program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c000280080001401a9600020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1001) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, &(0x7f0000000100)='N', 0x1) write(r1, &(0x7f0000000100)='1', 0x1) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xdd000) [ 95.966594][ T4644] Bluetooth: hci0: command tx timeout [ 96.198951][ T5303] FAULT_INJECTION: forcing a failure. [ 96.198951][ T5303] name failslab, interval 1, probability 1, space 0, times 1 [ 96.198994][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.199007][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.199014][ T5303] Workqueue: events drm_fb_helper_damage_work [ 96.199106][ T5303] Call Trace: [ 96.199111][ T5303] [ 96.199118][ T5303] dump_stack_lvl+0xe8/0x150 [ 96.199138][ T5303] should_fail_ex+0x410/0x560 [ 96.199158][ T5303] should_failslab+0xa8/0x100 [ 96.199172][ T5303] __kmalloc_cache_noprof+0xa3/0x600 [ 96.199189][ T5303] ? drm_atomic_helper_setup_commit+0x5fc/0x1a30 [ 96.199202][ T5303] ? drm_atomic_helper_setup_commit+0x5fc/0x1a30 [ 96.199220][ T5303] drm_atomic_helper_setup_commit+0x5fc/0x1a30 [ 96.199241][ T5303] drm_atomic_helper_commit+0x6a/0xb10 [ 96.199257][ T5303] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 96.199269][ T5303] drm_atomic_commit+0x24e/0x2b0 [ 96.199285][ T5303] ? __pfx_drm_atomic_commit+0x10/0x10 [ 96.199298][ T5303] ? __pfx___drm_printfn_info+0x10/0x10 [ 96.199320][ T5303] ? drm_modeset_unlock+0x38/0x100 [ 96.199336][ T5303] drm_atomic_helper_dirtyfb+0xe2f/0xfd0 [ 96.199378][ T5303] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 96.199407][ T5303] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.199430][ T5303] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 96.199450][ T5303] drm_fb_helper_damage_work+0x84c/0xf20 [ 96.199467][ T5303] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 96.199497][ T5303] ? lock_acquire+0x115/0x350 [ 96.199513][ T5303] ? rcu_is_watching+0x16/0xb0 [ 96.199528][ T5303] ? process_scheduled_works+0x97a/0x1630 [ 96.199543][ T5303] process_scheduled_works+0xc3d/0x1630 [ 96.199578][ T5303] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.199601][ T5303] ? assign_work+0x3cf/0x5d0 [ 96.199619][ T5303] worker_thread+0xa47/0xfb0 [ 96.199643][ T5303] ? __kthread_parkme+0x71/0x1f0 [ 96.199665][ T5303] kthread+0x38b/0x480 [ 96.199677][ T5303] ? __pfx_worker_thread+0x10/0x10 [ 96.199691][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.199703][ T5303] ret_from_fork+0x514/0xb70 [ 96.199717][ T5303] ? __pfx_ret_from_fork+0x10/0x10 [ 96.199728][ T5303] ? __switch_to+0xc89/0x1420 [ 96.199746][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.199758][ T5303] ret_from_fork_asm+0x1a/0x30 [ 96.199787][ T5303] [ 96.205746][ T5303] ------------[ cut here ]------------ [ 96.205757][ T5303] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 96.205775][ T5303] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:5/5303 [ 96.311875][ T5303] Modules linked in: [ 96.313595][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.317185][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.321147][ T5303] Workqueue: events drm_fb_helper_damage_work [ 96.323388][ T5303] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 96.326242][ T5303] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa eb 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 96.334676][ T5303] RSP: 0018:ffffc9000ef3f898 EFLAGS: 00010246 [ 96.337376][ T5303] RAX: 1ffff11003ed241a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 96.340942][ T5303] RDX: ffff88801f687720 RSI: ffffffff8c79c440 RDI: ffffffff90863010 [ 96.344514][ T5303] RBP: ffff88801d266008 R08: ffffc9000ef3f5e7 R09: 1ffff92001de7ebc [ 96.348417][ T5303] R10: dffffc0000000000 R11: fffff52001de7ebd R12: ffff88801f687720 [ 96.352084][ T5303] R13: dffffc0000000000 R14: ffffffff8c79c440 R15: ffff88801f6920d0 [ 96.355612][ T5303] FS: 0000000000000000(0000) GS:ffff88808c2c7000(0000) knlGS:0000000000000000 [ 96.360166][ T5303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.363746][ T5303] CR2: 0000558a1be584b0 CR3: 0000000043e30000 CR4: 0000000000352ef0 [ 96.366989][ T5303] Call Trace: [ 96.368264][ T5303] [ 96.369467][ T5303] drm_fb_helper_damage_work+0x84c/0xf20 [ 96.371627][ T5303] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 96.374023][ T5303] ? lock_acquire+0x115/0x350 [ 96.375887][ T5303] ? rcu_is_watching+0x16/0xb0 [ 96.377907][ T5303] ? process_scheduled_works+0x97a/0x1630 [ 96.380086][ T5303] process_scheduled_works+0xc3d/0x1630 [ 96.382215][ T5303] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.384423][ T5303] ? assign_work+0x3cf/0x5d0 [ 96.386214][ T5303] worker_thread+0xa47/0xfb0 [ 96.388399][ T5303] ? __kthread_parkme+0x71/0x1f0 [ 96.390461][ T5303] kthread+0x38b/0x480 [ 96.392389][ T5303] ? __pfx_worker_thread+0x10/0x10 [ 96.394446][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.396344][ T5303] ret_from_fork+0x514/0xb70 [ 96.398272][ T5303] ? __pfx_ret_from_fork+0x10/0x10 [ 96.400386][ T5303] ? __switch_to+0xc89/0x1420 [ 96.402431][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.404391][ T5303] ret_from_fork_asm+0x1a/0x30 [ 96.406444][ T5303] [ 96.407688][ T5303] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.410730][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.414424][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.418178][ T5303] Workqueue: events drm_fb_helper_damage_work [ 96.420726][ T5303] Call Trace: [ 96.422850][ T5303] [ 96.424027][ T5303] vpanic+0x56d/0xa60 [ 96.425749][ T5303] ? __pfx__printk+0x10/0x10 [ 96.427723][ T5303] ? __pfx_vpanic+0x10/0x10 [ 96.429616][ T5303] ? is_bpf_text_address+0x292/0x2b0 [ 96.431700][ T5303] ? is_bpf_text_address+0x26/0x2b0 [ 96.433750][ T5303] panic+0xc5/0xd0 [ 96.435190][ T5303] ? __pfx_panic+0x10/0x10 [ 96.437055][ T5303] ? ret_from_fork_asm+0x1a/0x30 [ 96.439100][ T5303] __warn+0x315/0x4c0 [ 96.440693][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 96.443267][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 96.445863][ T5303] __report_bug+0x276/0x570 [ 96.447853][ T5303] ? drm_modeset_acquire_fini+0x27/0x180 [ 96.450189][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 96.452836][ T5303] ? __pfx___report_bug+0x10/0x10 [ 96.454871][ T5303] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 96.457327][ T5303] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 96.459935][ T5303] report_bug_entry+0x19b/0x290 [ 96.461936][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 96.464556][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 96.467138][ T5303] handle_bug+0xce/0x200 [ 96.468864][ T5303] exc_invalid_op+0x1a/0x50 [ 96.470811][ T5303] asm_exc_invalid_op+0x1a/0x20 [ 96.472862][ T5303] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 96.475666][ T5303] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 fa eb 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 96.483024][ T5303] RSP: 0018:ffffc9000ef3f898 EFLAGS: 00010246 [ 96.485377][ T5303] RAX: 1ffff11003ed241a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 96.488527][ T5303] RDX: ffff88801f687720 RSI: ffffffff8c79c440 RDI: ffffffff90863010 [ 96.491716][ T5303] RBP: ffff88801d266008 R08: ffffc9000ef3f5e7 R09: 1ffff92001de7ebc [ 96.494988][ T5303] R10: dffffc0000000000 R11: fffff52001de7ebd R12: ffff88801f687720 [ 96.498209][ T5303] R13: dffffc0000000000 R14: ffffffff8c79c440 R15: ffff88801f6920d0 [ 96.501689][ T5303] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 96.504510][ T5303] drm_fb_helper_damage_work+0x84c/0xf20 [ 96.507038][ T5303] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 96.509803][ T5303] ? lock_acquire+0x115/0x350 [ 96.511846][ T5303] ? rcu_is_watching+0x16/0xb0 [ 96.513937][ T5303] ? process_scheduled_works+0x97a/0x1630 [ 96.516311][ T5303] process_scheduled_works+0xc3d/0x1630 [ 96.518688][ T5303] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.521255][ T5303] ? assign_work+0x3cf/0x5d0 [ 96.523192][ T5303] worker_thread+0xa47/0xfb0 [ 96.525128][ T5303] ? __kthread_parkme+0x71/0x1f0 [ 96.527150][ T5303] kthread+0x38b/0x480 [ 96.528840][ T5303] ? __pfx_worker_thread+0x10/0x10 [ 96.530937][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.532870][ T5303] ret_from_fork+0x514/0xb70 [ 96.534932][ T5303] ? __pfx_ret_from_fork+0x10/0x10 [ 96.537311][ T5303] ? __switch_to+0xc89/0x1420 [ 96.539459][ T5303] ? __pfx_kthread+0x10/0x10 [ 96.541484][ T5303] ret_from_fork_asm+0x1a/0x30 [ 96.543578][ T5303] [ 96.545393][ T5303] Kernel Offset: disabled [ 96.547266][ T5303] Rebooting in 86400 seconds..