From: Chintan Patel <chintanlike@gmail.com>
To: Thomas Zimmermann <tzimmermann@suse.de>,
maarten.lankhorst@linux.intel.com, maxime.ripard@kernel.org,
airlied@gmail.com, simona@ffwll.ch
Cc: dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org,
syzbot+147ba789658184f0ce04@syzkaller.appspotmail.com
Subject: Re: [PATCH v3] drm/vblank: downgrade vblank wait timeout from WARN to error
Date: Fri, 24 Oct 2025 16:40:34 -0700 [thread overview]
Message-ID: <f30cee98-1069-4f71-9aa9-613967f9922a@gmail.com> (raw)
In-Reply-To: <65f8a544-175a-4021-aa2a-9a9faf2f4254@suse.de>
Hi Thomas,
Thank you Thomas for suggestions!
On 10/24/25 06:58, Thomas Zimmermann wrote:
> Hi
>
> Am 03.10.25 um 05:23 schrieb Chintan Patel:
>> When wait_event_timeout() in drm_wait_one_vblank() times out, the
>> current WARN can cause unnecessary kernel panics in environments
>> with panic_on_warn set (e.g. CI, fuzzing). These timeouts can happen
>> under heavy scheduling pressure or in rare cases of delayed vblank
>> handling, and are not always a kernel bug.
>>
>> Replace the WARN with drm_err() messages that report the timeout
>> without crashing the system. Developers can still enable drm.debug
>> to diagnose genuine problems.
>>
>> Reported-by: syzbot+147ba789658184f0ce04@syzkaller.appspotmail.com
>> Closes: https://syzkaller.appspot.com/bug?extid=147ba789658184f0ce04
>> Tested-by: syzbot+147ba789658184f0ce04@syzkaller.appspotmail.com
>> Signed-off-by: Chintan Patel <chintanlike@gmail.com>
>>
>> v2:
>> - Drop unnecessary in-code comment (suggested by Thomas Zimmermann)
>> - Remove else branch, only log timeout case
>>
>> v3:
>> - Use drm_err() instead of drm_dbg_kms() (suggested by Ville Syrjälä)
>> - Remove unnecessary curr = drm_vblank_count() (suggested by Thomas
>> Zimmermann)
>> - Fix commit message wording (“invalid userspace calls” → “delayed
>> vblank handling”)
>> ---
>> drivers/gpu/drm/drm_vblank.c | 3 ++-
>> 1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/drivers/gpu/drm/drm_vblank.c b/drivers/gpu/drm/drm_vblank.c
>> index 46f59883183d..0664aea1b924 100644
>> --- a/drivers/gpu/drm/drm_vblank.c
>> +++ b/drivers/gpu/drm/drm_vblank.c
>> @@ -1305,7 +1305,8 @@ void drm_wait_one_vblank(struct drm_device *dev,
>> unsigned int pipe)
>> last != drm_vblank_count(dev, pipe),
>> msecs_to_jiffies(100));
>
> Instead of replacing the drm_WARN(), could you please try to increase
> the timeout? Let's say 1000 msec to be on the safe side.
>
I tried it locally and also tested with syzbot after increasing the
timeout to 1000 msec. The issue no longer reproduces with this change.
I’ll send v4 shortly with the updated timeout.
next prev parent reply other threads:[~2025-10-24 23:40 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-10-03 3:23 [PATCH v3] drm/vblank: downgrade vblank wait timeout from WARN to error Chintan Patel
2025-10-03 11:11 ` Jani Nikula
2025-10-23 7:51 ` Thomas Zimmermann
2025-10-24 13:58 ` Thomas Zimmermann
2025-10-24 23:40 ` Chintan Patel [this message]
2025-10-27 8:49 ` Thomas Zimmermann
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f30cee98-1069-4f71-9aa9-613967f9922a@gmail.com \
--to=chintanlike@gmail.com \
--cc=airlied@gmail.com \
--cc=dri-devel@lists.freedesktop.org \
--cc=linux-kernel@vger.kernel.org \
--cc=maarten.lankhorst@linux.intel.com \
--cc=maxime.ripard@kernel.org \
--cc=simona@ffwll.ch \
--cc=syzbot+147ba789658184f0ce04@syzkaller.appspotmail.com \
--cc=tzimmermann@suse.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).