program: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsopen(0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) (fail_nth: 30) write(r2, &(0x7f0000000100)='N', 0x1) write(r3, &(0x7f0000000100)='1', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) [ 95.017528][ T4641] Bluetooth: hci0: command tx timeout [ 95.145661][ T5312] FAULT_INJECTION: forcing a failure. [ 95.145661][ T5312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.145681][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.145690][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.145696][ T5312] Call Trace: [ 95.145699][ T5312] [ 95.145703][ T5312] dump_stack_lvl+0xe8/0x150 [ 95.145757][ T5312] should_fail_ex+0x410/0x560 [ 95.145821][ T5312] prepare_alloc_pages+0x223/0x600 [ 95.145840][ T5312] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 95.145858][ T5312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 95.145896][ T5312] __alloc_pages_noprof+0x10/0x100 [ 95.145914][ T5312] alloc_pages_node_noprof+0xe2/0x140 [ 95.145931][ T5312] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 95.145947][ T5312] ? __kmalloc_node_noprof+0x2f0/0x720 [ 95.145960][ T5312] ? __rb_allocate_pages+0x5b5/0x1770 [ 95.145978][ T5312] __rb_allocate_pages+0xdf1/0x1770 [ 95.146003][ T5312] rb_allocate_cpu_buffer+0x117d/0x3070 [ 95.146027][ T5312] ? rcu_is_watching+0x16/0xb0 [ 95.146041][ T5312] ? trace_kmalloc+0x2a/0xf0 [ 95.146057][ T5312] ? __pfx_rb_allocate_cpu_buffer+0x10/0x10 [ 95.146072][ T5312] ? __kmalloc_noprof+0x38c/0x720 [ 95.146086][ T5312] ? __kmalloc_noprof+0x1ab/0x720 [ 95.146099][ T5312] ? alloc_buffer+0x27b/0x1d70 [ 95.146117][ T5312] alloc_buffer+0x17f7/0x1d70 [ 95.146146][ T5312] __ring_buffer_alloc+0x2c/0x40 [ 95.146161][ T5312] allocate_trace_buffer+0x1d2/0x950 [ 95.146173][ T5312] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 95.146186][ T5312] ? trace_array_create_systems+0x75/0xe60 [ 95.146197][ T5312] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 95.146211][ T5312] ? __raw_spin_lock_init+0x45/0x100 [ 95.146226][ T5312] trace_array_create_systems+0x590/0xe60 [ 95.146236][ T5312] ? tracefs_syscall_mkdir+0x108/0x190 [ 95.146257][ T5312] instance_mkdir+0xd5/0x140 [ 95.146275][ T5312] tracefs_syscall_mkdir+0x11a/0x190 [ 95.146290][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 95.146304][ T5312] ? generic_permission+0x2bf/0x670 [ 95.146323][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 95.146337][ T5312] vfs_mkdir+0x40c/0x620 [ 95.146359][ T5312] filename_mkdirat+0x285/0x510 [ 95.146380][ T5312] ? __pfx_filename_mkdirat+0x10/0x10 [ 95.146391][ T5312] ? do_getname+0x151/0x250 [ 95.146403][ T5312] __se_sys_mkdirat+0x35/0x150 [ 95.146420][ T5312] do_syscall_64+0x166/0x520 [ 95.146470][ T5312] ? trace_irq_disable+0x3b/0x140 [ 95.146482][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.146492][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 95.146501][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.146508][ T5312] RIP: 0033:0x7fc660b9e159 [ 95.146545][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.146555][ T5312] RSP: 002b:00007fc661a98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.146580][ T5312] RAX: ffffffffffffffda RBX: 00007fc660e25fa0 RCX: 00007fc660b9e159 [ 95.146588][ T5312] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 95.146594][ T5312] RBP: 00007fc661a99050 R08: 0000000000000000 R09: 0000000000000000 [ 95.146601][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.146607][ T5312] R13: 00007fc660e26038 R14: 00007fc660e25fa0 R15: 00007ffd225da9a8 [ 95.146626][ T5312] [ 95.232797][ T10] FAULT_INJECTION: forcing a failure. [ 95.232797][ T10] name failslab, interval 1, probability 1, space 0, times 1 [ 95.232820][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 95.232831][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.232838][ T10] Workqueue: events drm_fb_helper_damage_work [ 95.232858][ T10] Call Trace: [ 95.232870][ T10] [ 95.232876][ T10] dump_stack_lvl+0xe8/0x150 [ 95.232895][ T10] should_fail_ex+0x410/0x560 [ 95.232914][ T10] should_failslab+0xa8/0x100 [ 95.232929][ T10] __kmalloc_noprof+0xfe/0x720 [ 95.232944][ T10] ? __kasan_kmalloc+0x93/0xb0 [ 95.232955][ T10] ? drm_atomic_commit_init+0x9e/0x370 [ 95.232967][ T10] ? drm_atomic_commit_init+0x9e/0x370 [ 95.232983][ T10] drm_atomic_commit_init+0x9e/0x370 [ 95.232998][ T10] drm_atomic_commit_alloc+0xbc/0x100 [ 95.233011][ T10] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 95.233031][ T10] ? __lock_acquire+0x747/0x2de0 [ 95.233074][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 95.233101][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.233122][ T10] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 95.233142][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 95.233159][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 95.233182][ T10] ? lock_acquire+0x115/0x350 [ 95.233197][ T10] ? rcu_is_watching+0x16/0xb0 [ 95.233211][ T10] ? process_scheduled_works+0x97a/0x1630 [ 95.233225][ T10] process_scheduled_works+0xc3d/0x1630 [ 95.233259][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.233278][ T10] ? assign_work+0x3cf/0x5d0 [ 95.233295][ T10] worker_thread+0xa47/0xfb0 [ 95.233320][ T10] ? __kthread_parkme+0x71/0x1f0 [ 95.233362][ T10] kthread+0x38b/0x480 [ 95.233376][ T10] ? __pfx_worker_thread+0x10/0x10 [ 95.233390][ T10] ? __pfx_kthread+0x10/0x10 [ 95.233401][ T10] ret_from_fork+0x514/0xb70 [ 95.233416][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 95.233427][ T10] ? __switch_to+0xc89/0x1420 [ 95.233444][ T10] ? __pfx_kthread+0x10/0x10 [ 95.233456][ T10] ret_from_fork_asm+0x1a/0x30 [ 95.233482][ T10] [ 95.233589][ T10] ------------[ cut here ]------------ [ 95.233595][ T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 95.233602][ T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10 [ 95.428546][ T10] Modules linked in: [ 95.430260][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 95.434456][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.440874][ T10] Workqueue: events drm_fb_helper_damage_work [ 95.443647][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 95.446818][ T10] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 6a 9d 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 95.455133][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 95.457537][ T10] RAX: 1ffff11003f5141a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 95.460949][ T10] RDX: ffff88801fa91720 RSI: ffffffff8c79ca40 RDI: ffffffff908643b0 [ 95.464247][ T10] RBP: ffff888000a2e008 R08: ffffffff907a637f R09: 1ffffffff20f4c6f [ 95.467395][ T10] R10: dffffc0000000000 R11: fffffbfff20f4c70 R12: ffff88801fa91720 [ 95.470527][ T10] R13: dffffc0000000000 R14: ffffffff8c79ca40 R15: ffff88801fa8a0d0 [ 95.474084][ T10] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 95.478126][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.480883][ T10] CR2: 00007fc660dc2250 CR3: 0000000050102000 CR4: 0000000000352ef0 [ 95.484172][ T10] Call Trace: [ 95.485713][ T10] [ 95.487001][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 95.489433][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 95.491857][ T10] ? lock_acquire+0x115/0x350 [ 95.494026][ T10] ? rcu_is_watching+0x16/0xb0 [ 95.495841][ T10] ? process_scheduled_works+0x97a/0x1630 [ 95.498134][ T10] process_scheduled_works+0xc3d/0x1630 [ 95.500490][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.503058][ T10] ? assign_work+0x3cf/0x5d0 [ 95.505098][ T10] worker_thread+0xa47/0xfb0 [ 95.507403][ T10] ? __kthread_parkme+0x71/0x1f0 [ 95.509506][ T10] kthread+0x38b/0x480 [ 95.511273][ T10] ? __pfx_worker_thread+0x10/0x10 [ 95.514061][ T10] ? __pfx_kthread+0x10/0x10 [ 95.516272][ T10] ret_from_fork+0x514/0xb70 [ 95.518350][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 95.520563][ T10] ? __switch_to+0xc89/0x1420 [ 95.522733][ T10] ? __pfx_kthread+0x10/0x10 [ 95.524748][ T10] ret_from_fork_asm+0x1a/0x30 [ 95.526841][ T10] [ 95.528181][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.531353][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 95.535232][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.539184][ T10] Workqueue: events drm_fb_helper_damage_work [ 95.541757][ T10] Call Trace: [ 95.543147][ T10] [ 95.544384][ T10] vpanic+0x56d/0xa60 [ 95.546037][ T10] ? __pfx__printk+0x10/0x10 [ 95.548091][ T10] ? __pfx_vpanic+0x10/0x10 [ 95.550026][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 95.552191][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 95.554478][ T10] panic+0xc5/0xd0 [ 95.556099][ T10] ? __pfx_panic+0x10/0x10 [ 95.557935][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 95.560034][ T10] __warn+0x315/0x4c0 [ 95.561808][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 95.564616][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 95.567392][ T10] __report_bug+0x276/0x570 [ 95.569392][ T10] ? drm_modeset_acquire_fini+0x27/0x180 [ 95.572029][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 95.574961][ T10] ? __pfx___report_bug+0x10/0x10 [ 95.577282][ T10] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 95.579958][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 95.582724][ T10] report_bug_entry+0x19b/0x290 [ 95.584801][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 95.587578][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 95.590271][ T10] handle_bug+0xce/0x200 [ 95.592168][ T10] exc_invalid_op+0x1a/0x50 [ 95.594088][ T10] asm_exc_invalid_op+0x1a/0x20 [ 95.596121][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 95.598918][ T10] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 6a 9d 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 95.606656][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 95.609309][ T10] RAX: 1ffff11003f5141a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 95.612674][ T10] RDX: ffff88801fa91720 RSI: ffffffff8c79ca40 RDI: ffffffff908643b0 [ 95.616033][ T10] RBP: ffff888000a2e008 R08: ffffffff907a637f R09: 1ffffffff20f4c6f [ 95.619443][ T10] R10: dffffc0000000000 R11: fffffbfff20f4c70 R12: ffff88801fa91720 [ 95.622912][ T10] R13: dffffc0000000000 R14: ffffffff8c79ca40 R15: ffff88801fa8a0d0 [ 95.626266][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 95.628669][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 95.631005][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 95.633456][ T10] ? lock_acquire+0x115/0x350 [ 95.635300][ T10] ? rcu_is_watching+0x16/0xb0 [ 95.637265][ T10] ? process_scheduled_works+0x97a/0x1630 [ 95.639474][ T10] process_scheduled_works+0xc3d/0x1630 [ 95.641597][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.643772][ T10] ? assign_work+0x3cf/0x5d0 [ 95.645408][ T10] worker_thread+0xa47/0xfb0 [ 95.647031][ T10] ? __kthread_parkme+0x71/0x1f0 [ 95.648899][ T10] kthread+0x38b/0x480 [ 95.650575][ T10] ? __pfx_worker_thread+0x10/0x10 [ 95.652887][ T10] ? __pfx_kthread+0x10/0x10 [ 95.655069][ T10] ret_from_fork+0x514/0xb70 [ 95.657163][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 95.659413][ T10] ? __switch_to+0xc89/0x1420 [ 95.661404][ T10] ? __pfx_kthread+0x10/0x10 [ 95.663232][ T10] ret_from_fork_asm+0x1a/0x30 [ 95.665110][ T10] [ 95.666721][ T10] Kernel Offset: disabled [ 95.668467][ T10] Rebooting in 86400 seconds..