------------[ cut here ]------------ faux_driver vkms: [drm] vblank wait timed out on crtc 0 WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560 drivers/gpu/drm/drm_vblank.c:1329, CPU#1: kworker/1:2/823 Modules linked in: CPU: 1 UID: 0 PID: 823 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events drm_fb_helper_damage_work RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 drivers/gpu/drm/drm_vblank.c:1329 Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 05 eb b4 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 RSP: 0018:ffffc90006047940 EFLAGS: 00010246 RAX: 1ffff11004d05000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffffffff8be26280 RSI: ffffffff8be44020 RDI: ffffffff8fba8180 RBP: ffffc90006047a28 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1f5e7e0 R12: ffffffff8be44020 R13: ffff888026828000 R14: ffffffff8fba8180 R15: ffffffff8be26280 FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fea55c7da08 CR3: 0000000043edc000 CR4: 00000000003526f0 Call Trace: drm_client_modeset_wait_for_vblank+0xc5/0xf0 drivers/gpu/drm/drm_client_modeset.c:1331 drm_fb_helper_fb_dirty drivers/gpu/drm/drm_fb_helper.c:237 [inline] drm_fb_helper_damage_work+0x125/0x700 drivers/gpu/drm/drm_fb_helper.c:275 process_one_work+0xaaf/0x1480 kernel/workqueue.c:3379 process_scheduled_works kernel/workqueue.c:3462 [inline] worker_thread+0xb05/0x10d0 kernel/workqueue.c:3543 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: c1 e8 03 shr $0x3,%eax 3: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx a: fc ff df d: 80 3c 08 00 cmpb $0x0,(%rax,%rcx,1) 11: 74 08 je 0x1b 13: 4c 89 ef mov %r13,%rdi 16: e8 05 eb b4 fc call 0xfcb4eb20 1b: 4d 8b 7d 00 mov 0x0(%r13),%r15 1f: 4c 89 f7 mov %r14,%rdi 22: 4c 89 e6 mov %r12,%rsi 25: 4c 89 fa mov %r15,%rdx 28: 89 d9 mov %ebx,%ecx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 48 8b 3c 24 mov (%rsp),%rdi 33: 89 de mov %ebx,%esi 35: e8 36 f4 ff ff call 0xfffff470 3a: b8 92 ff ff ff mov $0xffffff92,%eax 3f: 49 rex.WB