program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) [ 86.138839][ T5276] Bluetooth: hci0: command tx timeout [ 86.205018][ T5317] FAULT_INJECTION: forcing a failure. [ 86.205018][ T5317] name failslab, interval 1, probability 100, space 0, times 1 [ 86.211045][ T68] FAULT_INJECTION: forcing a failure. [ 86.211045][ T68] name failslab, interval 1, probability 100, space 0, times 1 [ 86.216620][ T5300] FAULT_INJECTION: forcing a failure. [ 86.216620][ T5300] name failslab, interval 1, probability 100, space 0, times 1 [ 86.222930][ T9] FAULT_INJECTION: forcing a failure. [ 86.222930][ T9] name failslab, interval 1, probability 100, space 0, times 1 [ 86.228928][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.228945][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.228951][ T5317] Call Trace: [ 86.228958][ T5317] [ 86.228964][ T5317] dump_stack_lvl+0xe8/0x150 [ 86.229026][ T5317] should_fail_ex+0x40c/0x560 [ 86.229075][ T5317] should_failslab+0xa8/0x100 [ 86.229089][ T5317] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 86.229104][ T5317] ? do_futex+0x3e7/0x4e0 [ 86.229118][ T5317] ? do_getname+0x2e/0x250 [ 86.229127][ T5317] ? do_getname+0x2e/0x250 [ 86.229138][ T5317] do_getname+0x2e/0x250 [ 86.229146][ T5317] ? getname_flags+0x11/0x20 [ 86.229156][ T5317] do_sys_openat2+0xcc/0x200 [ 86.229167][ T5317] ? __se_sys_futex+0x3a8/0x450 [ 86.229179][ T5317] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.229192][ T5317] ? rcu_is_watching+0x15/0xb0 [ 86.229208][ T5317] __x64_sys_openat+0x138/0x170 [ 86.229220][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.229230][ T5317] do_syscall_64+0x174/0x580 [ 86.229274][ T5317] ? trace_irq_disable+0x3b/0x140 [ 86.229287][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 86.229297][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.229306][ T5317] RIP: 0033:0x7f7b31d9e0d9 [ 86.229317][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.229325][ T5317] RSP: 002b:00007f7b32c59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.229336][ T5317] RAX: ffffffffffffffda RBX: 00007f7b32025fa0 RCX: 00007f7b31d9e0d9 [ 86.229343][ T5317] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 86.229350][ T5317] RBP: 00007f7b31e35024 R08: 0000000000000000 R09: 0000000000000000 [ 86.229357][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.229362][ T5317] R13: 00007f7b32026038 R14: 00007f7b32025fa0 R15: 00007ffe70bd6068 [ 86.229402][ T5317] [ 86.229466][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 86.229477][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.229483][ T68] Workqueue: ipv6_addrconf addrconf_dad_work [ 86.229499][ T68] Call Trace: [ 86.229503][ T68] [ 86.229507][ T68] dump_stack_lvl+0xe8/0x150 [ 86.229520][ T68] should_fail_ex+0x40c/0x560 [ 86.229536][ T68] should_failslab+0xa8/0x100 [ 86.229548][ T68] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 86.229557][ T68] ? local_lock_release+0x9c/0x160 [ 86.229571][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 86.229582][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 86.229596][ T68] __alloc_skb+0x1d7/0x7a0 [ 86.229611][ T68] ndisc_alloc_skb+0xa0/0x480 [ 86.229623][ T68] ndisc_ns_create+0x21c/0x650 [ 86.229636][ T68] ? __pfx_ndisc_ns_create+0x10/0x10 [ 86.229646][ T68] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 86.229657][ T68] ? __mod_timer+0xb53/0xed0 [ 86.229673][ T68] ndisc_send_ns+0xba/0x160 [ 86.229685][ T68] ? __pfx_ndisc_send_ns+0x10/0x10 [ 86.229694][ T68] ? addrconf_dad_work+0x9d4/0x15c0 [ 86.229707][ T68] ? __local_bh_enable_ip+0xd0/0x130 [ 86.229721][ T68] addrconf_dad_work+0xa8d/0x15c0 [ 86.229738][ T68] ? __pfx_addrconf_dad_work+0x10/0x10 [ 86.229751][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 86.229764][ T68] ? rcu_is_watching+0x15/0xb0 [ 86.229777][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 86.229787][ T68] process_scheduled_works+0xa8e/0x14e0 [ 86.229812][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.229825][ T68] ? assign_work+0x3cf/0x5d0 [ 86.229837][ T68] worker_thread+0xa47/0xfb0 [ 86.229855][ T68] ? __kthread_parkme+0x71/0x1f0 [ 86.229872][ T68] kthread+0x388/0x470 [ 86.229884][ T68] ? __pfx_worker_thread+0x10/0x10 [ 86.229893][ T68] ? __pfx_kthread+0x10/0x10 [ 86.229905][ T68] ret_from_fork+0x514/0xb70 [ 86.229921][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 86.229933][ T68] ? __switch_to+0xc89/0x1420 [ 86.229946][ T68] ? __pfx_kthread+0x10/0x10 [ 86.229959][ T68] ret_from_fork_asm+0x1a/0x30 [ 86.229981][ T68] [ 86.230305][ T5300] CPU: 0 UID: 0 PID: 5300 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 86.230317][ T5300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.230323][ T5300] Workqueue: events drm_fb_helper_damage_work [ 86.230337][ T5300] Call Trace: [ 86.230340][ T5300] [ 86.230344][ T5300] dump_stack_lvl+0xe8/0x150 [ 86.230375][ T5300] should_fail_ex+0x40c/0x560 [ 86.230399][ T5300] should_failslab+0xa8/0x100 [ 86.230411][ T5300] __kmalloc_cache_noprof+0xa8/0x660 [ 86.230423][ T5300] ? drm_atomic_commit_alloc+0xa9/0x100 [ 86.230437][ T5300] ? drm_atomic_commit_alloc+0xa9/0x100 [ 86.230454][ T5300] drm_atomic_commit_alloc+0xa9/0x100 [ 86.230469][ T5300] drm_atomic_helper_dirtyfb+0x129/0xfd0 [ 86.230484][ T5300] ? __lock_acquire+0x683/0x2cf0 [ 86.230501][ T5300] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.230521][ T5300] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.230538][ T5300] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310 [ 86.230554][ T5300] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.230572][ T5300] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.230595][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.230609][ T5300] ? rcu_is_watching+0x15/0xb0 [ 86.230624][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.230633][ T5300] process_scheduled_works+0xa8e/0x14e0 [ 86.230659][ T5300] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.230673][ T5300] ? assign_work+0x3cf/0x5d0 [ 86.230686][ T5300] worker_thread+0xa47/0xfb0 [ 86.230705][ T5300] ? __kthread_parkme+0x71/0x1f0 [ 86.230720][ T5300] kthread+0x388/0x470 [ 86.230733][ T5300] ? __pfx_worker_thread+0x10/0x10 [ 86.230742][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.230754][ T5300] ret_from_fork+0x514/0xb70 [ 86.230768][ T5300] ? __pfx_ret_from_fork+0x10/0x10 [ 86.230781][ T5300] ? __switch_to+0xc89/0x1420 [ 86.230793][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.230805][ T5300] ret_from_fork_asm+0x1a/0x30 [ 86.230828][ T5300] [ 86.233135][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 86.233151][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.233157][ T9] Workqueue: events nsim_fib_event_work [ 86.233173][ T9] Call Trace: [ 86.233177][ T9] [ 86.233181][ T9] dump_stack_lvl+0xe8/0x150 [ 86.233199][ T9] should_fail_ex+0x40c/0x560 [ 86.233218][ T9] should_failslab+0xa8/0x100 [ 86.233233][ T9] __kmalloc_cache_noprof+0xa8/0x660 [ 86.233243][ T9] ? stack_depot_save_flags+0x33/0x800 [ 86.233273][ T9] ? nsim_fib_event+0x4c8/0xa390 [ 86.233285][ T9] ? nsim_fib_event+0x4c8/0xa390 [ 86.233300][ T9] nsim_fib_event+0x4c8/0xa390 [ 86.233310][ T9] ? worker_thread+0xa47/0xfb0 [ 86.233321][ T9] ? kthread+0x388/0x470 [ 86.233333][ T9] ? ret_from_fork+0x514/0xb70 [ 86.233345][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 86.233372][ T9] ? __pfx_nsim_fib_event+0x10/0x10 [ 86.233409][ T9] ? kasan_quarantine_put+0xbb/0x1f0 [ 86.233429][ T9] nsim_fib_event_work+0x244/0x3b0 [ 86.233442][ T9] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 86.233455][ T9] ? rcu_is_watching+0x15/0xb0 [ 86.233471][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 86.233482][ T9] process_scheduled_works+0xa8e/0x14e0 [ 86.233508][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.233523][ T9] ? assign_work+0x3cf/0x5d0 [ 86.233537][ T9] worker_thread+0xa47/0xfb0 [ 86.233564][ T9] kthread+0x388/0x470 [ 86.233578][ T9] ? __pfx_worker_thread+0x10/0x10 [ 86.233587][ T9] ? __pfx_kthread+0x10/0x10 [ 86.233601][ T9] ret_from_fork+0x514/0xb70 [ 86.233617][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 86.233630][ T9] ? __switch_to+0xc89/0x1420 [ 86.233644][ T9] ? __pfx_kthread+0x10/0x10 [ 86.233658][ T9] ret_from_fork_asm+0x1a/0x30 [ 86.233682][ T9] [ 86.233771][ T5300] ------------[ cut here ]------------ [ 86.554919][ T5300] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12 [ 86.557985][ T5300] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:6/5300 [ 86.563091][ T5300] Modules linked in: [ 86.565575][ T5300] CPU: 0 UID: 0 PID: 5300 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 86.569413][ T5300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.573820][ T5300] Workqueue: events drm_fb_helper_damage_work [ 86.576719][ T5300] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.579716][ T5300] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 7a 5c a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 86.588846][ T5300] RSP: 0018:ffffc9000f41f8b8 EFLAGS: 00010246 [ 86.591512][ T5300] RAX: 1ffff11003a4f01a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 86.594969][ T5300] RDX: ffff88801d2275e0 RSI: ffffffff8c57c700 RDI: ffffffff90638bc0 [ 86.598045][ T5300] RBP: ffff88800087a008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 86.601116][ T5300] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801d2275e0 [ 86.604222][ T5300] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2780d0 [ 86.607407][ T5300] FS: 0000000000000000(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 [ 86.610891][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.613464][ T5300] CR2: 00007f8b32cc1700 CR3: 00000000121bd000 CR4: 0000000000352ef0 [ 86.616644][ T5300] Call Trace: [ 86.618193][ T5300] [ 86.619448][ T5300] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.621797][ T5300] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.624437][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.626826][ T5300] ? rcu_is_watching+0x15/0xb0 [ 86.628690][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.630947][ T5300] process_scheduled_works+0xa8e/0x14e0 [ 86.633138][ T5300] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.635507][ T5300] ? assign_work+0x3cf/0x5d0 [ 86.637447][ T5300] worker_thread+0xa47/0xfb0 [ 86.639240][ T5300] ? __kthread_parkme+0x71/0x1f0 [ 86.641252][ T5300] kthread+0x388/0x470 [ 86.642904][ T5300] ? __pfx_worker_thread+0x10/0x10 [ 86.644936][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.646696][ T5300] ret_from_fork+0x514/0xb70 [ 86.648520][ T5300] ? __pfx_ret_from_fork+0x10/0x10 [ 86.650746][ T5300] ? __switch_to+0xc89/0x1420 [ 86.652502][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.654451][ T5300] ret_from_fork_asm+0x1a/0x30 [ 86.656622][ T5300] [ 86.658037][ T5300] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.661035][ T5300] CPU: 0 UID: 0 PID: 5300 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 86.664784][ T5300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.669191][ T5300] Workqueue: events drm_fb_helper_damage_work [ 86.671768][ T5300] Call Trace: [ 86.673231][ T5300] [ 86.674551][ T5300] vpanic+0x56c/0xa60 [ 86.676325][ T5300] ? __pfx__printk+0x10/0x10 [ 86.678353][ T5300] ? __pfx_vpanic+0x10/0x10 [ 86.680004][ T5300] ? is_bpf_text_address+0x292/0x2b0 [ 86.682280][ T5300] ? is_bpf_text_address+0x26/0x2b0 [ 86.684415][ T5300] panic+0xc5/0xd0 [ 86.685862][ T5300] ? __pfx_panic+0x10/0x10 [ 86.687604][ T5300] ? ret_from_fork_asm+0x1a/0x30 [ 86.689502][ T5300] __warn+0x315/0x4c0 [ 86.691215][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.693944][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.696772][ T5300] __report_bug+0x276/0x570 [ 86.698766][ T5300] ? drm_modeset_acquire_fini+0x27/0x180 [ 86.701136][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310 [ 86.703815][ T5300] ? __pfx___report_bug+0x10/0x10 [ 86.705946][ T5300] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0 [ 86.708531][ T5300] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.710937][ T5300] report_bug_entry+0x19a/0x290 [ 86.712920][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.715583][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310 [ 86.718172][ T5300] handle_bug+0xce/0x200 [ 86.719979][ T5300] exc_invalid_op+0x1a/0x50 [ 86.721928][ T5300] asm_exc_invalid_op+0x1a/0x20 [ 86.724042][ T5300] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310 [ 86.726889][ T5300] Code: 35 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 7a 5c a4 fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f [ 86.734944][ T5300] RSP: 0018:ffffc9000f41f8b8 EFLAGS: 00010246 [ 86.737444][ T5300] RAX: 1ffff11003a4f01a RBX: 00000000fffffff4 RCX: 00000000fffffff4 [ 86.740686][ T5300] RDX: ffff88801d2275e0 RSI: ffffffff8c57c700 RDI: ffffffff90638bc0 [ 86.743995][ T5300] RBP: ffff88800087a008 R08: 0000000000000dc0 R09: 00000000ffffffff [ 86.747243][ T5300] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: ffff88801d2275e0 [ 86.750509][ T5300] R13: dffffc0000000000 R14: ffffffff8c57c700 R15: ffff88801d2780d0 [ 86.753899][ T5300] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310 [ 86.756503][ T5300] drm_fb_helper_damage_work+0x84c/0xf20 [ 86.758982][ T5300] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.761623][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.763887][ T5300] ? rcu_is_watching+0x15/0xb0 [ 86.766045][ T5300] ? process_scheduled_works+0xa20/0x14e0 [ 86.768574][ T5300] process_scheduled_works+0xa8e/0x14e0 [ 86.770998][ T5300] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.773679][ T5300] ? assign_work+0x3cf/0x5d0 [ 86.775717][ T5300] worker_thread+0xa47/0xfb0 [ 86.777638][ T5300] ? __kthread_parkme+0x71/0x1f0 [ 86.779731][ T5300] kthread+0x388/0x470 [ 86.781527][ T5300] ? __pfx_worker_thread+0x10/0x10 [ 86.783673][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.785649][ T5300] ret_from_fork+0x514/0xb70 [ 86.787706][ T5300] ? __pfx_ret_from_fork+0x10/0x10 [ 86.789889][ T5300] ? __switch_to+0xc89/0x1420 [ 86.792041][ T5300] ? __pfx_kthread+0x10/0x10 [ 86.794090][ T5300] ret_from_fork_asm+0x1a/0x30 [ 86.796248][ T5300] [ 86.798017][ T5300] Kernel Offset: disabled [ 86.799948][ T5300] Rebooting in 86400 seconds..