linux-kernel - Re: [syzbot] WARNING in drm_prime_destroy_file

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CANp29Y7JeN3NntqAJ+g1oqA7pXHLy7qW8Pp9as+ft5d89_2oXA@mail.gmail.com>
Date: Thu, 8 Jan 2026 07:40:59 +0100
From: Aleksandr Nogikh <nogikh@...gle.com>
To: 王志 <wangzhi_xd@....xidian.edu.cn>
Cc: linux-kernel@...r.kernel.org, dri-devel@...ts.freedesktop.org, 
	syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] WARNING in drm_prime_destroy_file_private

On Thu, Jan 8, 2026 at 3:25 AM '王志' via syzkaller-bugs
<syzkaller-bugs@...glegroups.com> wrote:
>
> syzbot has found the following issue on:

Please do not mark bugs that you report yourself as [syzbot], it's not
correct and very confusing.

>
> HEAD commit:    6.18.0-rcX
> git tree:       linux-stable
> console output: (see below)
> kernel config:  (please provide if available)
>
> ---
>
> WARNING: CPU: 3 PID: 28430 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0x43/0x60
> Modules linked in:
> CPU: 3 UID: 0 PID: 28430 Comm: syz.0.6460 Not tainted 6.18.0 #1 PREEMPT(full)
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
> RIP: 0010:drm_prime_destroy_file_private+0x43/0x60
> Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 a3 4f 81 fc e8 9e 4f 81 fc 90 <0f> 0b 90 5b e9 94 4f 81 fc e8 7f a8 e7 fc eb d8 66 66 2e 0f 1f 84
> RSP: 0018:ffffc900032c7cb8 EFLAGS: 00010293
> RAX: 0000000000000000 RBX: ffff888100aa4380 RCX: ffffffff8b428d97
> RDX: ffff888122c61d00 RSI: ffffffff85390862 RDI: ffff888100aa4410
> RBP: 0000000000000000 R08: 0000000000000001 R09: fffff52000658f77
> R10: ffffc900032c7bbf R11: 0000000000000000 R12: ffff888100aa4000
> R13: dffffc0000000000 R14: ffff888100aa42d8 R15: ffff888100aa42b0
> FS:  000055556463b500(0000) GS:ffff8881a2701000(0000) knlGS:0000000000000000
> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 000000110c2acc50 CR3: 00000001326c0000 CR4: 00000000000006f0
>
> Call Trace:
>  <TASK>
>  drm_file_free.part.0+0x805/0xcf0
>  drm_close_helper.isra.0+0x183/0x1f0
>  drm_release+0x1ab/0x360
>  __fput+0x402/0xb50
>  task_work_run+0x16b/0x260
>  exit_to_user_mode_loop+0xf9/0x130
>  do_syscall_64+0x424/0xfa0
>  entry_SYSCALL_64_after_hwframe+0x77/0x7f
>  </TASK>
>