program: io_setup(0xa, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) write(r1, &(0x7f0000000100)='N', 0x1) write(r2, &(0x7f0000000100)='100', 0x3) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 102.631028][ T4641] Bluetooth: hci0: command tx timeout [ 102.717596][ T5321] FAULT_INJECTION: forcing a failure. [ 102.717596][ T5321] name failslab, interval 1, probability 100, space 0, times 1 [ 102.717658][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.717691][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.717733][ T5321] Call Trace: [ 102.717739][ T5321] [ 102.717772][ T5321] dump_stack_lvl+0xe8/0x150 [ 102.717885][ T5321] should_fail_ex+0x410/0x560 [ 102.717971][ T5321] should_failslab+0xa8/0x100 [ 102.718010][ T5321] ? io_submit_one+0x134/0x13d0 [ 102.718030][ T5321] kmem_cache_alloc_noprof+0xa1/0x600 [ 102.718048][ T5321] ? io_submit_one+0x134/0x13d0 [ 102.718068][ T5321] io_submit_one+0x134/0x13d0 [ 102.718088][ T5321] ? lockdep_hardirqs_on+0x7b/0x110 [ 102.718181][ T5321] ? irqentry_exit+0x218/0x910 [ 102.718201][ T5321] ? __pfx_io_submit_one+0x10/0x10 [ 102.718219][ T5321] ? lock_acquire+0x115/0x350 [ 102.718255][ T5321] ? __might_fault+0xaf/0x130 [ 102.718272][ T5321] __se_sys_io_submit+0x195/0x340 [ 102.718292][ T5321] ? __pfx___se_sys_io_submit+0x10/0x10 [ 102.718319][ T5321] do_syscall_64+0x166/0x520 [ 102.718338][ T5321] ? trace_irq_disable+0x3b/0x140 [ 102.718350][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718363][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 102.718377][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718389][ T5321] RIP: 0033:0x7f83a6b9e159 [ 102.718402][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.718420][ T5321] RSP: 002b:00007f83a79fdfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 102.718434][ T5321] RAX: ffffffffffffffda RBX: 00007f83a6e25fa0 RCX: 00007f83a6b9e159 [ 102.718443][ T5321] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 00007f83a79bc000 [ 102.718452][ T5321] RBP: 00007f83a6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 102.718460][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.718467][ T5321] R13: 00007f83a6e26038 R14: 00007f83a6e25fa0 R15: 00007ffe2d08fb48 [ 102.718486][ T5321] [ 102.718609][ T10] FAULT_INJECTION: forcing a failure. [ 102.718609][ T10] name failslab, interval 1, probability 100, space 0, times 1 [ 102.718646][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.718677][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.718685][ T10] Workqueue: events drm_fb_helper_damage_work [ 102.718710][ T10] Call Trace: [ 102.718715][ T10] [ 102.718720][ T10] dump_stack_lvl+0xe8/0x150 [ 102.718738][ T10] should_fail_ex+0x410/0x560 [ 102.718758][ T10] should_failslab+0xa8/0x100 [ 102.718772][ T10] __kmalloc_cache_noprof+0xa3/0x600 [ 102.718789][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 102.718801][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 102.718817][ T10] drm_atomic_commit_alloc+0xa9/0x100 [ 102.718831][ T10] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 102.718873][ T10] ? __lock_acquire+0x747/0x2de0 [ 102.718889][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 102.718919][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.718942][ T10] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 102.718962][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 102.718979][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 102.719007][ T10] ? lock_acquire+0x115/0x350 [ 102.719024][ T10] ? rcu_is_watching+0x16/0xb0 [ 102.719040][ T10] ? process_scheduled_works+0x97a/0x1630 [ 102.719056][ T10] process_scheduled_works+0xc3d/0x1630 [ 102.719089][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.719108][ T10] ? assign_work+0x3cf/0x5d0 [ 102.719126][ T10] worker_thread+0xa47/0xfb0 [ 102.719160][ T10] kthread+0x38b/0x480 [ 102.719172][ T10] ? __pfx_worker_thread+0x10/0x10 [ 102.719185][ T10] ? __pfx_kthread+0x10/0x10 [ 102.719197][ T10] ret_from_fork+0x514/0xb70 [ 102.719211][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 102.719222][ T10] ? __switch_to+0xc89/0x1420 [ 102.719239][ T10] ? __pfx_kthread+0x10/0x10 [ 102.719252][ T10] ret_from_fork_asm+0x1a/0x30 [ 102.719302][ T10] [ 102.719430][ T10] ------------[ cut here ]------------ [ 102.719456][ T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 102.719484][ T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10 [ 102.911238][ T10] Modules linked in: [ 102.913722][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.917875][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.922215][ T10] Workqueue: events drm_fb_helper_damage_work [ 102.924870][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 102.928020][ T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 5a 20 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 102.940359][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 102.943314][ T10] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 102.946804][ T10] RDX: ffff88801f49d960 RSI: ffffffff8c79be40 RDI: ffffffff90862170 [ 102.950269][ T10] RBP: ffff88801d294008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 102.953824][ T10] R10: dffffc0000000000 R11: fffffbfff1dd6137 R12: ffff88801f49d960 [ 102.957348][ T10] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0 [ 102.960882][ T10] FS: 0000000000000000(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 102.964583][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.967291][ T10] CR2: 00007f83a79bc000 CR3: 00000000132e2000 CR4: 0000000000352ef0 [ 102.970206][ T10] Call Trace: [ 102.971884][ T10] [ 102.973211][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 102.975678][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 102.978417][ T10] ? lock_acquire+0x115/0x350 [ 102.980589][ T10] ? rcu_is_watching+0x16/0xb0 [ 102.983947][ T10] ? process_scheduled_works+0x97a/0x1630 [ 102.986445][ T10] process_scheduled_works+0xc3d/0x1630 [ 102.988804][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.991357][ T10] ? assign_work+0x3cf/0x5d0 [ 102.994454][ T10] worker_thread+0xa47/0xfb0 [ 102.996449][ T10] kthread+0x38b/0x480 [ 102.998265][ T10] ? __pfx_worker_thread+0x10/0x10 [ 103.000592][ T10] ? __pfx_kthread+0x10/0x10 [ 103.002753][ T10] ret_from_fork+0x514/0xb70 [ 103.004853][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 103.007149][ T10] ? __switch_to+0xc89/0x1420 [ 103.009233][ T10] ? __pfx_kthread+0x10/0x10 [ 103.011290][ T10] ret_from_fork_asm+0x1a/0x30 [ 103.013602][ T10] [ 103.014926][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.017836][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 103.021592][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.026050][ T10] Workqueue: events drm_fb_helper_damage_work [ 103.028730][ T10] Call Trace: [ 103.030229][ T10] [ 103.031527][ T10] vpanic+0x56d/0xa60 [ 103.033336][ T10] ? __pfx__printk+0x10/0x10 [ 103.035715][ T10] ? __pfx_vpanic+0x10/0x10 [ 103.037922][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 103.040296][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 103.042633][ T10] panic+0xc5/0xd0 [ 103.044281][ T10] ? __pfx_panic+0x10/0x10 [ 103.046244][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 103.048477][ T10] __warn+0x315/0x4c0 [ 103.050487][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 103.053237][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 103.056080][ T10] __report_bug+0x276/0x570 [ 103.058159][ T10] ? drm_modeset_acquire_fini+0x27/0x180 [ 103.060689][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 103.063376][ T10] ? __pfx___report_bug+0x10/0x10 [ 103.065569][ T10] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 103.067986][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 103.070537][ T10] report_bug_entry+0x19b/0x290 [ 103.072549][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 103.075322][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 103.077961][ T10] handle_bug+0xce/0x200 [ 103.079785][ T10] exc_invalid_op+0x1a/0x50 [ 103.081706][ T10] asm_exc_invalid_op+0x1a/0x20 [ 103.083856][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 103.086862][ T10] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 5a 20 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 103.094951][ T10] RSP: 0018:ffffc9000023f898 EFLAGS: 00010246 [ 103.097515][ T10] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 103.100908][ T10] RDX: ffff88801f49d960 RSI: ffffffff8c79be40 RDI: ffffffff90862170 [ 103.104338][ T10] RBP: ffff88801d294008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 103.108368][ T10] R10: dffffc0000000000 R11: fffffbfff1dd6137 R12: ffff88801f49d960 [ 103.112262][ T10] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0 [ 103.115918][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 103.118834][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 103.121270][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 103.123861][ T10] ? lock_acquire+0x115/0x350 [ 103.125840][ T10] ? rcu_is_watching+0x16/0xb0 [ 103.127877][ T10] ? process_scheduled_works+0x97a/0x1630 [ 103.130364][ T10] process_scheduled_works+0xc3d/0x1630 [ 103.132802][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.135387][ T10] ? assign_work+0x3cf/0x5d0 [ 103.137396][ T10] worker_thread+0xa47/0xfb0 [ 103.139430][ T10] kthread+0x38b/0x480 [ 103.141186][ T10] ? __pfx_worker_thread+0x10/0x10 [ 103.143534][ T10] ? __pfx_kthread+0x10/0x10 [ 103.145596][ T10] ret_from_fork+0x514/0xb70 [ 103.147637][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 103.149829][ T10] ? __switch_to+0xc89/0x1420 [ 103.151826][ T10] ? __pfx_kthread+0x10/0x10 [ 103.153893][ T10] ret_from_fork_asm+0x1a/0x30 [ 103.155963][ T10] [ 103.157807][ T10] Kernel Offset: disabled [ 103.159737][ T10] Rebooting in 86400 seconds..