syzbot


WARNING in dma_buf_vmap

Status: upstream: reported C repro on 2025/12/06 01:19
Subsystems: dri media
[Documentation on labels]
Reported-by: syzbot+4317d7108e14e5d56308@syzkaller.appspotmail.com
First crash: 53d, last: 2h53m
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] dma-buf: fix WARNING in dma_buf_vmap 1 (1) 2025/12/21 15:32
[syzbot] [media?] [dri?] WARNING in dma_buf_vmap 0 (1) 2025/12/06 01:19

Sample crash report:
Total swap = 124996kB
1048443 pages RAM
0 pages HighMem/MovableOnly
282835 pages reserved
0 pages cma reserved
------------[ cut here ]------------
WARNING: drivers/dma-buf/dma-buf.c:1528 at dma_buf_vmap+0x41b/0x480 drivers/dma-buf/dma-buf.c:1528, CPU#3: syz.0.17/6095
Modules linked in:
CPU: 3 UID: 0 PID: 6095 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:dma_buf_vmap+0x41b/0x480 drivers/dma-buf/dma-buf.c:1528
Code: fc e9 94 fd ff ff 48 8b 3c 24 e8 70 52 20 fc e9 26 ff ff ff e8 26 7c b6 fb 90 0f 0b e8 1e 7c b6 fb 90 0f 0b e8 16 7c b6 fb 90 <0f> 0b 90 e9 25 fe ff ff 4c 89 f7 e8 85 51 20 fc e9 82 fd ff ff e8
RSP: 0018:ffffc900038b7420 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888031d26c00 RCX: ffffffff86086b4d
RDX: ffff88802837c980 RSI: ffffffff86086c9a RDI: 0000000000000005
RBP: ffffc900038b74c8 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888031d274d0
R13: 1ffff92000716e88 R14: ffff888031d26c30 R15: 00000000fffffff4
FS:  000055555601a500(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0e52af5e9c CR3: 000000002ba82000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 drm_gem_shmem_vmap_locked+0x10f/0x7e0 drivers/gpu/drm/drm_gem_shmem_helper.c:394
 drm_gem_vmap_locked+0xc8/0x1c0 drivers/gpu/drm/drm_gem.c:1273
 drm_gem_vmap+0x4a/0xa0 drivers/gpu/drm/drm_gem.c:1315
 drm_gem_fb_vmap+0xc7/0x4d0 drivers/gpu/drm/drm_gem_framebuffer_helper.c:369
 vkms_prepare_fb+0x87/0xb0 drivers/gpu/drm/vkms/vkms_plane.c:197
 drm_atomic_helper_prepare_planes drivers/gpu/drm/drm_atomic_helper.c:2762 [inline]
 drm_atomic_helper_prepare_planes+0x1ef/0xbb0 drivers/gpu/drm/drm_atomic_helper.c:2738
 drm_atomic_helper_commit+0x191/0x380 drivers/gpu/drm/drm_atomic_helper.c:2191
 drm_atomic_commit+0x234/0x300 drivers/gpu/drm/drm_atomic.c:1743
 drm_atomic_helper_update_plane+0x30b/0x400 drivers/gpu/drm/drm_atomic_helper.c:3362
 __setplane_atomic+0x25a/0x380 drivers/gpu/drm/drm_plane.c:1101
 drm_mode_cursor_universal+0x4a6/0xcb0 drivers/gpu/drm/drm_plane.c:1256
 drm_mode_cursor_common+0x308/0x960 drivers/gpu/drm/drm_plane.c:1315
 drm_mode_cursor_ioctl+0xd1/0x110 drivers/gpu/drm/drm_plane.c:1365
 drm_ioctl_kernel+0x1f4/0x3e0 drivers/gpu/drm/drm_ioctl.c:804
 drm_ioctl+0x5c9/0xc30 drivers/gpu/drm/drm_ioctl.c:901
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f954d98f7c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd3f022da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f954dbe5fa0 RCX: 00007f954d98f7c9
RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
RBP: 00007ffd3f022e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007f954dbe5fa0 R14: 00007f954dbe5fa0 R15: 0000000000000003
 </TASK>

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/05 11:53 upstream 3609fa95fb0f d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_buf_vmap
2025/12/02 06:47 upstream 1d18101a644e d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2025/12/02 05:42 upstream 1d18101a644e d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2025/12/02 04:38 upstream 1d18101a644e d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2025/12/02 03:28 upstream 1d18101a644e d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2025/12/02 02:24 upstream 1d18101a644e d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2026/01/13 15:12 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in dma_buf_vmap
2026/01/15 00:31 upstream 944aacb68baf d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_buf_vmap
2025/12/31 03:36 upstream dbf8fe85a16a d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_buf_vmap
2025/12/24 23:39 upstream ccd1cdca5cd4 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_buf_vmap
2025/12/05 23:19 upstream d1d36025a617 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_buf_vmap
2025/12/02 01:15 upstream 1d18101a644e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_buf_vmap
2026/01/04 06:36 upstream aacb0a6d604a d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in dma_buf_vmap
2026/01/24 18:01 linux-next ca3a02fda4da 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in dma_buf_vmap
2025/12/15 08:33 linux-next 4a5663c04bb6 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in dma_buf_vmap
* Struck through repros no longer work on HEAD.