program: r0 = syz_open_dev$dri(&(0x7f0000000940), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000980), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000009c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000a00)={&(0x7f0000000a40)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000b40)={&(0x7f0000000bc0)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) [ 73.831956][ T5277] Bluetooth: hci0: command tx timeout [ 73.944007][ T9] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 74.967073][ T5313] ------------[ cut here ]------------ [ 74.967087][ T5313] [CRTC:41:crtc-0] vblank wait timed out [ 74.967097][ T5313] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1928 at drm_atomic_helper_wait_for_vblanks+0x763/0x8f0, CPU#0: syz.0.0/5313 [ 74.978389][ T5313] Modules linked in: [ 74.980862][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.984816][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.989279][ T5313] RIP: 0010:drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 74.992351][ T5313] Code: 00 4d 8d 6e 20 45 8b 3f 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 0e 48 89 fb 4c 89 ef e8 d7 0e 99 fc 48 89 df 49 8b 55 00 44 89 fe <67> 48 0f b9 3a 49 bd 00 00 00 00 00 fc ff df 48 8b 5c 24 50 e9 cc [ 75.001846][ T5313] RSP: 0018:ffffc9000f6af540 EFLAGS: 00010246 [ 75.005069][ T5313] RAX: 1ffff11006c5000c RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.008674][ T5313] RDX: ffff888000db7480 RSI: 0000000000000029 RDI: ffffffff91867ad0 [ 75.012457][ T5313] RBP: ffffc9000f6af680 R08: ffffffff917a967f R09: 1ffffffff22f52cf [ 75.015964][ T5313] R10: dffffc0000000000 R11: fffffbfff22f52d0 R12: ffff8880316e9408 [ 75.019583][ T5313] R13: ffff888036280060 R14: ffff888036280040 R15: 0000000000000029 [ 75.023047][ T5313] FS: 00007fdbf6de96c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 75.027077][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.029843][ T5313] CR2: 00007fdbf6dc89a0 CR3: 000000004573f000 CR4: 0000000000352ef0 [ 75.033259][ T5313] Call Trace: [ 75.034779][ T5313] [ 75.036179][ T5313] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 75.039173][ T5313] ? __pfx_autoremove_wake_function+0x10/0x10 [ 75.041748][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 75.044220][ T5313] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 75.047143][ T5313] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 75.049725][ T5313] commit_tail+0x2b1/0x3c0 [ 75.051631][ T5313] drm_atomic_helper_commit+0xa77/0xb10 [ 75.054076][ T5313] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 75.056767][ T5313] drm_atomic_commit+0x24e/0x2b0 [ 75.058914][ T5313] ? __pfx_drm_atomic_commit+0x10/0x10 [ 75.061092][ T5313] ? __pfx___drm_printfn_info+0x10/0x10 [ 75.063335][ T5313] ? drm_atomic_commit_init+0x2ca/0x370 [ 75.065914][ T5313] drm_atomic_helper_set_config+0xe2/0x160 [ 75.068469][ T5313] drm_mode_setcrtc+0xa70/0x1d20 [ 75.070718][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.072927][ T5313] ? __lock_acquire+0x747/0x2de0 [ 75.075187][ T5313] ? do_raw_spin_unlock+0x4d/0x200 [ 75.077444][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 75.079511][ T5313] ? drm_is_current_master+0x19f/0x200 [ 75.081808][ T5313] drm_ioctl_kernel+0x2df/0x3b0 [ 75.083763][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.086331][ T5313] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 75.088728][ T5313] drm_ioctl+0x70e/0xba0 [ 75.090795][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.093217][ T5313] ? __pfx_drm_ioctl+0x10/0x10 [ 75.095489][ T5313] ? __fget_files+0x2a/0x420 [ 75.097768][ T5313] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.099998][ T5313] ? __pfx_drm_ioctl+0x10/0x10 [ 75.102548][ T5313] __se_sys_ioctl+0xfc/0x170 [ 75.104662][ T5313] do_syscall_64+0x166/0x520 [ 75.106819][ T5313] ? trace_irq_disable+0x3b/0x140 [ 75.108775][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.111559][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 75.113653][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.116413][ T5313] RIP: 0033:0x7fdbf5f9e1d9 [ 75.118395][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.127343][ T5313] RSP: 002b:00007fdbf6de8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.130983][ T5313] RAX: ffffffffffffffda RBX: 00007fdbf6225fa0 RCX: 00007fdbf5f9e1d9 [ 75.134398][ T5313] RDX: 0000200000000b40 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 75.137942][ T5313] RBP: 00007fdbf6035888 R08: 0000000000000000 R09: 0000000000000000 [ 75.141078][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.144168][ T5313] R13: 00007fdbf6226038 R14: 00007fdbf6225fa0 R15: 00007ffdf267f8d8 [ 75.147400][ T5313] [ 75.148696][ T5313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.151567][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.155289][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.160132][ T5313] Call Trace: [ 75.161627][ T5313] [ 75.162956][ T5313] vpanic+0x56d/0xa60 [ 75.164805][ T5313] ? __pfx__printk+0x10/0x10 [ 75.166896][ T5313] ? __pfx_vpanic+0x10/0x10 [ 75.168923][ T5313] ? is_bpf_text_address+0x292/0x2b0 [ 75.171111][ T5313] ? is_bpf_text_address+0x26/0x2b0 [ 75.173360][ T5313] panic+0xc5/0xd0 [ 75.174960][ T5313] ? __pfx_panic+0x10/0x10 [ 75.177019][ T5313] __warn+0x315/0x4c0 [ 75.178751][ T5313] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 75.181584][ T5313] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 75.184468][ T5313] __report_bug+0x276/0x570 [ 75.188038][ T5313] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 75.191266][ T5313] ? __pfx___report_bug+0x10/0x10 [ 75.193402][ T5313] report_bug_entry+0x19b/0x290 [ 75.195921][ T5313] ? drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 75.199299][ T5313] ? drm_atomic_helper_wait_for_vblanks+0x7a8/0x8f0 [ 75.202257][ T5313] handle_bug+0xce/0x200 [ 75.204167][ T5313] exc_invalid_op+0x1a/0x50 [ 75.206213][ T5313] asm_exc_invalid_op+0x1a/0x20 [ 75.208366][ T5313] RIP: 0010:drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 75.211914][ T5313] Code: 00 4d 8d 6e 20 45 8b 3f 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 0e 48 89 fb 4c 89 ef e8 d7 0e 99 fc 48 89 df 49 8b 55 00 44 89 fe <67> 48 0f b9 3a 49 bd 00 00 00 00 00 fc ff df 48 8b 5c 24 50 e9 cc [ 75.219664][ T5313] RSP: 0018:ffffc9000f6af540 EFLAGS: 00010246 [ 75.222122][ T5313] RAX: 1ffff11006c5000c RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.225469][ T5313] RDX: ffff888000db7480 RSI: 0000000000000029 RDI: ffffffff91867ad0 [ 75.229069][ T5313] RBP: ffffc9000f6af680 R08: ffffffff917a967f R09: 1ffffffff22f52cf [ 75.232505][ T5313] R10: dffffc0000000000 R11: fffffbfff22f52d0 R12: ffff8880316e9408 [ 75.235975][ T5313] R13: ffff888036280060 R14: ffff888036280040 R15: 0000000000000029 [ 75.239512][ T5313] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 75.242569][ T5313] ? __pfx_autoremove_wake_function+0x10/0x10 [ 75.245298][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 75.247833][ T5313] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 75.250630][ T5313] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 75.252991][ T5313] commit_tail+0x2b1/0x3c0 [ 75.254667][ T5313] drm_atomic_helper_commit+0xa77/0xb10 [ 75.256920][ T5313] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 75.259305][ T5313] drm_atomic_commit+0x24e/0x2b0 [ 75.261250][ T5313] ? __pfx_drm_atomic_commit+0x10/0x10 [ 75.263414][ T5313] ? __pfx___drm_printfn_info+0x10/0x10 [ 75.265640][ T5313] ? drm_atomic_commit_init+0x2ca/0x370 [ 75.268097][ T5313] drm_atomic_helper_set_config+0xe2/0x160 [ 75.270694][ T5313] drm_mode_setcrtc+0xa70/0x1d20 [ 75.272977][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.275351][ T5313] ? __lock_acquire+0x747/0x2de0 [ 75.277635][ T5313] ? do_raw_spin_unlock+0x4d/0x200 [ 75.279904][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 75.282071][ T5313] ? drm_is_current_master+0x19f/0x200 [ 75.284481][ T5313] drm_ioctl_kernel+0x2df/0x3b0 [ 75.286699][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.289086][ T5313] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 75.291432][ T5313] drm_ioctl+0x70e/0xba0 [ 75.293255][ T5313] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 75.295358][ T5313] ? __pfx_drm_ioctl+0x10/0x10 [ 75.297348][ T5313] ? __fget_files+0x2a/0x420 [ 75.299147][ T5313] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.301215][ T5313] ? __pfx_drm_ioctl+0x10/0x10 [ 75.303151][ T5313] __se_sys_ioctl+0xfc/0x170 [ 75.305124][ T5313] do_syscall_64+0x166/0x520 [ 75.307113][ T5313] ? trace_irq_disable+0x3b/0x140 [ 75.309297][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.312054][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 75.314099][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.316698][ T5313] RIP: 0033:0x7fdbf5f9e1d9 [ 75.318727][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.327252][ T5313] RSP: 002b:00007fdbf6de8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.330879][ T5313] RAX: ffffffffffffffda RBX: 00007fdbf6225fa0 RCX: 00007fdbf5f9e1d9 [ 75.334328][ T5313] RDX: 0000200000000b40 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 75.337902][ T5313] RBP: 00007fdbf6035888 R08: 0000000000000000 R09: 0000000000000000 [ 75.341375][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.344827][ T5313] R13: 00007fdbf6226038 R14: 00007fdbf6225fa0 R15: 00007ffdf267f8d8 [ 75.348346][ T5313] [ 75.350296][ T5313] Kernel Offset: disabled [ 75.352215][ T5313] Rebooting in 86400 seconds..