linux-kernel - 6.16-rc5/regression/bisected - WARNING in drm_gem_object_handle_put

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CABXGCsNxhEu+win6h1Zwi-0e4NeURzOt2KA=BXakRz08moG4uA@mail.gmail.com>
Date: Tue, 8 Jul 2025 14:26:55 +0500
From: Mikhail Gavrilov <mikhail.v.gavrilov@...il.com>
To: tzimmermann@...e.de, asrivats@...hat.com, 
	Christian König <Christian.Koenig@....com>, 
	maarten.lankhorst@...ux.intel.com, mripard@...nel.org, 
	sumit.semwal@...aro.org, linux-media@...r.kernel.org, 
	dri-devel <dri-devel@...ts.freedesktop.org>, linaro-mm-sig@...ts.linaro.org, 
	amd-gfx list <amd-gfx@...ts.freedesktop.org>, 
	Linux regressions mailing list <regressions@...ts.linux.dev>, 
	Linux List Kernel Mailing <linux-kernel@...r.kernel.org>
Subject: 6.16-rc5/regression/bisected - WARNING in drm_gem_object_handle_put_unlocked
 after commit 5307dce878d4

Hi Thomas,

After commit 5307dce878d4 ("drm/gem: Acquire references on GEM handles
for framebuffers"), my kernel log becomes flooded with the following
warning:
WARNING: CPU: 5 PID: 1812 at drivers/gpu/drm/drm_gem.c:286
drm_gem_object_handle_put_unlocked+0x207/0x330

This occurs during normal GNOME Shell usage, and the trace appears
repeatedly. A full stack trace is included below.

I bisected the issue to this commit:
5307dce878d4 drm/gem: Acquire references on GEM handles for framebuffers

Reverting this commit on top of current mainline kernel (6.16-rc5)
fixes the issue — the warnings disappear completely.

My hardware config: https://linux-hardware.org/?probe=ce4c44c524

Kernel config, full bisect logs, and kernel logs from each bisect step
are attached.
Please take a look as soon as possible — this regression could affect
any user relying on fbdev or shadow planes, and the commit is already
CC'ed to stable@...r.kernel.org.
It would be unfortunate if this made it into a stable release without
being addressed.

Thanks in advance!

--
Best Regards,
Mike Gavrilov.

Download attachment ".config.zip" of type "application/zip" (69586 bytes)

Download attachment "bisect-WARNING-at-drm_gem-drm_gem_object_handle_put_unlocked.zip" of type "application/zip" (1101 bytes)

Download attachment "all-dmesgs.zip" of type "application/zip" (4513171 bytes)