program: syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x39}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r6, 0xfff, 0x0) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='N', 0x1) write(r8, &(0x7f0000000100)='10', 0x2) [ 93.445830][ T5284] Bluetooth: hci0: command tx timeout [ 93.458514][ T1247] cfg80211: failed to load regulatory.db [ 93.810987][ T1247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.962723][ T1247] usb 5-1: Using ep0 maxpacket: 32 [ 93.963356][ T1247] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.965713][ T1247] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.967770][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.967785][ T1247] usb 5-1: Product: syz [ 93.967793][ T1247] usb 5-1: Manufacturer: syz [ 93.967801][ T1247] usb 5-1: SerialNumber: syz [ 94.002945][ T1247] usb 5-1: config 0 descriptor?? [ 94.004139][ T5320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.208736][ T5320] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.0'. [ 94.290252][ T5320] FAULT_INJECTION: forcing a failure. [ 94.290252][ T5320] name failslab, interval 1, probability 10, space 0, times 1 [ 94.290289][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.290304][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.290326][ T5320] Call Trace: [ 94.290333][ T5320] [ 94.290340][ T5320] dump_stack_lvl+0xe8/0x150 [ 94.290415][ T5320] should_fail_ex+0x410/0x560 [ 94.290472][ T5320] should_failslab+0xa8/0x100 [ 94.290488][ T5320] __kmalloc_cache_noprof+0xa3/0x600 [ 94.290505][ T5320] ? dummy_urb_enqueue+0x7c/0x780 [ 94.290562][ T5320] ? dummy_urb_enqueue+0x7c/0x780 [ 94.290582][ T5320] dummy_urb_enqueue+0x7c/0x780 [ 94.290597][ T5320] ? usb_hcd_map_urb_for_dma+0x435/0xc50 [ 94.290615][ T5320] usb_hcd_submit_urb+0x328/0x1b60 [ 94.290636][ T5320] _chaoskey_fill+0x263/0xa70 [ 94.290655][ T5320] ? __pfx__chaoskey_fill+0x10/0x10 [ 94.290668][ T5320] ? __pfx_autoremove_wake_function+0x10/0x10 [ 94.290695][ T5320] chaoskey_read+0x1ed/0x690 [ 94.290716][ T5320] ? __pfx_chaoskey_read+0x10/0x10 [ 94.290730][ T5320] vfs_read+0x213/0xa80 [ 94.290748][ T5320] ? __pfx_vfs_read+0x10/0x10 [ 94.290762][ T5320] ? __fget_files+0x2a/0x420 [ 94.290778][ T5320] ? __fget_files+0x2a/0x420 [ 94.290791][ T5320] ? __fget_files+0x3a2/0x420 [ 94.290803][ T5320] ? __fget_files+0x2a/0x420 [ 94.290822][ T5320] ksys_read+0x150/0x270 [ 94.290837][ T5320] ? __pfx_ksys_read+0x10/0x10 [ 94.290857][ T5320] do_syscall_64+0x166/0x520 [ 94.290869][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.290881][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 94.290895][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.290907][ T5320] RIP: 0033:0x7f93b5b9e159 [ 94.290918][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.290925][ T5320] RSP: 002b:00007f93b6a15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.290936][ T5320] RAX: ffffffffffffffda RBX: 00007f93b5e25fa0 RCX: 00007f93b5b9e159 [ 94.290942][ T5320] RDX: 0000000000000097 RSI: 00002000000002c0 RDI: 0000000000000004 [ 94.290947][ T5320] RBP: 00007f93b5c3503b R08: 0000000000000000 R09: 0000000000000000 [ 94.290951][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.290956][ T5320] R13: 00007f93b5e26038 R14: 00007f93b5e25fa0 R15: 00007ffe362429d8 [ 94.290972][ T5320] [ 94.307933][ T1247] FAULT_INJECTION: forcing a failure. [ 94.307933][ T1247] name failslab, interval 1, probability 10, space 0, times 1 [ 94.307961][ T1247] CPU: 0 UID: 0 PID: 1247 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 94.307973][ T1247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.307981][ T1247] Workqueue: events drm_fb_helper_damage_work [ 94.308007][ T1247] Call Trace: [ 94.308012][ T1247] [ 94.308020][ T1247] dump_stack_lvl+0xe8/0x150 [ 94.308039][ T1247] should_fail_ex+0x410/0x560 [ 94.308059][ T1247] should_failslab+0xa8/0x100 [ 94.308082][ T1247] __kmalloc_noprof+0xfe/0x720 [ 94.308101][ T1247] ? __kmalloc_noprof+0x1ab/0x720 [ 94.308115][ T1247] ? drm_atomic_commit_init+0x10f/0x370 [ 94.308130][ T1247] ? drm_atomic_commit_init+0x10f/0x370 [ 94.308146][ T1247] drm_atomic_commit_init+0x10f/0x370 [ 94.308162][ T1247] drm_atomic_commit_alloc+0xbc/0x100 [ 94.308176][ T1247] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 94.308203][ T1247] ? __lock_acquire+0x747/0x2de0 [ 94.308220][ T1247] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 94.308253][ T1247] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.308276][ T1247] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 94.308303][ T1247] drm_fb_helper_damage_work+0x84c/0xf20 [ 94.308327][ T1247] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 94.308355][ T1247] ? lock_acquire+0x115/0x350 [ 94.308373][ T1247] ? rcu_is_watching+0x16/0xb0 [ 94.308388][ T1247] ? process_scheduled_works+0x97a/0x1630 [ 94.308404][ T1247] process_scheduled_works+0xc3d/0x1630 [ 94.308439][ T1247] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.308459][ T1247] ? assign_work+0x3cf/0x5d0 [ 94.308477][ T1247] worker_thread+0xa47/0xfb0 [ 94.308558][ T1247] ? __kthread_parkme+0x71/0x1f0 [ 94.308583][ T1247] kthread+0x38b/0x480 [ 94.308596][ T1247] ? __pfx_worker_thread+0x10/0x10 [ 94.308610][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.308623][ T1247] ret_from_fork+0x514/0xb70 [ 94.308638][ T1247] ? __pfx_ret_from_fork+0x10/0x10 [ 94.308649][ T1247] ? __switch_to+0xc89/0x1420 [ 94.308667][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.308680][ T1247] ret_from_fork_asm+0x1a/0x30 [ 94.308709][ T1247] [ 94.311376][ T10] FAULT_INJECTION: forcing a failure. [ 94.311376][ T10] name failslab, interval 1, probability 10, space 0, times 1 [ 94.311402][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 94.311414][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.311421][ T10] Workqueue: events nsim_fib_event_work [ 94.311443][ T10] Call Trace: [ 94.311448][ T10] [ 94.311454][ T10] dump_stack_lvl+0xe8/0x150 [ 94.311471][ T10] should_fail_ex+0x410/0x560 [ 94.311492][ T10] should_failslab+0xa8/0x100 [ 94.311506][ T10] __kmalloc_cache_noprof+0xa3/0x600 [ 94.311522][ T10] ? __lock_acquire+0x747/0x2de0 [ 94.311533][ T10] ? nsim_fib_event+0xf37/0xa3a0 [ 94.311547][ T10] ? nsim_fib_event+0xf37/0xa3a0 [ 94.311564][ T10] nsim_fib_event+0xf37/0xa3a0 [ 94.311577][ T10] ? worker_thread+0xa47/0xfb0 [ 94.311590][ T10] ? kthread+0x38b/0x480 [ 94.311617][ T10] ? __pfx_nsim_fib_event+0x10/0x10 [ 94.311640][ T10] ? kasan_quarantine_put+0xbb/0x1f0 [ 94.311668][ T10] nsim_fib_event_work+0x244/0x3b0 [ 94.311684][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 94.311700][ T10] ? rcu_is_watching+0x16/0xb0 [ 94.311714][ T10] ? process_scheduled_works+0x97a/0x1630 [ 94.311728][ T10] process_scheduled_works+0xc3d/0x1630 [ 94.311760][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.311778][ T10] ? assign_work+0x3cf/0x5d0 [ 94.311795][ T10] worker_thread+0xa47/0xfb0 [ 94.311825][ T10] kthread+0x38b/0x480 [ 94.311836][ T10] ? __pfx_worker_thread+0x10/0x10 [ 94.311849][ T10] ? __pfx_kthread+0x10/0x10 [ 94.311860][ T10] ret_from_fork+0x514/0xb70 [ 94.311874][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 94.311884][ T10] ? __switch_to+0xc89/0x1420 [ 94.311902][ T10] ? __pfx_kthread+0x10/0x10 [ 94.311913][ T10] ret_from_fork_asm+0x1a/0x30 [ 94.311960][ T10] [ 94.314374][ T1247] ------------[ cut here ]------------ [ 94.314386][ T1247] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 94.314395][ T1247] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:4/1247 [ 94.594840][ T1247] Modules linked in: [ 94.596574][ T1247] CPU: 0 UID: 0 PID: 1247 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 94.600786][ T1247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.604957][ T1247] Workqueue: events drm_fb_helper_damage_work [ 94.607486][ T1247] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 94.610518][ T1247] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 aa da 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 94.618763][ T1247] RSP: 0018:ffffc90001d5f898 EFLAGS: 00010246 [ 94.621469][ T1247] RAX: 1ffff11003ed441a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 94.624928][ T1247] RDX: ffff88801f39a120 RSI: ffffffff8c79c640 RDI: ffffffff908636e0 [ 94.628455][ T1247] RBP: ffff88801d26e008 R08: ffffffff907a577f R09: 1ffffffff20f4aef [ 94.631959][ T1247] R10: dffffc0000000000 R11: fffffbfff20f4af0 R12: ffff88801f39a120 [ 94.635392][ T1247] R13: dffffc0000000000 R14: ffffffff8c79c640 R15: ffff88801f6a20d0 [ 94.638922][ T1247] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 94.642919][ T1247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.645869][ T1247] CR2: 0000200000003c40 CR3: 0000000043e7b000 CR4: 0000000000352ef0 [ 94.649395][ T1247] Call Trace: [ 94.651077][ T1247] [ 94.652380][ T1247] drm_fb_helper_damage_work+0x84c/0xf20 [ 94.654877][ T1247] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 94.657535][ T1247] ? lock_acquire+0x115/0x350 [ 94.659633][ T1247] ? rcu_is_watching+0x16/0xb0 [ 94.661839][ T1247] ? process_scheduled_works+0x97a/0x1630 [ 94.664339][ T1247] process_scheduled_works+0xc3d/0x1630 [ 94.667237][ T1247] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.669745][ T1247] ? assign_work+0x3cf/0x5d0 [ 94.672228][ T1247] worker_thread+0xa47/0xfb0 [ 94.674182][ T1247] ? __kthread_parkme+0x71/0x1f0 [ 94.676307][ T1247] kthread+0x38b/0x480 [ 94.678194][ T1247] ? __pfx_worker_thread+0x10/0x10 [ 94.680612][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.682591][ T1247] ret_from_fork+0x514/0xb70 [ 94.684660][ T1247] ? __pfx_ret_from_fork+0x10/0x10 [ 94.686923][ T1247] ? __switch_to+0xc89/0x1420 [ 94.689074][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.691442][ T1247] ret_from_fork_asm+0x1a/0x30 [ 94.693824][ T1247] [ 94.695274][ T1247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.698449][ T1247] CPU: 0 UID: 0 PID: 1247 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 94.702842][ T1247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.707672][ T1247] Workqueue: events drm_fb_helper_damage_work [ 94.710646][ T1247] Call Trace: [ 94.712336][ T1247] [ 94.713920][ T1247] vpanic+0x56d/0xa60 [ 94.715907][ T1247] ? __pfx__printk+0x10/0x10 [ 94.717935][ T1247] ? __pfx_vpanic+0x10/0x10 [ 94.719984][ T1247] ? is_bpf_text_address+0x292/0x2b0 [ 94.722477][ T1247] ? is_bpf_text_address+0x26/0x2b0 [ 94.725074][ T1247] panic+0xc5/0xd0 [ 94.726646][ T1247] ? __pfx_panic+0x10/0x10 [ 94.728515][ T1247] ? ret_from_fork_asm+0x1a/0x30 [ 94.730794][ T1247] __warn+0x315/0x4c0 [ 94.732783][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 94.735406][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 94.738154][ T1247] __report_bug+0x276/0x570 [ 94.740248][ T1247] ? drm_modeset_acquire_fini+0x27/0x180 [ 94.742817][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 94.745571][ T1247] ? __pfx___report_bug+0x10/0x10 [ 94.747695][ T1247] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 94.750353][ T1247] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 94.753049][ T1247] report_bug_entry+0x19b/0x290 [ 94.755185][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 94.757919][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 94.760751][ T1247] handle_bug+0xce/0x200 [ 94.762677][ T1247] exc_invalid_op+0x1a/0x50 [ 94.764859][ T1247] asm_exc_invalid_op+0x1a/0x20 [ 94.767046][ T1247] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 94.770057][ T1247] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 aa da 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 94.778500][ T1247] RSP: 0018:ffffc90001d5f898 EFLAGS: 00010246 [ 94.781386][ T1247] RAX: 1ffff11003ed441a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 94.784945][ T1247] RDX: ffff88801f39a120 RSI: ffffffff8c79c640 RDI: ffffffff908636e0 [ 94.788381][ T1247] RBP: ffff88801d26e008 R08: ffffffff907a577f R09: 1ffffffff20f4aef [ 94.792064][ T1247] R10: dffffc0000000000 R11: fffffbfff20f4af0 R12: ffff88801f39a120 [ 94.795593][ T1247] R13: dffffc0000000000 R14: ffffffff8c79c640 R15: ffff88801f6a20d0 [ 94.799173][ T1247] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 94.802044][ T1247] drm_fb_helper_damage_work+0x84c/0xf20 [ 94.804472][ T1247] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 94.807122][ T1247] ? lock_acquire+0x115/0x350 [ 94.809431][ T1247] ? rcu_is_watching+0x16/0xb0 [ 94.811685][ T1247] ? process_scheduled_works+0x97a/0x1630 [ 94.814328][ T1247] process_scheduled_works+0xc3d/0x1630 [ 94.816911][ T1247] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.819646][ T1247] ? assign_work+0x3cf/0x5d0 [ 94.821689][ T1247] worker_thread+0xa47/0xfb0 [ 94.823827][ T1247] ? __kthread_parkme+0x71/0x1f0 [ 94.826161][ T1247] kthread+0x38b/0x480 [ 94.828051][ T1247] ? __pfx_worker_thread+0x10/0x10 [ 94.830406][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.832663][ T1247] ret_from_fork+0x514/0xb70 [ 94.834804][ T1247] ? __pfx_ret_from_fork+0x10/0x10 [ 94.837192][ T1247] ? __switch_to+0xc89/0x1420 [ 94.839357][ T1247] ? __pfx_kthread+0x10/0x10 [ 94.841525][ T1247] ret_from_fork_asm+0x1a/0x30 [ 94.843674][ T1247] [ 94.845456][ T1247] Kernel Offset: disabled [ 94.847354][ T1247] Rebooting in 86400 seconds..