program:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
dup3(r0, r1, 0x80000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ppoll(&(0x7f00000002c0)=[{r1}, {r3, 0x4024}], 0x2, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f00000002c0)=[{r1}, {r3, 0x4024}], 0x2, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='N', 0x1)
write(r6, &(0x7f0000000100)='100', 0x3)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r7, 0x7003) (async)
ioctl$RTC_UIE_ON(r7, 0x7003)
ioctl$RTC_AIE_ON(r7, 0x7001)
ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000100)={0x33, 0x1e, 0x0, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1})
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
landlock_restrict_self(r3, 0x1) (async)
landlock_restrict_self(r3, 0x1)
write$cgroup_freezer_state(r3, &(0x7f0000000000)='THAWED\x00', 0x7) (async)
write$cgroup_freezer_state(r3, &(0x7f0000000000)='THAWED\x00', 0x7)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016002900014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xbd}], 0x1}, 0x44000)
[ 93.907772][ T4644] Bluetooth: hci0: command tx timeout
[ 94.118991][ T5326] FAULT_INJECTION: forcing a failure.
[ 94.118991][ T5326] name failslab, interval 1, probability 100, space 0, times 1
[ 94.119012][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.119021][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.119026][ T5326] Call Trace:
[ 94.119030][ T5326]
[ 94.119034][ T5326] dump_stack_lvl+0xe8/0x150
[ 94.119117][ T5326] should_fail_ex+0x410/0x560
[ 94.119158][ T5326] should_failslab+0xa8/0x100
[ 94.119167][ T5326] ? do_getname+0x2e/0x250
[ 94.119175][ T5326] kmem_cache_alloc_noprof+0xa1/0x600
[ 94.119185][ T5326] ? do_futex+0x458/0x4e0
[ 94.119195][ T5326] ? do_getname+0x2e/0x250
[ 94.119204][ T5326] do_getname+0x2e/0x250
[ 94.119211][ T5326] ? getname_flags+0x11/0x20
[ 94.119220][ T5326] do_sys_openat2+0xcc/0x200
[ 94.119228][ T5326] ? __se_sys_futex+0x3a8/0x450
[ 94.119237][ T5326] ? __pfx_do_sys_openat2+0x10/0x10
[ 94.119246][ T5326] ? rcu_is_watching+0x16/0xb0
[ 94.119257][ T5326] __x64_sys_openat+0x138/0x170
[ 94.119266][ T5326] do_syscall_64+0x166/0x520
[ 94.119300][ T5326] ? trace_irq_disable+0x3b/0x140
[ 94.119308][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.119315][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 94.119323][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.119330][ T5326] RIP: 0033:0x7f676c39e159
[ 94.119338][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.119344][ T5326] RSP: 002b:00007f676d221fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 94.119353][ T5326] RAX: ffffffffffffffda RBX: 00007f676c626180 RCX: 00007f676c39e159
[ 94.119358][ T5326] RDX: 0000000000000140 RSI: 0000200000000200 RDI: ffffffffffffff9c
[ 94.119363][ T5326] RBP: 00007f676c43506b R08: 0000000000000000 R09: 0000000000000000
[ 94.119367][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.119371][ T5326] R13: 00007f676c626218 R14: 00007f676c626180 R15: 00007ffd2f7729a8
[ 94.119382][ T5326]
[ 94.119453][ T5316] FAULT_INJECTION: forcing a failure.
[ 94.119453][ T5316] name failslab, interval 1, probability 100, space 0, times 1
[ 94.119464][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 94.119472][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.119476][ T5316] Workqueue: events drm_fb_helper_damage_work
[ 94.119486][ T5316] Call Trace:
[ 94.119489][ T5316]
[ 94.119492][ T5316] dump_stack_lvl+0xe8/0x150
[ 94.119503][ T5316] should_fail_ex+0x410/0x560
[ 94.119515][ T5316] should_failslab+0xa8/0x100
[ 94.119523][ T5316] __kmalloc_cache_noprof+0xa3/0x600
[ 94.119534][ T5316] ? drm_atomic_commit_alloc+0xa9/0x100
[ 94.119542][ T5316] ? drm_atomic_commit_alloc+0xa9/0x100
[ 94.119553][ T5316] drm_atomic_commit_alloc+0xa9/0x100
[ 94.119562][ T5316] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 94.119575][ T5316] ? __lock_acquire+0x747/0x2de0
[ 94.119586][ T5316] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 94.119602][ T5316] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.119621][ T5316] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 94.119635][ T5316] drm_fb_helper_damage_work+0x84c/0xf20
[ 94.119646][ T5316] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 94.119660][ T5316] ? lock_acquire+0x115/0x350
[ 94.119670][ T5316] ? rcu_is_watching+0x16/0xb0
[ 94.119679][ T5316] ? process_scheduled_works+0x97a/0x1630
[ 94.119689][ T5316] process_scheduled_works+0xc3d/0x1630
[ 94.119709][ T5316] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.119720][ T5316] ? assign_work+0x3cf/0x5d0
[ 94.119731][ T5316] worker_thread+0xa47/0xfb0
[ 94.119746][ T5316] ? __kthread_parkme+0x71/0x1f0
[ 94.119760][ T5316] kthread+0x38b/0x480
[ 94.119767][ T5316] ? __pfx_worker_thread+0x10/0x10
[ 94.119776][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.119783][ T5316] ret_from_fork+0x514/0xb70
[ 94.119792][ T5316] ? __pfx_ret_from_fork+0x10/0x10
[ 94.119799][ T5316] ? __switch_to+0xc89/0x1420
[ 94.119810][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.119818][ T5316] ret_from_fork_asm+0x1a/0x30
[ 94.119842][ T5316]
[ 94.119874][ T5316] ------------[ cut here ]------------
[ 94.119880][ T5316] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 94.119887][ T5316] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:6/5316
[ 94.320676][ T5316] Modules linked in:
[ 94.322406][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 94.326345][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.331749][ T5316] Workqueue: events drm_fb_helper_damage_work
[ 94.334925][ T5316] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 94.338230][ T5316] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 0a 76 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 94.346139][ T5316] RSP: 0018:ffffc9000ec5f898 EFLAGS: 00010246
[ 94.348799][ T5316] RAX: 1ffff11003f5681a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 94.352553][ T5316] RDX: ffff88801f88e900 RSI: ffffffff8c79d140 RDI: ffffffff908653c0
[ 94.356377][ T5316] RBP: ffff8880009f8008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 94.359966][ T5316] R10: dffffc0000000000 R11: fffffbfff1dd617f R12: ffff88801f88e900
[ 94.363343][ T5316] R13: dffffc0000000000 R14: ffffffff8c79d140 R15: ffff88801fab40d0
[ 94.366970][ T5316] FS: 0000000000000000(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000
[ 94.371699][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.375140][ T5316] CR2: 00007f676d200fe8 CR3: 00000000439dc000 CR4: 0000000000352ef0
[ 94.378718][ T5316] Call Trace:
[ 94.380277][ T5316]
[ 94.381675][ T5316] drm_fb_helper_damage_work+0x84c/0xf20
[ 94.384177][ T5316] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 94.386784][ T5316] ? lock_acquire+0x115/0x350
[ 94.388935][ T5316] ? rcu_is_watching+0x16/0xb0
[ 94.390982][ T5316] ? process_scheduled_works+0x97a/0x1630
[ 94.393916][ T5316] process_scheduled_works+0xc3d/0x1630
[ 94.396806][ T5316] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.400271][ T5316] ? assign_work+0x3cf/0x5d0
[ 94.402244][ T5316] worker_thread+0xa47/0xfb0
[ 94.404267][ T5316] ? __kthread_parkme+0x71/0x1f0
[ 94.406412][ T5316] kthread+0x38b/0x480
[ 94.408398][ T5316] ? __pfx_worker_thread+0x10/0x10
[ 94.410745][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.413256][ T5316] ret_from_fork+0x514/0xb70
[ 94.415693][ T5316] ? __pfx_ret_from_fork+0x10/0x10
[ 94.418160][ T5316] ? __switch_to+0xc89/0x1420
[ 94.420293][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.422341][ T5316] ret_from_fork_asm+0x1a/0x30
[ 94.424382][ T5316]
[ 94.425870][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.429098][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 94.434032][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.438852][ T5316] Workqueue: events drm_fb_helper_damage_work
[ 94.441468][ T5316] Call Trace:
[ 94.443127][ T5316]
[ 94.444474][ T5316] vpanic+0x56d/0xa60
[ 94.446237][ T5316] ? __pfx__printk+0x10/0x10
[ 94.448221][ T5316] ? __pfx_vpanic+0x10/0x10
[ 94.450361][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 94.452687][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 94.455249][ T5316] panic+0xc5/0xd0
[ 94.457711][ T5316] ? __pfx_panic+0x10/0x10
[ 94.460373][ T5316] ? ret_from_fork_asm+0x1a/0x30
[ 94.462578][ T5316] __warn+0x315/0x4c0
[ 94.464298][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 94.467380][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 94.470478][ T5316] __report_bug+0x276/0x570
[ 94.472953][ T5316] ? drm_modeset_acquire_fini+0x27/0x180
[ 94.475963][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 94.478865][ T5316] ? __pfx___report_bug+0x10/0x10
[ 94.481064][ T5316] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 94.483911][ T5316] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 94.486923][ T5316] report_bug_entry+0x19b/0x290
[ 94.489137][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 94.492556][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 94.495653][ T5316] handle_bug+0xce/0x200
[ 94.497647][ T5316] exc_invalid_op+0x1a/0x50
[ 94.499528][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 94.501861][ T5316] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 94.504742][ T5316] Code: 28 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 0a 76 9a fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 94.513441][ T5316] RSP: 0018:ffffc9000ec5f898 EFLAGS: 00010246
[ 94.516063][ T5316] RAX: 1ffff11003f5681a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 94.519440][ T5316] RDX: ffff88801f88e900 RSI: ffffffff8c79d140 RDI: ffffffff908653c0
[ 94.523058][ T5316] RBP: ffff8880009f8008 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 94.526889][ T5316] R10: dffffc0000000000 R11: fffffbfff1dd617f R12: ffff88801f88e900
[ 94.530585][ T5316] R13: dffffc0000000000 R14: ffffffff8c79d140 R15: ffff88801fab40d0
[ 94.533973][ T5316] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 94.536768][ T5316] drm_fb_helper_damage_work+0x84c/0xf20
[ 94.539266][ T5316] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 94.542165][ T5316] ? lock_acquire+0x115/0x350
[ 94.544584][ T5316] ? rcu_is_watching+0x16/0xb0
[ 94.546951][ T5316] ? process_scheduled_works+0x97a/0x1630
[ 94.549479][ T5316] process_scheduled_works+0xc3d/0x1630
[ 94.551847][ T5316] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.554404][ T5316] ? assign_work+0x3cf/0x5d0
[ 94.556392][ T5316] worker_thread+0xa47/0xfb0
[ 94.558500][ T5316] ? __kthread_parkme+0x71/0x1f0
[ 94.560972][ T5316] kthread+0x38b/0x480
[ 94.562928][ T5316] ? __pfx_worker_thread+0x10/0x10
[ 94.565297][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.567201][ T5316] ret_from_fork+0x514/0xb70
[ 94.569176][ T5316] ? __pfx_ret_from_fork+0x10/0x10
[ 94.571590][ T5316] ? __switch_to+0xc89/0x1420
[ 94.573778][ T5316] ? __pfx_kthread+0x10/0x10
[ 94.576008][ T5316] ret_from_fork_asm+0x1a/0x30
[ 94.578168][ T5316]
[ 94.579868][ T5316] Kernel Offset: disabled
[ 94.581677][ T5316] Rebooting in 86400 seconds..