program: io_setup(0xa, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) write(r1, &(0x7f0000000040)='N', 0x1) write(r2, &(0x7f0000000100)='100', 0x3) io_submit(r0, 0x4, &(0x7f0000000640)=[&(0x7f0000000140)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000000340)="9bb961a3f81c95d5e9e95952e4ba22a66fe23c7eefc82f30dec2d7db147a2f0de1654c8dbd5664481430fe2a8d5023460bff593e52aaf1003a5ab5c863e39afe78d10350b3ed3d3a7854e1980e8f65ec6a380aa6c5776cab79a2199d1ebd4915e81ce113e54a89c8ad1e350a310016a59c887b29abb91360f72c67a03153c26c82a14e4cb528c6bfcac68b02ff5d78c4d92bbe9735d16b3abcb6eea19959d69de8062403e973d109f1469f708669f21cf7103d4788423ca4fada04623e25ad2674caab7300fed95c6a982baa7b6e1eccd9dce2754406", 0xd6, 0x0, 0x0, 0x1, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x1000, r1, &(0x7f0000000480)="6cefb8d75bf4a685", 0x8, 0x2, 0x0, 0x1, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000500)="ade675b4fddf860439e0cd2ef1198254cf780f990407808d7fcfa60c248104aacc9fe4f70475bf22f46b414e555ba95e398a1c299d44e5db64d2c13a7cde03663e979a4cce5ed5681c849aab79671ccd9a6d23bfc9606ee821d8c238ddd7486e81b0ba70db457a691b685a60b7439fffd5f32a029784c9e540bff7b585ef233f34360cfc6b72e9d24e538f107ffd811ffcfa15059831bae6e675a812ac071dfb19b95c6413d32eba78bb1a61ae2f606a4330580019fac6c138de3bfb7325db3c613457f4da180ba03f37b8b55f589be96666b3d136bbdc2b40405d2c81c4bd1bc89ebdf000eb23ba8ba5da42469c013912", 0xf1, 0x8, 0x0, 0x2, r1}]) [ 105.765201][ T5281] Bluetooth: hci0: command tx timeout [ 105.864140][ T5322] FAULT_INJECTION: forcing a failure. [ 105.864140][ T5322] name failslab, interval 1, probability 100, space 0, times 1 [ 105.864171][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 105.864185][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.864220][ T5322] Call Trace: [ 105.864239][ T5322] [ 105.864274][ T5322] dump_stack_lvl+0xe8/0x150 [ 105.864358][ T5322] should_fail_ex+0x410/0x560 [ 105.864424][ T5322] should_failslab+0xa8/0x100 [ 105.864449][ T5322] ? io_submit_one+0x134/0x13d0 [ 105.864490][ T5322] kmem_cache_alloc_noprof+0xa1/0x600 [ 105.864519][ T5322] ? io_submit_one+0x134/0x13d0 [ 105.864543][ T5322] io_submit_one+0x134/0x13d0 [ 105.864567][ T5322] ? lockdep_hardirqs_on+0x7b/0x110 [ 105.864616][ T5322] ? irqentry_exit+0x218/0x910 [ 105.864632][ T5322] ? __pfx_io_submit_one+0x10/0x10 [ 105.864650][ T5322] ? lock_acquire+0x115/0x350 [ 105.864682][ T5322] ? __might_fault+0xaf/0x130 [ 105.864715][ T5322] __se_sys_io_submit+0x195/0x340 [ 105.864734][ T5322] ? __pfx___se_sys_io_submit+0x10/0x10 [ 105.864761][ T5322] do_syscall_64+0x166/0x520 [ 105.864774][ T5322] ? trace_irq_disable+0x3b/0x140 [ 105.864796][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.864810][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 105.864827][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.864841][ T5322] RIP: 0033:0x7f6d1d59e159 [ 105.864854][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.864865][ T5322] RSP: 002b:00007f6d1e43afe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 105.864879][ T5322] RAX: ffffffffffffffda RBX: 00007f6d1d825fa0 RCX: 00007f6d1d59e159 [ 105.864890][ T5322] RDX: 0000200000000640 RSI: 0000000000000004 RDI: 00007f6d1e3f9000 [ 105.864899][ T5322] RBP: 00007f6d1d63503b R08: 0000000000000000 R09: 0000000000000000 [ 105.864914][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.864922][ T5322] R13: 00007f6d1d826038 R14: 00007f6d1d825fa0 R15: 00007ffdfbad1078 [ 105.864943][ T5322] [ 105.865066][ T5318] FAULT_INJECTION: forcing a failure. [ 105.865066][ T5318] name failslab, interval 1, probability 100, space 0, times 1 [ 105.865085][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 105.865098][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.865106][ T5318] Workqueue: events drm_fb_helper_damage_work [ 105.865132][ T5318] Call Trace: [ 105.865137][ T5318] [ 105.865143][ T5318] dump_stack_lvl+0xe8/0x150 [ 105.865162][ T5318] should_fail_ex+0x410/0x560 [ 105.865184][ T5318] should_failslab+0xa8/0x100 [ 105.865199][ T5318] __kmalloc_cache_noprof+0xa3/0x600 [ 105.865216][ T5318] ? drm_atomic_commit_alloc+0xa9/0x100 [ 105.865238][ T5318] ? drm_atomic_commit_alloc+0xa9/0x100 [ 105.865255][ T5318] drm_atomic_commit_alloc+0xa9/0x100 [ 105.865301][ T5318] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 105.865342][ T5318] ? __lock_acquire+0x747/0x2de0 [ 105.865360][ T5318] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 105.865388][ T5318] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.865412][ T5318] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 105.865434][ T5318] drm_fb_helper_damage_work+0x84c/0xf20 [ 105.865455][ T5318] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 105.865477][ T5318] ? lock_acquire+0x115/0x350 [ 105.865495][ T5318] ? rcu_is_watching+0x16/0xb0 [ 105.865519][ T5318] ? process_scheduled_works+0x97a/0x1630 [ 105.865548][ T5318] process_scheduled_works+0xc3d/0x1630 [ 105.865584][ T5318] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.865604][ T5318] ? assign_work+0x3cf/0x5d0 [ 105.865622][ T5318] worker_thread+0xa47/0xfb0 [ 105.865648][ T5318] ? __kthread_parkme+0x71/0x1f0 [ 105.865673][ T5318] kthread+0x38b/0x480 [ 105.865686][ T5318] ? __pfx_worker_thread+0x10/0x10 [ 105.865700][ T5318] ? __pfx_kthread+0x10/0x10 [ 105.865734][ T5318] ret_from_fork+0x514/0xb70 [ 105.865759][ T5318] ? __pfx_ret_from_fork+0x10/0x10 [ 105.865772][ T5318] ? __switch_to+0xc89/0x1420 [ 105.865790][ T5318] ? __pfx_kthread+0x10/0x10 [ 105.865802][ T5318] ret_from_fork_asm+0x1a/0x30 [ 105.865831][ T5318] [ 105.865958][ T5318] ------------[ cut here ]------------ [ 105.865966][ T5318] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 105.865973][ T5318] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:6/5318 [ 106.071608][ T5318] Modules linked in: [ 106.074265][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 106.078386][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.083067][ T5318] Workqueue: events drm_fb_helper_damage_work [ 106.086047][ T5318] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 106.090409][ T5318] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa eb 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 106.098483][ T5318] RSP: 0018:ffffc9000f63f898 EFLAGS: 00010246 [ 106.101155][ T5318] RAX: 1ffff11003f5641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 106.104882][ T5318] RDX: ffff88801f890960 RSI: ffffffff8c79c440 RDI: ffffffff90863010 [ 106.108470][ T5318] RBP: ffff888000a46008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 106.112225][ T5318] R10: dffffc0000000000 R11: fffffbfff1dd616f R12: ffff88801f890960 [ 106.115560][ T5318] R13: dffffc0000000000 R14: ffffffff8c79c440 R15: ffff88801fab20d0 [ 106.118973][ T5318] FS: 0000000000000000(0000) GS:ffff88808c2c7000(0000) knlGS:0000000000000000 [ 106.123138][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.126076][ T5318] CR2: 00007f6d1e3f9000 CR3: 0000000012e0a000 CR4: 0000000000352ef0 [ 106.129810][ T5318] Call Trace: [ 106.131272][ T5318] [ 106.132503][ T5318] drm_fb_helper_damage_work+0x84c/0xf20 [ 106.134859][ T5318] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 106.137574][ T5318] ? lock_acquire+0x115/0x350 [ 106.139913][ T5318] ? rcu_is_watching+0x16/0xb0 [ 106.142035][ T5318] ? process_scheduled_works+0x97a/0x1630 [ 106.144555][ T5318] process_scheduled_works+0xc3d/0x1630 [ 106.147049][ T5318] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.149827][ T5318] ? assign_work+0x3cf/0x5d0 [ 106.151972][ T5318] worker_thread+0xa47/0xfb0 [ 106.154124][ T5318] ? __kthread_parkme+0x71/0x1f0 [ 106.156212][ T5318] kthread+0x38b/0x480 [ 106.157923][ T5318] ? __pfx_worker_thread+0x10/0x10 [ 106.160180][ T5318] ? __pfx_kthread+0x10/0x10 [ 106.162076][ T5318] ret_from_fork+0x514/0xb70 [ 106.164260][ T5318] ? __pfx_ret_from_fork+0x10/0x10 [ 106.166870][ T5318] ? __switch_to+0xc89/0x1420 [ 106.168911][ T5318] ? __pfx_kthread+0x10/0x10 [ 106.171391][ T5318] ret_from_fork_asm+0x1a/0x30 [ 106.173514][ T5318] [ 106.174891][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.178003][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 106.181944][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.186293][ T5318] Workqueue: events drm_fb_helper_damage_work [ 106.189072][ T5318] Call Trace: [ 106.190674][ T5318] [ 106.192063][ T5318] vpanic+0x56d/0xa60 [ 106.193978][ T5318] ? __pfx__printk+0x10/0x10 [ 106.196190][ T5318] ? __pfx_vpanic+0x10/0x10 [ 106.198510][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 106.201326][ T5318] ? is_bpf_text_address+0x26/0x2b0 [ 106.203649][ T5318] panic+0xc5/0xd0 [ 106.205469][ T5318] ? __pfx_panic+0x10/0x10 [ 106.207478][ T5318] ? ret_from_fork_asm+0x1a/0x30 [ 106.209732][ T5318] __warn+0x315/0x4c0 [ 106.211592][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 106.214425][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 106.217196][ T5318] __report_bug+0x276/0x570 [ 106.219257][ T5318] ? drm_modeset_acquire_fini+0x27/0x180 [ 106.221922][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 106.224693][ T5318] ? __pfx___report_bug+0x10/0x10 [ 106.226992][ T5318] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 106.229875][ T5318] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 106.232766][ T5318] report_bug_entry+0x19b/0x290 [ 106.235335][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 106.238336][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 106.241279][ T5318] handle_bug+0xce/0x200 [ 106.243229][ T5318] exc_invalid_op+0x1a/0x50 [ 106.245337][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 106.247673][ T5318] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 106.250796][ T5318] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa eb 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 106.259478][ T5318] RSP: 0018:ffffc9000f63f898 EFLAGS: 00010246 [ 106.262315][ T5318] RAX: 1ffff11003f5641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 106.265794][ T5318] RDX: ffff88801f890960 RSI: ffffffff8c79c440 RDI: ffffffff90863010 [ 106.269241][ T5318] RBP: ffff888000a46008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 106.272806][ T5318] R10: dffffc0000000000 R11: fffffbfff1dd616f R12: ffff88801f890960 [ 106.276196][ T5318] R13: dffffc0000000000 R14: ffffffff8c79c440 R15: ffff88801fab20d0 [ 106.279681][ T5318] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 106.282342][ T5318] drm_fb_helper_damage_work+0x84c/0xf20 [ 106.284692][ T5318] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 106.287311][ T5318] ? lock_acquire+0x115/0x350 [ 106.289486][ T5318] ? rcu_is_watching+0x16/0xb0 [ 106.291301][ T5318] ? process_scheduled_works+0x97a/0x1630 [ 106.293621][ T5318] process_scheduled_works+0xc3d/0x1630 [ 106.295979][ T5318] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.298527][ T5318] ? assign_work+0x3cf/0x5d0 [ 106.300345][ T5318] worker_thread+0xa47/0xfb0 [ 106.302175][ T5318] ? __kthread_parkme+0x71/0x1f0 [ 106.304186][ T5318] kthread+0x38b/0x480 [ 106.305912][ T5318] ? __pfx_worker_thread+0x10/0x10 [ 106.308015][ T5318] ? __pfx_kthread+0x10/0x10 [ 106.310036][ T5318] ret_from_fork+0x514/0xb70 [ 106.312206][ T5318] ? __pfx_ret_from_fork+0x10/0x10 [ 106.314615][ T5318] ? __switch_to+0xc89/0x1420 [ 106.316861][ T5318] ? __pfx_kthread+0x10/0x10 [ 106.319061][ T5318] ret_from_fork_asm+0x1a/0x30 [ 106.321301][ T5318] [ 106.323152][ T5318] Kernel Offset: disabled [ 106.325302][ T5318] Rebooting in 86400 seconds..