syzbot


WARNING in drm_gem_prime_fd_to_handle

Status: upstream: reported C repro on 2023/12/08 05:49
Subsystems: dri
[Documentation on labels]
Reported-by: syzbot+268d319a7bfd92f4ae01@syzkaller.appspotmail.com
First crash: 145d, last: 1d22h
Cause bisection: introduced by (bisect log) :
commit 85e26dd5100a182bf8448050427539c0a66ab793
Author: Christian KΓΆnig <christian.koenig@amd.com>
Date: Thu Jan 26 09:24:26 2023 +0000

  drm/client: fix circular reference counting issue

Crash: WARNING in drm_gem_prime_fd_to_handle (log)
Repro: C syz .config
  
Discussions (4)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (Mar 2024) 0 (1) 2024/03/05 11:09
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] [dri?] WARNING in drm_gem_prime_fd_to_handle 0 (1) 2023/12/08 05:49
Last patch testing requests (6)
Created Duration User Patch Repo Result
2024/04/21 12:27 18m retest repro upstream report log
2024/04/21 12:27 19m retest repro upstream report log
2024/04/21 12:27 17m retest repro upstream report log
2024/02/22 01:23 16m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/02/05 20:46 15m retest repro upstream report log
2024/01/03 18:40 20m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6732 at drivers/gpu/drm/drm_prime.c:326 drm_gem_prime_fd_to_handle+0x4c5/0x550 drivers/gpu/drm/drm_prime.c:326
Modules linked in:
CPU: 0 PID: 6732 Comm: syz-executor226 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:drm_gem_prime_fd_to_handle+0x4c5/0x550 drivers/gpu/drm/drm_prime.c:326
Code: 00 00 48 89 df e8 4b 3d 69 ff e9 e5 fd ff ff e8 71 b0 77 fc 4c 89 ff 41 89 dc e8 d6 6f c7 05 e9 b4 fe ff ff e8 5c b0 77 fc 90 <0f> 0b 90 e9 43 fd ff ff e8 5e 83 d3 fc e9 0f fc ff ff e8 54 83 d3
RSP: 0018:ffffc90009b37c30 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88801c343000 RCX: ffffffff8517509e
RDX: ffff88802ad89e00 RSI: ffffffff851753a4 RDI: ffff88801c343128
RBP: ffff88802334d400 R08: 0000000000000007 R09: fffffffffffff000
R10: ffff88801c343000 R11: 0000000000000001 R12: ffff88802334f800
R13: ffff88802ad6e000 R14: ffffc90009b37df8 R15: ffff88801f5d0c10
FS:  00005555566fd380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fefbbdd7100 CR3: 00000000299a2000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 drm_prime_fd_to_handle_ioctl+0xd6/0x110 drivers/gpu/drm/drm_prime.c:375
 drm_ioctl_kernel+0x1ef/0x3e0 drivers/gpu/drm/drm_ioctl.c:744
 drm_ioctl+0x5dc/0xc10 drivers/gpu/drm/drm_ioctl.c:841
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:904 [inline]
 __se_sys_ioctl fs/ioctl.c:890 [inline]
 __x64_sys_ioctl+0x196/0x220 fs/ioctl.c:890
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fefbbd5fee9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed6193b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fefbbd5fee9
RDX: 0000000020000180 RSI: 00000000c00c642e RDI: 0000000000000004
RBP: 0000000000000000 R08: 00000000000000a0 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 000000000002102e
R13: 00007ffed6193b9c R14: 00007ffed6193bb0 R15: 00007ffed6193ba0
 </TASK>

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/25 11:15 upstream e88c4cfcb7b8 8bdc0f22 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in drm_gem_prime_fd_to_handle
2024/03/19 00:50 upstream fe46a7dd189e baa80228 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2024/01/22 14:44 upstream 6613476e225e 9bd8dcda .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in drm_gem_prime_fd_to_handle
2024/01/12 08:35 upstream 22d29f1112c8 dda5a988 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/04 05:45 upstream 33cc938e65a9 f819d6f7 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in drm_gem_prime_fd_to_handle
2023/12/12 04:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 0128e0962959 28b24332 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in drm_gem_prime_fd_to_handle
2024/02/28 10:29 upstream cf1182944c7c d367cbe5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2024/02/07 23:22 upstream 6d280f4d760e 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in drm_gem_prime_fd_to_handle
2024/01/13 03:24 upstream 70d201a40823 dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in drm_gem_prime_fd_to_handle
2024/01/13 02:54 upstream 70d201a40823 dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in drm_gem_prime_fd_to_handle
2023/12/20 18:08 upstream 55cb5f43689d 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/04 05:05 upstream 33cc938e65a9 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in drm_gem_prime_fd_to_handle
2023/12/20 18:29 linux-next 20d857259d7d 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2023/12/09 12:41 linux-next 8e00ce02066e 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in drm_gem_prime_fd_to_handle
2024/03/12 10:57 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 707081b61156 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in drm_gem_prime_fd_to_handle
* Struck through repros no longer work on HEAD.