lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Thu, 18 Dec 2014 18:04:45 -0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	Thierry Reding <treding@...dia.com>
Cc:	Daniel Vetter <daniel.vetter@...ll.ch>, LKP <lkp@...org>,
	dri-devel@...ts.freedesktop.org, linux-kernel@...r.kernel.org
Subject: [drm/fb-helper] BUG: unable to handle kernel paging request at
 95d24c70


Hi Thierry,

FYI, here is another bisect result.

commit 7bf2844ed14de049a4ccec26eb3d8b4c3d5c1971
Author:     Thierry Reding <treding@...dia.com>
AuthorDate: Wed Dec 17 16:39:59 2014 +0100
Commit:     Daniel Vetter <daniel.vetter@...ll.ch>
CommitDate: Wed Dec 17 22:05:08 2014 +0100

    drm/fb-helper: Propagate errors from initial config failure
    
    Make drm_fb_helper_initial_config() return an int rather than a bool so
    that the error can be properly propagated. While at it, update drivers
    to propagate errors further rather than just ignore them.
    
    Cc: David Airlie <airlied@...ux.ie>
    Cc: Daniel Vetter <daniel.vetter@...ll.ch>
    Cc: Patrik Jakobsson <patrik.r.jakobsson@...il.com>
    Cc: Rob Clark <robdclark@...il.com>
    Cc: Tomi Valkeinen <tomi.valkeinen@...com>
    Cc: Alex Deucher <alexander.deucher@....com>
    Cc: Christian König <christian.koenig@....com>
    Cc: Ben Skeggs <bskeggs@...hat.com>
    Signed-off-by: Thierry Reding <treding@...dia.com>
    Reviewed-by: Alex Deucher <alexander.deucher@....com>
    Reviewed-by: Patrik Jakobsson <patrik.r.jakobsson@...il.com>
    Signed-off-by: Daniel Vetter <daniel.vetter@...ll.ch>

+------------------------------------------+------------+------------+---------------+
|                                          | 7552e7dd95 | 7bf2844ed1 | next-20141218 |
+------------------------------------------+------------+------------+---------------+
| boot_successes                           | 60         | 0          | 0             |
| boot_failures                            | 0          | 20         | 26            |
| BUG:unable_to_handle_kernel              | 0          | 20         | 26            |
| Oops                                     | 0          | 20         | 26            |
| EIP_is_at_virt_to_head_page              | 0          | 20         | 26            |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 20         | 26            |
| backtrace:__pci_register_driver          | 0          | 20         | 26            |
| backtrace:drm_pci_init                   | 0          | 20         | 26            |
| backtrace:cirrus_init                    | 0          | 20         | 26            |
| backtrace:kernel_init_freeable           | 0          | 20         | 26            |
+------------------------------------------+------------+------------+---------------+

[    1.509413] cirrusdrmfb: enable CONFIG_FB_LITTLE_ENDIAN to support this framebuffer
[    1.510493] [drm:cirrus_modeset_init] *ERROR* cirrus_fbdev_init failed
[    1.511405] cirrus 0000:00:02.0: Fatal error during modeset init: -22
[    1.513064] BUG: unable to handle kernel paging request at 95d24c70
[    1.513775] IP: [<8109e956>] virt_to_head_page+0x15/0x2a
[    1.513775] *pdpt = 0000000001c48001 *pde = 0000000000000000 
[    1.513775] Oops: 0000 [#1] DEBUG_PAGEALLOC
[    1.513775] CPU: 0 PID: 1 Comm: swapper Not tainted 3.18.0-rc4-00653-g7bf2844 #26
[    1.513775] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    1.513775] task: 80100000 ti: 80072000 task.ti: 80072000
[    1.513775] EIP: 0060:[<8109e956>] EFLAGS: 00010282 CPU: 0
[    1.513775] EIP is at virt_to_head_page+0x15/0x2a
[    1.513775] EAX: 6b6b6b6b EBX: 6b6b6b6b ECX: 00110005 EDX: 95d24c70
[    1.513775] ESI: 00000000 EDI: 9208dfc4 EBP: 80073d8c ESP: 80073d8c
[    1.513775]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[    1.513775] CR0: 8005003b CR2: 95d24c70 CR3: 01c4c000 CR4: 000006b0
[    1.513775] Stack:
[    1.513775]  80073dac 810a0c1a 81098f98 81098f98 0000023f 91196db0 00000000 9208dfc4
[    1.513775]  80073dc0 8136b055 91196db0 9208a2c0 9208dfc4 80073dcc 8136b6c1 91196db0
[    1.513775]  80073de4 813fd7d4 9174ec24 9208a2c0 9208df90 9208a2c0 80073df0 813fd037
[    1.513775] Call Trace:
[    1.513775]  [<810a0c1a>] kfree+0x19/0xc4
[    1.513775]  [<81098f98>] ? __vunmap+0x8f/0x97
[    1.513775]  [<81098f98>] ? __vunmap+0x8f/0x97
[    1.513775]  [<8136b055>] drm_fb_helper_crtc_free+0x1a/0x5a
[    1.513775]  [<8136b6c1>] drm_fb_helper_fini+0x4f/0x54
[    1.513775]  [<813fd7d4>] cirrus_fbdev_fini+0x9a/0xcb
[    1.513775]  [<813fd037>] cirrus_modeset_fini+0xb/0x1f
[    1.513775]  [<813fc2fb>] cirrus_driver_unload+0x15/0x37
[    1.513775]  [<813fc3c8>] cirrus_driver_load+0xab/0xb5
[    1.513775]  [<813730cc>] drm_dev_register+0x69/0xcb
[    1.513775]  [<8137438e>] drm_get_pci_dev+0xc8/0x15c
[    1.513775]  [<813fd11a>] cirrus_pci_probe+0xbf/0xc7
[    1.513775]  [<8127c6b6>] pci_device_probe+0x45/0x7f
[    1.513775]  [<81428648>] driver_probe_device+0x83/0x175
[    1.513775]  [<814287b4>] __driver_attach+0x4e/0x6a
[    1.513775]  [<81427490>] bus_for_each_dev+0x4e/0x6b
[    1.513775]  [<81428850>] driver_attach+0x14/0x16
[    1.513775]  [<81428766>] ? __device_attach+0x2c/0x2c
[    1.513775]  [<81427ac9>] bus_add_driver+0xc5/0x175
[    1.513775]  [<81bed76c>] ? i915_init+0x69/0x69
[    1.513775]  [<81428b8c>] driver_register+0x6f/0xa4
[    1.513775]  [<81bed76c>] ? i915_init+0x69/0x69
[    1.513775]  [<8127c589>] __pci_register_driver+0x45/0x48
[    1.513775]  [<81374469>] drm_pci_init+0x47/0xb3
[    1.513775]  [<81bed76c>] ? i915_init+0x69/0x69
[    1.513775]  [<81bed78c>] cirrus_init+0x20/0x22
[    1.513775]  [<81bc6b3f>] do_one_initcall+0xce/0x145
[    1.513775]  [<81bc6400>] ? do_early_param+0x3e/0x73
[    1.513775]  [<8103ad44>] ? parse_args+0x19d/0x280
[    1.513775]  [<81bc6d16>] kernel_init_freeable+0x160/0x1e0
[    1.513775]  [<816801fc>] kernel_init+0x8/0xb8
[    1.513775]  [<8168b480>] ret_from_kernel_thread+0x20/0x30
[    1.513775]  [<816801f4>] ? rest_init+0xa2/0xa2
[    1.513775] Code: ba e1 05 00 00 b8 d0 51 8d 81 e8 a9 c5 f8 ff eb ce 5b 5e 5f 5d c3 55 89 e5 8d 90 00 00 00 80 c1 ea 0c 6b d2 28 03 15 94 b1 24 82 <8b> 02 f6 c4 80 74 0a 8b 42 1c 8b 0a 80 e5 80 75 02 89 d0 5d c3
[    1.513775] EIP: [<8109e956>] virt_to_head_page+0x15/0x2a SS:ESP 0068:80073d8c
[    1.513775] CR2: 0000000095d24c70
[    1.513775] ---[ end trace 705e9141a788c5b7 ]---
[    1.513775] Kernel panic - not syncing: Fatal exception

git bisect start cfaa3a95dd2b402599b1d8122dc3107478db8717 b2776bf7149bddd1f4161f14f79520f17fc1d71d --
git bisect good caf292ae5bb9d57198ce001d8b762f7abae3a94d  # 00:17     15+      0  Merge branch 'for-3.19/core' of git://git.kernel.dk/linux-block
git bisect good f9dfabdfd3aae1ed36d79f5dc471a716df6131ed  # 00:30     15+      0  Merge remote-tracking branch 'blackfin/for-linus'
git bisect good 02c4f9a3e4d358e189e70fbd0a4fde7f2eef2a92  # 00:52     15+      0  Merge remote-tracking branch 'drm-intel/for-linux-next'
git bisect  bad 9a8a9b528fe3ab109066e81080387fcbfb2d0c5b  # 01:18      0-     15  Merge remote-tracking branch 'kvm/linux-next'
git bisect  bad fda825ebcf5bcaced500c0cc7021b232a19d3335  # 01:59      0-     20  Merge remote-tracking branch 'omap_dss2/for-next'
git bisect  bad 34ed88f9a8aa0bcf2c928a5bc4756a8d31d5dab7  # 02:07      0-     13  Merge remote-tracking branch 'block/for-next'
git bisect  bad b2d1c429aace4bbf67de839d2173c41581f7c43f  # 02:44      0-     20  Merge remote-tracking branch 'modules/modules-next'
git bisect  bad 6648d4ac81c1720971701bbeabfe6ef655ee6b0e  # 03:03      0-     20  Merge remote-tracking branch 'drm-misc/topic/core-stuff'
git bisect good ae28290be3871969fc3f64b480d42575a16ae990  # 03:12     20+      0  drm: bit of spell-check / editorializing.
git bisect good abc0b1447d4974963548777a5ba4a4457c82c426  # 03:25     20+      0  drm: Perform basic sanity checks on probed modes
git bisect good b46004b70367974d5318caeabfd435017adf9e2a  # 03:34     20+      0  drm: Move IRQ related fields to proper section
git bisect good 7552e7dd9527c41f891c87854418896eaf309c20  # 04:08     20+      0  drm: Include drm_crtc_helper.h in DocBook
git bisect  bad 7bf2844ed14de049a4ccec26eb3d8b4c3d5c1971  # 04:14      0-     20  drm/fb-helper: Propagate errors from initial config failure
# first bad commit: [7bf2844ed14de049a4ccec26eb3d8b4c3d5c1971] drm/fb-helper: Propagate errors from initial config failure
git bisect good 7552e7dd9527c41f891c87854418896eaf309c20  # 04:16     60+      0  drm: Include drm_crtc_helper.h in DocBook
# extra tests on HEAD of next/master
git bisect  bad cfaa3a95dd2b402599b1d8122dc3107478db8717  # 04:16      0-     26  Add linux-next specific files for 20141218
# extra tests on tree/branch next/master
git bisect  bad cfaa3a95dd2b402599b1d8122dc3107478db8717  # 04:16      0-     26  Add linux-next specific files for 20141218
# extra tests on tree/branch linus/master
git bisect good c297abfdf15b4480704d6b566ca5ca9438b12456  # 07:08     60+      0  mnt: Fix a memory stomp in umount
# extra tests on tree/branch next/master
git bisect  bad cfaa3a95dd2b402599b1d8122dc3107478db8717  # 07:08      0-     26  Add linux-next specific files for 20141218


This script may reproduce the error.

----------------------------------------------------------------------------
#!/bin/bash

kernel=$1
initrd=yocto-minimal-i386.cgz

wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd

kvm=(
	qemu-system-x86_64
	-cpu kvm64
	-enable-kvm
	-kernel $kernel
	-initrd $initrd
	-m 320
	-smp 1
	-net nic,vlan=1,model=e1000
	-net user,vlan=1
	-boot order=nc
	-no-reboot
	-watchdog i6300esb
	-rtc base=localtime
	-serial stdio
	-display none
	-monitor null 
)

append=(
	hung_task_panic=1
	earlyprintk=ttyS0,115200
	debug
	apic=debug
	sysrq_always_enabled
	rcupdate.rcu_cpu_stall_timeout=100
	panic=-1
	softlockup_panic=1
	nmi_watchdog=panic
	oops=panic
	load_ramdisk=2
	prompt_ramdisk=0
	console=ttyS0,115200
	console=tty0
	vga=normal
	root=/dev/ram0
	rw
	drbd.minor_count=8
)

"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------

Thanks,
Fengguang

View attachment "dmesg-yocto-vp-5:20141219041342:i386-randconfig-j0-12151340:3.18.0-rc4-00653-g7bf2844:26" of type "text/plain" (33523 bytes)

View attachment "config-3.18.0-rc4-00653-g7bf2844" of type "text/plain" (72042 bytes)

_______________________________________________
LKP mailing list
LKP@...ux.intel.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ