WARNING in drm_syncobj_array_find

Status: upstream: reported C repro on 2023/09/06 11:42
Subsystems: dri
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+95416f957d84e858b377@syzkaller.appspotmail.com
First crash: 1072d, last: 3h39m
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
3600de84 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in drm_syncobj_array_find 2026/05/23 02:16 2026/05/23 02:16 2026/05/23 02:46 df8ac09c
▶ ▼ Discussions (31)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (May 2026) 0 (1) 2026/05/02 12:32
[syzbot] Monthly dri report (Apr 2026) 0 (1) 2026/04/01 07:42
[syzbot] Monthly dri report (Mar 2026) 0 (1) 2026/03/01 06:22
[syzbot] Monthly dri report (Jan 2026) 0 (1) 2026/01/28 22:39
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/27 16:08
[PATCH RESEND] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/06 22:00
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/11/27 17:35
[PATCH] drm/syncobj: Prevent overflow and large kmalloc in array_find() 1 (2) 2025/11/27 13:22
[syzbot] Monthly dri report (Nov 2025) 0 (1) 2025/11/27 07:44
[syzbot] Monthly dri report (Oct 2025) 0 (1) 2025/10/27 08:42
[syzbot] Monthly dri report (Sep 2025) 0 (1) 2025/09/25 16:00
[syzbot] Monthly dri report (Aug 2025) 0 (1) 2025/08/25 13:19
[syzbot] Monthly dri report (Jul 2025) 0 (1) 2025/07/25 12:39
[syzbot] Monthly dri report (Jun 2025) 0 (1) 2025/06/24 07:38
[syzbot] Monthly dri report (Jan 2025) 0 (1) 2025/01/15 13:48
[syzbot] Monthly dri report (Dec 2024) 0 (1) 2024/12/16 09:44
[syzbot] Monthly dri report (Nov 2024) 0 (1) 2024/11/14 08:59
[syzbot] Monthly dri report (Oct 2024) 0 (1) 2024/10/13 19:21
[syzbot] Monthly dri report (Sep 2024) 0 (1) 2024/09/12 14:24
[syzbot] Monthly dri report (Aug 2024) 0 (1) 2024/08/13 08:54
[syzbot] Monthly dri report (Jul 2024) 0 (1) 2024/07/12 10:05
[syzbot] Monthly dri report (Jun 2024) 0 (1) 2024/06/10 12:41
[syzbot] Monthly dri report (May 2024) 0 (1) 2024/05/06 13:18
[syzbot] Monthly dri report (Apr 2024) 0 (1) 2024/04/05 12:37
[syzbot] Monthly dri report (Mar 2024) 0 (1) 2024/03/05 11:09
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] Monthly dri report (Nov 2023) 0 (1) 2023/11/30 20:33
[syzbot] Monthly dri report (Oct 2023) 0 (1) 2023/10/30 12:59
[syzbot] Monthly dri report (Sep 2023) 0 (1) 2023/09/28 11:42
[syzbot] [dri?] WARNING in drm_syncobj_array_find 0 (1) 2023/09/06 11:42
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2025/11/27 13:05 16m madhurkumar004@gmail.com patch upstream OK log
2025/04/21 15:20 24m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 11m retest repro upstream report log
2025/04/21 12:54 27m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 24m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
1
WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280, CPU#3: syz.0.17/5929
Modules linked in:
CPU: 3 UID: 0 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280
Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 9b a3 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 19 8d 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 c0 9c d3 8e 45 89 f7 44 8b 74 24
RSP: 0018:ffffc900035276d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 1ffff920006a4ef4 RDI: 0000000000040cc0
RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009
R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
R13: 1ffff920006a4f32 R14: ffffffff9b754444 R15: 0000000000000001
FS:  00007f19d05a96c0(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f19cf7874c0 CR3: 000000003d5b3000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
 ___kmalloc_large_node+0xe5/0x120 mm/slub.c:5302
 __kmalloc_large_node_noprof+0x1c/0x70 mm/slub.c:5333
 __do_kmalloc_node mm/slub.c:5350 [inline]
 __kmalloc_noprof+0x5a1/0x820 mm/slub.c:5387
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 _kmalloc_array_noprof include/linux/slab.h:1189 [inline]
 drm_syncobj_array_find+0x34/0x3a0 drivers/gpu/drm/drm_syncobj.c:1274
 drm_syncobj_query_ioctl+0x25d/0xa90 drivers/gpu/drm/drm_syncobj.c:1672
 drm_ioctl_kernel+0x1f3/0x3e0 drivers/gpu/drm/drm_ioctl.c:817
 drm_ioctl+0x5e6/0xc60 drivers/gpu/drm/drm_ioctl.c:914
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19cf79de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19d05a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19cfa25fa0 RCX: 00007f19cf79de99
RDX: 00002000000004c0 RSI: 00000000c01864cb RDI: 0000000000000003
RBP: 00007f19cf833eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19cfa26038 R14: 00007f19cfa25fa0 R15: 00007fffcabc27d8
 </TASK>

Crashes (4498):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/23 13:19 upstream 4539944e5151 4a865b71 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/01/04 04:48 upstream aacb0a6d604a d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/09/25 21:33 upstream bf40f4b87761 0abd0691 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2024/12/10 14:37 upstream 7cb1b4663150 cfc402b4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/12/01 05:06 upstream d8b78066f4c9 68914665 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/10/10 15:29 upstream d3d1556696c1 a156c552 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/07/15 19:58 upstream 0c3836482481 efee4ed2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/04/04 20:33 upstream c85af715cac0 0ee3535e .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/03/26 03:40 upstream 928a87efa423 bcd9b39f .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/12/17 02:52 upstream c8e97fc6b4c0 3222d10c .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/09/02 12:16 upstream 0468be89b3fa 696ea0d2 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/10 00:57 upstream b643e495ae92 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/09 21:17 upstream b643e495ae92 5d63f80b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/09 08:13 upstream 06cf61899d64 5d63f80b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/09 05:40 upstream 06cf61899d64 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/08 18:23 upstream a59f57e2aa12 5d63f80b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/08 08:17 upstream 3f008280327b 5d63f80b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/08 06:53 upstream 3f008280327b 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/08 02:43 upstream 3f008280327b 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/07 13:52 upstream f9a2394a2348 e4ef95d6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/07 12:29 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/07 10:05 upstream fcaeecb8b0cd c38879ea .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/07 03:16 upstream fcaeecb8b0cd c38879ea .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/06 14:50 upstream 0d8395707651 cc56899a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/06 08:54 upstream 0d8395707651 cd5b1963 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/06 07:52 upstream 0d8395707651 cd5b1963 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/06 05:42 upstream 0d8395707651 cd5b1963 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/06 03:47 upstream 0d8395707651 cd5b1963 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/05 09:24 upstream 562bfb501c54 52aa2820 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/05 00:49 upstream 562bfb501c54 52aa2820 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/04 11:13 upstream 848acc8ffe1b 3c5eaa21 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/04 02:04 upstream 848acc8ffe1b 9451e17e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/03 17:46 upstream 075b74841bd0 bdd50915 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/03 06:15 upstream bd1dde877520 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/02 17:36 upstream 2d2338c93da7 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/01 18:29 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/01 16:10 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/01 11:06 upstream a2cf4ef33184 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/01 09:16 upstream a2cf4ef33184 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/31 21:37 upstream 8ba098e6b6ff 7664cf44 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/31 18:55 upstream 8ba098e6b6ff 7664cf44 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/31 12:56 upstream 8ba098e6b6ff db462e94 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/31 02:14 upstream e05b559f9cda aaffb173 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/30 21:24 upstream 11028ab62899 0a1bc234 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/29 22:07 upstream fc02acf6ac0c b63596d1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/29 16:56 upstream fc02acf6ac0c 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/28 21:24 upstream 3b5f4b83c4ab 5fe7c56f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/28 11:45 upstream 62cc90241548 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/27 23:50 upstream 62cc90241548 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/27 18:27 upstream f5098b6bae76 1f273138 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/27 09:05 upstream 4235cb24ec1e 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/27 05:20 upstream 4235cb24ec1e 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/26 07:20 upstream 3dab139d4795 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/26 04:22 upstream 3dab139d4795 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/25 08:54 upstream e2a936998ab2 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/25 07:41 upstream e2a936998ab2 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/25 07:15 upstream 0ce37745d4bf 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/25 02:56 upstream 48a5a7ab8d6a 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/24 20:27 upstream 48a5a7ab8d6a 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/24 09:43 upstream d326f83e819c 544adce9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/24 06:04 upstream d326f83e819c 544adce9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/23 15:44 upstream 4539944e5151 71a13572 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/07/23 12:50 upstream 4539944e5151 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/07/23 08:43 upstream 4539944e5151 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
* Struck through repros no longer work on HEAD.