program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000440)=[0x3], &(0x7f0000000640)=[r4, r4, r5], &(0x7f00000003c0), 0x0, 0x2}) [ 86.122284][ T4648] Bluetooth: hci0: command tx timeout [ 86.167307][ T5323] Zero length message leads to an empty skb [ 87.239948][ T9] ------------[ cut here ]------------ [ 87.239959][ T9] virtio-pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 87.239985][ T9] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#0: kworker/0:0/9 [ 87.251941][ T9] Modules linked in: [ 87.254222][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 87.257815][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.262330][ T9] Workqueue: events drm_fb_helper_damage_work [ 87.265109][ T9] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 87.267969][ T9] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 15 93 9c fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 c6 f5 ff ff b8 92 ff ff ff 49 [ 87.276099][ T9] RSP: 0018:ffffc9000022f7c0 EFLAGS: 00010246 [ 87.279606][ T9] RAX: 1ffff1100635c81a RBX: 0000000000000000 RCX: 0000000000000000 [ 87.283177][ T9] RDX: ffff88800026aea0 RSI: ffffffff8c79f5a0 RDI: ffffffff918671e0 [ 87.286644][ T9] RBP: ffffc9000022f8a8 R08: ffffffff917a967f R09: 1ffffffff22f52cf [ 87.290176][ T9] R10: dffffc0000000000 R11: fffffbfff22f52d0 R12: ffffffff8c79f5a0 [ 87.293821][ T9] R13: ffff888031ae40d0 R14: ffffffff918671e0 R15: ffff88800026aea0 [ 87.297556][ T9] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 87.301311][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.304160][ T9] CR2: 00007fd55fdf8e50 CR3: 0000000013c3d000 CR4: 0000000000352ef0 [ 87.307171][ T9] Call Trace: [ 87.308937][ T9] [ 87.310424][ T9] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 87.313262][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.316084][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.318822][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.322704][ T9] ? drm_vblank_get+0x150/0x290 [ 87.324936][ T9] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 87.327682][ T9] drm_fb_helper_damage_work+0x6cf/0xf20 [ 87.330861][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 87.333489][ T9] ? lock_acquire+0x115/0x350 [ 87.335608][ T9] ? rcu_is_watching+0x16/0xb0 [ 87.337708][ T9] ? process_scheduled_works+0x97a/0x1630 [ 87.340227][ T9] process_scheduled_works+0xc3d/0x1630 [ 87.342620][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.345230][ T9] ? assign_work+0x3cf/0x5d0 [ 87.347350][ T9] worker_thread+0xa47/0xfb0 [ 87.349559][ T9] kthread+0x38b/0x480 [ 87.351315][ T9] ? __pfx_worker_thread+0x10/0x10 [ 87.353585][ T9] ? __pfx_kthread+0x10/0x10 [ 87.356428][ T9] ret_from_fork+0x514/0xb70 [ 87.358448][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 87.360795][ T9] ? __switch_to+0xc89/0x1420 [ 87.362879][ T9] ? __pfx_kthread+0x10/0x10 [ 87.364879][ T9] ret_from_fork_asm+0x1a/0x30 [ 87.367060][ T9] [ 87.368427][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.371595][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 87.375573][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.380195][ T9] Workqueue: events drm_fb_helper_damage_work [ 87.382778][ T9] Call Trace: [ 87.384453][ T9] [ 87.385773][ T9] vpanic+0x56d/0xa60 [ 87.387739][ T9] ? __pfx__printk+0x10/0x10 [ 87.389678][ T9] ? __pfx_vpanic+0x10/0x10 [ 87.391636][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 87.394046][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 87.396312][ T9] panic+0xc5/0xd0 [ 87.397871][ T9] ? __pfx_panic+0x10/0x10 [ 87.399840][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 87.402184][ T9] __warn+0x315/0x4c0 [ 87.404295][ T9] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 87.406846][ T9] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 87.409168][ T9] __report_bug+0x276/0x570 [ 87.410993][ T9] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 87.413258][ T9] ? __pfx___report_bug+0x10/0x10 [ 87.415600][ T9] report_bug_entry+0x19b/0x290 [ 87.417676][ T9] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 87.420060][ T9] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 87.422378][ T9] handle_bug+0xce/0x200 [ 87.424050][ T9] exc_invalid_op+0x1a/0x50 [ 87.426096][ T9] asm_exc_invalid_op+0x1a/0x20 [ 87.428186][ T9] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 87.430608][ T9] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 15 93 9c fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 c6 f5 ff ff b8 92 ff ff ff 49 [ 87.438847][ T9] RSP: 0018:ffffc9000022f7c0 EFLAGS: 00010246 [ 87.441517][ T9] RAX: 1ffff1100635c81a RBX: 0000000000000000 RCX: 0000000000000000 [ 87.445082][ T9] RDX: ffff88800026aea0 RSI: ffffffff8c79f5a0 RDI: ffffffff918671e0 [ 87.448578][ T9] RBP: ffffc9000022f8a8 R08: ffffffff917a967f R09: 1ffffffff22f52cf [ 87.452029][ T9] R10: dffffc0000000000 R11: fffffbfff22f52d0 R12: ffffffff8c79f5a0 [ 87.455542][ T9] R13: ffff888031ae40d0 R14: ffffffff918671e0 R15: ffff88800026aea0 [ 87.458976][ T9] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 87.461574][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.464267][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.466800][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.469354][ T9] ? drm_vblank_get+0x150/0x290 [ 87.471376][ T9] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 87.473999][ T9] drm_fb_helper_damage_work+0x6cf/0xf20 [ 87.476387][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 87.479089][ T9] ? lock_acquire+0x115/0x350 [ 87.481187][ T9] ? rcu_is_watching+0x16/0xb0 [ 87.483294][ T9] ? process_scheduled_works+0x97a/0x1630 [ 87.485793][ T9] process_scheduled_works+0xc3d/0x1630 [ 87.488105][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.490529][ T9] ? assign_work+0x3cf/0x5d0 [ 87.492379][ T9] worker_thread+0xa47/0xfb0 [ 87.494313][ T9] kthread+0x38b/0x480 [ 87.495956][ T9] ? __pfx_worker_thread+0x10/0x10 [ 87.497953][ T9] ? __pfx_kthread+0x10/0x10 [ 87.499823][ T9] ret_from_fork+0x514/0xb70 [ 87.501663][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 87.503770][ T9] ? __switch_to+0xc89/0x1420 [ 87.505809][ T9] ? __pfx_kthread+0x10/0x10 [ 87.507887][ T9] ret_from_fork_asm+0x1a/0x30 [ 87.510126][ T9] [ 87.511869][ T9] Kernel Offset: disabled [ 87.513785][ T9] Rebooting in 86400 seconds..