linux-kernel - nouveau: endless drm_WARN_ON(state->checked) spew beginning at 6.19 merge window

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1515cc8a9fcb4abbf86c88ce99ff8900ec19f499.camel@gmx.de>
Date: Sat, 06 Dec 2025 10:04:05 +0100
From: Mike Galbraith <efault@....de>
To: lkml <linux-kernel@...r.kernel.org>
Cc: Lyude Paul <lyude@...hat.com>, Danilo Krummrich <dakr@...nel.org>,
 nouveau	 <nouveau@...ts.freedesktop.org>
Subject: nouveau: endless drm_WARN_ON(state->checked) spew beginning at 6.19
 merge window

Greetings,

GM204 equipped box began spewing the below endlessly, reproducer is..
boot box.

[   44.953586] nouveau 0000:01:00.0: [drm] drm_WARN_ON(state->checked)
[   44.953588] WARNING: drivers/gpu/drm/drm_atomic.c:373 at 0x0, CPU#3: kwin_wayland/2217
[   44.953592] Modules linked in: af_packet nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bridge stp llc iscsi_ibft iscsi_boot_sysfs rfkill nf_tables binfmt_misc nls_iso8859_1 nls_cp437 usblp joydev snd_hda_codec_alc882 snd_hda_codec_realtek_lib snd_hda_codec_generic snd_hda_codec_hdmi intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal snd_hda_intel intel_powerclamp snd_intel_dspcfg coretemp snd_hda_codec kvm_intel r8169 snd_hwdep snd_hda_core iTCO_wdt realtek intel_pmc_bxt at24 regmap_i2c iTCO_vendor_support mdio_devres mei_hdcp snd_pcm libphy snd_timer kvm snd i2c_i801 lpc_ich mei_me irqbypass pcspkr i2c_smbus mdio_bus soundcore mei mfd_core thermal fan intel_smartconnect uas usb_storage nfsd auth_rpcgss nfs_acl lockd grace sch_fq_codel sunrpc fuse dm_mod configfs nfnetlink dmi_sysfs nouveau hid_generic usbhid drm_ttm_helper ttm drm_client_lib gpu_sched i2c_algo_bit drm_gpuvm drm_exec
[   44.953639]  drm_display_helper drm_kms_helper xhci_pci drm ehci_pci xhci_hcd ehci_hcd ahci video libahci ghash_clmulni_intel usbcore wmi libata button usb_common sd_mod scsi_dh_emc scsi_dh_rdac scsi_dh_alua sg scsi_mod scsi_common vfat fat ext4 crc16 mbcache jbd2 loop msr efivarfs autofs4 aesni_intel gf128mul
[   44.953659] CPU: 3 UID: 1000 PID: 2217 Comm: kwin_wayland Kdump: loaded Tainted: G        W           6.18.0.g3af870ae-master #4 PREEMPT(lazy) 
[   44.953662] Tainted: [W]=WARN
[   44.953663] Hardware name: MEDION MS-7848/MS-7848, BIOS M7848W08.20C 09/23/2013
[   44.953665] RIP: 0010:drm_atomic_get_crtc_state+0x152/0x170 [drm]
[   44.953698] Code: 04 48 8b 7f 08 4c 8b 6f 50 4d 85 ed 75 03 4c 8b 2f e8 22 ff 37 e1 48 89 c6 48 8d 3d 18 5b 17 00 48 c7 c1 50 91 71 a0 4c 89 ea <67> 48 0f b9 3a 8b 95 90 00 00 00 e9 d6 fe ff ff 48 c7 c0 f4 ff ff
[   44.953700] RSP: 0018:ffff888140797ad8 EFLAGS: 00010282
[   44.953703] RAX: ffffffffa0ae90f1 RBX: ffff888238fbea80 RCX: ffffffffa0719150
[   44.953704] RDX: ffff888100e4d740 RSI: ffffffffa0ae90f1 RDI: ffffffffa06cd040
[   44.953705] RBP: ffff888100d07010 R08: 00000000000000c0 R09: 0000000000000000
[   44.953706] R10: ffff888140797b00 R11: 0000000001000000 R12: 0000000000000000
[   44.953708] R13: ffff888100e4d740 R14: ffff8881093d1038 R15: ffff888238fbea80
[   44.953709] FS:  00007fc3cf8efb00(0000) GS:ffff88849c2d8000(0000) knlGS:0000000000000000
[   44.953711] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.953712] CR2: 00007fc3a7700000 CR3: 0000000163103005 CR4: 00000000001726f0
[   44.953713] Call Trace:
[   44.953715]  <TASK>
[   44.953718]  nv50_wndw_prepare_fb+0xac/0x120 [nouveau]
[   44.953801]  drm_atomic_helper_prepare_planes.part.0+0x2a/0x1b0 [drm_kms_helper]
[   44.953815]  nv50_disp_atomic_commit.part.0+0x7d/0x1b0 [nouveau]
[   44.953876]  drm_atomic_commit+0x9e/0xb0 [drm]
[   44.953895]  ? drm_plane_create_color_pipeline_property.cold+0x24/0x24 [drm]
[   44.953916]  drm_atomic_helper_update_plane+0xf1/0x150 [drm_kms_helper]
[   44.953924]  drm_mode_cursor_universal+0xe7/0x270 [drm]
[   44.953948]  drm_mode_cursor_common.part.0+0x94/0x1b0 [drm]
[   44.953968]  ? drm_mode_cursor_ioctl+0x80/0x80 [drm]
[   44.953986]  drm_ioctl_kernel+0x7f/0xe0 [drm]
[   44.954008]  drm_ioctl+0x1ea/0x470 [drm]
[   44.954027]  ? drm_mode_cursor_ioctl+0x80/0x80 [drm]
[   44.954047]  nouveau_drm_ioctl+0x56/0xb0 [nouveau]
[   44.954110]  __x64_sys_ioctl+0x7a/0xc0
[   44.954114]  do_syscall_64+0x61/0xfc0
[   44.954118]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[   44.954121] RIP: 0033:0x7fc3d351453f
[   44.954122] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   44.954124] RSP: 002b:00007ffd4ea49ba0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   44.954126] RAX: ffffffffffffffda RBX: 00005569076a4010 RCX: 00007fc3d351453f
[   44.954127] RDX: 00007ffd4ea49c60 RSI: 00000000c02464bb RDI: 0000000000000013
[   44.954128] RBP: 00007ffd4ea49c60 R08: 00007fc3d7328010 R09: 0000000000000000
[   44.954130] R10: 00007fc3d7328000 R11: 0000000000000246 R12: 00000000c02464bb
[   44.954131] R13: 0000000000000013 R14: 0000556908538f00 R15: 0000556907846250
[   44.954133]  </TASK>