program: syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) [ 85.154332][ T4681] Bluetooth: hci0: command tx timeout [ 85.258960][ T5337] FAULT_INJECTION: forcing a failure. [ 85.258960][ T5337] name failslab, interval 1, probability 0, space 0, times 1 [ 85.289211][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.289232][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.289240][ T5337] Call Trace: [ 85.289246][ T5337] [ 85.289251][ T5337] dump_stack_lvl+0xe8/0x150 [ 85.289346][ T5337] should_fail_ex+0x412/0x560 [ 85.289404][ T5337] should_failslab+0xa8/0x100 [ 85.289423][ T5337] __kmalloc_cache_noprof+0x88/0x660 [ 85.289437][ T5337] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 85.289459][ T5337] __io_uring_add_tctx_node+0x199/0x5f0 [ 85.289480][ T5337] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 85.289498][ T5337] ? __anon_inode_getfile+0x169/0x200 [ 85.289515][ T5337] io_uring_create+0x5ac/0x9a0 [ 85.289530][ T5337] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 85.289553][ T5337] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 85.289581][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 85.289600][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.289613][ T5337] do_syscall_64+0x15f/0xf80 [ 85.289700][ T5337] ? trace_irq_disable+0x3b/0x140 [ 85.289717][ T5337] ? clear_bhb_loop+0x40/0x90 [ 85.289733][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.289746][ T5337] RIP: 0033:0x7fdc5639cdd9 [ 85.289760][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.289769][ T5337] RSP: 002b:00007fdc57201f78 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 85.289785][ T5337] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fdc5639cdd9 [ 85.289793][ T5337] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000020 [ 85.289800][ T5337] RBP: 00007fdc57202050 R08: 0000000000000000 R09: 0000000000000101 [ 85.289806][ T5337] R10: 0000200000000140 R11: 0000000000000202 R12: 0000200000000100 [ 85.289813][ T5337] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffd9692d9c8 [ 85.289830][ T5337] [ 85.295099][ T5337] ------------[ cut here ]------------ [ 85.396473][ T5337] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 85.396491][ T5337] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0xa36/0xa70, CPU#0: syz.0.0/5337 [ 85.403352][ T5337] Modules linked in: [ 85.405151][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.409210][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.413782][ T5337] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 85.416735][ T5337] Code: fd 65 48 8b 05 4b de 93 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fb 3e 18 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 ed 3e 18 fd 4c 89 f7 be 03 00 00 00 e8 [ 85.426518][ T5337] RSP: 0000:ffffc9000fcbfbb0 EFLAGS: 00010293 [ 85.429376][ T5337] RAX: ffffffff84ada1f5 RBX: 0000000000000000 RCX: ffff888040bf0000 [ 85.433066][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.437447][ T5337] RBP: ffffc9000fcbfd08 R08: ffff8880127e9007 R09: 1ffff110024fd200 [ 85.441969][ T5337] R10: dffffc0000000000 R11: ffffed10024fd201 R12: 00000000fffffff4 [ 85.445547][ T5337] R13: ffff8880127e9000 R14: ffff888040bf0968 R15: 1ffff1100817e12d [ 85.449035][ T5337] FS: 00007fdc572026c0(0000) GS:ffff88808c808000(0000) knlGS:0000000000000000 [ 85.452882][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.456067][ T5337] CR2: 00007ff94c4f6f30 CR3: 00000000126ca000 CR4: 0000000000352ef0 [ 85.460633][ T5337] Call Trace: [ 85.462131][ T5337] [ 85.463520][ T5337] ? __kmalloc_cache_noprof+0x31c/0x660 [ 85.465958][ T5337] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 85.468373][ T5337] __io_uring_add_tctx_node+0x402/0x5f0 [ 85.470995][ T5337] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 85.474874][ T5337] ? __anon_inode_getfile+0x169/0x200 [ 85.478388][ T5337] io_uring_create+0x5ac/0x9a0 [ 85.480720][ T5337] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 85.483374][ T5337] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 85.486091][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 85.488332][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.491044][ T5337] do_syscall_64+0x15f/0xf80 [ 85.493227][ T5337] ? trace_irq_disable+0x3b/0x140 [ 85.495689][ T5337] ? clear_bhb_loop+0x40/0x90 [ 85.498825][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.502595][ T5337] RIP: 0033:0x7fdc5639cdd9 [ 85.504832][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.513287][ T5337] RSP: 002b:00007fdc57201f78 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 85.516931][ T5337] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fdc5639cdd9 [ 85.520902][ T5337] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000020 [ 85.524966][ T5337] RBP: 00007fdc57202050 R08: 0000000000000000 R09: 0000000000000101 [ 85.529287][ T5337] R10: 0000200000000140 R11: 0000000000000202 R12: 0000200000000100 [ 85.532700][ T5337] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffd9692d9c8 [ 85.536275][ T5337] [ 85.537942][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.541256][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.545919][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.550628][ T5337] Call Trace: [ 85.552159][ T5337] [ 85.553506][ T5337] vpanic+0x56c/0xa60 [ 85.555257][ T5337] ? __pfx__printk+0x10/0x10 [ 85.557410][ T5337] ? __pfx_vpanic+0x10/0x10 [ 85.559690][ T5337] ? is_bpf_text_address+0x292/0x2b0 [ 85.562171][ T5337] ? is_bpf_text_address+0x26/0x2b0 [ 85.564720][ T5337] panic+0xc5/0xd0 [ 85.566197][ T5337] ? __pfx_panic+0x10/0x10 [ 85.567973][ T5337] __warn+0x315/0x4c0 [ 85.569715][ T5337] ? io_wq_put_and_exit+0xa36/0xa70 [ 85.572326][ T5337] ? io_wq_put_and_exit+0xa36/0xa70 [ 85.574839][ T5337] __report_bug+0x29a/0x540 [ 85.577102][ T5337] ? io_wq_put_and_exit+0xa36/0xa70 [ 85.579592][ T5337] ? __pfx___report_bug+0x10/0x10 [ 85.581651][ T5337] ? irqentry_exit+0x218/0x730 [ 85.583593][ T5337] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.585765][ T5337] ? irqentry_exit+0x218/0x730 [ 85.587778][ T5337] ? trace_irq_disable+0x3b/0x140 [ 85.589944][ T5337] ? io_wq_put_and_exit+0xa36/0xa70 [ 85.592310][ T5337] report_bug+0x16a/0x220 [ 85.595239][ T5337] ? io_wq_put_and_exit+0xa36/0xa70 [ 85.598285][ T5337] ? io_wq_put_and_exit+0xa38/0xa70 [ 85.600566][ T5337] handle_bug+0x9c/0x200 [ 85.602464][ T5337] exc_invalid_op+0x1a/0x50 [ 85.604423][ T5337] asm_exc_invalid_op+0x1a/0x20 [ 85.606483][ T5337] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 85.608900][ T5337] Code: fd 65 48 8b 05 4b de 93 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fb 3e 18 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 ed 3e 18 fd 4c 89 f7 be 03 00 00 00 e8 [ 85.618348][ T5337] RSP: 0000:ffffc9000fcbfbb0 EFLAGS: 00010293 [ 85.620933][ T5337] RAX: ffffffff84ada1f5 RBX: 0000000000000000 RCX: ffff888040bf0000 [ 85.623893][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.627452][ T5337] RBP: ffffc9000fcbfd08 R08: ffff8880127e9007 R09: 1ffff110024fd200 [ 85.632086][ T5337] R10: dffffc0000000000 R11: ffffed10024fd201 R12: 00000000fffffff4 [ 85.635854][ T5337] R13: ffff8880127e9000 R14: ffff888040bf0968 R15: 1ffff1100817e12d [ 85.639125][ T5337] ? io_wq_put_and_exit+0xa35/0xa70 [ 85.641502][ T5337] ? __kmalloc_cache_noprof+0x31c/0x660 [ 85.643859][ T5337] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 85.646227][ T5337] __io_uring_add_tctx_node+0x402/0x5f0 [ 85.648929][ T5337] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 85.652002][ T5337] ? __anon_inode_getfile+0x169/0x200 [ 85.654542][ T5337] io_uring_create+0x5ac/0x9a0 [ 85.656629][ T5337] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 85.659000][ T5337] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 85.661805][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 85.664579][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.667901][ T5337] do_syscall_64+0x15f/0xf80 [ 85.670100][ T5337] ? trace_irq_disable+0x3b/0x140 [ 85.672228][ T5337] ? clear_bhb_loop+0x40/0x90 [ 85.674344][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.676947][ T5337] RIP: 0033:0x7fdc5639cdd9 [ 85.678865][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.688078][ T5337] RSP: 002b:00007fdc57201f78 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 85.691914][ T5337] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fdc5639cdd9 [ 85.695604][ T5337] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000020 [ 85.699396][ T5337] RBP: 00007fdc57202050 R08: 0000000000000000 R09: 0000000000000101 [ 85.703347][ T5337] R10: 0000200000000140 R11: 0000000000000202 R12: 0000200000000100 [ 85.706928][ T5337] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffd9692d9c8 [ 85.710556][ T5337] [ 85.712572][ T5337] Kernel Offset: disabled [ 85.714756][ T5337] Rebooting in 86400 seconds..