------------[ cut here ]------------ WARNING: CPU: 0 PID: 9168 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x335/0x3c0 drivers/gpu/drm/vkms/vkms_crtc.c:21 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 9168 Comm: syz-executor686 Not tainted 5.5.0-rc1-next-20191209-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 panic+0x2e3/0x75c kernel/panic.c:221 __warn.cold+0x2f/0x3e kernel/panic.c:582 report_bug+0x289/0x300 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:174 [inline] fixup_bug arch/x86/kernel/traps.c:169 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:267 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:286 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:vkms_vblank_simulate+0x335/0x3c0 drivers/gpu/drm/vkms/vkms_crtc.c:21 Code: 9f 00 00 00 49 8b 94 24 50 02 00 00 4c 89 e9 bf 02 00 00 00 48 c7 c6 60 0c 8e 88 e8 95 c7 b1 ff e9 de fe ff ff e8 cb 58 25 fd <0f> 0b e9 77 fd ff ff e8 cf 2f 63 fd e9 01 fe ff ff 4c 89 f7 e8 c2 RSP: 0018:ffffc90000007dd8 EFLAGS: 00010006 RAX: ffff88809a35e100 RBX: ffff8880a27cd6e0 RCX: ffffffff844fc9f9 RDX: 0000000000010000 RSI: ffffffff844fcc85 RDI: 0000000000000007 RBP: ffffc90000007e08 R08: ffff88809a35e100 R09: ffff88809a35e998 R10: fffffbfff15017c8 R11: ffffffff8a80be47 R12: 000000000001bace R13: ffff8880a27ccbe8 R14: 0000000000000000 R15: dffffc0000000000 __run_hrtimer kernel/time/hrtimer.c:1517 [inline] __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1579 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1641 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline] smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1135 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x90/0xe0 kernel/locking/spinlock.c:191 Code: 48 c7 c0 58 af 93 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d cf 40 ca 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 41 49 87 f9 65 8b 05 e2 af 38 78 RSP: 0018:ffffc90001da7928 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13275eb RBX: 0000000000000286 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000286 RBP: ffffc90001da7938 R08: ffff88809a35e100 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a27cc2f0 R13: 0000000000000000 R14: ffff8880a27cc2f0 R15: ffff8880a2618508 spin_unlock_irqrestore include/linux/spinlock.h:393 [inline] drm_vblank_get+0x150/0x1e0 drivers/gpu/drm/drm_vblank.c:1044 drm_wait_vblank_ioctl+0x51b/0x1930 drivers/gpu/drm/drm_vblank.c:1665 drm_ioctl_kernel+0x244/0x300 drivers/gpu/drm/drm_ioctl.c:786 drm_ioctl+0x54e/0xa60 drivers/gpu/drm/drm_ioctl.c:886 vfs_ioctl fs/ioctl.c:47 [inline] file_ioctl fs/ioctl.c:545 [inline] do_vfs_ioctl+0x977/0x14e0 fs/ioctl.c:732 ksys_ioctl+0xab/0xd0 fs/ioctl.c:749 __do_sys_ioctl fs/ioctl.c:756 [inline] __se_sys_ioctl fs/ioctl.c:754 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:754 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x443e29 Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffd76e03a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443e29 RDX: 0000000020000100 RSI: 00000000c018643a RDI: 0000000000000003 RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401b30 R13: 0000000000401bc0 R14: 0000000000000000 R15: 0000000000000000 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9168 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 kernel/locking/mutex.c:1427 Modules linked in: CPU: 0 PID: 9168 Comm: syz-executor686 Not tainted 5.5.0-rc1-next-20191209-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:mutex_trylock+0x279/0x2f0 kernel/locking/mutex.c:1419 Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 8c 74 92 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 20 c5 63 8b 48 89 4d d0 e8 d0 67 ea RSP: 0018:ffffc90000007998 EFLAGS: 00010006 RAX: 0000000080010002 RBX: 1ffff92000000f3b RCX: 0000000000000004 RDX: 0000000000010000 RSI: ffffffff816c15e5 RDI: ffffffff899cef40 RBP: ffffc900000079c8 R08: 0000000000000001 R09: fffffbfff1334ea1 R10: fffffbfff1334ea0 R11: ffffffff899a7503 R12: ffffffff8b63c520 R13: 0000000000000000 R14: ffffffff844fcc00 R15: ffffffff899cef40 FS: 000000000217a880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000043e660 CR3: 0000000092920000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __crash_kexec+0x91/0x200 kernel/kexec_core.c:948 panic+0x308/0x75c kernel/panic.c:241 __warn.cold+0x2f/0x3e kernel/panic.c:582 report_bug+0x289/0x300 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:174 [inline] fixup_bug arch/x86/kernel/traps.c:169 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:267 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:286 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:vkms_vblank_simulate+0x335/0x3c0 drivers/gpu/drm/vkms/vkms_crtc.c:21 Code: 9f 00 00 00 49 8b 94 24 50 02 00 00 4c 89 e9 bf 02 00 00 00 48 c7 c6 60 0c 8e 88 e8 95 c7 b1 ff e9 de fe ff ff e8 cb 58 25 fd <0f> 0b e9 77 fd ff ff e8 cf 2f 63 fd e9 01 fe ff ff 4c 89 f7 e8 c2 RSP: 0018:ffffc90000007dd8 EFLAGS: 00010006 RAX: ffff88809a35e100 RBX: ffff8880a27cd6e0 RCX: ffffffff844fc9f9 RDX: 0000000000010000 RSI: ffffffff844fcc85 RDI: 0000000000000007 RBP: ffffc90000007e08 R08: ffff88809a35e100 R09: ffff88809a35e998 R10: fffffbfff15017c8 R11: ffffffff8a80be47 R12: 000000000001bace R13: ffff8880a27ccbe8 R14: 0000000000000000 R15: dffffc0000000000 __run_hrtimer kernel/time/hrtimer.c:1517 [inline] __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1579 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1641 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline] smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1135 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x90/0xe0 kernel/locking/spinlock.c:191 Code: 48 c7 c0 58 af 93 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d cf 40 ca 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 41 49 87 f9 65 8b 05 e2 af 38 78 RSP: 0018:ffffc90001da7928 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13275eb RBX: 0000000000000286 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000286 RBP: ffffc90001da7938 R08: ffff88809a35e100 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a27cc2f0 R13: 0000000000000000 R14: ffff8880a27cc2f0 R15: ffff8880a2618508 spin_unlock_irqrestore include/linux/spinlock.h:393 [inline] drm_vblank_get+0x150/0x1e0 drivers/gpu/drm/drm_vblank.c:1044 drm_wait_vblank_ioctl+0x51b/0x1930 drivers/gpu/drm/drm_vblank.c:1665 drm_ioctl_kernel+0x244/0x300 drivers/gpu/drm/drm_ioctl.c:786 drm_ioctl+0x54e/0xa60 drivers/gpu/drm/drm_ioctl.c:886 vfs_ioctl fs/ioctl.c:47 [inline] file_ioctl fs/ioctl.c:545 [inline] do_vfs_ioctl+0x977/0x14e0 fs/ioctl.c:732 ksys_ioctl+0xab/0xd0 fs/ioctl.c:749 __do_sys_ioctl fs/ioctl.c:756 [inline] __se_sys_ioctl fs/ioctl.c:754 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:754 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x443e29 Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffd76e03a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443e29 RDX: 0000000020000100 RSI: 00000000c018643a RDI: 0000000000000003 RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401b30 R13: 0000000000401bc0 R14: 0000000000000000 R15: 0000000000000000 irq event stamp: 8216 hardirqs last enabled at (8215): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (8215): [] _raw_spin_unlock_irqrestore+0x66/0xe0 kernel/locking/spinlock.c:191 hardirqs last disabled at (8216): [] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42 softirqs last enabled at (7604): [] copy_init_fpstate_to_fpregs arch/x86/kernel/fpu/core.c:308 [inline] softirqs last enabled at (7604): [] fpu__clear+0x17c/0x440 arch/x86/kernel/fpu/core.c:332 softirqs last disabled at (7602): [] trace_x86_fpu_init_state arch/x86/include/asm/trace/fpu.h:67 [inline] softirqs last disabled at (7602): [] fpu__initialize arch/x86/kernel/fpu/core.c:220 [inline] softirqs last disabled at (7602): [] fpu__clear+0xe2/0x440 arch/x86/kernel/fpu/core.c:330 ---[ end trace 8148c8a923cad245 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9168 at kernel/locking/mutex.c:737 mutex_unlock+0x1d/0x30 kernel/locking/mutex.c:744 Modules linked in: CPU: 0 PID: 9168 Comm: syz-executor686 Tainted: G W 5.5.0-rc1-next-20191209-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:mutex_unlock+0x1d/0x30 kernel/locking/mutex.c:737 Code: 4c 89 ff e8 25 73 ea f9 e9 8c fb ff ff 55 65 8b 05 e0 94 39 78 a9 00 ff 1f 00 48 89 e5 75 0b 48 8b 75 08 e8 45 f9 ff ff 5d c3 <0f> 0b 48 8b 75 08 e8 38 f9 ff ff 5d c3 66 0f 1f 44 00 00 48 b8 00 RSP: 0018:ffffc900000079c8 EFLAGS: 00010006 RAX: 0000000080010002 RBX: 1ffff92000000f3b RCX: ffffffff816c15fd RDX: 0000000000010000 RSI: ffffffff816c165f RDI: ffffffff899cef40 RBP: ffffc900000079c8 R08: ffff88809a35e100 R09: fffffbfff1659dba R10: ffff88809a35e9a0 R11: ffff88809a35e100 R12: 0000000000000001 R13: 0000000000000000 R14: ffffffff844fcc00 R15: 0000000000000015 FS: 000000000217a880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000043e660 CR3: 0000000092920000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __crash_kexec+0x10b/0x200 kernel/kexec_core.c:957 panic+0x308/0x75c kernel/panic.c:241 __warn.cold+0x2f/0x3e kernel/panic.c:582 report_bug+0x289/0x300 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:174 [inline] fixup_bug arch/x86/kernel/traps.c:169 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:267 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:286 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:vkms_vblank_simulate+0x335/0x3c0 drivers/gpu/drm/vkms/vkms_crtc.c:21 Code: 9f 00 00 00 49 8b 94 24 50 02 00 00 4c 89 e9 bf 02 00 00 00 48 c7 c6 60 0c 8e 88 e8 95 c7 b1 ff e9 de fe ff ff e8 cb 58 25 fd <0f> 0b e9 77 fd ff ff e8 cf 2f 63 fd e9 01 fe ff ff 4c 89 f7 e8 c2 RSP: 0018:ffffc90000007dd8 EFLAGS: 00010006 RAX: ffff88809a35e100 RBX: ffff8880a27cd6e0 RCX: ffffffff844fc9f9 RDX: 0000000000010000 RSI: ffffffff844fcc85 RDI: 0000000000000007 RBP: ffffc90000007e08 R08: ffff88809a35e100 R09: ffff88809a35e998 R10: fffffbfff15017c8 R11: ffffffff8a80be47 R12: 000000000001bace R13: ffff8880a27ccbe8 R14: 0000000000000000 R15: dffffc0000000000 __run_hrtimer kernel/time/hrtimer.c:1517 [inline] __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1579 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1641 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline] smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1135 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x90/0xe0 kernel/locking/spinlock.c:191 Code: 48 c7 c0 58 af 93 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d cf 40 ca 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 41 49 87 f9 65 8b 05 e2 af 38 78 RSP: 0018:ffffc90001da7928 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13275eb RBX: 0000000000000286 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000286 RBP: ffffc90001da7938 R08: ffff88809a35e100 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a27cc2f0 R13: 0000000000000000 R14: ffff8880a27cc2f0 R15: ffff8880a2618508 spin_unlock_irqrestore include/linux/spinlock.h:393 [inline] drm_vblank_get+0x150/0x1e0 drivers/gpu/drm/drm_vblank.c:1044 drm_wait_vblank_ioctl+0x51b/0x1930 drivers/gpu/drm/drm_vblank.c:1665 drm_ioctl_kernel+0x244/0x300 drivers/gpu/drm/drm_ioctl.c:786 drm_ioctl+0x54e/0xa60 drivers/gpu/drm/drm_ioctl.c:886 vfs_ioctl fs/ioctl.c:47 [inline] file_ioctl fs/ioctl.c:545 [inline] do_vfs_ioctl+0x977/0x14e0 fs/ioctl.c:732 ksys_ioctl+0xab/0xd0 fs/ioctl.c:749 __do_sys_ioctl fs/ioctl.c:756 [inline] __se_sys_ioctl fs/ioctl.c:754 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:754 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x443e29 Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffd76e03a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443e29 RDX: 0000000020000100 RSI: 00000000c018643a RDI: 0000000000000003 RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401b30 R13: 0000000000401bc0 R14: 0000000000000000 R15: 0000000000000000 irq event stamp: 8216 hardirqs last enabled at (8215): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (8215): [] _raw_spin_unlock_irqrestore+0x66/0xe0 kernel/locking/spinlock.c:191 hardirqs last disabled at (8216): [] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42 softirqs last enabled at (7604): [] copy_init_fpstate_to_fpregs arch/x86/kernel/fpu/core.c:308 [inline] softirqs last enabled at (7604): [] fpu__clear+0x17c/0x440 arch/x86/kernel/fpu/core.c:332 softirqs last disabled at (7602): [] trace_x86_fpu_init_state arch/x86/include/asm/trace/fpu.h:67 [inline] softirqs last disabled at (7602): [] fpu__initialize arch/x86/kernel/fpu/core.c:220 [inline] softirqs last disabled at (7602): [] fpu__clear+0xe2/0x440 arch/x86/kernel/fpu/core.c:330 ---[ end trace 8148c8a923cad246 ]--- Kernel Offset: disabled Rebooting in 86400 seconds..