WARNING in idr_replace

Status: fixed on 2017/10/24 06:54
Fix commit: a47f68d6a944 idr: remove WARN_ON_ONCE() when trying to replace negative ID
First crash: 3286d, last: 3254d

Sample crash report:
WARNING: CPU: 3 PID: 2987 at lib/idr.c:157 idr_replace+0x1d8/0x240 lib/idr.c:157
Kernel panic - not syncing: panic_on_warn set ...

CPU: 3 PID: 2987 Comm: syzkaller153736 Not tainted 4.13.0-rc7-next-20170829+ #11
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:52
 panic+0x1e4/0x41c kernel/panic.c:181
 __warn+0x1c4/0x1e0 kernel/panic.c:542
 report_bug+0x211/0x2d0 lib/bug.c:183
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:190
 do_trap_no_signal arch/x86/kernel/traps.c:224 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:273
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:310
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:323
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:929
RIP: 0010:idr_replace+0x1d8/0x240 lib/idr.c:157
RSP: 0018:ffff88003cfdf9f8 EFLAGS: 00010297
RAX: ffff88003b5302c0 RBX: 1ffff100079fbf43 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88003cfdfa78
RBP: ffff88003cfdfae0 R08: ffff88003cfdf440 R09: ffff88003cfdf438
R10: ffff88003cfdf3b0 R11: 1ffff100076a62eb R12: ffffffffffffffff
R13: ffff88003cfdfab8 R14: dffffc0000000000 R15: ffff88003cfdfbc8
 drm_gem_handle_delete+0x33/0xa0 drivers/gpu/drm/drm_gem.c:297
 drm_gem_close_ioctl+0xa1/0xe0 drivers/gpu/drm/drm_gem.c:671
 drm_ioctl_kernel+0x1e7/0x2e0 drivers/gpu/drm/drm_ioctl.c:735
 drm_ioctl+0x72e/0xa50 drivers/gpu/drm/drm_ioctl.c:831
 vfs_ioctl fs/ioctl.c:45 [inline]
 do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:685
 SYSC_ioctl fs/ioctl.c:700 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x439049
RSP: 002b:00007ffd85467bc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000439049
RDX: 0000000020001000 RSI: 0000000040086409 RDI: 0000000000000003
RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000000000fd R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000401ca0 R14: 0000000000401d30 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1209):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/08/30 13:06 linux-next 9458bf6edfa8 ed7f9598 .config console log report syz C ci-upstream-next-kasan-gce
2017/08/12 16:38 linux-next 91dfed74eabc 6a0246bf .config console log report syz C skylake-linux-next-kasan-qemu
2017/09/14 00:06 linux-next 6f20b7a58cb9 96b8e399 .config console log report skylake-linux-next-kasan-qemu
2017/09/10 11:29 linux-next 58bcd35f859b d18bfda0 .config console log report skylake-linux-next-kasan-qemu
2017/09/05 09:07 linux-next 744c56def809 0ed1da4a .config console log report skylake-linux-next-kasan-qemu
2017/09/04 13:51 linux-next 9829d9f31f6c f400a0da .config console log report ci-upstream-next-kasan-gce
2017/09/04 13:29 linux-next 9829d9f31f6c f400a0da .config console log report ci-upstream-next-kasan-gce
2017/09/03 20:34 linux-next 1d53d908b79d a54dce00 .config console log report ci-upstream-next-kasan-gce
2017/09/03 16:43 linux-next 1d53d908b79d a54dce00 .config console log report ci-upstream-next-kasan-gce
2017/09/03 16:40 linux-next 1d53d908b79d a54dce00 .config console log report ci-upstream-next-kasan-gce
2017/09/03 10:00 linux-next 1d53d908b79d a54dce00 .config console log report ci-upstream-next-kasan-gce
2017/09/03 07:48 linux-next 1d53d908b79d a54dce00 .config console log report ci-upstream-next-kasan-gce
2017/08/31 22:46 linux-next e8b684315214 4ccdd782 .config console log report ci-upstream-next-kasan-gce
2017/08/27 14:24 linux-next 7159188b70e3 4074aed7 .config console log report skylake-linux-next-kasan-qemu
2017/08/24 17:52 linux-next 9506597de2cd 3f1aca48 .config console log report ci-upstream-next-kasan-gce
2017/08/23 14:11 linux-next cc6d46bb99b5 f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/22 02:55 linux-next bb70832dd42b f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/20 17:06 linux-next bb70832dd42b f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/17 16:28 linux-next bb70832dd42b f238fbd4 .config console log report ci-upstream-next-kasan-gce
2017/08/17 05:57 linux-next 5d51332f20b2 f93be584 .config console log report skylake-linux-next-kasan-qemu
2017/08/15 23:13 linux-next 497247033eb1 6a0246bf .config console log report skylake-linux-next-kasan-qemu
2017/08/13 04:53 linux-next 91dfed74eabc 6a0246bf .config console log report skylake-linux-next-kasan-qemu
* Struck through repros no longer work on HEAD.