drm_fbdev_generic_setup+0x85/0x140 drivers/gpu/drm/drm_fbdev_generic.c:326
 vkms_create drivers/gpu/drm/vkms/vkms_drv.c:204 [inline]
 vkms_init+0x23e/0x2a0 drivers/gpu/drm/vkms/vkms_drv.c:230
 do_one_initcall+0x8f/0x2d0 init/main.c:1306
 do_initcall_level init/main.c:1379 [inline]
 do_initcalls init/main.c:1395 [inline]
 do_basic_setup init/main.c:1414 [inline]
 kernel_init_freeable+0x275/0x460 init/main.c:1634
 kernel_init+0x15/0x190 init/main.c:1522
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
page_owner free stack trace missing
------------[ cut here ]------------
kernel BUG at mm/memory.c:2938!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 2513 Comm: syz-executor.0 Not tainted 6.3.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
RIP: 0010:do_page_mkwrite+0xfc/0x200 mm/memory.c:2938
Code: 24 f7 c2 00 00 01 00 74 ae 49 8b 54 24 48 48 8d 42 ff 83 e2 01 49 0f 44 c4 eb 9c 48 c7 c6 28 80 b6 82 4c 89 e7 e8 24 77 ff ff <0f> 0b bd 02 00 00 00 5b 89 e8 5d 41 5c 41 5d c3 2e 2e 2e 31 c0 49
RSP: 0000:ffffc90000f3bd38 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffc90000f3be18 RCX: ffffc90000f3bccc
RDX: 0000000000000001 RSI: ffffffff82abdfe1 RDI: ffffffff82adfe95
RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82efafc0
R10: ffffc90000f3bbc0 R11: ffffffff82fdb008 R12: ffffea000405aec0
R13: 0000000000000a55 R14: 0000000000000a55 R15: fff000003fffffff
FS:  0000555555f8c480(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000000 CR3: 0000000101f64000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 wp_page_shared mm/memory.c:3274 [inline]
 do_wp_page+0xa5/0x1020 mm/memory.c:3356
 handle_pte_fault mm/memory.c:4927 [inline]
 __handle_mm_fault+0xa46/0x12c0 mm/memory.c:5051
 handle_mm_fault+0x11f/0x300 mm/memory.c:5197
 do_user_addr_fault arch/x86/mm/fault.c:1407 [inline]
 handle_page_fault arch/x86/mm/fault.c:1498 [inline]
 exc_page_fault+0x1cd/0x830 arch/x86/mm/fault.c:1554
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7f074c65db98
Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5
RSP: 002b:00007ffe4bd511b8 EFLAGS: 00010202
RAX: 0000000020000000 RBX: 00007ffe4bd512c8 RCX: 003062662f766564
RDX: 0000000000000009 RSI: 3062662f7665642f RDI: 0000000020000000
RBP: 0000000000000032 R08: 00007f074c600000 R09: 00007f074c79bf8c
R10: 00007ffe4bd512f0 R11: 0000000000000246 R12: 00007f074c2004c8
R13: fffffffffffffffe R14: 00007f074c200000 R15: 00007f074c2004d0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_page_mkwrite+0xfc/0x200 mm/memory.c:2938
Code: 24 f7 c2 00 00 01 00 74 ae 49 8b 54 24 48 48 8d 42 ff 83 e2 01 49 0f 44 c4 eb 9c 48 c7 c6 28 80 b6 82 4c 89 e7 e8 24 77 ff ff <0f> 0b bd 02 00 00 00 5b 89 e8 5d 41 5c 41 5d c3 2e 2e 2e 31 c0 49
RSP: 0000:ffffc90000f3bd38 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffc90000f3be18 RCX: ffffc90000f3bccc
RDX: 0000000000000001 RSI: ffffffff82abdfe1 RDI: ffffffff82adfe95
RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82efafc0
R10: ffffc90000f3bbc0 R11: ffffffff82fdb008 R12: ffffea000405aec0
R13: 0000000000000a55 R14: 0000000000000a55 R15: fff000003fffffff
FS:  0000555555f8c480(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000000 CR3: 0000000101f64000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400