WARNING in drm_syncobj_array_find

Status: upstream: reported C repro on 2023/09/06 11:42
Subsystems: mm dri
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+95416f957d84e858b377@syzkaller.appspotmail.com
First crash: 1118d, last: 1h04m
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
3600de84 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in drm_syncobj_array_find 2026/05/23 02:16 2026/05/23 02:16 2026/05/23 02:46 df8ac09c
▶ ▼ Discussions (31)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (May 2026) 0 (1) 2026/05/02 12:32
[syzbot] Monthly dri report (Apr 2026) 0 (1) 2026/04/01 07:42
[syzbot] Monthly dri report (Mar 2026) 0 (1) 2026/03/01 06:22
[syzbot] Monthly dri report (Jan 2026) 0 (1) 2026/01/28 22:39
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/27 16:08
[PATCH RESEND] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/06 22:00
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/11/27 17:35
[PATCH] drm/syncobj: Prevent overflow and large kmalloc in array_find() 1 (2) 2025/11/27 13:22
[syzbot] Monthly dri report (Nov 2025) 0 (1) 2025/11/27 07:44
[syzbot] Monthly dri report (Oct 2025) 0 (1) 2025/10/27 08:42
[syzbot] Monthly dri report (Sep 2025) 0 (1) 2025/09/25 16:00
[syzbot] Monthly dri report (Aug 2025) 0 (1) 2025/08/25 13:19
[syzbot] Monthly dri report (Jul 2025) 0 (1) 2025/07/25 12:39
[syzbot] Monthly dri report (Jun 2025) 0 (1) 2025/06/24 07:38
[syzbot] Monthly dri report (Jan 2025) 0 (1) 2025/01/15 13:48
[syzbot] Monthly dri report (Dec 2024) 0 (1) 2024/12/16 09:44
[syzbot] Monthly dri report (Nov 2024) 0 (1) 2024/11/14 08:59
[syzbot] Monthly dri report (Oct 2024) 0 (1) 2024/10/13 19:21
[syzbot] Monthly dri report (Sep 2024) 0 (1) 2024/09/12 14:24
[syzbot] Monthly dri report (Aug 2024) 0 (1) 2024/08/13 08:54
[syzbot] Monthly dri report (Jul 2024) 0 (1) 2024/07/12 10:05
[syzbot] Monthly dri report (Jun 2024) 0 (1) 2024/06/10 12:41
[syzbot] Monthly dri report (May 2024) 0 (1) 2024/05/06 13:18
[syzbot] Monthly dri report (Apr 2024) 0 (1) 2024/04/05 12:37
[syzbot] Monthly dri report (Mar 2024) 0 (1) 2024/03/05 11:09
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] Monthly dri report (Nov 2023) 0 (1) 2023/11/30 20:33
[syzbot] Monthly dri report (Oct 2023) 0 (1) 2023/10/30 12:59
[syzbot] Monthly dri report (Sep 2023) 0 (1) 2023/09/28 11:42
[syzbot] [dri?] WARNING in drm_syncobj_array_find 0 (1) 2023/09/06 11:42
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2025/11/27 13:05 16m madhurkumar004@gmail.com patch upstream OK log
2025/04/21 15:20 24m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 11m retest repro upstream report log
2025/04/21 12:54 27m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 24m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
1
WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280, CPU#3: syz.0.17/5929
Modules linked in:
CPU: 3 UID: 0 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280
Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 9b a3 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 19 8d 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 c0 9c d3 8e 45 89 f7 44 8b 74 24
RSP: 0018:ffffc900035276d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 1ffff920006a4ef4 RDI: 0000000000040cc0
RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009
R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
R13: 1ffff920006a4f32 R14: ffffffff9b754444 R15: 0000000000000001
FS:  00007f19d05a96c0(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f19cf7874c0 CR3: 000000003d5b3000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
 ___kmalloc_large_node+0xe5/0x120 mm/slub.c:5302
 __kmalloc_large_node_noprof+0x1c/0x70 mm/slub.c:5333
 __do_kmalloc_node mm/slub.c:5350 [inline]
 __kmalloc_noprof+0x5a1/0x820 mm/slub.c:5387
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 _kmalloc_array_noprof include/linux/slab.h:1189 [inline]
 drm_syncobj_array_find+0x34/0x3a0 drivers/gpu/drm/drm_syncobj.c:1274
 drm_syncobj_query_ioctl+0x25d/0xa90 drivers/gpu/drm/drm_syncobj.c:1672
 drm_ioctl_kernel+0x1f3/0x3e0 drivers/gpu/drm/drm_ioctl.c:817
 drm_ioctl+0x5e6/0xc60 drivers/gpu/drm/drm_ioctl.c:914
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19cf79de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19d05a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19cfa25fa0 RCX: 00007f19cf79de99
RDX: 00002000000004c0 RSI: 00000000c01864cb RDI: 0000000000000003
RBP: 00007f19cf833eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19cfa26038 R14: 00007f19cfa25fa0 R15: 00007fffcabc27d8
 </TASK>

Crashes (4694):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/23 13:19 upstream 4539944e5151 4a865b71 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/01/04 04:48 upstream aacb0a6d604a d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/09/25 21:33 upstream bf40f4b87761 0abd0691 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2024/12/10 14:37 upstream 7cb1b4663150 cfc402b4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/12/01 05:06 upstream d8b78066f4c9 68914665 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/10/10 15:29 upstream d3d1556696c1 a156c552 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/07/15 19:58 upstream 0c3836482481 efee4ed2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/04/04 20:33 upstream c85af715cac0 0ee3535e .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/03/26 03:40 upstream 928a87efa423 bcd9b39f .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/12/17 02:52 upstream c8e97fc6b4c0 3222d10c .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/09/02 12:16 upstream 0468be89b3fa 696ea0d2 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/25 00:57 upstream 5fc5768c7ca9 27d05fb3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/24 09:20 upstream 62f4c998b297 3c3cdf19 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/24 07:36 upstream 62f4c998b297 3c3cdf19 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/23 12:07 upstream fe2ec83746e5 abce1216 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/23 06:25 upstream fe2ec83746e5 abce1216 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/22 02:26 upstream f0100363d8c3 a8efa948 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/21 13:58 upstream 93f51579e7df 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/21 12:49 upstream 93f51579e7df 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/20 17:56 upstream 518e5b794c06 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/20 14:48 upstream 518e5b794c06 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/19 21:50 upstream 40288c9206c1 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/19 17:28 upstream 40288c9206c1 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/19 13:24 upstream 40288c9206c1 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/19 10:29 upstream 40288c9206c1 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/19 06:41 upstream 40288c9206c1 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/18 19:56 upstream 5dd1818b15d9 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/18 07:17 upstream 4982d3552a3b 8d7d05f1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/17 16:17 upstream 238650ef6c7c 4a607247 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/17 14:50 upstream 238650ef6c7c 4a607247 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/17 12:51 upstream 238650ef6c7c 4a607247 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/16 20:32 upstream 9b87fdc9af2f b0e4c57e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/16 19:09 upstream 9b87fdc9af2f b0e4c57e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/16 08:33 upstream f6e7b42bf05b 12a0a44a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/16 07:01 upstream f6e7b42bf05b 12a0a44a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/16 01:33 upstream f6e7b42bf05b 12a0a44a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/15 22:54 upstream f6e7b42bf05b f41e228a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/15 13:39 upstream 587858367581 f41e228a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/14 15:40 upstream 704340f1cd0d 924033e8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/14 03:33 upstream d681d7ef617e 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/14 01:03 upstream d681d7ef617e 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/13 13:47 upstream 2f0c1cf72f46 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/13 09:27 upstream 2f0c1cf72f46 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/13 00:09 upstream 5225b8eec4c9 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/12 23:06 upstream 5225b8eec4c9 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/12 16:25 upstream 5225b8eec4c9 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/12 11:44 upstream 827751b699b7 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/12 02:48 upstream 3026c6e4f223 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/11 20:09 upstream 08df884136f1 9c29f801 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/11 16:12 upstream 08df884136f1 9c29f801 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/11 13:53 upstream 08df884136f1 9c29f801 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/11 06:28 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/11 03:44 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/11 01:26 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/10 23:26 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/10 19:36 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/10 18:03 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/10 13:14 upstream 50d05c7c76c9 1fe56c0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/10 06:32 upstream 893e11787f78 4e8b1cc6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/09 15:32 upstream 893e11787f78 edec9137 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/09 04:50 upstream 5acbae5f7eb3 8387c273 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
* Struck through repros no longer work on HEAD.