ci starts bisection 2023-10-11 08:23:25.607299685 +0000 UTC m=+59605.751017557 bisecting cause commit starting from 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 building syzkaller on 83165b574421e7d45d7a64c46c22718dbfee2787 ensuring issue is reproducible on original commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9f03393ee2a3edc6d4c240f5ea84f3aae722ba6c99c57cffa6a9a45a59ed21b8 all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3126eb8c2885ad08f1fbfd23424abe348b19318aa7f74696ca15f2f59867149f all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=3883 full=7695 leaves diff=2018 split chunks (needed=false): <2018> split chunk #0 of len 2018 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7b657f4ebaf64d41aefc5b210fbce0a79d71251ea0e56945a469f8d697a9069a all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 55bfe024767f4a2946451b2ce6f319e5138611e31ec94d47770dac681725f672 all runs: OK false negative chance: 0.000 testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bc82eb8fdce35dd0b8a271fd002fe3fd53d4ffb41c587dbd201e8a54290f000f all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 189505f4712ea0b14375a87d471d026cf471fc42413a3718f6eba8d07938ad85 all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 1c8b86a3799f7e5be903c3f49fcdaee29fd385b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6a311c153d987c0c34de156402663b2f9a12ccb2bfeba75013cc34fd2cfa85e9 all runs: crashed: WARNING in drm_prime_fd_to_handle_ioctl representative crash: WARNING in drm_prime_fd_to_handle_ioctl, types: [WARNING] the chunk can be dropped minimized to 404 configs; suspects: [6LOWPAN ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI BLK_DEV_ZONED CMA COMMON_CLK DAX DLM DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DP_AUX_CHARDEV DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXTCON EXTCON_INTEL_CHT_WC F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_CORE FB_DEFERRED_IO FB_DEVICE FB_IOMEM_HELPERS FB_NOTIFY FB_SYSMEM_HELPERS FB_SYSMEM_HELPERS_DEFERRED FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GUEST_PERF_EVENTS GVE HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_EVENTFD HAVE_KVM_IRQCHIP HAVE_KVM_IRQFD HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_DRAGONRISE HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_TIVO HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_TEST IOMMU_SVA IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_ROUTE_CLASSID IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_PROTO_TCP IRQ_TIME_ACCOUNTING LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MPTCP MTD NETFILTER_ADVANCED NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_TABLES NF_TABLES_NETDEV RADIO_ADAPTERS RADIO_SI4713 RAS RC_CORE RFKILL SND SOUND STAGING TRANSPARENT_HUGEPAGE VIDEO_DEV VIRTIO_FS WAN ZONE_DEVICE] disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.5 v6.4 v6.3 v6.1 v5.19 v5.17 v5.15 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 28 release tags testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 44e4cd698824996f6c8fe6cde2bb80de55729da43f575fcac83efe6c4384c01b all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 738bc86e425ff761ca00ec41eb7e39e370490f9274facdbc71e4a5d3c185922c all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: de7cfe1f963865e46cd26f329e8c547034e5137d22b667ae01e68f6e58593f71 all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a9bce03fc05b6b26d45314aba5fd7cd788c55919c5516eca18f28be5ce6bf05d all runs: OK false negative chance: 0.000 # git bisect start 457391b0380335d5e9a5babdec90ac53928b23b4 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 Bisecting: 16238 revisions left to test after this (roughly 14 steps) [62be69397e53ab14f607698bb41343ce576713e8] Merge tag 'wireless-next-2023-01-23' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit 62be69397e53ab14f607698bb41343ce576713e8 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 57e8e60d384d0a7561a262cb90c12a0c85ad56bf028560c874d56a0e4202533f all runs: OK false negative chance: 0.000 # git bisect good 62be69397e53ab14f607698bb41343ce576713e8 Bisecting: 7399 revisions left to test after this (roughly 13 steps) [a5c95ca18a98d742d0a4a04063c32556b5b66378] Merge tag 'drm-next-2023-02-23' of git://anongit.freedesktop.org/drm/drm testing commit a5c95ca18a98d742d0a4a04063c32556b5b66378 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cb41c045701b25608dbb43e7311031c415acfc910ee990842f35b531418e040b all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad a5c95ca18a98d742d0a4a04063c32556b5b66378 Bisecting: 4425 revisions left to test after this (roughly 12 steps) [36289a03bcd3aabdf66de75cb6d1b4ee15726438] Merge tag 'v6.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 testing commit 36289a03bcd3aabdf66de75cb6d1b4ee15726438 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8e0eb344550433a6ae6f3344df7685c43244e703e621007402db37cfee8fb87d all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 36289a03bcd3aabdf66de75cb6d1b4ee15726438 Bisecting: 2433 revisions left to test after this (roughly 11 steps) [c72e04c26faefc6650709066a8f019a7fb4cbb84] Merge tag 'soc-defconfig-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit c72e04c26faefc6650709066a8f019a7fb4cbb84 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: eed95ee3f634ca8d2300d872371ce06c922ab531249da16f91d287c5e37112cf all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad c72e04c26faefc6650709066a8f019a7fb4cbb84 Bisecting: 983 revisions left to test after this (roughly 10 steps) [4fe37223975ce04c4a4ad0a136cd4e64b39bc3ca] Merge tag 'sound-6.2-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 4fe37223975ce04c4a4ad0a136cd4e64b39bc3ca gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 651df78846bd9bdb819f16a0389052374eed19a1287d8f6bb52209d9e2a11257 all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 4fe37223975ce04c4a4ad0a136cd4e64b39bc3ca Bisecting: 499 revisions left to test after this (roughly 9 steps) [80826e9020afc7b8243df302a13521e0020fa9d8] Merge tag 'input-for-v6.2-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input testing commit 80826e9020afc7b8243df302a13521e0020fa9d8 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e8b5afd326b758541231e045e65725cd114a6d27a34cd12a6454b7e834a1d40b all runs: OK false negative chance: 0.000 # git bisect good 80826e9020afc7b8243df302a13521e0020fa9d8 Bisecting: 250 revisions left to test after this (roughly 8 steps) [0136d86b78522bbd5755f8194c97a987f0586ba5] Merge tag 'block-6.2-2023-02-03' of git://git.kernel.dk/linux testing commit 0136d86b78522bbd5755f8194c97a987f0586ba5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fc07ae587f54d6d9a5e82ebc78924baf955c288e6b17d9bd8847cb4e1dfe3605 all runs: OK false negative chance: 0.000 # git bisect good 0136d86b78522bbd5755f8194c97a987f0586ba5 Bisecting: 124 revisions left to test after this (roughly 7 steps) [0b028189d1019ca352da108643b8f1503ee25a0e] Merge tag 'for-linus-2023020901' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid testing commit 0b028189d1019ca352da108643b8f1503ee25a0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c6721e6992533ed2d2e0f3f9913e4c33fc9deec676d33c756d99c475de3cb9ac all runs: OK false negative chance: 0.000 # git bisect good 0b028189d1019ca352da108643b8f1503ee25a0e Bisecting: 62 revisions left to test after this (roughly 6 steps) [2fcde9fe258ec8b88d41def38e43ca4da32c0a9a] net: mscc: ocelot: fix all IPv6 getting trapped to CPU when PTP timestamping is used testing commit 2fcde9fe258ec8b88d41def38e43ca4da32c0a9a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: eea25988cb736a5888659b2a982e57ef0342f41afc2a3ec269ab92ebc787a89e all runs: OK false negative chance: 0.000 # git bisect good 2fcde9fe258ec8b88d41def38e43ca4da32c0a9a Bisecting: 31 revisions left to test after this (roughly 5 steps) [777c1e01cb7e1947765fb0c3b9b71dab18e53e46] Merge tag 'amd-drm-fixes-6.2-2023-02-09' of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes testing commit 777c1e01cb7e1947765fb0c3b9b71dab18e53e46 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 262603476d743f7c9dc24b6efece9312820bd77e9db9cbb2e59736f32b60ffb3 all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 777c1e01cb7e1947765fb0c3b9b71dab18e53e46 Bisecting: 14 revisions left to test after this (roughly 4 steps) [4684f5ce839ab27f5f0414c08084468098363d27] Merge tag 'amd-drm-fixes-6.2-2023-02-08' of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes testing commit 4684f5ce839ab27f5f0414c08084468098363d27 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 15a394230e046f4fd2e3b59c856bca7a3794e2164fcd8a6adee8d2d77638b87d all runs: OK false negative chance: 0.000 # git bisect good 4684f5ce839ab27f5f0414c08084468098363d27 Bisecting: 9 revisions left to test after this (roughly 3 steps) [6a7ff131f17f44c593173c5ee30e2c03ef211685] drm/i915: Fix VBT DSI DVO port handling testing commit 6a7ff131f17f44c593173c5ee30e2c03ef211685 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2660c0cc632ae61a270abd6662bd8a454e779f3730321bd8bb9aca914b9a2b20 all runs: OK false negative chance: 0.000 # git bisect good 6a7ff131f17f44c593173c5ee30e2c03ef211685 Bisecting: 4 revisions left to test after this (roughly 2 steps) [0ed904169f85efcf9f82bd960597aac46260537f] Merge tag 'drm-intel-fixes-2023-02-09' of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes testing commit 0ed904169f85efcf9f82bd960597aac46260537f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8d2133cfec0cfed511e28fe3707abe749ea977d2cb15dbe8d1728789d35455f2 all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 0ed904169f85efcf9f82bd960597aac46260537f Bisecting: 2 revisions left to test after this (roughly 1 step) [8f20660f053cefd4693e69cfff9cf58f4f7c4929] drm/virtio: exbuf->fence_fd unmodified on interrupted wait testing commit 8f20660f053cefd4693e69cfff9cf58f4f7c4929 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bbbff27abccacd6bb87bae3182d8fef38caa3b573d7f9c3460c8cfd754b09caf all runs: OK false negative chance: 0.000 # git bisect good 8f20660f053cefd4693e69cfff9cf58f4f7c4929 Bisecting: 0 revisions left to test after this (roughly 1 step) [337d5b5edc3d03a30a972aead75cc6be5dcebbf6] Merge tag 'drm-misc-fixes-2023-02-09' of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes testing commit 337d5b5edc3d03a30a972aead75cc6be5dcebbf6 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 00f946c8fd556805a9b118bd41efef20a3158297606502e4d160e08c41e3944a all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 337d5b5edc3d03a30a972aead75cc6be5dcebbf6 Bisecting: 0 revisions left to test after this (roughly 0 steps) [85e26dd5100a182bf8448050427539c0a66ab793] drm/client: fix circular reference counting issue testing commit 85e26dd5100a182bf8448050427539c0a66ab793 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c4cb6c2870a82bd564783cc5e9d9b5e1cf1210ec18daaf8e3931a1bb68e5392 all runs: crashed: WARNING in drm_gem_prime_fd_to_handle representative crash: WARNING in drm_gem_prime_fd_to_handle, types: [WARNING] # git bisect bad 85e26dd5100a182bf8448050427539c0a66ab793 85e26dd5100a182bf8448050427539c0a66ab793 is the first bad commit commit 85e26dd5100a182bf8448050427539c0a66ab793 Author: Christian König Date: Thu Jan 26 10:24:26 2023 +0100 drm/client: fix circular reference counting issue We reference dump buffers both by their handle as well as their object. The problem is now that when anybody iterates over the DRM framebuffers and exports the underlying GEM objects through DMA-buf we run into a circular reference count situation. The result is that the fbdev handling holds the GEM handle preventing the DMA-buf in the GEM object to be released. This DMA-buf in turn holds a reference to the driver module which on unload would release the fbdev. Break that loop by releasing the handle as soon as the DRM framebuffer object is created. The DRM framebuffer and the DRM client buffer structure still hold a reference to the underlying GEM object preventing its destruction. Signed-off-by: Christian König Fixes: c76f0f7cb546 ("drm: Begin an API for in-kernel clients") Cc: Reviewed-by: Thomas Zimmermann Tested-by: Thomas Zimmermann Link: https://patchwork.freedesktop.org/patch/msgid/20230126102814.8722-1-christian.koenig@amd.com drivers/gpu/drm/drm_client.c | 33 ++++++++++++++++++++------------- include/drm/drm_client.h | 5 ----- 2 files changed, 20 insertions(+), 18 deletions(-) accumulated error probability: 0.00 culprit signature: 8c4cb6c2870a82bd564783cc5e9d9b5e1cf1210ec18daaf8e3931a1bb68e5392 parent signature: bbbff27abccacd6bb87bae3182d8fef38caa3b573d7f9c3460c8cfd754b09caf revisions tested: 27, total time: 9h18m17.662823098s (build: 4h50m38.754659702s, test: 3h58m21.905332089s) first bad commit: 85e26dd5100a182bf8448050427539c0a66ab793 drm/client: fix circular reference counting issue recipients (to): ["airlied@gmail.com" "christian.koenig@amd.com" "daniel@ffwll.ch" "dri-devel@lists.freedesktop.org" "maarten.lankhorst@linux.intel.com" "mripard@kernel.org" "tzimmermann@suse.de" "tzimmermann@suse.de"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: WARNING in drm_gem_prime_fd_to_handle ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4742 at drivers/gpu/drm/drm_prime.c:331 drm_gem_prime_fd_to_handle+0x1b4/0x1c0 drivers/gpu/drm/drm_prime.c:362 Modules linked in: CPU: 1 PID: 4742 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 RIP: 0010:drm_gem_prime_fd_to_handle+0x1b4/0x1c0 drivers/gpu/drm/drm_prime.c:331 Code: 89 c7 e9 37 ff ff ff be 03 00 00 00 4c 89 ff e8 52 38 df ff e9 6f ff ff ff 48 8b 3c 24 44 89 fd e8 11 e1 a8 00 e9 c2 fe ff ff <0f> 0b e9 2f ff ff ff 0f 1f 44 00 00 f3 0f 1e fa 41 54 49 89 fc 48 RSP: 0018:ffffc90001ccfd90 EFLAGS: 00010206 RAX: ffff88810628fe00 RBX: ffff888107b99800 RCX: 0000000000000007 RDX: 0000000000000005 RSI: ffff88810ae4a010 RDI: ffff888105240000 RBP: ffff888105240000 R08: 0000000000000000 R09: 000000000000024d R10: ffffc90001ccfd90 R11: ffffc90001ccfe72 R12: ffffc90001ccfe50 R13: ffff888107b99b70 R14: ffff88810628e800 R15: ffff888105245000 FS: 00007f2cc2b806c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc9913980c0 CR3: 0000000105f9e000 CR4: 0000000000350ee0 Call Trace: drm_ioctl_kernel+0xc4/0x170 drivers/gpu/drm/drm_ioctl.c:788 drm_ioctl+0x1e2/0x450 drivers/gpu/drm/drm_ioctl.c:891 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x84/0xc0 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2cc1e7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2cc2b800c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f2cc1f9bf80 RCX: 00007f2cc1e7cae9 RDX: 0000000020000000 RSI: 00000000c00c642e RDI: 0000000000000003 RBP: 00007f2cc1ec847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f2cc1f9bf80 R15: 00007fff15f5fb18