syzbot


WARNING in drm_syncobj_array_find

Status: upstream: reported C repro on 2023/09/06 11:42
Subsystems: dri
[Documentation on labels]
Reported-by: syzbot+95416f957d84e858b377@syzkaller.appspotmail.com
First crash: 835d, last: 3h23m
Discussions (26)
Title Replies (including bot) Last reply
[PATCH RESEND] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/06 22:00
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/11/27 17:35
[PATCH] drm/syncobj: Prevent overflow and large kmalloc in array_find() 1 (2) 2025/11/27 13:22
[syzbot] Monthly dri report (Nov 2025) 0 (1) 2025/11/27 07:44
[syzbot] Monthly dri report (Oct 2025) 0 (1) 2025/10/27 08:42
[syzbot] Monthly dri report (Sep 2025) 0 (1) 2025/09/25 16:00
[syzbot] Monthly dri report (Aug 2025) 0 (1) 2025/08/25 13:19
[syzbot] Monthly dri report (Jul 2025) 0 (1) 2025/07/25 12:39
[syzbot] Monthly dri report (Jun 2025) 0 (1) 2025/06/24 07:38
[syzbot] Monthly dri report (Jan 2025) 0 (1) 2025/01/15 13:48
[syzbot] Monthly dri report (Dec 2024) 0 (1) 2024/12/16 09:44
[syzbot] Monthly dri report (Nov 2024) 0 (1) 2024/11/14 08:59
[syzbot] Monthly dri report (Oct 2024) 0 (1) 2024/10/13 19:21
[syzbot] Monthly dri report (Sep 2024) 0 (1) 2024/09/12 14:24
[syzbot] Monthly dri report (Aug 2024) 0 (1) 2024/08/13 08:54
[syzbot] Monthly dri report (Jul 2024) 0 (1) 2024/07/12 10:05
[syzbot] Monthly dri report (Jun 2024) 0 (1) 2024/06/10 12:41
[syzbot] Monthly dri report (May 2024) 0 (1) 2024/05/06 13:18
[syzbot] Monthly dri report (Apr 2024) 0 (1) 2024/04/05 12:37
[syzbot] Monthly dri report (Mar 2024) 0 (1) 2024/03/05 11:09
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] Monthly dri report (Nov 2023) 0 (1) 2023/11/30 20:33
[syzbot] Monthly dri report (Oct 2023) 0 (1) 2023/10/30 12:59
[syzbot] Monthly dri report (Sep 2023) 0 (1) 2023/09/28 11:42
[syzbot] [dri?] WARNING in drm_syncobj_array_find 0 (1) 2023/09/06 11:42
Last patch testing requests (11)
Created Duration User Patch Repo Result
2025/11/27 13:05 16m madhurkumar004@gmail.com patch upstream OK log
2025/04/21 15:20 24m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 11m retest repro upstream report log
2025/04/21 12:54 27m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 24m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5531 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 mm/page_alloc.c:5124
Modules linked in:
CPU: 0 UID: 0 PID: 5531 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 mm/page_alloc.c:5124
Code: 74 10 4c 89 e7 89 54 24 0c e8 64 1e 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 ca 14 96 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
RSP: 0018:ffffc9000222f8e0 EFLAGS: 00010246
RAX: ffffc9000222f900 RBX: 0000000000000014 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000222f948
RBP: ffffc9000222f9c8 R08: ffffc9000222f947 R09: 0000000000000000
R10: ffffc9000222f920 R11: fffff52000445f29 R12: 0000000000000000
R13: 1ffff92000445f20 R14: 0000000000040cc0 R15: dffffc0000000000
FS:  0000555593d2a500(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000041c CR3: 0000000046af4000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2416
 ___kmalloc_large_node+0x5f/0x1b0 mm/slub.c:4317
 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:4348
 __do_kmalloc_node mm/slub.c:4364 [inline]
 __kmalloc_noprof+0x36f/0x4f0 mm/slub.c:4388
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kmalloc_array_noprof include/linux/slab.h:948 [inline]
 drm_syncobj_array_find+0x3a/0x450 drivers/gpu/drm/drm_syncobj.c:1297
 drm_syncobj_wait_ioctl+0x208/0x520 drivers/gpu/drm/drm_syncobj.c:1368
 drm_ioctl_kernel+0x2cf/0x390 drivers/gpu/drm/drm_ioctl.c:796
 drm_ioctl+0x67f/0xb10 drivers/gpu/drm/drm_ioctl.c:893
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61f2f8eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff17981dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f61f31e5fa0 RCX: 00007f61f2f8eec9
RDX: 0000200000000400 RSI: 00000000c02864c3 RDI: 0000000000000003
RBP: 00007f61f3011f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f61f31e5fa0 R14: 00007f61f31e5fa0 R15: 0000000000000003
 </TASK>

Crashes (2710):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/25 21:33 upstream bf40f4b87761 0abd0691 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2024/12/10 14:37 upstream 7cb1b4663150 cfc402b4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/12/01 05:06 upstream d8b78066f4c9 68914665 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/10/10 15:29 upstream d3d1556696c1 a156c552 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/07/15 19:58 upstream 0c3836482481 efee4ed2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/04/04 20:33 upstream c85af715cac0 0ee3535e .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/03/26 03:40 upstream 928a87efa423 bcd9b39f .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/12/17 02:52 upstream c8e97fc6b4c0 3222d10c .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/09/02 12:16 upstream 0468be89b3fa 696ea0d2 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/15 17:28 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/15 16:12 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/15 11:25 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/15 07:58 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/15 02:12 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/15 01:31 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/14 20:09 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/14 19:02 upstream 8f0b4cce4481 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/14 15:13 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/14 13:36 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/14 04:31 upstream 9d9c1cfec01c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/14 03:05 upstream 9d9c1cfec01c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/14 01:04 upstream 9d9c1cfec01c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/13 23:59 upstream 9d9c1cfec01c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/13 11:48 upstream 9551a26f17d9 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/13 09:26 upstream 9551a26f17d9 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/13 07:51 upstream 9551a26f17d9 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/12 23:54 upstream 187d0801404f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/12 07:42 upstream d358e5254674 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/12 05:00 upstream d358e5254674 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/11 19:18 upstream d358e5254674 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/11 15:04 upstream 8c8081cc599f d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/11 05:31 upstream 8c8081cc599f d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/10 22:12 upstream 0048fbb4011e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/10 15:16 upstream 0048fbb4011e d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/10 11:32 upstream c9b47175e913 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/10 11:31 upstream c9b47175e913 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/10 07:25 upstream c9b47175e913 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/10 05:08 upstream c9b47175e913 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/09 17:54 upstream cb015814f8b6 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/09 09:57 upstream a110f942672c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/09 08:39 upstream a110f942672c d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/09 02:24 upstream a110f942672c d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/08 20:26 upstream c2f2b01b74be d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/08 14:24 upstream c2f2b01b74be d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/08 11:48 upstream c2f2b01b74be d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/08 10:25 upstream c2f2b01b74be d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/08 06:32 upstream c2f2b01b74be d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/07 22:51 upstream 37bb2e7217b0 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/07 15:46 upstream 37bb2e7217b0 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/07 03:29 upstream c06c303832ec d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/06 22:24 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/06 20:40 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/06 16:12 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2025/12/06 10:01 upstream d1d36025a617 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/06 06:30 upstream d1d36025a617 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/12/05 23:40 upstream d1d36025a617 d1b870e1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
* Struck through repros no longer work on HEAD.