WARNING in drm_gem_object_handle_put_unlocked

Status: upstream: reported C repro on 2022/05/30 13:12
Reported-by: syzbot+dc0af42d0e75e0820368@syzkaller.appspotmail.com
First crash: 1534d, last: 1442d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in drm_gem_object_handle_put_unlocked dri -1 syz, C error error 30 396d 1060d 0/29 auto-obsoleted due to no activity on 2025/10/19 17:50
linux-4.19 WARNING in drm_gem_object_handle_put_unlocked -1 syz, C error 1 1532d 1532d 0/1 upstream: reported C repro on 2022/06/01 02:19
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2023/03/05 20:32 0m retest repro linux-4.14.y error
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2022/10/13 02:12 0m bisect fix linux-4.14.y error job log
2022/08/30 07:49 26m bisect fix linux-4.14.y OK (0) job log log
2022/07/29 14:13 23m bisect fix linux-4.14.y OK (0) job log log
2022/06/29 13:53 20m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
RDX: 0000000020000180 RSI: 00000000c02064b2 RDI: 0000000000000004
RBP: 00007f103c17c1f0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffefd19de7f R14: 00007f103c17c300 R15: 0000000000022000
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7976 at drivers/gpu/drm/drm_gem.c:227 drm_gem_object_handle_put_unlocked+0x211/0x280 drivers/gpu/drm/drm_gem.c:227
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 7976 Comm: syz-executor110 Not tainted 4.14.281-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x44 kernel/panic.c:547
 report_bug+0x208/0x250 lib/bug.c:183
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:drm_gem_object_handle_put_unlocked+0x211/0x280 drivers/gpu/drm/drm_gem.c:227
RSP: 0018:ffff888098c4fb08 EFLAGS: 00010297
RAX: ffff8880b376e640 RBX: ffff8880af0f6700 RCX: 00000000fffffff4
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b3c04580
RBP: ffff8880b3c04580 R08: ffffffff8b9cc5e8 R09: 0000000000000000
R10: 0000000000000000 R11: ffff8880b376e640 R12: ffff8880b3c04584
R13: ffff8880af0f6700 R14: ffff8880b3c04588 R15: ffff8880b3c04598
 drm_gem_handle_create_tail+0x2a3/0x330 drivers/gpu/drm/drm_gem.c:431
 vgem_gem_create drivers/gpu/drm/vgem/vgem_drv.c:192 [inline]
 vgem_gem_dumb_create+0xe8/0x260 drivers/gpu/drm/vgem/vgem_drv.c:212
 drm_mode_create_dumb_ioctl+0x221/0x2b0 drivers/gpu/drm/drm_dumb_buffers.c:92
 drm_ioctl_kernel+0x14c/0x200 drivers/gpu/drm/drm_ioctl.c:737
 drm_ioctl+0x42e/0x890 drivers/gpu/drm/drm_ioctl.c:840
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f103c1cee79
RSP: 002b:00007f103c17c1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f103c2544c8 RCX: 00007f103c1cee79
RDX: 0000000020000180 RSI: 00000000c02064b2 RDI: 0000000000000004
RBP: 00007f103c17c1f0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffefd19de7f R14: 00007f103c17c300 R15: 0000000000022000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/30 13:28 linux-4.14.y 501eec4f9e13 a46af346 .config console log report syz C ci2-linux-4-14 WARNING in drm_gem_object_handle_put_unlocked
2022/05/30 13:11 linux-4.14.y 501eec4f9e13 a46af346 .config console log report info ci2-linux-4-14 WARNING in drm_gem_object_handle_put_unlocked
* Struck through repros no longer work on HEAD.