program:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a3100000000050005000000000005000100060000000d000300686173683a6d6163"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x82}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='N', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='10', 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0xf000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
[ 93.070860][ T1246] cfg80211: failed to load regulatory.db
[ 93.079123][ T4636] Bluetooth: hci0: command tx timeout
[ 93.264413][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.0'.
[ 93.281493][ T5298] FAULT_INJECTION: forcing a failure.
[ 93.281493][ T5298] name failslab, interval 1, probability 10, space 0, times 1
[ 93.287570][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 93.287589][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.287597][ T5298] Workqueue: events drm_fb_helper_damage_work
[ 93.287713][ T5298] Call Trace:
[ 93.287719][ T5298]
[ 93.287725][ T5298] dump_stack_lvl+0xe8/0x150
[ 93.287743][ T5298] should_fail_ex+0x40c/0x560
[ 93.287772][ T5298] should_failslab+0xa8/0x100
[ 93.287788][ T5298] __kmalloc_cache_noprof+0xa8/0x660
[ 93.287802][ T5298] ? drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.287819][ T5298] ? drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.287840][ T5298] drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.287857][ T5298] ? drm_atomic_helper_check+0x12c/0x190
[ 93.287881][ T5298] drm_atomic_helper_commit+0x6a/0xb10
[ 93.287919][ T5298] ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 93.287936][ T5298] drm_atomic_commit+0x24e/0x2b0
[ 93.287951][ T5298] ? __pfx_drm_atomic_commit+0x10/0x10
[ 93.287962][ T5298] ? __pfx___drm_printfn_info+0x10/0x10
[ 93.287984][ T5298] ? drm_modeset_unlock+0x38/0x100
[ 93.288003][ T5298] drm_atomic_helper_dirtyfb+0xe2f/0xfd0
[ 93.288025][ T5298] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 93.288051][ T5298] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.288072][ T5298] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 93.288089][ T5298] drm_fb_helper_damage_work+0x84c/0xf20
[ 93.288111][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 93.288137][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.288152][ T5298] ? rcu_is_watching+0x15/0xb0
[ 93.288169][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.288180][ T5298] process_scheduled_works+0xa8e/0x14e0
[ 93.288210][ T5298] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.288225][ T5298] ? assign_work+0x3cf/0x5d0
[ 93.288240][ T5298] worker_thread+0xa47/0xfb0
[ 93.288261][ T5298] ? __kthread_parkme+0x71/0x1f0
[ 93.288281][ T5298] kthread+0x388/0x470
[ 93.288296][ T5298] ? __pfx_worker_thread+0x10/0x10
[ 93.288306][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.288322][ T5298] ret_from_fork+0x514/0xb70
[ 93.288338][ T5298] ? __pfx_ret_from_fork+0x10/0x10
[ 93.288352][ T5298] ? __switch_to+0xc89/0x1420
[ 93.288366][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.288380][ T5298] ret_from_fork_asm+0x1a/0x30
[ 93.288405][ T5298]
[ 93.382903][ C0] FAULT_INJECTION: forcing a failure.
[ 93.382903][ C0] name failslab, interval 1, probability 10, space 0, times 1
[ 93.388716][ C0] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 93.388733][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.388741][ C0] Workqueue: events drm_fb_helper_damage_work
[ 93.388768][ C0] Call Trace:
[ 93.388775][ C0]
[ 93.388781][ C0] dump_stack_lvl+0xe8/0x150
[ 93.388798][ C0] should_fail_ex+0x40c/0x560
[ 93.388818][ C0] should_failslab+0xa8/0x100
[ 93.388833][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610
[ 93.388844][ C0] ? local_lock_release+0x9c/0x160
[ 93.388893][ C0] ? __alloc_skb+0x1d7/0x7a0
[ 93.388901][ C0] ? __alloc_skb+0x1d7/0x7a0
[ 93.388910][ C0] __alloc_skb+0x1d7/0x7a0
[ 93.388920][ C0] __netdev_alloc_skb+0xc1/0x810
[ 93.388928][ C0] ? __ieee80211_beacon_get+0x36/0x1920
[ 93.388937][ C0] __ieee80211_beacon_get+0xcfd/0x1920
[ 93.388945][ C0] ? __ieee80211_beacon_get+0x36/0x1920
[ 93.388955][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0
[ 93.388964][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 93.388972][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.388982][ C0] mac80211_hwsim_beacon_tx+0x378/0x820
[ 93.388992][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 93.389001][ C0] __iterate_interfaces+0x2af/0x5a0
[ 93.389009][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 93.389017][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 93.389025][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 93.389033][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 93.389040][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 93.389048][ C0] mac80211_hwsim_beacon+0xaf/0x240
[ 93.389056][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 93.389067][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 93.389086][ C0] hrtimer_run_softirq+0x17a/0x240
[ 93.389100][ C0] handle_softirqs+0x225/0x840
[ 93.389114][ C0] ? __irq_exit_rcu+0xca/0x220
[ 93.389129][ C0] __irq_exit_rcu+0xca/0x220
[ 93.389141][ C0] irq_exit_rcu+0x9/0x30
[ 93.389150][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 93.389163][ C0]
[ 93.389166][ C0]
[ 93.389170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 93.389182][ C0] RIP: 0010:dump_stack_lvl+0x137/0x150
[ 93.389195][ C0] Code: 00 00 31 ff e8 3a 63 94 00 48 81 e3 00 02 00 00 75 23 e8 4c 5e 94 00 4d 85 f6 75 07 e8 42 5e 94 00 eb 06 e8 3b 5e 94 00 fb 5b <41> 5e 41 5f 5d c3 cc cc cc cc cc e8 29 5e 94 00 e8 c4 00 a0 0a eb
[ 93.389203][ C0] RSP: 0018:ffffc9000dc5f378 EFLAGS: 00000293
[ 93.389213][ C0] RAX: ffffffff8132b4a5 RBX: ffffffff8eca4b00 RCX: ffff888000bd8000
[ 93.389221][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 93.389227][ C0] RBP: 0000000000000001 R08: ffffffff90576b37 R09: 1ffffffff20aed66
[ 93.389231][ C0] R10: dffffc0000000000 R11: fffffbfff20aed67 R12: dffffc0000000000
[ 93.389235][ C0] R13: ffffffff8eca4b18 R14: 0000000000000200 R15: ffffffff8eca4b10
[ 93.389242][ C0] ? dump_stack_lvl+0x135/0x150
[ 93.389252][ C0] should_fail_ex+0x40c/0x560
[ 93.389268][ C0] should_failslab+0xa8/0x100
[ 93.389280][ C0] __kmalloc_cache_noprof+0xa8/0x660
[ 93.389293][ C0] ? drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.389308][ C0] ? drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.389325][ C0] drm_atomic_helper_setup_commit+0x1b2/0x1a30
[ 93.389340][ C0] ? drm_atomic_helper_check+0x12c/0x190
[ 93.389362][ C0] drm_atomic_helper_commit+0x6a/0xb10
[ 93.389380][ C0] ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 93.389390][ C0] drm_atomic_commit+0x24e/0x2b0
[ 93.389399][ C0] ? __pfx_drm_atomic_commit+0x10/0x10
[ 93.389405][ C0] ? __pfx___drm_printfn_info+0x10/0x10
[ 93.389416][ C0] ? drm_modeset_unlock+0x38/0x100
[ 93.389427][ C0] drm_atomic_helper_dirtyfb+0xe2f/0xfd0
[ 93.389438][ C0] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 93.389450][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.389460][ C0] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 93.389469][ C0] drm_fb_helper_damage_work+0x84c/0xf20
[ 93.389486][ C0] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 93.389509][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 93.389525][ C0] ? rcu_is_watching+0x15/0xb0
[ 93.389541][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 93.389552][ C0] process_scheduled_works+0xa8e/0x14e0
[ 93.389570][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.389578][ C0] ? assign_work+0x3cf/0x5d0
[ 93.389586][ C0] worker_thread+0xa47/0xfb0
[ 93.389597][ C0] ? __kthread_parkme+0x71/0x1f0
[ 93.389613][ C0] kthread+0x388/0x470
[ 93.389625][ C0] ? __pfx_worker_thread+0x10/0x10
[ 93.389635][ C0] ? __pfx_kthread+0x10/0x10
[ 93.389649][ C0] ret_from_fork+0x514/0xb70
[ 93.389666][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 93.389680][ C0] ? __switch_to+0xc89/0x1420
[ 93.389690][ C0] ? __pfx_kthread+0x10/0x10
[ 93.389698][ C0] ret_from_fork_asm+0x1a/0x30
[ 93.389711][ C0]
[ 93.594867][ T5298] ------------[ cut here ]------------
[ 93.598172][ T5298] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 93.601281][ T5298] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:5/5298
[ 93.606413][ T5298] Modules linked in:
[ 93.608371][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 93.612323][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.616591][ T5298] Workqueue: events drm_fb_helper_damage_work
[ 93.619156][ T5298] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 93.622000][ T5298] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 da 5b a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 93.629762][ T5298] RSP: 0018:ffffc9000dc5f8b8 EFLAGS: 00010246
[ 93.632323][ T5298] RAX: 1ffff11003f0b01a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 93.635607][ T5298] RDX: ffff88801f64cee0 RSI: ffffffff8c57c700 RDI: ffffffff90638ce0
[ 93.638885][ T5298] RBP: ffff88801d310008 R08: ffffc9000dc5f607 R09: 1ffff92001b8bec0
[ 93.642197][ T5298] R10: dffffc0000000000 R11: fffff52001b8bec1 R12: ffff88801f64cee0
[ 93.645401][ T5298] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801f8580d0
[ 93.648764][ T5298] FS: 0000000000000000(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 93.652752][ T5298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 93.655982][ T5298] CR2: 00007fd41c395420 CR3: 0000000012bf4000 CR4: 0000000000352ef0
[ 93.659903][ T5298] Call Trace:
[ 93.661298][ T5298]
[ 93.662546][ T5298] drm_fb_helper_damage_work+0x84c/0xf20
[ 93.664934][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 93.667542][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.670060][ T5298] ? rcu_is_watching+0x15/0xb0
[ 93.672117][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.674556][ T5298] process_scheduled_works+0xa8e/0x14e0
[ 93.676870][ T5298] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.679414][ T5298] ? assign_work+0x3cf/0x5d0
[ 93.681481][ T5298] worker_thread+0xa47/0xfb0
[ 93.683413][ T5298] ? __kthread_parkme+0x71/0x1f0
[ 93.685489][ T5298] kthread+0x388/0x470
[ 93.687234][ T5298] ? __pfx_worker_thread+0x10/0x10
[ 93.689511][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.691335][ T5298] ret_from_fork+0x514/0xb70
[ 93.693188][ T5298] ? __pfx_ret_from_fork+0x10/0x10
[ 93.695209][ T5298] ? __switch_to+0xc89/0x1420
[ 93.697042][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.699011][ T5298] ret_from_fork_asm+0x1a/0x30
[ 93.700875][ T5298]
[ 93.702064][ T5298] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 93.704868][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 93.708714][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.712850][ T5298] Workqueue: events drm_fb_helper_damage_work
[ 93.715417][ T5298] Call Trace:
[ 93.716873][ T5298]
[ 93.718029][ T5298] vpanic+0x56c/0xa60
[ 93.719747][ T5298] ? __pfx__printk+0x10/0x10
[ 93.721594][ T5298] ? __pfx_vpanic+0x10/0x10
[ 93.723476][ T5298] ? is_bpf_text_address+0x292/0x2b0
[ 93.725797][ T5298] ? is_bpf_text_address+0x26/0x2b0
[ 93.728019][ T5298] panic+0xc5/0xd0
[ 93.729629][ T5298] ? __pfx_panic+0x10/0x10
[ 93.731510][ T5298] ? ret_from_fork_asm+0x1a/0x30
[ 93.733593][ T5298] __warn+0x315/0x4c0
[ 93.735247][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 93.737844][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 93.740463][ T5298] __report_bug+0x276/0x570
[ 93.742373][ T5298] ? drm_modeset_acquire_fini+0x27/0x180
[ 93.744640][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 93.747266][ T5298] ? __pfx___report_bug+0x10/0x10
[ 93.749324][ T5298] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 93.751697][ T5298] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 93.754144][ T5298] report_bug_entry+0x19a/0x290
[ 93.756184][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 93.758768][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 93.761517][ T5298] handle_bug+0xce/0x200
[ 93.763265][ T5298] exc_invalid_op+0x1a/0x50
[ 93.765223][ T5298] asm_exc_invalid_op+0x1a/0x20
[ 93.767275][ T5298] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 93.770140][ T5298] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 da 5b a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 93.777954][ T5298] RSP: 0018:ffffc9000dc5f8b8 EFLAGS: 00010246
[ 93.780475][ T5298] RAX: 1ffff11003f0b01a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 93.783748][ T5298] RDX: ffff88801f64cee0 RSI: ffffffff8c57c700 RDI: ffffffff90638ce0
[ 93.787065][ T5298] RBP: ffff88801d310008 R08: ffffc9000dc5f607 R09: 1ffff92001b8bec0
[ 93.790372][ T5298] R10: dffffc0000000000 R11: fffff52001b8bec1 R12: ffff88801f64cee0
[ 93.793708][ T5298] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801f8580d0
[ 93.796919][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 93.799469][ T5298] drm_fb_helper_damage_work+0x84c/0xf20
[ 93.801832][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 93.804301][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.806627][ T5298] ? rcu_is_watching+0x15/0xb0
[ 93.808599][ T5298] ? process_scheduled_works+0xa20/0x14e0
[ 93.810861][ T5298] process_scheduled_works+0xa8e/0x14e0
[ 93.813192][ T5298] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.815730][ T5298] ? assign_work+0x3cf/0x5d0
[ 93.817826][ T5298] worker_thread+0xa47/0xfb0
[ 93.819884][ T5298] ? __kthread_parkme+0x71/0x1f0
[ 93.822408][ T5298] kthread+0x388/0x470
[ 93.824703][ T5298] ? __pfx_worker_thread+0x10/0x10
[ 93.827376][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.829864][ T5298] ret_from_fork+0x514/0xb70
[ 93.832391][ T5298] ? __pfx_ret_from_fork+0x10/0x10
[ 93.834588][ T5298] ? __switch_to+0xc89/0x1420
[ 93.836678][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.838608][ T5298] ret_from_fork_asm+0x1a/0x30
[ 93.840620][ T5298]
[ 93.842279][ T5298] Kernel Offset: disabled
[ 93.844101][ T5298] Rebooting in 86400 seconds..