WARNING in drm_syncobj_array_find

Status: upstream: reported C repro on 2023/09/06 11:42
Subsystems: dri mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+95416f957d84e858b377@syzkaller.appspotmail.com
First crash: 1097d, last: 13h39m
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
3600de84 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in drm_syncobj_array_find 2026/05/23 02:16 2026/05/23 02:16 2026/05/23 02:46 df8ac09c
▶ ▼ Discussions (31)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (May 2026) 0 (1) 2026/05/02 12:32
[syzbot] Monthly dri report (Apr 2026) 0 (1) 2026/04/01 07:42
[syzbot] Monthly dri report (Mar 2026) 0 (1) 2026/03/01 06:22
[syzbot] Monthly dri report (Jan 2026) 0 (1) 2026/01/28 22:39
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/27 16:08
[PATCH RESEND] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/12/06 22:00
[PATCH] drm/syncobj: Validate count_handles to prevent large allocations in array_find() 1 (1) 2025/11/27 17:35
[PATCH] drm/syncobj: Prevent overflow and large kmalloc in array_find() 1 (2) 2025/11/27 13:22
[syzbot] Monthly dri report (Nov 2025) 0 (1) 2025/11/27 07:44
[syzbot] Monthly dri report (Oct 2025) 0 (1) 2025/10/27 08:42
[syzbot] Monthly dri report (Sep 2025) 0 (1) 2025/09/25 16:00
[syzbot] Monthly dri report (Aug 2025) 0 (1) 2025/08/25 13:19
[syzbot] Monthly dri report (Jul 2025) 0 (1) 2025/07/25 12:39
[syzbot] Monthly dri report (Jun 2025) 0 (1) 2025/06/24 07:38
[syzbot] Monthly dri report (Jan 2025) 0 (1) 2025/01/15 13:48
[syzbot] Monthly dri report (Dec 2024) 0 (1) 2024/12/16 09:44
[syzbot] Monthly dri report (Nov 2024) 0 (1) 2024/11/14 08:59
[syzbot] Monthly dri report (Oct 2024) 0 (1) 2024/10/13 19:21
[syzbot] Monthly dri report (Sep 2024) 0 (1) 2024/09/12 14:24
[syzbot] Monthly dri report (Aug 2024) 0 (1) 2024/08/13 08:54
[syzbot] Monthly dri report (Jul 2024) 0 (1) 2024/07/12 10:05
[syzbot] Monthly dri report (Jun 2024) 0 (1) 2024/06/10 12:41
[syzbot] Monthly dri report (May 2024) 0 (1) 2024/05/06 13:18
[syzbot] Monthly dri report (Apr 2024) 0 (1) 2024/04/05 12:37
[syzbot] Monthly dri report (Mar 2024) 0 (1) 2024/03/05 11:09
[syzbot] Monthly dri report (Feb 2024) 0 (1) 2024/02/02 21:05
[syzbot] Monthly dri report (Jan 2024) 0 (1) 2024/01/02 13:36
[syzbot] Monthly dri report (Nov 2023) 0 (1) 2023/11/30 20:33
[syzbot] Monthly dri report (Oct 2023) 0 (1) 2023/10/30 12:59
[syzbot] Monthly dri report (Sep 2023) 0 (1) 2023/09/28 11:42
[syzbot] [dri?] WARNING in drm_syncobj_array_find 0 (1) 2023/09/06 11:42
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2025/11/27 13:05 16m madhurkumar004@gmail.com patch upstream OK log
2025/04/21 15:20 24m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 12m retest repro upstream report log
2025/04/21 15:20 11m retest repro upstream report log
2025/04/21 12:54 27m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 26m retest repro upstream report log
2025/04/21 12:54 24m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log
2025/02/10 13:09 15m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
1
WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280, CPU#3: syz.0.17/5929
Modules linked in:
CPU: 3 UID: 0 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 mm/page_alloc.c:5280
Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 9b a3 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 19 8d 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 c0 9c d3 8e 45 89 f7 44 8b 74 24
RSP: 0018:ffffc900035276d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 1ffff920006a4ef4 RDI: 0000000000040cc0
RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009
R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
R13: 1ffff920006a4f32 R14: ffffffff9b754444 R15: 0000000000000001
FS:  00007f19d05a96c0(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f19cf7874c0 CR3: 000000003d5b3000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
 ___kmalloc_large_node+0xe5/0x120 mm/slub.c:5302
 __kmalloc_large_node_noprof+0x1c/0x70 mm/slub.c:5333
 __do_kmalloc_node mm/slub.c:5350 [inline]
 __kmalloc_noprof+0x5a1/0x820 mm/slub.c:5387
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 _kmalloc_array_noprof include/linux/slab.h:1189 [inline]
 drm_syncobj_array_find+0x34/0x3a0 drivers/gpu/drm/drm_syncobj.c:1274
 drm_syncobj_query_ioctl+0x25d/0xa90 drivers/gpu/drm/drm_syncobj.c:1672
 drm_ioctl_kernel+0x1f3/0x3e0 drivers/gpu/drm/drm_ioctl.c:817
 drm_ioctl+0x5e6/0xc60 drivers/gpu/drm/drm_ioctl.c:914
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19cf79de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f19d05a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19cfa25fa0 RCX: 00007f19cf79de99
RDX: 00002000000004c0 RSI: 00000000c01864cb RDI: 0000000000000003
RBP: 00007f19cf833eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19cfa26038 R14: 00007f19cfa25fa0 R15: 00007fffcabc27d8
 </TASK>

Crashes (4616):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/23 13:19 upstream 4539944e5151 4a865b71 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/01/04 04:48 upstream aacb0a6d604a d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2025/09/25 21:33 upstream bf40f4b87761 0abd0691 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2024/12/10 14:37 upstream 7cb1b4663150 cfc402b4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/12/01 05:06 upstream d8b78066f4c9 68914665 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/10/10 15:29 upstream d3d1556696c1 a156c552 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/07/15 19:58 upstream 0c3836482481 efee4ed2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/04/04 20:33 upstream c85af715cac0 0ee3535e .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2024/03/26 03:40 upstream 928a87efa423 bcd9b39f .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/12/17 02:52 upstream c8e97fc6b4c0 3222d10c .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2023/09/02 12:16 upstream 0468be89b3fa 696ea0d2 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/03 21:36 upstream 8ab1afb2eb24 d2e5fb95 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/03 20:07 upstream 8ab1afb2eb24 a8a356ea .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/03 14:01 upstream 940de590b839 a8a356ea .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/03 06:02 upstream 940de590b839 6a988719 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/03 01:20 upstream 940de590b839 6a988719 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/02 18:14 upstream 89a312991dc6 74e93e68 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/02 14:51 upstream 89a312991dc6 74e93e68 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/02 04:51 upstream 89a312991dc6 587f6b29 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/01 09:08 upstream bf1079577a11 316d9396 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/09/01 07:30 upstream bf1079577a11 316d9396 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/09/01 04:58 upstream bf1079577a11 316d9396 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/31 10:03 upstream cee9395acd80 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/31 00:38 upstream a23cbb05744b 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/30 23:49 upstream a23cbb05744b 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/30 17:09 upstream 08dbfad3f504 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/30 15:37 upstream 08dbfad3f504 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/30 08:30 upstream 08dbfad3f504 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/30 00:54 upstream 08dbfad3f504 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/29 18:35 upstream cf72cbb39da8 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/29 17:03 upstream cf72cbb39da8 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/29 12:03 upstream cf72cbb39da8 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/29 10:27 upstream cf72cbb39da8 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/29 06:28 upstream cf72cbb39da8 2f52988a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/29 00:09 upstream 818bebeb63dd 2f52988a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/28 01:11 upstream 818bebeb63dd e2fa417d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/27 14:39 upstream 818bebeb63dd c53a1b9c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/27 05:51 upstream 818bebeb63dd a2b77b9e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/26 22:08 upstream 818bebeb63dd a2b77b9e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/26 21:16 upstream 818bebeb63dd a2b77b9e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/26 06:47 upstream 818bebeb63dd 6a91adb4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/25 17:07 upstream 818bebeb63dd a9a1fc32 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/25 09:26 upstream 818bebeb63dd 614e416a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/24 20:54 upstream 818bebeb63dd b55bd4c3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/24 14:21 upstream 818bebeb63dd b55bd4c3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/24 11:42 upstream 818bebeb63dd b55bd4c3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/24 05:47 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/23 21:50 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/23 20:54 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/23 18:30 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/23 16:19 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/23 10:28 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/23 01:49 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
2026/08/22 20:01 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/22 14:57 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/22 10:17 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/22 03:43 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/22 01:02 upstream 818bebeb63dd 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in drm_syncobj_array_find
2026/08/21 17:32 upstream 818bebeb63dd 1e72964b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in drm_syncobj_array_find
* Struck through repros no longer work on HEAD.