program: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000a00)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r0, 0xc010644d, &(0x7f0000000a80)={r1, 0x0, &(0x7f0000000a40)='&\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8, 0x400000000000}, {0xffffffffffffffff, 0x1, 0x800, 0x1}, {0x0, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta") open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x10b000) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000024c0)=[r8], 0x1, r6, r5, 0x4, 0x0, 0x0, 0x7fd, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0x0, 0x25, 0x0, "fe1d00003413000000380000000caa0000000900000004b42718001000"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)="c5e3a154de405ebb55fff26230dfd691e232e3f40b28731d9c16e3910bb20303edd805f027adc71d8833ba63c9888fd1d386e73fd01f19f91a499d9ebc1c96554c45996070639448595b7aec8385b95f0f09783ec7f5a5eac207b03ee455c6c427bf31370548b837910f43434ad14d6dbe6fd94933aa92e574a8431f", 0x7c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000004c0)={r9, 0x15, &(0x7f0000000480)=""/21}) [ 94.206656][ T5312] loop0: detected capacity change from 0 to 512 [ 94.211247][ T5277] Bluetooth: hci0: command tx timeout [ 94.220426][ T5312] EXT4-fs: Ignoring removed nobh option [ 94.326252][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.331603][ T5312] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.352453][ T5312] capability: warning: `syz.0.0' uses 32-bit capabilities (legacy support in use) [ 94.446082][ T5300] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 95.514710][ T5312] ------------[ cut here ]------------ [ 95.517921][ T5312] [CRTC:39:crtc-0] vblank wait timed out [ 95.519902][ T5312] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1922 at drm_atomic_helper_wait_for_vblanks+0x763/0x8f0, CPU#0: syz.0.0/5312 [ 95.524592][ T5312] Modules linked in: [ 95.527241][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.531098][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.535291][ T5312] RIP: 0010:drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 95.538254][ T5312] Code: 00 4d 8d 6e 20 45 8b 3f 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 0e 48 89 fb 4c 89 ef e8 d7 9b 9f fc 48 89 df 49 8b 55 00 44 89 fe <67> 48 0f b9 3a 49 bd 00 00 00 00 00 fc ff df 48 8b 5c 24 50 e9 cc [ 95.546531][ T5312] RSP: 0018:ffffc9000e8cf540 EFLAGS: 00010246 [ 95.549080][ T5312] RAX: 1ffff11006a0000c RBX: dffffc0000000000 RCX: 0000000000100000 [ 95.552412][ T5312] RDX: ffff88801f5c0700 RSI: 0000000000000027 RDI: ffffffff9084c970 [ 95.555836][ T5312] RBP: ffffc9000e8cf680 R08: ffffffff9078fa37 R09: 1ffffffff20f1f46 [ 95.559177][ T5312] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: ffff888012cc7d08 [ 95.562495][ T5312] R13: ffff888035000060 R14: ffff888035000040 R15: 0000000000000027 [ 95.565695][ T5312] FS: 00007f4d774ee6c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 95.569371][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.572149][ T5312] CR2: 00005595ada55198 CR3: 0000000012f34000 CR4: 0000000000352ef0 [ 95.575675][ T5312] Call Trace: [ 95.577151][ T5312] [ 95.578478][ T5312] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 95.581375][ T5312] ? __pfx_autoremove_wake_function+0x10/0x10 [ 95.584637][ T5312] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.587231][ T5312] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 95.589979][ T5312] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 95.592491][ T5312] commit_tail+0x2b1/0x3c0 [ 95.594487][ T5312] drm_atomic_helper_commit+0xa77/0xb10 [ 95.596862][ T5312] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 95.599193][ T5312] drm_atomic_commit+0x24e/0x2b0 [ 95.601451][ T5312] ? __pfx_drm_atomic_commit+0x10/0x10 [ 95.603993][ T5312] ? __pfx___drm_printfn_info+0x10/0x10 [ 95.606074][ T5312] ? drm_atomic_commit_init+0x2ca/0x370 [ 95.608137][ T5312] drm_atomic_helper_set_config+0xe2/0x160 [ 95.610447][ T5312] drm_mode_setcrtc+0xa70/0x1d20 [ 95.612455][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.614832][ T5312] ? __lock_acquire+0x683/0x2cf0 [ 95.616915][ T5312] ? do_raw_spin_unlock+0x4d/0x200 [ 95.618923][ T5312] ? _raw_spin_unlock+0x28/0x50 [ 95.620795][ T5312] ? drm_is_current_master+0x19f/0x200 [ 95.622970][ T5312] drm_ioctl_kernel+0x2df/0x3b0 [ 95.625079][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.627075][ T5312] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 95.629175][ T5312] drm_ioctl+0x70e/0xba0 [ 95.630834][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.632854][ T5312] ? __pfx_drm_ioctl+0x10/0x10 [ 95.635398][ T5312] ? __fget_files+0x2a/0x420 [ 95.637118][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.638798][ T5312] ? __pfx_drm_ioctl+0x10/0x10 [ 95.640363][ T5312] __se_sys_ioctl+0xfc/0x170 [ 95.642204][ T5312] do_syscall_64+0x166/0x520 [ 95.644212][ T5312] ? trace_irq_disable+0x3b/0x140 [ 95.646324][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.648920][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 95.651008][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.653574][ T5312] RIP: 0033:0x7f4d7659e159 [ 95.655521][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.663536][ T5312] RSP: 002b:00007f4d774edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.667011][ T5312] RAX: ffffffffffffffda RBX: 00007f4d76825fa0 RCX: 00007f4d7659e159 [ 95.670416][ T5312] RDX: 0000200000000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 95.674193][ T5312] RBP: 00007f4d76635024 R08: 0000000000000000 R09: 0000000000000000 [ 95.677418][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.680604][ T5312] R13: 00007f4d76826038 R14: 00007f4d76825fa0 R15: 00007ffe7cfffa98 [ 95.684073][ T5312] [ 95.685448][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.688444][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.692111][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.696183][ T5312] Call Trace: [ 95.697575][ T5312] [ 95.698824][ T5312] vpanic+0x56d/0xa60 [ 95.700504][ T5312] ? __pfx__printk+0x10/0x10 [ 95.702415][ T5312] ? __pfx_vpanic+0x10/0x10 [ 95.704306][ T5312] ? is_bpf_text_address+0x292/0x2b0 [ 95.706613][ T5312] ? is_bpf_text_address+0x26/0x2b0 [ 95.708903][ T5312] panic+0xc5/0xd0 [ 95.710503][ T5312] ? __pfx_panic+0x10/0x10 [ 95.712389][ T5312] __warn+0x315/0x4c0 [ 95.714055][ T5312] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 95.716745][ T5312] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 95.719480][ T5312] __report_bug+0x276/0x570 [ 95.721346][ T5312] ? drm_atomic_helper_wait_for_vblanks+0x763/0x8f0 [ 95.724112][ T5312] ? __pfx___report_bug+0x10/0x10 [ 95.726222][ T5312] report_bug_entry+0x19b/0x290 [ 95.728233][ T5312] ? drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 95.730910][ T5312] ? drm_atomic_helper_wait_for_vblanks+0x7a8/0x8f0 [ 95.733573][ T5312] handle_bug+0xce/0x200 [ 95.735334][ T5312] exc_invalid_op+0x1a/0x50 [ 95.737329][ T5312] asm_exc_invalid_op+0x1a/0x20 [ 95.739363][ T5312] RIP: 0010:drm_atomic_helper_wait_for_vblanks+0x7a3/0x8f0 [ 95.742349][ T5312] Code: 00 4d 8d 6e 20 45 8b 3f 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 0e 48 89 fb 4c 89 ef e8 d7 9b 9f fc 48 89 df 49 8b 55 00 44 89 fe <67> 48 0f b9 3a 49 bd 00 00 00 00 00 fc ff df 48 8b 5c 24 50 e9 cc [ 95.750413][ T5312] RSP: 0018:ffffc9000e8cf540 EFLAGS: 00010246 [ 95.752917][ T5312] RAX: 1ffff11006a0000c RBX: dffffc0000000000 RCX: 0000000000100000 [ 95.756127][ T5312] RDX: ffff88801f5c0700 RSI: 0000000000000027 RDI: ffffffff9084c970 [ 95.759418][ T5312] RBP: ffffc9000e8cf680 R08: ffffffff9078fa37 R09: 1ffffffff20f1f46 [ 95.762738][ T5312] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: ffff888012cc7d08 [ 95.766081][ T5312] R13: ffff888035000060 R14: ffff888035000040 R15: 0000000000000027 [ 95.769401][ T5312] ? __pfx_drm_atomic_helper_wait_for_vblanks+0x10/0x10 [ 95.772303][ T5312] ? __pfx_autoremove_wake_function+0x10/0x10 [ 95.774892][ T5312] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.777328][ T5312] ? drm_atomic_helper_commit_hw_done+0x3da/0x410 [ 95.779997][ T5312] drm_atomic_helper_commit_tail+0x2e9/0x510 [ 95.782487][ T5312] commit_tail+0x2b1/0x3c0 [ 95.784419][ T5312] drm_atomic_helper_commit+0xa77/0xb10 [ 95.786865][ T5312] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 95.789426][ T5312] drm_atomic_commit+0x24e/0x2b0 [ 95.791496][ T5312] ? __pfx_drm_atomic_commit+0x10/0x10 [ 95.793705][ T5312] ? __pfx___drm_printfn_info+0x10/0x10 [ 95.795987][ T5312] ? drm_atomic_commit_init+0x2ca/0x370 [ 95.798332][ T5312] drm_atomic_helper_set_config+0xe2/0x160 [ 95.800834][ T5312] drm_mode_setcrtc+0xa70/0x1d20 [ 95.803036][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.805346][ T5312] ? __lock_acquire+0x683/0x2cf0 [ 95.807526][ T5312] ? do_raw_spin_unlock+0x4d/0x200 [ 95.809691][ T5312] ? _raw_spin_unlock+0x28/0x50 [ 95.811736][ T5312] ? drm_is_current_master+0x19f/0x200 [ 95.814141][ T5312] drm_ioctl_kernel+0x2df/0x3b0 [ 95.816288][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.818620][ T5312] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 95.820892][ T5312] drm_ioctl+0x70e/0xba0 [ 95.822848][ T5312] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 95.825212][ T5312] ? __pfx_drm_ioctl+0x10/0x10 [ 95.827399][ T5312] ? __fget_files+0x2a/0x420 [ 95.829512][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.831731][ T5312] ? __pfx_drm_ioctl+0x10/0x10 [ 95.833881][ T5312] __se_sys_ioctl+0xfc/0x170 [ 95.835873][ T5312] do_syscall_64+0x166/0x520 [ 95.837953][ T5312] ? trace_irq_disable+0x3b/0x140 [ 95.840153][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.842793][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 95.844894][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.847522][ T5312] RIP: 0033:0x7f4d7659e159 [ 95.849472][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.857831][ T5312] RSP: 002b:00007f4d774edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.861500][ T5312] RAX: ffffffffffffffda RBX: 00007f4d76825fa0 RCX: 00007f4d7659e159 [ 95.864950][ T5312] RDX: 0000200000000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 95.868502][ T5312] RBP: 00007f4d76635024 R08: 0000000000000000 R09: 0000000000000000 [ 95.871771][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.875213][ T5312] R13: 00007f4d76826038 R14: 00007f4d76825fa0 R15: 00007ffe7cfffa98 [ 95.878648][ T5312] [ 95.880436][ T5312] Kernel Offset: disabled [ 95.882393][ T5312] Rebooting in 86400 seconds..