WARNING in drm_prime_destroy_file_private

Status: upstream: reported C repro on 2020/12/23 07:13
Reported-by: syzbot+efcb3da669bcf6f29d06@syzkaller.appspotmail.com
First crash: 2042d, last: 1427d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in drm_prime_destroy_file_private (2) dri -1 C done error 577 209d 942d 0/29 auto-obsoleted due to no activity on 2026/03/09 17:56
upstream WARNING in drm_prime_destroy_file_private dri -1 1 1601d 1597d 0/29 auto-closed as invalid on 2022/07/06 07:47
upstream WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 C error 183 71d 75d 29/29 fixed on 2026/06/01 16:11
linux-4.19 WARNING in drm_prime_destroy_file_private (2) -1 C error 2 1549d 1550d 0/1 upstream: reported C repro on 2022/04/29 07:43
linux-4.19 WARNING in drm_prime_destroy_file_private -1 syz done 6 1837d 2028d 1/1 fixed on 2021/08/15 11:28
▶ ▼ Last patch testing requests (6)
Created Duration User Patch Repo Result
2023/03/05 19:32 0m retest repro linux-4.14.y error
2023/03/05 18:32 0m retest repro linux-4.14.y error
2023/03/05 17:32 0m retest repro linux-4.14.y error
2023/03/05 16:32 0m retest repro linux-4.14.y error
2023/03/05 15:32 0m retest repro linux-4.14.y error
2023/03/05 14:32 10m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (20)
Created Duration User Patch Repo Result
2022/10/13 02:12 0m bisect fix linux-4.14.y error job log
2022/08/30 02:48 22m bisect fix linux-4.14.y OK (0) job log log
2022/07/28 09:40 22m bisect fix linux-4.14.y OK (0) job log log
2022/06/28 09:21 18m bisect fix linux-4.14.y OK (0) job log log
2022/05/29 08:41 21m bisect fix linux-4.14.y OK (0) job log log
2022/04/10 18:37 24m bisect fix linux-4.14.y OK (0) job log log
2022/03/11 05:44 23m bisect fix linux-4.14.y OK (0) job log log
2022/02/09 05:19 25m bisect fix linux-4.14.y OK (0) job log log
2022/01/10 04:55 24m bisect fix linux-4.14.y OK (0) job log log
2021/12/11 04:28 26m bisect fix linux-4.14.y OK (0) job log log
2021/11/11 04:03 24m bisect fix linux-4.14.y OK (0) job log log
2021/10/12 03:33 30m bisect fix linux-4.14.y OK (0) job log log
2021/09/12 03:10 22m bisect fix linux-4.14.y OK (0) job log log
2021/08/13 02:48 22m bisect fix linux-4.14.y OK (0) job log log
2021/07/14 02:26 21m bisect fix linux-4.14.y OK (0) job log log
2021/06/14 02:02 24m bisect fix linux-4.14.y OK (0) job log log
2021/05/15 01:41 20m bisect fix linux-4.14.y OK (0) job log log
2021/04/10 22:53 26m bisect fix linux-4.14.y OK (0) job log log
2021/02/27 23:45 21m bisect fix linux-4.14.y OK (0) job log log
2021/01/28 23:05 24m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8453 at drivers/gpu/drm/drm_prime.c:898 drm_prime_destroy_file_private+0x3e/0x50 drivers/gpu/drm/drm_prime.c:898
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 8453 Comm: syz-executor167 Not tainted 4.14.277-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x44 kernel/panic.c:547
 report_bug+0x208/0x250 lib/bug.c:183
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:drm_prime_destroy_file_private+0x3e/0x50 drivers/gpu/drm/drm_prime.c:898
RSP: 0018:ffff888097f279a0 EFLAGS: 00010297
RAX: ffff888096a6e500 RBX: ffff8880988a3db8 RCX: 1ffff11012d4ddb5
RDX: 0000000000000000 RSI: ffff888096a6ed88 RDI: ffff8880988a3e38
RBP: ffffffff837e8380 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880988a3b40
R13: ffff88823851cdc0 R14: ffff8880988a3cf8 R15: ffff8880988a3d20
 drm_release+0xaf9/0xfa0 drivers/gpu/drm/drm_file.c:427
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0xa44/0x2850 kernel/exit.c:868
 do_group_exit+0x100/0x2e0 kernel/exit.c:965
 get_signal+0x38d/0x1ca0 kernel/signal.c:2412
 do_signal+0x7c/0x1550 arch/x86/kernel/signal.c:792
 exit_to_usermode_loop+0x160/0x200 arch/x86/entry/common.c:160
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7feab69a2129
RSP: 002b:00007feab692e2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007feab6a25430 RCX: 00007feab69a2129
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feab6a25438
RBP: 00007feab6a2543c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007feab69f3074
R13: 6972642f7665642f R14: 65732f636f72702f R15: 00007feab6a25438
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/04/29 08:41 linux-4.14.y e3a56aaade89 e9076525 .config console log report syz C ci2-linux-4-14 WARNING in drm_prime_destroy_file_private
2021/04/15 01:41 linux-4.14.y 958e517f4e16 fcdb12ba .config console log report syz ci2-linux-4-14 WARNING in drm_prime_destroy_file_private
2021/04/14 07:38 linux-4.14.y 958e517f4e16 a184b83e .config console log report syz ci2-linux-4-14 WARNING in drm_prime_destroy_file_private
2021/03/11 22:53 linux-4.14.y c7150cd2fa8c 429d8a6b .config console log report syz ci2-linux-4-14 WARNING in drm_prime_destroy_file_private
2020/12/29 23:05 linux-4.14.y 1752938529c6 80910769 .config console log report syz ci2-linux-4-14
2020/12/23 07:12 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report syz ci2-linux-4-14
2021/03/11 20:53 linux-4.14.y c7150cd2fa8c 429d8a6b .config console log report info ci2-linux-4-14 WARNING in drm_prime_destroy_file_private
* Struck through repros no longer work on HEAD.