program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='N', 0x1)
write(r1, &(0x7f0000000180)='100', 0x3)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
mount$9p_fd(0x0, 0x0, 0x0, 0x1000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
[ 120.818950][ T4666] Bluetooth: hci0: command tx timeout
[ 120.873756][ T5341] FAULT_INJECTION: forcing a failure.
[ 120.873756][ T5341] name failslab, interval 1, probability 100, space 0, times 1
[ 120.873799][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 120.873810][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 120.873833][ T5341] Call Trace:
[ 120.873842][ T5341]
[ 120.873867][ T5341] dump_stack_lvl+0xe8/0x150
[ 120.873993][ T5341] should_fail_ex+0x410/0x560
[ 120.874049][ T5341] should_failslab+0xa8/0x100
[ 120.874067][ T5341] __kvmalloc_node_noprof+0x171/0x820
[ 120.874084][ T5341] ? vmemdup_user+0x2b/0xd0
[ 120.874147][ T5341] ? vmemdup_user+0x2b/0xd0
[ 120.874165][ T5341] vmemdup_user+0x2b/0xd0
[ 120.874178][ T5341] path_setxattrat+0x2d0/0x450
[ 120.874198][ T5341] ? __pfx_path_setxattrat+0x10/0x10
[ 120.874210][ T5341] ? do_futex+0x3e7/0x4e0
[ 120.874243][ T5341] ? rcu_is_watching+0x16/0xb0
[ 120.874262][ T5341] __x64_sys_lsetxattr+0xbf/0xe0
[ 120.874276][ T5341] do_syscall_64+0x166/0x520
[ 120.874328][ T5341] ? trace_irq_disable+0x3b/0x140
[ 120.874343][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.874356][ T5341] ? clear_bhb_loop+0x70/0xc0
[ 120.874371][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.874384][ T5341] RIP: 0033:0x7f725a59f559
[ 120.874402][ T5341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 120.874409][ T5341] RSP: 002b:00007f725b458fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 120.874425][ T5341] RAX: ffffffffffffffda RBX: 00007f725a825fa0 RCX: 00007f725a59f559
[ 120.874431][ T5341] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[ 120.874436][ T5341] RBP: 00007f725a636b20 R08: 0000000000000002 R09: 0000000000000000
[ 120.874441][ T5341] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 120.874446][ T5341] R13: 00007f725a826038 R14: 00007f725a825fa0 R15: 00007fffc3eb3738
[ 120.874458][ T5341]
[ 120.875042][ T938] FAULT_INJECTION: forcing a failure.
[ 120.875042][ T938] name failslab, interval 1, probability 100, space 0, times 1
[ 120.875073][ T938] CPU: 0 UID: 0 PID: 938 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 120.875082][ T938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 120.875087][ T938] Workqueue: events drm_fb_helper_damage_work
[ 120.875109][ T938] Call Trace:
[ 120.875113][ T938]
[ 120.875117][ T938] dump_stack_lvl+0xe8/0x150
[ 120.875129][ T938] should_fail_ex+0x410/0x560
[ 120.875146][ T938] should_failslab+0xa8/0x100
[ 120.875161][ T938] __kmalloc_cache_noprof+0x9e/0x600
[ 120.875174][ T938] ? drm_atomic_commit_alloc+0xa9/0x100
[ 120.875216][ T938] ? drm_atomic_commit_alloc+0xa9/0x100
[ 120.875233][ T938] drm_atomic_commit_alloc+0xa9/0x100
[ 120.875249][ T938] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 120.875265][ T938] ? __pfx___schedule+0x10/0x10
[ 120.875280][ T938] ? __lock_acquire+0x747/0x2de0
[ 120.875296][ T938] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 120.875328][ T938] ? __pfx_drm_fbdev_shmem_helper_fb_dirty+0x10/0x10
[ 120.875358][ T938] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 120.875376][ T938] drm_fb_helper_damage_work+0x84c/0xf20
[ 120.875399][ T938] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 120.875425][ T938] ? lock_acquire+0x115/0x350
[ 120.875444][ T938] ? rcu_is_watching+0x16/0xb0
[ 120.875460][ T938] ? process_scheduled_works+0x97a/0x1630
[ 120.875475][ T938] process_scheduled_works+0xc3d/0x1630
[ 120.875508][ T938] ? __pfx_process_scheduled_works+0x10/0x10
[ 120.875527][ T938] ? assign_work+0x3cf/0x5d0
[ 120.875545][ T938] worker_thread+0xa47/0xfb0
[ 120.875570][ T938] ? __kthread_parkme+0x71/0x1f0
[ 120.875591][ T938] kthread+0x38b/0x480
[ 120.875604][ T938] ? __pfx_worker_thread+0x10/0x10
[ 120.875617][ T938] ? __pfx_kthread+0x10/0x10
[ 120.875628][ T938] ret_from_fork+0x514/0xb70
[ 120.875644][ T938] ? __pfx_ret_from_fork+0x10/0x10
[ 120.875655][ T938] ? __switch_to+0xc78/0x1410
[ 120.875687][ T938] ? __pfx_kthread+0x10/0x10
[ 120.875700][ T938] ret_from_fork_asm+0x1a/0x30
[ 120.875723][ T938]
[ 120.875856][ T938] ------------[ cut here ]------------
[ 120.875862][ T938] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 120.875879][ T938] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:3/938
[ 121.060888][ T938] Modules linked in:
[ 121.062964][ T938] CPU: 0 UID: 0 PID: 938 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 121.067048][ T938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 121.071367][ T938] Workqueue: events drm_fb_helper_damage_work
[ 121.074079][ T938] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 121.077227][ T938] Code: 24 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ba bf 96 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 121.085174][ T938] RSP: 0000:ffffc90004e07898 EFLAGS: 00010246
[ 121.087725][ T938] RAX: 1ffff1100616681a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 121.091181][ T938] RDX: ffff888031a96e40 RSI: ffffffff8c7a3620 RDI: ffffffff91882430
[ 121.094420][ T938] RBP: ffff888032336008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 121.097667][ T938] R10: dffffc0000000000 R11: fffffbfff1fd5cef R12: ffff888031a96e40
[ 121.100927][ T938] R13: dffffc0000000000 R14: ffffffff8c7a3620 R15: ffff888030b340d0
[ 121.104276][ T938] FS: 0000000000000000(0000) GS:ffff88808ae60000(0000) knlGS:0000000000000000
[ 121.108008][ T938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 121.110670][ T938] CR2: 00007f725a814fe8 CR3: 0000000052219000 CR4: 0000000000352ef0
[ 121.114101][ T938] Call Trace:
[ 121.115738][ T938]
[ 121.117053][ T938] drm_fb_helper_damage_work+0x84c/0xf20
[ 121.119256][ T938] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 121.121553][ T938] ? lock_acquire+0x115/0x350
[ 121.123410][ T938] ? rcu_is_watching+0x16/0xb0
[ 121.125326][ T938] ? process_scheduled_works+0x97a/0x1630
[ 121.127755][ T938] process_scheduled_works+0xc3d/0x1630
[ 121.130222][ T938] ? __pfx_process_scheduled_works+0x10/0x10
[ 121.132866][ T938] ? assign_work+0x3cf/0x5d0
[ 121.135012][ T938] worker_thread+0xa47/0xfb0
[ 121.137043][ T938] ? __kthread_parkme+0x71/0x1f0
[ 121.139134][ T938] kthread+0x38b/0x480
[ 121.141063][ T938] ? __pfx_worker_thread+0x10/0x10
[ 121.143399][ T938] ? __pfx_kthread+0x10/0x10
[ 121.145520][ T938] ret_from_fork+0x514/0xb70
[ 121.147564][ T938] ? __pfx_ret_from_fork+0x10/0x10
[ 121.149802][ T938] ? __switch_to+0xc78/0x1410
[ 121.151848][ T938] ? __pfx_kthread+0x10/0x10
[ 121.153910][ T938] ret_from_fork_asm+0x1a/0x30
[ 121.156143][ T938]
[ 121.157489][ T938] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 121.160495][ T938] CPU: 0 UID: 0 PID: 938 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 121.164470][ T938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 121.168586][ T938] Workqueue: events drm_fb_helper_damage_work
[ 121.171176][ T938] Call Trace:
[ 121.172584][ T938]
[ 121.173624][ T938] vpanic+0x56d/0xa60
[ 121.174966][ T938] ? __pfx__printk+0x10/0x10
[ 121.176595][ T938] ? __pfx_vpanic+0x10/0x10
[ 121.178214][ T938] ? is_bpf_text_address+0x292/0x2b0
[ 121.180009][ T938] ? is_bpf_text_address+0x26/0x2b0
[ 121.181864][ T938] panic+0xc5/0xd0
[ 121.183186][ T938] ? __pfx_panic+0x10/0x10
[ 121.184739][ T938] ? ret_from_fork_asm+0x1a/0x30
[ 121.186490][ T938] __warn+0x315/0x4c0
[ 121.187921][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 121.190060][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 121.192123][ T938] __report_bug+0x276/0x570
[ 121.193787][ T938] ? drm_modeset_acquire_fini+0x27/0x180
[ 121.195754][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 121.197891][ T938] ? __pfx___report_bug+0x10/0x10
[ 121.199541][ T938] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 121.201405][ T938] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 121.203391][ T938] report_bug_entry+0x19b/0x290
[ 121.204909][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 121.206911][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 121.208820][ T938] handle_bug+0xce/0x200
[ 121.210109][ T938] exc_invalid_op+0x1a/0x50
[ 121.211535][ T938] asm_exc_invalid_op+0x1a/0x20
[ 121.213046][ T938] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 121.215208][ T938] Code: 24 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ba bf 96 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 121.222037][ T938] RSP: 0000:ffffc90004e07898 EFLAGS: 00010246
[ 121.224135][ T938] RAX: 1ffff1100616681a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 121.227093][ T938] RDX: ffff888031a96e40 RSI: ffffffff8c7a3620 RDI: ffffffff91882430
[ 121.229906][ T938] RBP: ffff888032336008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 121.232931][ T938] R10: dffffc0000000000 R11: fffffbfff1fd5cef R12: ffff888031a96e40
[ 121.235701][ T938] R13: dffffc0000000000 R14: ffffffff8c7a3620 R15: ffff888030b340d0
[ 121.238791][ T938] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 121.241293][ T938] drm_fb_helper_damage_work+0x84c/0xf20
[ 121.243671][ T938] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 121.245921][ T938] ? lock_acquire+0x115/0x350
[ 121.247798][ T938] ? rcu_is_watching+0x16/0xb0
[ 121.249561][ T938] ? process_scheduled_works+0x97a/0x1630
[ 121.251800][ T938] process_scheduled_works+0xc3d/0x1630
[ 121.254193][ T938] ? __pfx_process_scheduled_works+0x10/0x10
[ 121.256313][ T938] ? assign_work+0x3cf/0x5d0
[ 121.258023][ T938] worker_thread+0xa47/0xfb0
[ 121.259690][ T938] ? __kthread_parkme+0x71/0x1f0
[ 121.261473][ T938] kthread+0x38b/0x480
[ 121.262964][ T938] ? __pfx_worker_thread+0x10/0x10
[ 121.264744][ T938] ? __pfx_kthread+0x10/0x10
[ 121.266350][ T938] ret_from_fork+0x514/0xb70
[ 121.268412][ T938] ? __pfx_ret_from_fork+0x10/0x10
[ 121.270475][ T938] ? __switch_to+0xc78/0x1410
[ 121.272280][ T938] ? __pfx_kthread+0x10/0x10
[ 121.274105][ T938] ret_from_fork_asm+0x1a/0x30
[ 121.275957][ T938]
[ 121.277845][ T938] Kernel Offset: disabled
[ 121.279535][ T938] Rebooting in 86400 seconds..