syzbot


INFO: task hung in drm_atomic_get_plane_state (2)

Status: auto-obsoleted due to no activity on 2025/11/23 07:53
Subsystems: dri
[Documentation on labels]
First crash: 199d, last: 158d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in drm_atomic_get_plane_state dri 1 75 286d 488d 0/29 auto-obsoleted due to no activity on 2025/06/27 19:25

Sample crash report:
INFO: task swapper/0:1 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:swapper/0       state:D stack:18472 pid:1     tgid:1     ppid:0      task_flags:0x0140 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5357 [inline]
 __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
 __schedule_loop kernel/sched/core.c:7043 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7058
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7115
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __ww_mutex_lock+0x10e3/0x2980 kernel/locking/mutex.c:767
 ww_mutex_lock+0x3f/0x1c0 kernel/locking/mutex.c:885
 modeset_lock+0x2be/0x650 drivers/gpu/drm/drm_modeset_lock.c:316
 drm_atomic_get_plane_state+0x1d2/0x5a0 drivers/gpu/drm/drm_atomic.c:541
 drm_client_modeset_commit_atomic+0x1e7/0x760 drivers/gpu/drm/drm_client_modeset.c:1055
 drm_client_modeset_commit_locked+0xcb/0x4d0 drivers/gpu/drm/drm_client_modeset.c:1206
 pan_display_atomic drivers/gpu/drm/drm_fb_helper.c:1388 [inline]
 drm_fb_helper_pan_display+0x3e7/0xbd0 drivers/gpu/drm/drm_fb_helper.c:1448
 fb_pan_display+0x39b/0x680 drivers/video/fbdev/core/fbmem.c:193
 bit_update_start+0x4d/0x1e0 drivers/video/fbdev/core/bitblit.c:380
 fbcon_switch+0x1568/0x2040 drivers/video/fbdev/core/fbcon.c:2206
 redraw_screen+0x56a/0xe90 drivers/tty/vt/vt.c:965
 con2fb_init_display drivers/video/fbdev/core/fbcon.c:841 [inline]
 set_con2fb_map+0xda9/0x13c0 drivers/video/fbdev/core/fbcon.c:902
 do_fb_registered drivers/video/fbdev/core/fbcon.c:3012 [inline]
 fbcon_fb_registered+0x24e/0x610 drivers/video/fbdev/core/fbcon.c:3028
 do_register_framebuffer drivers/video/fbdev/core/fbmem.c:512 [inline]
 register_framebuffer+0x6f9/0x880 drivers/video/fbdev/core/fbmem.c:578
 __drm_fb_helper_initial_config_and_unlock+0x1307/0x18a0 drivers/gpu/drm/drm_fb_helper.c:1852
 drm_fbdev_client_hotplug+0x16c/0x230 drivers/gpu/drm/clients/drm_fbdev_client.c:52
 drm_client_register+0x172/0x210 drivers/gpu/drm/drm_client.c:141
 drm_fbdev_client_setup+0x19f/0x3f0 drivers/gpu/drm/clients/drm_fbdev_client.c:159
 drm_client_setup+0x107/0x220 drivers/gpu/drm/clients/drm_client_setup.c:46
 virtio_gpu_probe+0x23a/0x2a0 drivers/gpu/drm/virtio/virtgpu_drv.c:110
 virtio_dev_probe+0xcb0/0xfe0 drivers/virtio/virtio.c:347
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26d/0x9e0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
 __driver_attach+0x452/0x700 drivers/base/dd.c:1217
 bus_for_each_dev+0x233/0x2b0 drivers/base/bus.c:370
 bus_add_driver+0x345/0x640 drivers/base/bus.c:678
 driver_register+0x23a/0x320 drivers/base/driver.c:249
 virtio_gpu_driver_init+0x96/0x110 drivers/gpu/drm/virtio/virtgpu_drv.c:194
 do_one_initcall+0x233/0x820 init/main.c:1269
 do_initcall_level+0x104/0x190 init/main.c:1331
 do_initcalls+0x59/0xa0 init/main.c:1347
 kernel_init_freeable+0x334/0x4b0 init/main.c:1579
 kernel_init+0x1d/0x1d0 init/main.c:1469
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/0:0:9 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:27464 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events virtio_gpu_dequeue_ctrl_func
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5357 [inline]
 __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
 __schedule_loop kernel/sched/core.c:7043 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7058
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7115
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:760
 drm_client_dev_hotplug+0xdc/0x4f0 drivers/gpu/drm/drm_client_event.c:97
 virtio_gpu_dequeue_ctrl_func+0x4fd/0x920 drivers/gpu/drm/virtio/virtgpu_vq.c:263
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/0:2:788 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2     state:D stack:25496 pid:788   tgid:788   ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events drm_fb_helper_damage_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5357 [inline]
 __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
 __schedule_loop kernel/sched/core.c:7043 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7058
 virtio_gpu_queue_ctrl_sgs drivers/gpu/drm/virtio/virtgpu_vq.c:397 [inline]
 virtio_gpu_queue_fenced_ctrl_buffer+0x6d6/0x1020 drivers/gpu/drm/virtio/virtgpu_vq.c:497
 virtio_gpu_resource_flush drivers/gpu/drm/virtio/virtgpu_plane.c:225 [inline]
 virtio_gpu_primary_plane_update+0xcdd/0x1380 drivers/gpu/drm/virtio/virtgpu_plane.c:300
 drm_atomic_helper_commit_planes+0x60c/0xec0 drivers/gpu/drm/drm_atomic_helper.c:2953
 drm_atomic_helper_commit_tail+0x5d/0x520 drivers/gpu/drm/drm_atomic_helper.c:1903
 commit_tail+0x29a/0x3a0 drivers/gpu/drm/drm_atomic_helper.c:1988
 drm_atomic_helper_commit+0xa6b/0xb10 drivers/gpu/drm/drm_atomic_helper.c:2226
 drm_atomic_commit+0x262/0x2c0 drivers/gpu/drm/drm_atomic.c:1577
 drm_atomic_helper_dirtyfb+0xd7b/0xee0 drivers/gpu/drm/drm_damage_helper.c:183
 drm_fbdev_shmem_helper_fb_dirty+0x160/0x2f0 drivers/gpu/drm/drm_fbdev_shmem.c:118
 drm_fb_helper_fb_dirty drivers/gpu/drm/drm_fb_helper.c:380 [inline]
 drm_fb_helper_damage_work+0x224/0x710 drivers/gpu/drm/drm_fb_helper.c:403
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
9 locks held by swapper/0/1:
 #0: ffff888032900170 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:911 [inline]
 #0: ffff888032900170 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1096 [inline]
 #0: ffff888032900170 (&dev->mutex){....}-{4:4}, at: __driver_attach+0x447/0x700 drivers/base/dd.c:1216
 #1: ffff888000758300 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_register+0x4f/0x210 drivers/gpu/drm/drm_client.c:127
 #2: ffffffff8e91fbc8 (registration_lock){+.+.}-{4:4}, at: register_framebuffer+0x81/0x880 drivers/video/fbdev/core/fbmem.c:577
 #3: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: fbcon_fb_registered+0x49/0x610 drivers/video/fbdev/core/fbcon.c:3024
 #4: ffff888034253280 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_pan_display+0xbe/0xbd0 drivers/gpu/drm/drm_fb_helper.c:1441
 #5: ffff8880007581b8 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 drivers/gpu/drm/drm_auth.c:435
 #6: ffff888034253098 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x4d0 drivers/gpu/drm/drm_client_modeset.c:1204
 #7: ffffc90000136a70 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xda/0x760 drivers/gpu/drm/drm_client_modeset.c:1042
 #8: ffffc90000136a98 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xda/0x760 drivers/gpu/drm/drm_client_modeset.c:1042
3 locks held by kworker/0:0/9:
 #0: ffff88801a474d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801a474d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
 #1: ffffc900001b7bc0 ((work_completion)(&vgvq->dequeue_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900001b7bc0 ((work_completion)(&vgvq->dequeue_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
 #2: ffff888000758300 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_dev_hotplug+0xdc/0x4f0 drivers/gpu/drm/drm_client_event.c:97
2 locks held by kworker/u4:0/12:
 #0: ffff88801a479148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801a479148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
 #1: ffffc900001e7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900001e7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
1 lock held by khungtaskd/26:
 #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
5 locks held by kworker/0:2/788:
 #0: ffff88801a474d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801a474d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
 #1: ffffc90001a77bc0 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90001a77bc0 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
 #2: ffffc90001a77810 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0xca/0xee0 drivers/gpu/drm/drm_damage_helper.c:125
 #3: ffffc90001a77838 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0xca/0xee0 drivers/gpu/drm/drm_damage_helper.c:125
 #4: ffffffff8e9f9ed0 (drm_unplug_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline]
 #4: ffffffff8e9f9ed0 (drm_unplug_srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:253 [inline]
 #4: ffffffff8e9f9ed0 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x49/0x150 drivers/gpu/drm/drm_drv.c:451

=============================================


Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/25 07:45 upstream 1b237f190eb3 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root INFO: task hung in drm_atomic_get_plane_state
2025/07/15 11:26 upstream 155a3c003e55 03fcfc4b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root INFO: task hung in drm_atomic_get_plane_state
* Struck through repros no longer work on HEAD.