WARNING in drm_plane_create_rotation_property

Status: upstream: reported C repro on 2026/08/20 13:39
Subsystems: dri usb
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+efe2810681f1b065d3a8@syzkaller.appspotmail.com
Fix commit: cb732d027aa1 drm/gud: validate GUD_ROTATION_0 is present in supported rotations
Patched on: [ci-upstream-linux-next-kasan-gce-root ci-upstream-rust-kasan-gce], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 19d, last: 2d03h
Cause bisection: failed (error log, bisect log)
  
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
6d0e20ce assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ✅ WARNING in drm_plane_create_rotation_property 2026/08/17 01:04 2026/08/17 01:04 2026/08/17 01:35 746171ee
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] drm/gud: validate GUD_ROTATION_0 is present in supported rotations 2 (2) 2026/08/23 16:33
[syzbot] [dri?] [usb?] WARNING in drm_plane_create_rotation_property 0 (4) 2026/08/20 19:49
Last patch testing requests (3)
Created Duration User Patch Repo Result
2026/08/20 19:49 25m sajal2005gupta@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing OK job log log
2026/08/20 19:46 18m sajal2005gupta@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error job log
2026/08/20 19:13 0m sajal2005gupta@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error job log

Sample crash report:
usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
------------[ cut here ]------------
rotation & ~supported_rotations
WARNING: drivers/gpu/drm/drm_blend.c:309 at drm_plane_create_rotation_property+0x1aa/0x1f0 drivers/gpu/drm/drm_blend.c:309, CPU#3: kworker/3:2/4664
Modules linked in:
CPU: 3 UID: 0 PID: 4664 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:drm_plane_create_rotation_property+0x1aa/0x1f0 drivers/gpu/drm/drm_blend.c:309
Code: 5d 41 5e e9 08 66 06 06 e8 b3 bf 3f fc 90 0f 0b 90 e9 a1 fe ff ff e8 a5 bf 3f fc 90 0f 0b 90 e9 ba fe ff ff e8 97 bf 3f fc 90 <0f> 0b 90 e9 cd fe ff ff e8 19 d4 b2 fc eb 87 bb f4 ff ff ff eb b0
RSP: 0018:ffffc9002831ee70 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880340a4d68 RCX: 0000000000000000
RDX: ffff888026bf2580 RSI: ffffffff85cc3079 RDI: ffff888026bf2580
RBP: 0000000000000034 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880340a4000
FS:  0000000000000000(0000) GS:ffff8880d5e61000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 000000003eece000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 gud_plane_add_properties drivers/gpu/drm/gud/gud_drv.c:292 [inline]
 gud_probe+0x11a5/0x1c20 drivers/gpu/drm/gud/gud_drv.c:622
 usb_probe_interface+0x386/0x9b0 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268
 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2708
 usb_new_device include/linux/workqueue.h:715 [inline]
 hub_port_connect drivers/usb/core/hub.c:5580 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5720 [inline]
 port_event drivers/usb/core/hub.c:5884 [inline]
 hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5966
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/02 19:37 upstream 89a312991dc6 74e93e68 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_plane_create_rotation_property
2026/08/16 19:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/16 17:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/16 16:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/16 15:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/20 22:56 upstream a4ff2be345d0 1e72964b .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in drm_plane_create_rotation_property
2026/08/27 12:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/27 11:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 45c13f3f9e3b 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/23 03:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e1e6e541c5c9 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/18 12:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
2026/08/16 13:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in drm_plane_create_rotation_property
* Struck through repros no longer work on HEAD.