program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000006000000", @ANYRES32=r3, @ANYBLOB="08000000000000001c0012800b00010062726964676500000c0002800800050001"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000011000100000005000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800048004000580"], 0x2c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x1}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x58}}, 0x0) [ 111.762812][ T5275] Bluetooth: hci0: command tx timeout [ 111.966801][ T5313] FAULT_INJECTION: forcing a failure. [ 111.966801][ T5313] name failslab, interval 1, probability 100, space 0, times 1 [ 111.973431][ T4687] FAULT_INJECTION: forcing a failure. [ 111.973431][ T4687] name failslab, interval 1, probability 100, space 0, times 1 [ 111.980192][ T10] FAULT_INJECTION: forcing a failure. [ 111.980192][ T10] name failslab, interval 1, probability 100, space 0, times 1 [ 111.986284][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 111.986301][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.986309][ T10] Workqueue: events drm_fb_helper_damage_work [ 111.986414][ T10] Call Trace: [ 111.986422][ T10] [ 111.986429][ T10] dump_stack_lvl+0xe8/0x150 [ 111.986449][ T10] should_fail_ex+0x40c/0x560 [ 111.986473][ T10] should_failslab+0xa8/0x100 [ 111.986491][ T10] __kmalloc_cache_noprof+0xa8/0x660 [ 111.986506][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 111.986525][ T10] ? drm_atomic_commit_alloc+0xa9/0x100 [ 111.986547][ T10] drm_atomic_commit_alloc+0xa9/0x100 [ 111.986567][ T10] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 111.986586][ T10] ? __lock_acquire+0x683/0x2cf0 [ 111.986606][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 111.986633][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.986654][ T10] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 111.986674][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 111.986699][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 111.986730][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 111.986749][ T10] ? rcu_is_watching+0x15/0xb0 [ 111.986770][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 111.986783][ T10] process_scheduled_works+0xa8e/0x14e0 [ 111.986812][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.986829][ T10] ? assign_work+0x3cf/0x5d0 [ 111.986852][ T10] worker_thread+0xa47/0xfb0 [ 111.986883][ T10] kthread+0x388/0x470 [ 111.986900][ T10] ? __pfx_worker_thread+0x10/0x10 [ 111.986912][ T10] ? __pfx_kthread+0x10/0x10 [ 111.986929][ T10] ret_from_fork+0x514/0xb70 [ 111.986948][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 111.986965][ T10] ? __switch_to+0xc89/0x1420 [ 111.986981][ T10] ? __pfx_kthread+0x10/0x10 [ 111.986998][ T10] ret_from_fork_asm+0x1a/0x30 [ 111.987028][ T10] [ 111.987063][ T10] ------------[ cut here ]------------ [ 112.081798][ T10] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 112.085544][ T10] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:1/10 [ 112.091661][ T10] Modules linked in: [ 112.093934][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 112.097930][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.102297][ T10] Workqueue: events drm_fb_helper_damage_work [ 112.105188][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 112.108671][ T10] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9a 57 a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 112.117374][ T10] RSP: 0018:ffffc9000023f8b8 EFLAGS: 00010246 [ 112.120572][ T10] RAX: 1ffff11003a4901a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 112.124771][ T10] RDX: ffff88801fa4fda0 RSI: ffffffff8c57c700 RDI: ffffffff90638de0 [ 112.128355][ T10] RBP: ffff8880008b6008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 112.132053][ T10] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801fa4fda0 [ 112.136658][ T10] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2480d0 [ 112.140642][ T10] FS: 0000000000000000(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 112.144807][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.147828][ T10] CR2: 00007f9be6a1ba80 CR3: 0000000012691000 CR4: 0000000000352ef0 [ 112.152087][ T10] Call Trace: [ 112.154082][ T10] [ 112.155741][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 112.158361][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 112.161141][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 112.163966][ T10] ? rcu_is_watching+0x15/0xb0 [ 112.166151][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 112.169052][ T10] process_scheduled_works+0xa8e/0x14e0 [ 112.172402][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.175622][ T10] ? assign_work+0x3cf/0x5d0 [ 112.177831][ T10] worker_thread+0xa47/0xfb0 [ 112.179888][ T10] kthread+0x388/0x470 [ 112.181757][ T10] ? __pfx_worker_thread+0x10/0x10 [ 112.184356][ T10] ? __pfx_kthread+0x10/0x10 [ 112.186876][ T10] ret_from_fork+0x514/0xb70 [ 112.189447][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 112.191972][ T10] ? __switch_to+0xc89/0x1420 [ 112.194176][ T10] ? __pfx_kthread+0x10/0x10 [ 112.196257][ T10] ret_from_fork_asm+0x1a/0x30 [ 112.198519][ T10] [ 112.200129][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.204082][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 112.208393][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.212878][ T10] Workqueue: events drm_fb_helper_damage_work [ 112.215476][ T10] Call Trace: [ 112.217064][ T10] [ 112.218562][ T10] vpanic+0x56c/0xa60 [ 112.220831][ T10] ? __pfx__printk+0x10/0x10 [ 112.223310][ T10] ? __pfx_vpanic+0x10/0x10 [ 112.225494][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 112.227892][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 112.230196][ T10] panic+0xc5/0xd0 [ 112.231965][ T10] ? __pfx_panic+0x10/0x10 [ 112.234132][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 112.237203][ T10] __warn+0x315/0x4c0 [ 112.239381][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 112.242418][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 112.245108][ T10] __report_bug+0x276/0x570 [ 112.247094][ T10] ? drm_modeset_acquire_fini+0x27/0x180 [ 112.249475][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 112.252701][ T10] ? __pfx___report_bug+0x10/0x10 [ 112.255465][ T10] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 112.258796][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 112.261659][ T10] report_bug_entry+0x19a/0x290 [ 112.263881][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 112.266776][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 112.269598][ T10] handle_bug+0xce/0x200 [ 112.271682][ T10] exc_invalid_op+0x1a/0x50 [ 112.274041][ T10] asm_exc_invalid_op+0x1a/0x20 [ 112.276463][ T10] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 112.279588][ T10] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9a 57 a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 112.288850][ T10] RSP: 0018:ffffc9000023f8b8 EFLAGS: 00010246 [ 112.291914][ T10] RAX: 1ffff11003a4901a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 112.295342][ T10] RDX: ffff88801fa4fda0 RSI: ffffffff8c57c700 RDI: ffffffff90638de0 [ 112.298712][ T10] RBP: ffff8880008b6008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 112.302214][ T10] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801fa4fda0 [ 112.306401][ T10] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2480d0 [ 112.310353][ T10] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 112.313079][ T10] drm_fb_helper_damage_work+0x84c/0xf20 [ 112.315484][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 112.318370][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 112.321156][ T10] ? rcu_is_watching+0x15/0xb0 [ 112.323666][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 112.326344][ T10] process_scheduled_works+0xa8e/0x14e0 [ 112.328844][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.331485][ T10] ? assign_work+0x3cf/0x5d0 [ 112.333412][ T10] worker_thread+0xa47/0xfb0 [ 112.335606][ T10] kthread+0x388/0x470 [ 112.337878][ T10] ? __pfx_worker_thread+0x10/0x10 [ 112.340589][ T10] ? __pfx_kthread+0x10/0x10 [ 112.343089][ T10] ret_from_fork+0x514/0xb70 [ 112.345237][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 112.347468][ T10] ? __switch_to+0xc89/0x1420 [ 112.349506][ T10] ? __pfx_kthread+0x10/0x10 [ 112.351657][ T10] ret_from_fork_asm+0x1a/0x30 [ 112.353902][ T10] [ 112.356015][ T10] Kernel Offset: disabled [ 112.358196][ T10] Rebooting in 86400 seconds..