program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N', 0x1) write(r1, &(0x7f0000000100)='100', 0x3) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x1000, 0x0) [ 99.592421][ T5291] Bluetooth: hci0: command tx timeout [ 99.649615][ T5326] FAULT_INJECTION: forcing a failure. [ 99.649615][ T5326] name failslab, interval 1, probability 100, space 0, times 1 [ 99.649665][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 99.649679][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.649699][ T5326] Call Trace: [ 99.649738][ T5326] [ 99.649770][ T5326] dump_stack_lvl+0xe8/0x150 [ 99.649927][ T5326] should_fail_ex+0x410/0x560 [ 99.650040][ T5326] should_failslab+0xa8/0x100 [ 99.650065][ T5326] __kvmalloc_node_noprof+0x176/0x820 [ 99.650081][ T5326] ? vmemdup_user+0x2b/0xd0 [ 99.650118][ T5326] ? vmemdup_user+0x2b/0xd0 [ 99.650132][ T5326] vmemdup_user+0x2b/0xd0 [ 99.650145][ T5326] path_setxattrat+0x2d0/0x450 [ 99.650163][ T5326] ? __pfx_path_setxattrat+0x10/0x10 [ 99.650173][ T5326] ? do_futex+0x3e7/0x4e0 [ 99.650225][ T5326] ? rcu_is_watching+0x16/0xb0 [ 99.650244][ T5326] __x64_sys_lsetxattr+0xbf/0xe0 [ 99.650262][ T5326] do_syscall_64+0x166/0x520 [ 99.650361][ T5326] ? trace_irq_disable+0x3b/0x140 [ 99.650374][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.650387][ T5326] ? clear_bhb_loop+0x70/0xc0 [ 99.650403][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.650414][ T5326] RIP: 0033:0x7fd691d9e159 [ 99.650436][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.650448][ T5326] RSP: 002b:00007fd692d02fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 99.650476][ T5326] RAX: ffffffffffffffda RBX: 00007fd692025fa0 RCX: 00007fd691d9e159 [ 99.650485][ T5326] RDX: 0000200000000340 RSI: 00002000000001c0 RDI: 0000000000000000 [ 99.650493][ T5326] RBP: 00007fd691e3506b R08: 0000000000000002 R09: 0000000000000000 [ 99.650500][ T5326] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 99.650507][ T5326] R13: 00007fd692026038 R14: 00007fd692025fa0 R15: 00007ffee8f1f588 [ 99.650528][ T5326] [ 99.650635][ T10] FAULT_INJECTION: forcing a failure. [ 99.650635][ T10] name failslab, interval 1, probability 100, space 0, times 1 [ 99.650653][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 99.650664][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.650672][ T10] Workqueue: events drm_fb_helper_damage_work [ 99.650720][ T10] Call Trace: [ 99.650725][ T10] [ 99.650730][ T10] dump_stack_lvl+0xe8/0x150 [ 99.650749][ T10] should_fail_ex+0x410/0x560 [ 99.650765][ T10] should_failslab+0xa8/0x100 [ 99.650779][ T10] __kmalloc_cache_noprof+0xa3/0x600 [ 99.650797][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 99.650847][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 99.650865][ T10] drm_atomic_commit_alloc+0xa9/0x100 [ 99.650920][ T10] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 99.650985][ T10] ? __lock_acquire+0x747/0x2de0 [ 99.651003][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 99.651031][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.651054][ T10] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 99.651088][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 99.651131][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 99.651152][ T10] ? lock_acquire+0x115/0x350 [ 99.651170][ T10] ? rcu_is_watching+0x16/0xb0 [ 99.651185][ T10] ? process_scheduled_works+0x97a/0x1630 [ 99.651202][ T10] process_scheduled_works+0xc3d/0x1630 [ 99.651234][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.651253][ T10] ? assign_work+0x3cf/0x5d0 [ 99.651271][ T10] worker_thread+0xa47/0xfb0 [ 99.651321][ T10] kthread+0x38b/0x480 [ 99.651336][ T10] ? __pfx_worker_thread+0x10/0x10 [ 99.651350][ T10] ? __pfx_kthread+0x10/0x10 [ 99.651362][ T10] ret_from_fork+0x514/0xb70 [ 99.651376][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 99.651387][ T10] ? __switch_to+0xc89/0x1420 [ 99.651405][ T10] ? __pfx_kthread+0x10/0x10 [ 99.651417][ T10] ret_from_fork_asm+0x1a/0x30 [ 99.651444][ T10] [ 99.651580][ T10] ------------[ cut here ]------------ [ 99.651586][ T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 99.651607][ T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10 [ 99.837828][ T10] Modules linked in: [ 99.840486][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 99.844543][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.849137][ T10] Workqueue: events drm_fb_helper_damage_work [ 99.851928][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 99.854995][ T10] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ba 60 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 99.863569][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 99.866355][ T10] RAX: 1ffff11003f1341a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 99.870316][ T10] RDX: ffff88801f1daea0 RSI: ffffffff8c79d740 RDI: ffffffff908667f0 [ 99.873972][ T10] RBP: ffff888000c20008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 99.877830][ T10] R10: dffffc0000000000 R11: fffffbfff1dd61bf R12: ffff88801f1daea0 [ 99.883682][ T10] R13: dffffc0000000000 R14: ffffffff8c79d740 R15: ffff88801f89a0d0 [ 99.888104][ T10] FS: 0000000000000000(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 99.892128][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.894966][ T10] CR2: 00007fd691f53f80 CR3: 0000000042635000 CR4: 0000000000352ef0 [ 99.898569][ T10] Call Trace: [ 99.900062][ T10] [ 99.901431][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 99.908195][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 99.910769][ T10] ? lock_acquire+0x115/0x350 [ 99.912850][ T10] ? rcu_is_watching+0x16/0xb0 [ 99.915286][ T10] ? process_scheduled_works+0x97a/0x1630 [ 99.917822][ T10] process_scheduled_works+0xc3d/0x1630 [ 99.920354][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.922998][ T10] ? assign_work+0x3cf/0x5d0 [ 99.925133][ T10] worker_thread+0xa47/0xfb0 [ 99.927246][ T10] kthread+0x38b/0x480 [ 99.929101][ T10] ? __pfx_worker_thread+0x10/0x10 [ 99.931435][ T10] ? __pfx_kthread+0x10/0x10 [ 99.933491][ T10] ret_from_fork+0x514/0xb70 [ 99.936011][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 99.938321][ T10] ? __switch_to+0xc89/0x1420 [ 99.940557][ T10] ? __pfx_kthread+0x10/0x10 [ 99.942634][ T10] ret_from_fork_asm+0x1a/0x30 [ 99.944849][ T10] [ 99.946509][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.949557][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 99.953301][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.957399][ T10] Workqueue: events drm_fb_helper_damage_work [ 99.959988][ T10] Call Trace: [ 99.961417][ T10] [ 99.962627][ T10] vpanic+0x56d/0xa60 [ 99.964356][ T10] ? __pfx__printk+0x10/0x10 [ 99.966332][ T10] ? __pfx_vpanic+0x10/0x10 [ 99.968315][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 99.970578][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 99.972963][ T10] panic+0xc5/0xd0 [ 99.974647][ T10] ? __pfx_panic+0x10/0x10 [ 99.976527][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 99.978572][ T10] __warn+0x315/0x4c0 [ 99.980200][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 99.982809][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 99.985404][ T10] __report_bug+0x276/0x570 [ 99.987542][ T10] ? drm_modeset_acquire_fini+0x27/0x180 [ 99.990031][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 99.992978][ T10] ? __pfx___report_bug+0x10/0x10 [ 99.995152][ T10] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 99.997948][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 100.000777][ T10] report_bug_entry+0x19b/0x290 [ 100.002945][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 100.005671][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 100.008424][ T10] handle_bug+0xce/0x200 [ 100.010326][ T10] exc_invalid_op+0x1a/0x50 [ 100.012349][ T10] asm_exc_invalid_op+0x1a/0x20 [ 100.014534][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 100.017535][ T10] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ba 60 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 100.025986][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 100.028712][ T10] RAX: 1ffff11003f1341a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 100.032139][ T10] RDX: ffff88801f1daea0 RSI: ffffffff8c79d740 RDI: ffffffff908667f0 [ 100.035529][ T10] RBP: ffff888000c20008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 100.038973][ T10] R10: dffffc0000000000 R11: fffffbfff1dd61bf R12: ffff88801f1daea0 [ 100.042476][ T10] R13: dffffc0000000000 R14: ffffffff8c79d740 R15: ffff88801f89a0d0 [ 100.046016][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 100.048919][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 100.051500][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 100.054046][ T10] ? lock_acquire+0x115/0x350 [ 100.056031][ T10] ? rcu_is_watching+0x16/0xb0 [ 100.057928][ T10] ? process_scheduled_works+0x97a/0x1630 [ 100.060167][ T10] process_scheduled_works+0xc3d/0x1630 [ 100.062427][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.064784][ T10] ? assign_work+0x3cf/0x5d0 [ 100.066757][ T10] worker_thread+0xa47/0xfb0 [ 100.068874][ T10] kthread+0x38b/0x480 [ 100.070694][ T10] ? __pfx_worker_thread+0x10/0x10 [ 100.072890][ T10] ? __pfx_kthread+0x10/0x10 [ 100.074915][ T10] ret_from_fork+0x514/0xb70 [ 100.076957][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 100.079102][ T10] ? __switch_to+0xc89/0x1420 [ 100.081166][ T10] ? __pfx_kthread+0x10/0x10 [ 100.083101][ T10] ret_from_fork_asm+0x1a/0x30 [ 100.085220][ T10] [ 100.090936][ T10] Kernel Offset: disabled [ 100.092817][ T10] Rebooting in 86400 seconds..