program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='N', 0x1) write(r2, &(0x7f0000000100)='100', 0x3) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2a, 0xc9b0e5fef9904a5b, 0x70bd2a, 0x25dfdbfd, {0x1e}, [@typed={0x14, 0x23, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8080) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, r3, 0x0, &(0x7f0000000080)={0xf00001, 0x0, '\x00', @p_u8=0x0}}) write$apparmor_current(r3, &(0x7f0000000200)=@hat={'changehat ', 0x0, 0x5e, ['\x00', '/dev/vbi#\x00', '\x00', '-\'/\x00']}, 0x2d) [ 77.451991][ T4641] Bluetooth: hci0: command tx timeout [ 77.453282][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.454848][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.526457][ T5311] FAULT_INJECTION: forcing a failure. [ 77.526457][ T5311] name failslab, interval 1, probability 100, space 0, times 1 [ 77.526493][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.526506][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.526524][ T5311] Call Trace: [ 77.526544][ T5311] [ 77.526552][ T5311] dump_stack_lvl+0xe8/0x150 [ 77.526638][ T5311] should_fail_ex+0x410/0x560 [ 77.526709][ T5311] should_failslab+0xa8/0x100 [ 77.526725][ T5311] __kvmalloc_node_noprof+0x176/0x820 [ 77.526746][ T5311] ? vmemdup_user+0x2b/0xd0 [ 77.526762][ T5311] ? vmemdup_user+0x2b/0xd0 [ 77.526783][ T5311] vmemdup_user+0x2b/0xd0 [ 77.526800][ T5311] path_setxattrat+0x2d0/0x450 [ 77.526823][ T5311] ? __pfx_path_setxattrat+0x10/0x10 [ 77.526838][ T5311] ? do_futex+0x3e7/0x4e0 [ 77.526870][ T5311] ? rcu_is_watching+0x16/0xb0 [ 77.526888][ T5311] __x64_sys_lsetxattr+0xbf/0xe0 [ 77.526906][ T5311] do_syscall_64+0x166/0x520 [ 77.526977][ T5311] ? trace_irq_disable+0x3b/0x140 [ 77.526989][ T5311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.527001][ T5311] ? clear_bhb_loop+0x70/0xc0 [ 77.527017][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.527029][ T5311] RIP: 0033:0x7f2e9559e159 [ 77.527042][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.527052][ T5311] RSP: 002b:00007f2e96468fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 77.527066][ T5311] RAX: ffffffffffffffda RBX: 00007f2e95825fa0 RCX: 00007f2e9559e159 [ 77.527074][ T5311] RDX: 0000200000000340 RSI: 00002000000001c0 RDI: 0000000000000000 [ 77.527082][ T5311] RBP: 00007f2e9563506b R08: 0000000000000002 R09: 0000000000000000 [ 77.527090][ T5311] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 77.527097][ T5311] R13: 00007f2e95826038 R14: 00007f2e95825fa0 R15: 00007ffc175290c8 [ 77.527116][ T5311] [ 77.527262][ T5282] FAULT_INJECTION: forcing a failure. [ 77.527262][ T5282] name failslab, interval 1, probability 100, space 0, times 1 [ 77.527288][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.527327][ T5282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.527335][ T5282] Workqueue: events drm_fb_helper_damage_work [ 77.527353][ T5282] Call Trace: [ 77.527358][ T5282] [ 77.527364][ T5282] dump_stack_lvl+0xe8/0x150 [ 77.527384][ T5282] should_fail_ex+0x410/0x560 [ 77.527406][ T5282] should_failslab+0xa8/0x100 [ 77.527421][ T5282] __kmalloc_cache_noprof+0xa3/0x600 [ 77.527440][ T5282] ? drm_atomic_commit_alloc+0xa9/0x100 [ 77.527454][ T5282] ? drm_atomic_commit_alloc+0xa9/0x100 [ 77.527471][ T5282] drm_atomic_commit_alloc+0xa9/0x100 [ 77.527485][ T5282] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 77.527532][ T5282] ? __lock_acquire+0x747/0x2de0 [ 77.527548][ T5282] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 77.527574][ T5282] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.527598][ T5282] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 77.527622][ T5282] drm_fb_helper_damage_work+0x84c/0xf20 [ 77.527653][ T5282] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 77.527677][ T5282] ? lock_acquire+0x115/0x350 [ 77.527696][ T5282] ? rcu_is_watching+0x16/0xb0 [ 77.527711][ T5282] ? process_scheduled_works+0x97a/0x1630 [ 77.527729][ T5282] process_scheduled_works+0xc3d/0x1630 [ 77.527764][ T5282] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.527783][ T5282] ? assign_work+0x3cf/0x5d0 [ 77.527801][ T5282] worker_thread+0xa47/0xfb0 [ 77.527824][ T5282] ? __kthread_parkme+0x71/0x1f0 [ 77.527846][ T5282] kthread+0x38b/0x480 [ 77.527858][ T5282] ? __pfx_worker_thread+0x10/0x10 [ 77.527872][ T5282] ? __pfx_kthread+0x10/0x10 [ 77.527884][ T5282] ret_from_fork+0x514/0xb70 [ 77.527899][ T5282] ? __pfx_ret_from_fork+0x10/0x10 [ 77.527910][ T5282] ? __switch_to+0xc89/0x1420 [ 77.527927][ T5282] ? __pfx_kthread+0x10/0x10 [ 77.527940][ T5282] ret_from_fork_asm+0x1a/0x30 [ 77.527966][ T5282] [ 77.528131][ T934] FAULT_INJECTION: forcing a failure. [ 77.528131][ T934] name failslab, interval 1, probability 100, space 0, times 1 [ 77.528158][ T934] CPU: 0 UID: 0 PID: 934 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 77.528168][ T934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.528174][ T934] Workqueue: events nsim_fib_event_work [ 77.528194][ T934] Call Trace: [ 77.528198][ T934] [ 77.528203][ T934] dump_stack_lvl+0xe8/0x150 [ 77.528219][ T934] should_fail_ex+0x410/0x560 [ 77.528239][ T934] should_failslab+0xa8/0x100 [ 77.528252][ T934] __kmalloc_cache_noprof+0xa3/0x600 [ 77.528268][ T934] ? __lock_acquire+0x747/0x2de0 [ 77.528279][ T934] ? nsim_fib_event+0x4c8/0xa3a0 [ 77.528293][ T934] ? nsim_fib_event+0x4c8/0xa3a0 [ 77.528312][ T934] nsim_fib_event+0x4c8/0xa3a0 [ 77.528324][ T934] ? worker_thread+0xa47/0xfb0 [ 77.528336][ T934] ? kthread+0x38b/0x480 [ 77.528345][ T934] ? ret_from_fork+0x514/0xb70 [ 77.528354][ T934] ? ret_from_fork_asm+0x1a/0x30 [ 77.528384][ T934] ? __pfx_nsim_fib_event+0x10/0x10 [ 77.528408][ T934] ? kasan_quarantine_put+0xbb/0x1f0 [ 77.528435][ T934] nsim_fib_event_work+0x244/0x3b0 [ 77.528454][ T934] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 77.528471][ T934] ? rcu_is_watching+0x16/0xb0 [ 77.528486][ T934] ? process_scheduled_works+0x97a/0x1630 [ 77.528502][ T934] process_scheduled_works+0xc3d/0x1630 [ 77.528536][ T934] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.528555][ T934] ? assign_work+0x3cf/0x5d0 [ 77.528574][ T934] worker_thread+0xa47/0xfb0 [ 77.528598][ T934] ? __kthread_parkme+0x71/0x1f0 [ 77.528620][ T934] kthread+0x38b/0x480 [ 77.528633][ T934] ? __pfx_worker_thread+0x10/0x10 [ 77.528646][ T934] ? __pfx_kthread+0x10/0x10 [ 77.528658][ T934] ret_from_fork+0x514/0xb70 [ 77.528671][ T934] ? __pfx_ret_from_fork+0x10/0x10 [ 77.528682][ T934] ? __switch_to+0xc89/0x1420 [ 77.528701][ T934] ? __pfx_kthread+0x10/0x10 [ 77.528713][ T934] ret_from_fork_asm+0x1a/0x30 [ 77.528740][ T934] [ 77.528922][ T5282] ------------[ cut here ]------------ [ 77.528931][ T5282] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 77.528939][ T5282] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:4/5282 [ 77.806476][ T5282] Modules linked in: [ 77.808309][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.812292][ T5282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.817797][ T5282] Workqueue: events drm_fb_helper_damage_work [ 77.820482][ T5282] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 77.823452][ T5282] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 6a 9d 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 77.832859][ T5282] RSP: 0018:ffffc9000df37898 EFLAGS: 00010246 [ 77.835586][ T5282] RAX: 1ffff11003f5341a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 77.838488][ T5282] RDX: ffff88801fa8f720 RSI: ffffffff8c79ca40 RDI: ffffffff908643b0 [ 77.841603][ T5282] RBP: ffff888000a34008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 77.844711][ T5282] R10: dffffc0000000000 R11: fffffbfff1dd617f R12: ffff88801fa8f720 [ 77.847922][ T5282] R13: dffffc0000000000 R14: ffffffff8c79ca40 R15: ffff88801fa9a0d0 [ 77.851199][ T5282] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 77.855006][ T5282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.858203][ T5282] CR2: 00007f2e95817bc0 CR3: 000000004271b000 CR4: 0000000000352ef0 [ 77.861430][ T5282] Call Trace: [ 77.862904][ T5282] [ 77.864160][ T5282] drm_fb_helper_damage_work+0x84c/0xf20 [ 77.866520][ T5282] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 77.869165][ T5282] ? lock_acquire+0x115/0x350 [ 77.871101][ T5282] ? rcu_is_watching+0x16/0xb0 [ 77.873055][ T5282] ? process_scheduled_works+0x97a/0x1630 [ 77.875400][ T5282] process_scheduled_works+0xc3d/0x1630 [ 77.877886][ T5282] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.881672][ T5282] ? assign_work+0x3cf/0x5d0 [ 77.883966][ T5282] worker_thread+0xa47/0xfb0 [ 77.885972][ T5282] ? __kthread_parkme+0x71/0x1f0 [ 77.888282][ T5282] kthread+0x38b/0x480 [ 77.889991][ T5282] ? __pfx_worker_thread+0x10/0x10 [ 77.891982][ T5282] ? __pfx_kthread+0x10/0x10 [ 77.894051][ T5282] ret_from_fork+0x514/0xb70 [ 77.896241][ T5282] ? __pfx_ret_from_fork+0x10/0x10 [ 77.898638][ T5282] ? __switch_to+0xc89/0x1420 [ 77.900776][ T5282] ? __pfx_kthread+0x10/0x10 [ 77.902836][ T5282] ret_from_fork_asm+0x1a/0x30 [ 77.905092][ T5282] [ 77.906472][ T5282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.909653][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.914270][ T5282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.919763][ T5282] Workqueue: events drm_fb_helper_damage_work [ 77.922517][ T5282] Call Trace: [ 77.924100][ T5282] [ 77.925341][ T5282] vpanic+0x56d/0xa60 [ 77.926890][ T5282] ? __pfx__printk+0x10/0x10 [ 77.928841][ T5282] ? __pfx_vpanic+0x10/0x10 [ 77.930880][ T5282] ? is_bpf_text_address+0x292/0x2b0 [ 77.933197][ T5282] ? is_bpf_text_address+0x26/0x2b0 [ 77.935670][ T5282] panic+0xc5/0xd0 [ 77.937721][ T5282] ? __pfx_panic+0x10/0x10 [ 77.939815][ T5282] ? ret_from_fork_asm+0x1a/0x30 [ 77.942005][ T5282] __warn+0x315/0x4c0 [ 77.943811][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 77.946781][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 77.949734][ T5282] __report_bug+0x276/0x570 [ 77.951794][ T5282] ? drm_modeset_acquire_fini+0x27/0x180 [ 77.954302][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 77.957157][ T5282] ? __pfx___report_bug+0x10/0x10 [ 77.959455][ T5282] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 77.961941][ T5282] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 77.964706][ T5282] report_bug_entry+0x19b/0x290 [ 77.966830][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 77.969626][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 77.972340][ T5282] handle_bug+0xce/0x200 [ 77.974213][ T5282] exc_invalid_op+0x1a/0x50 [ 77.976223][ T5282] asm_exc_invalid_op+0x1a/0x20 [ 77.978351][ T5282] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 77.981347][ T5282] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 6a 9d 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 77.989553][ T5282] RSP: 0018:ffffc9000df37898 EFLAGS: 00010246 [ 77.992247][ T5282] RAX: 1ffff11003f5341a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 77.995704][ T5282] RDX: ffff88801fa8f720 RSI: ffffffff8c79ca40 RDI: ffffffff908643b0 [ 77.999234][ T5282] RBP: ffff888000a34008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 78.002588][ T5282] R10: dffffc0000000000 R11: fffffbfff1dd617f R12: ffff88801fa8f720 [ 78.005966][ T5282] R13: dffffc0000000000 R14: ffffffff8c79ca40 R15: ffff88801fa9a0d0 [ 78.009110][ T5282] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 78.011787][ T5282] drm_fb_helper_damage_work+0x84c/0xf20 [ 78.014207][ T5282] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 78.016746][ T5282] ? lock_acquire+0x115/0x350 [ 78.018730][ T5282] ? rcu_is_watching+0x16/0xb0 [ 78.020758][ T5282] ? process_scheduled_works+0x97a/0x1630 [ 78.023147][ T5282] process_scheduled_works+0xc3d/0x1630 [ 78.025529][ T5282] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.028174][ T5282] ? assign_work+0x3cf/0x5d0 [ 78.030152][ T5282] worker_thread+0xa47/0xfb0 [ 78.032057][ T5282] ? __kthread_parkme+0x71/0x1f0 [ 78.034116][ T5282] kthread+0x38b/0x480 [ 78.035915][ T5282] ? __pfx_worker_thread+0x10/0x10 [ 78.038165][ T5282] ? __pfx_kthread+0x10/0x10 [ 78.040260][ T5282] ret_from_fork+0x514/0xb70 [ 78.042154][ T5282] ? __pfx_ret_from_fork+0x10/0x10 [ 78.044342][ T5282] ? __switch_to+0xc89/0x1420 [ 78.046386][ T5282] ? __pfx_kthread+0x10/0x10 [ 78.048428][ T5282] ret_from_fork_asm+0x1a/0x30 [ 78.050474][ T5282] [ 78.052187][ T5282] Kernel Offset: disabled [ 78.054016][ T5282] Rebooting in 86400 seconds..