asm_exc_invalid_op+0x1a/0x20
[  101.472161][   T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[  101.475267][   T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 aa da 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[  101.483794][   T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246
[  101.486501][   T10] RAX: 1ffff11003f5441a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[  101.490109][   T10] RDX: ffff88801f79a120 RSI: ffffffff8c79c640 RDI: ffffffff908636e0
[  101.493626][   T10] RBP: ffff8880009e8008 R08: ffffffff907a577f R09: 1ffffffff20f4aef
[  101.497061][   T10] R10: dffffc0000000000 R11: fffffbfff20f4af0 R12: ffff88801f79a120
[  101.500183][   T10] R13: dffffc0000000000 R14: ffffffff8c79c640 R15: ffff88801faa20d0
[  101.503494][   T10]  ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[  101.506280][   T10]  drm_fb_helper_damage_work+0x84c/0xf20
[  101.508370][   T10]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  101.510866][   T10]  ? lock_acquire+0x115/0x350
[  101.512924][   T10]  ? rcu_is_watching+0x16/0xb0
[  101.515006][   T10]  ? process_scheduled_works+0x97a/0x1630
[  101.517504][   T10]  process_scheduled_works+0xc3d/0x1630
[  101.520075][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.523165][   T10]  ? assign_work+0x3cf/0x5d0
[  101.525317][   T10]  worker_thread+0xa47/0xfb0
[  101.527395][   T10]  kthread+0x38b/0x480
[  101.529148][   T10]  ? __pfx_worker_thread+0x10/0x10
[  101.531359][   T10]  ? __pfx_kthread+0x10/0x10
[  101.533351][   T10]  ret_from_fork+0x514/0xb70
[  101.535368][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  101.537622][   T10]  ? __switch_to+0xc89/0x1420
[  101.539675][   T10]  ? __pfx_kthread+0x10/0x10
[  101.541737][   T10]  ret_from_fork_asm+0x1a/0x30
[  101.543843][   T10]  </TASK>
[  101.545622][   T10] Kernel Offset: disabled
[  101.547511][   T10] Rebooting in 86400 seconds..