syzbot


WARNING in drm_gem_prime_fd_to_handle

Status: upstream: reported C repro on 2023/12/08 05:49
Subsystems: dri
[Documentation on labels]
Reported-by: syzbot+268d319a7bfd92f4ae01@syzkaller.appspotmail.com
First crash: 85d, last: 5d22h
Cause bisection: introduced by (bisect log) :
commit 85e26dd5100a182bf8448050427539c0a66ab793
Author: Christian KΓΆnig <christian.koenig@amd.com>
Date: Thu Jan 26 09:24:26 2023 +0000

  drm/client: fix circular reference counting issue

Crash: WARNING in drm_gem_prime_fd_to_handle (log)
Repro: C syz .config
  
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] [dri?] WARNING in drm_gem_prime_fd_to_handle 0 (1) 2023/12/08 05:49
Last patch testing requests (3)
Created Duration User Patch Repo Result
2024/02/22 01:23 16m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/02/05 20:46 15m retest repro upstream report log
2024/01/03 18:40 20m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5141 at drivers/gpu/drm/drm_prime.c:326 drm_gem_prime_fd_to_handle+0x4be/0x550 drivers/gpu/drm/drm_prime.c:326
Modules linked in:
CPU: 0 PID: 5141 Comm: syz-executor725 Not tainted 6.8.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:drm_gem_prime_fd_to_handle+0x4be/0x550 drivers/gpu/drm/drm_prime.c:326
Code: 00 00 48 89 df e8 c2 69 6d ff e9 e9 fd ff ff e8 d8 d6 8b fc 4c 89 ff 41 89 dc e8 ed 43 94 05 e9 b8 fe ff ff e8 c3 d6 8b fc 90 <0f> 0b 90 e9 47 fd ff ff e8 65 a9 e3 fc e9 16 fc ff ff e8 5b a9 e3
RSP: 0018:ffffc90004537c30 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88801dddb800 RCX: ffffffff84fc489b
RDX: ffff8880212d8000 RSI: ffffffff84fc4b9d RDI: ffff88801dddb928
RBP: ffff88801d093800 R08: 0000000000000007 R09: fffffffffffff000
R10: ffff88801dddb800 R11: 0000000000000001 R12: ffff8880213d7000
R13: ffff88807efb5000 R14: ffffc90004537df8 R15: ffff88801ddccc10
FS:  0000555557456380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e60890f33 CR3: 0000000021dab000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 drm_prime_fd_to_handle_ioctl+0xcf/0x100 drivers/gpu/drm/drm_prime.c:375
 drm_ioctl_kernel+0x1e8/0x3d0 drivers/gpu/drm/drm_ioctl.c:744
 drm_ioctl+0x5d4/0xc00 drivers/gpu/drm/drm_ioctl.c:841
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:871 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f6e60892e69
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff140f4928 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e60892e69
RDX: 0000000020000000 RSI: 00000000c00c642e RDI: 0000000000000003
RBP: 0000000000000000 R08: 00000000000000a0 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 000000000000df61
R13: 00007fff140f493c R14: 00007fff140f4950 R15: 00007fff140f4940
 </TASK>

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/22 14:44 upstream 6613476e225e 9bd8dcda .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in drm_gem_prime_fd_to_handle
2024/01/12 08:35 upstream 22d29f1112c8 dda5a988 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/04 05:45 upstream 33cc938e65a9 f819d6f7 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in drm_gem_prime_fd_to_handle
2023/12/12 04:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 0128e0962959 28b24332 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in drm_gem_prime_fd_to_handle
2024/02/07 23:22 upstream 6d280f4d760e 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in drm_gem_prime_fd_to_handle
2024/01/13 03:24 upstream 70d201a40823 dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in drm_gem_prime_fd_to_handle
2024/01/13 02:54 upstream 70d201a40823 dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in drm_gem_prime_fd_to_handle
2023/12/20 18:08 upstream 55cb5f43689d 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/04 05:05 upstream 33cc938e65a9 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in drm_gem_prime_fd_to_handle
2023/12/20 18:29 linux-next 20d857259d7d 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/09 12:41 linux-next 8e00ce02066e 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
* Struck through repros no longer work on HEAD.