program: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000000c0)=0x68) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r6 = dup(0xffffffffffffffff) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000400)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES16=r14, @ANYRESOCT=r0, @ANYRESOCT], 0x48) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0x2020) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r15) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r15, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000004000280"], 0x28}, 0x1, 0x0, 0x0, 0x86}, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='N', 0x1) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write(r17, &(0x7f0000000100)='100', 0x3) [ 93.100155][ T9] cfg80211: failed to load regulatory.db [ 93.251437][ T4640] Bluetooth: hci0: command tx timeout [ 93.294986][ T5315] FAULT_INJECTION: forcing a failure. [ 93.294986][ T5315] name failslab, interval 1, probability 100, space 0, times 1 [ 93.300862][ T9] FAULT_INJECTION: forcing a failure. [ 93.300862][ T9] name failslab, interval 1, probability 100, space 0, times 1 [ 93.311226][ T10] FAULT_INJECTION: forcing a failure. [ 93.311226][ T10] name failslab, interval 1, probability 100, space 0, times 1 [ 93.317360][ T1061] FAULT_INJECTION: forcing a failure. [ 93.317360][ T1061] name failslab, interval 1, probability 100, space 0, times 1 [ 93.322821][ T1061] CPU: 0 UID: 0 PID: 1061 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 93.322836][ T1061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.322843][ T1061] Workqueue: events_unbound nsim_dev_trap_report_work [ 93.322929][ T1061] Call Trace: [ 93.322934][ T1061] [ 93.322939][ T1061] dump_stack_lvl+0xe8/0x150 [ 93.322962][ T1061] should_fail_ex+0x40c/0x560 [ 93.322977][ T1061] should_failslab+0xa8/0x100 [ 93.322991][ T1061] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 93.323002][ T1061] ? local_lock_release+0x9c/0x160 [ 93.323048][ T1061] ? __alloc_skb+0x1d7/0x7a0 [ 93.323061][ T1061] ? __alloc_skb+0x1d7/0x7a0 [ 93.323078][ T1061] __alloc_skb+0x1d7/0x7a0 [ 93.323095][ T1061] nsim_dev_trap_report_work+0x25f/0xb40 [ 93.323112][ T1061] ? process_scheduled_works+0xa20/0x14e0 [ 93.323124][ T1061] process_scheduled_works+0xa8e/0x14e0 [ 93.323152][ T1061] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.323168][ T1061] ? assign_work+0x3cf/0x5d0 [ 93.323179][ T1061] worker_thread+0xa47/0xfb0 [ 93.323191][ T1061] ? __kthread_parkme+0x71/0x1f0 [ 93.323203][ T1061] kthread+0x388/0x470 [ 93.323215][ T1061] ? __pfx_worker_thread+0x10/0x10 [ 93.323224][ T1061] ? __pfx_kthread+0x10/0x10 [ 93.323238][ T1061] ret_from_fork+0x514/0xb70 [ 93.323254][ T1061] ? __pfx_ret_from_fork+0x10/0x10 [ 93.323268][ T1061] ? __switch_to+0xc89/0x1420 [ 93.323282][ T1061] ? __pfx_kthread+0x10/0x10 [ 93.323295][ T1061] ret_from_fork_asm+0x1a/0x30 [ 93.323309][ T1061] [ 93.324236][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 93.324249][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.324256][ T9] Workqueue: events drm_fb_helper_damage_work [ 93.324274][ T9] Call Trace: [ 93.324278][ T9] [ 93.324283][ T9] dump_stack_lvl+0xe8/0x150 [ 93.324299][ T9] should_fail_ex+0x40c/0x560 [ 93.324312][ T9] should_failslab+0xa8/0x100 [ 93.324327][ T9] __kmalloc_cache_noprof+0xa8/0x660 [ 93.324339][ T9] ? drm_atomic_commit_alloc+0xa9/0x100 [ 93.324348][ T9] ? drm_atomic_commit_alloc+0xa9/0x100 [ 93.324362][ T9] drm_atomic_commit_alloc+0xa9/0x100 [ 93.324374][ T9] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 93.324390][ T9] ? __lock_acquire+0x683/0x2cf0 [ 93.324408][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 93.324423][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.324435][ T9] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 93.324448][ T9] drm_fb_helper_damage_work+0x84c/0xf20 [ 93.324461][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 93.324481][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.324495][ T9] ? rcu_is_watching+0x15/0xb0 [ 93.324512][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.324523][ T9] process_scheduled_works+0xa8e/0x14e0 [ 93.324548][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.324564][ T9] ? assign_work+0x3cf/0x5d0 [ 93.324578][ T9] worker_thread+0xa47/0xfb0 [ 93.324633][ T9] kthread+0x388/0x470 [ 93.324649][ T9] ? __pfx_worker_thread+0x10/0x10 [ 93.324659][ T9] ? __pfx_kthread+0x10/0x10 [ 93.324673][ T9] ret_from_fork+0x514/0xb70 [ 93.324690][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 93.324703][ T9] ? __switch_to+0xc89/0x1420 [ 93.324717][ T9] ? __pfx_kthread+0x10/0x10 [ 93.324731][ T9] ret_from_fork_asm+0x1a/0x30 [ 93.324755][ T9] [ 93.463043][ T9] ------------[ cut here ]------------ [ 93.466568][ T9] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 93.469954][ T9] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:0/9 [ 93.474852][ T9] Modules linked in: [ 93.476530][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 93.480144][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.484640][ T9] Workqueue: events drm_fb_helper_damage_work [ 93.487125][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 93.489973][ T9] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 58 a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 93.498298][ T9] RSP: 0018:ffffc9000022f8b8 EFLAGS: 00010246 [ 93.501441][ T9] RAX: 1ffff11003a4a01a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 93.504544][ T9] RDX: ffff88801fa1ee60 RSI: ffffffff8c57c700 RDI: ffffffff9063d5c0 [ 93.507978][ T9] RBP: ffff88800082c008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 93.511878][ T9] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801fa1ee60 [ 93.515410][ T9] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2500d0 [ 93.518859][ T9] FS: 0000000000000000(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 93.522868][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.525720][ T9] CR2: 000020000000c2c0 CR3: 000000000e946000 CR4: 0000000000352ef0 [ 93.529194][ T9] Call Trace: [ 93.530695][ T9] [ 93.532140][ T9] drm_fb_helper_damage_work+0x84c/0xf20 [ 93.534758][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 93.537479][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.539996][ T9] ? rcu_is_watching+0x15/0xb0 [ 93.542948][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.545645][ T9] process_scheduled_works+0xa8e/0x14e0 [ 93.548278][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.551153][ T9] ? assign_work+0x3cf/0x5d0 [ 93.553003][ T9] worker_thread+0xa47/0xfb0 [ 93.554812][ T9] kthread+0x388/0x470 [ 93.556426][ T9] ? __pfx_worker_thread+0x10/0x10 [ 93.558461][ T9] ? __pfx_kthread+0x10/0x10 [ 93.560419][ T9] ret_from_fork+0x514/0xb70 [ 93.562733][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 93.564847][ T9] ? __switch_to+0xc89/0x1420 [ 93.566888][ T9] ? __pfx_kthread+0x10/0x10 [ 93.568833][ T9] ret_from_fork_asm+0x1a/0x30 [ 93.570854][ T9] [ 93.572241][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.575147][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 93.578844][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.583012][ T9] Workqueue: events drm_fb_helper_damage_work [ 93.585586][ T9] Call Trace: [ 93.587030][ T9] [ 93.588320][ T9] vpanic+0x56c/0xa60 [ 93.590037][ T9] ? __pfx__printk+0x10/0x10 [ 93.592129][ T9] ? __pfx_vpanic+0x10/0x10 [ 93.594036][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 93.596227][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 93.598465][ T9] panic+0xc5/0xd0 [ 93.600107][ T9] ? __pfx_panic+0x10/0x10 [ 93.602244][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 93.604411][ T9] __warn+0x315/0x4c0 [ 93.606193][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 93.608735][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 93.611341][ T9] __report_bug+0x276/0x570 [ 93.613342][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 93.615909][ T9] ? __pfx___report_bug+0x10/0x10 [ 93.618043][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 93.620629][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 93.623293][ T9] report_bug_entry+0x19a/0x290 [ 93.625321][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 93.627925][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 93.630535][ T9] handle_bug+0xce/0x200 [ 93.632375][ T9] exc_invalid_op+0x1a/0x50 [ 93.634330][ T9] asm_exc_invalid_op+0x1a/0x20 [ 93.636383][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 93.640052][ T9] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 58 a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 93.648549][ T9] RSP: 0018:ffffc9000022f8b8 EFLAGS: 00010246 [ 93.651072][ T9] RAX: 1ffff11003a4a01a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 93.654385][ T9] RDX: ffff88801fa1ee60 RSI: ffffffff8c57c700 RDI: ffffffff9063d5c0 [ 93.657829][ T9] RBP: ffff88800082c008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 93.661087][ T9] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801fa1ee60 [ 93.664446][ T9] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2500d0 [ 93.667700][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 93.670303][ T9] drm_fb_helper_damage_work+0x84c/0xf20 [ 93.672665][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 93.675172][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.677449][ T9] ? rcu_is_watching+0x15/0xb0 [ 93.679388][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 93.681771][ T9] process_scheduled_works+0xa8e/0x14e0 [ 93.684143][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.686764][ T9] ? assign_work+0x3cf/0x5d0 [ 93.688821][ T9] worker_thread+0xa47/0xfb0 [ 93.690802][ T9] kthread+0x388/0x470 [ 93.692544][ T9] ? __pfx_worker_thread+0x10/0x10 [ 93.694662][ T9] ? __pfx_kthread+0x10/0x10 [ 93.696654][ T9] ret_from_fork+0x514/0xb70 [ 93.698680][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 93.700873][ T9] ? __switch_to+0xc89/0x1420 [ 93.702924][ T9] ? __pfx_kthread+0x10/0x10 [ 93.704917][ T9] ret_from_fork_asm+0x1a/0x30 [ 93.707002][ T9] [ 93.708684][ T9] Kernel Offset: disabled [ 93.710446][ T9] Rebooting in 86400 seconds..