program: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='N', 0x1) write(r5, &(0x7f0000000100)='100', 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x21) [ 86.165101][ T4646] Bluetooth: hci0: command tx timeout [ 86.250873][ T5321] FAULT_INJECTION: forcing a failure. [ 86.250873][ T5321] name failslab, interval 1, probability 100, space 0, times 1 [ 86.250930][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.250967][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.250977][ T5321] Call Trace: [ 86.250982][ T5321] [ 86.250988][ T5321] dump_stack_lvl+0xe8/0x150 [ 86.251047][ T5321] should_fail_ex+0x410/0x560 [ 86.251089][ T5321] should_failslab+0xa8/0x100 [ 86.251098][ T5321] __kmalloc_noprof+0xfe/0x720 [ 86.251116][ T5321] ? __cgroup_bpf_run_filter_setsockopt+0x265/0xdd0 [ 86.251134][ T5321] ? __cgroup_bpf_run_filter_setsockopt+0x265/0xdd0 [ 86.251155][ T5321] __cgroup_bpf_run_filter_setsockopt+0x265/0xdd0 [ 86.251179][ T5321] ? __lock_acquire+0x6df/0x2e50 [ 86.251193][ T5321] ? __pfx___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 86.251209][ T5321] ? aa_sock_opt_perm+0xe1/0x1e0 [ 86.251224][ T5321] do_sock_setsockopt+0x39a/0x400 [ 86.251276][ T5321] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 86.251297][ T5321] ? __fget_files+0x2a/0x420 [ 86.251316][ T5321] __x64_sys_setsockopt+0x18a/0x210 [ 86.251335][ T5321] do_syscall_64+0x166/0x520 [ 86.251346][ T5321] ? trace_irq_disable+0x3b/0x140 [ 86.251355][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.251364][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 86.251378][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.251390][ T5321] RIP: 0033:0x7f2d35d9e159 [ 86.251402][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.251412][ T5321] RSP: 002b:00007f2d36d19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.251446][ T5321] RAX: ffffffffffffffda RBX: 00007f2d36025fa0 RCX: 00007f2d35d9e159 [ 86.251456][ T5321] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 86.251461][ T5321] RBP: 00007f2d35e35024 R08: 0000000000000021 R09: 0000000000000000 [ 86.251467][ T5321] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 86.251473][ T5321] R13: 00007f2d36026038 R14: 00007f2d36025fa0 R15: 00007ffd231310b8 [ 86.251488][ T5321] [ 86.251662][ T5298] FAULT_INJECTION: forcing a failure. [ 86.251662][ T5298] name failslab, interval 1, probability 100, space 0, times 1 [ 86.251698][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.251721][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.251730][ T5298] Workqueue: events drm_fb_helper_damage_work [ 86.251751][ T5298] Call Trace: [ 86.251756][ T5298] [ 86.251762][ T5298] dump_stack_lvl+0xe8/0x150 [ 86.251781][ T5298] should_fail_ex+0x410/0x560 [ 86.251801][ T5298] should_failslab+0xa8/0x100 [ 86.251815][ T5298] __kmalloc_cache_noprof+0xa3/0x600 [ 86.251826][ T5298] ? drm_atomic_commit_alloc+0xa9/0x100 [ 86.251833][ T5298] ? drm_atomic_commit_alloc+0xa9/0x100 [ 86.251843][ T5298] drm_atomic_commit_alloc+0xa9/0x100 [ 86.251856][ T5298] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 86.251874][ T5298] ? __lock_acquire+0x6df/0x2e50 [ 86.251891][ T5298] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.251940][ T5298] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.251960][ T5298] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 86.251973][ T5298] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.251991][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.252018][ T5298] ? lock_acquire+0x115/0x350 [ 86.252036][ T5298] ? rcu_is_watching+0x16/0xb0 [ 86.252052][ T5298] ? process_scheduled_works+0x97a/0x1630 [ 86.252067][ T5298] process_scheduled_works+0xc3d/0x1630 [ 86.252116][ T5298] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.252138][ T5298] ? assign_work+0x3cf/0x5d0 [ 86.252158][ T5298] worker_thread+0xa47/0xfb0 [ 86.252184][ T5298] ? __kthread_parkme+0x71/0x1f0 [ 86.252210][ T5298] kthread+0x38b/0x480 [ 86.252223][ T5298] ? __pfx_worker_thread+0x10/0x10 [ 86.252237][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.252250][ T5298] ret_from_fork+0x514/0xb70 [ 86.252265][ T5298] ? __pfx_ret_from_fork+0x10/0x10 [ 86.252276][ T5298] ? __switch_to+0xc89/0x1420 [ 86.252288][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.252295][ T5298] ret_from_fork_asm+0x1a/0x30 [ 86.252313][ T5298] [ 86.252486][ T5298] ------------[ cut here ]------------ [ 86.252507][ T5298] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 86.252528][ T5298] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:5/5298 [ 86.440950][ T5298] Modules linked in: [ 86.442873][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.446901][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.450990][ T5298] Workqueue: events drm_fb_helper_damage_work [ 86.453466][ T5298] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.456263][ T5298] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 86.464120][ T5298] RSP: 0018:ffffc9000d68f898 EFLAGS: 00010246 [ 86.466652][ T5298] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 86.470006][ T5298] RDX: ffff88801f69a740 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0 [ 86.473375][ T5298] RBP: ffff88801d252008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 86.476628][ T5298] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f69a740 [ 86.480061][ T5298] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6b20d0 [ 86.483590][ T5298] FS: 0000000000000000(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000 [ 86.487822][ T5298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.490693][ T5298] CR2: 00007f2d3601c440 CR3: 000000003fdfe000 CR4: 0000000000352ef0 [ 86.495088][ T5298] Call Trace: [ 86.497163][ T5298] [ 86.498724][ T5298] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.501239][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.504016][ T5298] ? lock_acquire+0x115/0x350 [ 86.506275][ T5298] ? rcu_is_watching+0x16/0xb0 [ 86.508601][ T5298] ? process_scheduled_works+0x97a/0x1630 [ 86.510993][ T5298] process_scheduled_works+0xc3d/0x1630 [ 86.513330][ T5298] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.515809][ T5298] ? assign_work+0x3cf/0x5d0 [ 86.517839][ T5298] worker_thread+0xa47/0xfb0 [ 86.519739][ T5298] ? __kthread_parkme+0x71/0x1f0 [ 86.521685][ T5298] kthread+0x38b/0x480 [ 86.523459][ T5298] ? __pfx_worker_thread+0x10/0x10 [ 86.525615][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.527486][ T5298] ret_from_fork+0x514/0xb70 [ 86.529318][ T5298] ? __pfx_ret_from_fork+0x10/0x10 [ 86.531492][ T5298] ? __switch_to+0xc89/0x1420 [ 86.533613][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.535512][ T5298] ret_from_fork_asm+0x1a/0x30 [ 86.537665][ T5298] [ 86.539058][ T5298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.542039][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.545933][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.550165][ T5298] Workqueue: events drm_fb_helper_damage_work [ 86.552759][ T5298] Call Trace: [ 86.554208][ T5298] [ 86.555481][ T5298] vpanic+0x56d/0xa60 [ 86.557270][ T5298] ? __pfx__printk+0x10/0x10 [ 86.559283][ T5298] ? __pfx_vpanic+0x10/0x10 [ 86.561305][ T5298] ? is_bpf_text_address+0x292/0x2b0 [ 86.563587][ T5298] ? is_bpf_text_address+0x26/0x2b0 [ 86.565703][ T5298] panic+0xc5/0xd0 [ 86.567248][ T5298] ? __pfx_panic+0x10/0x10 [ 86.569119][ T5298] ? ret_from_fork_asm+0x1a/0x30 [ 86.571195][ T5298] __warn+0x315/0x4c0 [ 86.572863][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.575450][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.577958][ T5298] __report_bug+0x276/0x570 [ 86.579997][ T5298] ? drm_modeset_acquire_fini+0x27/0x180 [ 86.582456][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.585017][ T5298] ? __pfx___report_bug+0x10/0x10 [ 86.587047][ T5298] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 86.589355][ T5298] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.591570][ T5298] report_bug_entry+0x19b/0x290 [ 86.593413][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.595966][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 86.598433][ T5298] handle_bug+0xce/0x200 [ 86.600264][ T5298] exc_invalid_op+0x1a/0x50 [ 86.602260][ T5298] asm_exc_invalid_op+0x1a/0x20 [ 86.604487][ T5298] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.607553][ T5298] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa 21 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 86.615869][ T5298] RSP: 0018:ffffc9000d68f898 EFLAGS: 00010246 [ 86.618444][ T5298] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 86.621770][ T5298] RDX: ffff88801f69a740 RSI: ffffffff8c79ae40 RDI: ffffffff90861ab0 [ 86.625057][ T5298] RBP: ffff88801d252008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 86.628230][ T5298] R10: dffffc0000000000 R11: fffffbfff1dd6087 R12: ffff88801f69a740 [ 86.631495][ T5298] R13: dffffc0000000000 R14: ffffffff8c79ae40 R15: ffff88801f6b20d0 [ 86.634669][ T5298] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 86.637060][ T5298] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.639263][ T5298] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.641682][ T5298] ? lock_acquire+0x115/0x350 [ 86.643461][ T5298] ? rcu_is_watching+0x16/0xb0 [ 86.645346][ T5298] ? process_scheduled_works+0x97a/0x1630 [ 86.647643][ T5298] process_scheduled_works+0xc3d/0x1630 [ 86.649911][ T5298] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.652464][ T5298] ? assign_work+0x3cf/0x5d0 [ 86.654409][ T5298] worker_thread+0xa47/0xfb0 [ 86.656427][ T5298] ? __kthread_parkme+0x71/0x1f0 [ 86.658468][ T5298] kthread+0x38b/0x480 [ 86.660170][ T5298] ? __pfx_worker_thread+0x10/0x10 [ 86.662249][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.664204][ T5298] ret_from_fork+0x514/0xb70 [ 86.666044][ T5298] ? __pfx_ret_from_fork+0x10/0x10 [ 86.668160][ T5298] ? __switch_to+0xc89/0x1420 [ 86.670110][ T5298] ? __pfx_kthread+0x10/0x10 [ 86.672106][ T5298] ret_from_fork_asm+0x1a/0x30 [ 86.674195][ T5298] [ 86.675858][ T5298] Kernel Offset: disabled [ 86.677462][ T5298] Rebooting in 86400 seconds..