WARNING in dma_resv_add_fence

Status: fixed on 2026/07/15 10:02
Subsystems: media dri
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+72bd3dd3a5d5f39a0271@syzkaller.appspotmail.com
Fix commit: 9af1b6e175c8 drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
First crash: 95d, last: 90d
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
15b1a383 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ✅ VMHostTrigger: ❌ ❓ WARNING in dma_resv_add_fence 2026/05/31 09:48 2026/05/31 09:48 2026/05/31 10:41 6b4a8443
718d03d2 assessment-security 💥 WARNING in dma_resv_add_fence 2026/05/14 16:15 2026/05/14 16:15 2026/05/14 16:16 6ccb967e
▶ ▼ Discussions (6)
Title Replies (including bot) Last reply
[PATCH v4] drm/virtio: use uninterruptible resv lock for plane updates 8 (8) 2026/05/22 08:26
Re: [PATCH v4] drm/virtio: use uninterruptible resv lock for plane updates 1 (1) 2026/05/20 15:18
[PATCH v3] drm/virtio: use uninterruptible resv lock for plane updates 3 (3) 2026/05/19 08:24
[PATCH v2] drm/virtio: move cursor resv lock acquisition to prepare_fb 5 (5) 2026/05/15 08:41
[PATCH] drm/virtio: check virtio_gpu_array_lock_resv() return in cursor update 3 (3) 2026/05/12 02:07
[syzbot] [dri?] [media?] WARNING in dma_resv_add_fence 1 (4) 2026/05/10 04:55
▶ ▼ Last patch testing requests (2)
Created Duration User Patch Repo Result
2026/05/10 04:55 19m kartikey406@gmail.com patch upstream log
2026/05/08 00:26 20m hdanton@sina.com patch upstream log

Sample crash report:
R13: 00007f7755215fac R14: 00007f7755215fa0 R15: 00007f7755215fa0
 </TASK>
------------[ cut here ]------------
debug_locks && !(lock_is_held(&(&(obj)->lock.base)->dep_map) != 0)
WARNING: drivers/dma-buf/dma-resv.c:296 at dma_resv_add_fence+0x71e/0x840 drivers/dma-buf/dma-resv.c:296, CPU#2: syz.0.17/5919
Modules linked in:
CPU: 2 UID: 0 PID: 5919 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:dma_resv_add_fence+0x71e/0x840 drivers/dma-buf/dma-resv.c:296
Code: 44 24 08 be ff ff ff ff 48 8d 78 60 e8 db 3b 33 05 31 ff 89 c3 89 c6 e8 e0 58 b1 fb 85 db 0f 85 26 fa ff ff e8 23 5e b1 fb 90 <0f> 0b 90 e9 18 fa ff ff e8 15 5e b1 fb be 03 00 00 00 4c 89 e7 e8
RSP: 0018:ffffc9000448f168 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff865734f0
RDX: ffff8880261ea500 RSI: ffffffff865734fd RDI: ffff8880261ea500
RBP: ffff88802d439f70 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802d439f00
R13: ffff88802d439f00 R14: 1ffff92000891e39 R15: ffff88802853e800
FS:  00005555690ac500(0000) GS:ffff8880d6572000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32a63fff CR3: 000000003fb78000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 virtio_gpu_array_add_fence+0xcd/0x140 drivers/gpu/drm/virtio/virtgpu_gem.c:257
 virtio_gpu_queue_ctrl_sgs drivers/gpu/drm/virtio/virtgpu_vq.c:410 [inline]
 virtio_gpu_queue_fenced_ctrl_buffer+0x578/0xfb0 drivers/gpu/drm/virtio/virtgpu_vq.c:500
 virtio_gpu_cursor_plane_update+0x411/0xbc0 drivers/gpu/drm/virtio/virtgpu_plane.c:463
 drm_atomic_helper_commit_planes+0x497/0xf10 drivers/gpu/drm/drm_atomic_helper.c:3038
 drm_atomic_helper_commit_tail+0x7f/0x130 drivers/gpu/drm/drm_atomic_helper.c:1989
 commit_tail+0x338/0x430 drivers/gpu/drm/drm_atomic_helper.c:2074
 drm_atomic_helper_commit+0x303/0x380 drivers/gpu/drm/drm_atomic_helper.c:2312
 drm_atomic_commit+0x230/0x300 drivers/gpu/drm/drm_atomic.c:1789
 drm_atomic_helper_update_plane+0x314/0x400 drivers/gpu/drm/drm_atomic_helper.c:3438
 __setplane_atomic+0x22d/0x350 drivers/gpu/drm/drm_plane.c:1101
 drm_mode_cursor_universal+0x5e9/0xe20 drivers/gpu/drm/drm_plane.c:1256
 drm_mode_cursor_common+0x308/0x970 drivers/gpu/drm/drm_plane.c:1315
 drm_mode_cursor_ioctl+0xd4/0x110 drivers/gpu/drm/drm_plane.c:1365
 drm_ioctl_kernel+0x1f3/0x3e0 drivers/gpu/drm/drm_ioctl.c:804
 drm_ioctl+0x5e6/0xc60 drivers/gpu/drm/drm_ioctl.c:901
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7754f9cdd9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd0c03a0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f7755215fa0 RCX: 00007f7754f9cdd9
RDX: 0000200000000100 RSI: 00000000c01c64a3 RDI: 0000000000000003
RBP: 00007ffd0c03a120 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007f7755215fac R14: 00007f7755215fa0 R15: 00007f7755215fa0
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/07 22:40 upstream fcee7d82f27d e358bca5 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
2026/05/07 22:03 upstream fcee7d82f27d e358bca5 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
2026/05/12 15:59 upstream 50897c955902 07aeade5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
2026/05/12 03:24 upstream 50897c955902 d168f260 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
2026/05/08 22:24 upstream cbf457c584b5 29233ece .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
2026/05/07 23:44 upstream fcee7d82f27d e358bca5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in dma_resv_add_fence
2026/05/07 21:39 upstream fcee7d82f27d e358bca5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in dma_resv_add_fence
* Struck through repros no longer work on HEAD.