linux-kernel - Re: [4.0.0-rc3-24042-g5fb0f7fa] BUG: NULL pointer dereference in DRM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <1427287940.3940.4.camel@m3y3r.de>
Date:	Wed, 25 Mar 2015 13:52:20 +0100
From:	Thomas Meyer <thomas@...3r.de>
To:	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	dri-devel <dri-devel@...ts.freedesktop.org>,
	airlied <airlied@...ux.ie>
Subject: Re: [4.0.0-rc3-24042-g5fb0f7fa] BUG: NULL pointer dereference in
 DRM

Am Sonntag, den 22.03.2015, 17:46 +0100 schrieb Thomas Meyer:
> Hi,
> 

another hard lock-up of the graphic system. this time with
4.0.0-rc4-24381-gb314aca

I previously did use the Fedora default kernel, i.e. 3.18.x. with those
I didn't encounter these kind of lock-ups.

Mär 25 09:02:41 localhost.localdomain kernel: PM: resume of devices complete after 545.592 msecs
Mär 25 09:02:41 localhost.localdomain kernel: [drm] vendor descriptor length:22 data:22 5f 01 00 20 05 00 01 03 04 02
Mär 25 09:02:41 localhost.localdomain kernel: EDID block is all zeroes
Mär 25 09:02:41 localhost.localdomain kernel: udl 2-1.1:1.0: DVI-I-3: EDID invalid.
Mär 25 09:02:41 localhost.localdomain kernel: udl 2-1.1:1.0: fb3: udldrmfb frame buffer device
Mär 25 09:02:41 localhost.localdomain kernel: [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
Mär 25 09:02:41 localhost.localdomain kernel: [drm] No driver support for vblank timestamp query.
Mär 25 09:02:41 localhost.localdomain kernel: [drm] Initialized udl on minor 3
Mär 25 09:02:41 localhost.localdomain kernel: Restarting tasks ... done.
Mär 25 09:02:41 localhost.localdomain kernel: video LNXVIDEO:00: Restoring backlight state
Mär 25 09:02:41 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_UP): enp0s29f7u1u3: link is not ready
Mär 25 09:02:41 localhost.localdomain kernel: iwlwifi 0000:02:00.0: L1 Enabled - LTR Disabled
Mär 25 09:02:41 localhost.localdomain kernel: iwlwifi 0000:02:00.0: Radio type=0x1-0x2-0x0
Mär 25 09:02:41 localhost.localdomain kernel: asix 2-1.3:1.0 enp0s29f7u1u3: link down
Mär 25 09:02:41 localhost.localdomain kernel: psmouse serio2: synaptics: queried max coordinates: x [..5888], y [..5012]
Mär 25 09:02:42 localhost.localdomain kernel: BUG: unable to handle kernel NULL pointer dereference at           (null)
Mär 25 09:02:42 localhost.localdomain kernel: IP: [<          (null)>]           (null)
Mär 25 09:02:42 localhost.localdomain kernel: PGD afd2b067 PUD b5a39067 PMD 0 
Mär 25 09:02:42 localhost.localdomain kernel: Oops: 0010 [#1] PREEMPT SMP 
Mär 25 09:02:42 localhost.localdomain kernel: Modules linked in: bluetooth fuse ipt_MASQUERADE nf_nat_masquerade_ipv4 ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iwldvm snd_hda_codec_hdmi kvm_intel kvm snd_hda_codec_realtek acer_wmi mac80211 snd_hda_codec_generic sparse_keymap acerhdf pcspkr joydev snd_hda_intel snd_usb_audio snd_hda_controller snd_hda_codec snd_usbmidi_lib snd_hwdep snd_rawmidi snd_seq snd_seq_device iwlwifi snd_pcm snd_timer snd soundcore cfg80211 rfkill wmi acpi_cpufreq sch_fq_codel asix usbnet mii udl syscopyarea sysfillrect sysimgblt atl1c ipv6
Mär 25 09:02:42 localhost.localdomain kernel: CPU: 0 PID: 1956 Comm: Xorg.bin Not tainted 4.0.0-rc4-24381-gb314aca #15
Mär 25 09:02:42 localhost.localdomain kernel: Hardware name: Acer Aspire 1810T/JM11-MS, BIOS v1.3310 03/25/2010
Mär 25 09:02:42 localhost.localdomain kernel: task: ffff880234e08d90 ti: ffff8800b4760000 task.ti: ffff8800b4760000
Mär 25 09:02:42 localhost.localdomain kernel: RIP: 0010:[<0000000000000000>]  [<          (null)>]           (null)
Mär 25 09:02:42 localhost.localdomain kernel: RSP: 0018:ffff8800b4763d00  EFLAGS: 00010046
Mär 25 09:02:42 localhost.localdomain kernel: RAX: ffffffffc02fa140 RBX: 0000000000000000 RCX: 0000000000000000
Mär 25 09:02:42 localhost.localdomain kernel: RDX: 00000000000dacbc RSI: 0000000000000000 RDI: ffff88004820e800
Mär 25 09:02:42 localhost.localdomain kernel: RBP: ffff8800b4763d88 R08: 000000008baf7e38 R09: 0000000000000000
Mär 25 09:02:42 localhost.localdomain kernel: R10: 0000000000000100 R11: 0000000000003246 R12: ffff8801fecba4c0
Mär 25 09:02:42 localhost.localdomain kernel: R13: 0000000000000003 R14: ffff88004820e800 R15: ffff880233891ec8
Mär 25 09:02:42 localhost.localdomain kernel: FS:  00007fef3059b9c0(0000) GS:ffff88023fc00000(0000) knlGS:0000000000000000
Mär 25 09:02:42 localhost.localdomain kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Mär 25 09:02:42 localhost.localdomain kernel: CR2: 0000000000000000 CR3: 00000002342cf000 CR4: 00000000000407f0
Mär 25 09:02:42 localhost.localdomain kernel: Stack:
Mär 25 09:02:42 localhost.localdomain kernel:  ffffffff813fcf07 ffff8800b4763d38 0000000000000000 0000000000000086
Mär 25 09:02:42 localhost.localdomain kernel:  ffff88004820e988 ffff8800b4763d40 0000000000000286 ffff8800b4763d68
Mär 25 09:02:42 localhost.localdomain kernel:  000000000000d0bd 00000000000dacbc 00000000c255a405 ffff8801fecba500
Mär 25 09:02:42 localhost.localdomain kernel: Call Trace:
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fcf07>] ? vblank_disable_and_save+0x97/0x210
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fe9ad>] drm_vblank_cleanup+0x5d/0xa0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffffc02f6283>] udl_driver_unload+0x13/0x50 [udl]
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400178>] drm_dev_unregister+0x28/0xb0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400842>] drm_put_dev+0x22/0x70
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fab3f>] drm_release+0x33f/0x520
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81184669>] __fput+0xc9/0x1e0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff811847c9>] ____fput+0x9/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8106f4b7>] task_work_run+0xb7/0xf0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81003c1c>] do_notify_resume+0x5c/0x80
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c71a9>] int_signal+0x12/0x17
Mär 25 09:02:42 localhost.localdomain kernel: Code:  Bad RIP value.
Mär 25 09:02:42 localhost.localdomain kernel: RIP  [<          (null)>]           (null)
Mär 25 09:02:42 localhost.localdomain kernel:  RSP <ffff8800b4763d00>
Mär 25 09:02:42 localhost.localdomain kernel: CR2: 0000000000000000
Mär 25 09:02:42 localhost.localdomain kernel: ---[ end trace 3f63f8ab48186a0e ]---
Mär 25 09:02:42 localhost.localdomain kernel: note: Xorg.bin[1956] exited with preempt_count 2
Mär 25 09:02:42 localhost.localdomain kernel: BUG: scheduling while atomic: Xorg.bin/1956/0x00000003
Mär 25 09:02:42 localhost.localdomain kernel: Modules linked in: bluetooth fuse ipt_MASQUERADE nf_nat_masquerade_ipv4 ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iwldvm snd_hda_codec_hdmi kvm_intel kvm snd_hda_codec_realtek acer_wmi mac80211 snd_hda_codec_generic sparse_keymap acerhdf pcspkr joydev snd_hda_intel snd_usb_audio snd_hda_controller snd_hda_codec snd_usbmidi_lib snd_hwdep snd_rawmidi snd_seq snd_seq_device iwlwifi snd_pcm snd_timer snd soundcore cfg80211 rfkill wmi acpi_cpufreq sch_fq_codel asix usbnet mii udl syscopyarea sysfillrect sysimgblt atl1c ipv6
Mär 25 09:02:42 localhost.localdomain kernel: CPU: 0 PID: 1956 Comm: Xorg.bin Tainted: G      D         4.0.0-rc4-24381-gb314aca #15
Mär 25 09:02:42 localhost.localdomain kernel: Hardware name: Acer Aspire 1810T/JM11-MS, BIOS v1.3310 03/25/2010
Mär 25 09:02:42 localhost.localdomain kernel:  0000000000000000 00000000c255a405 ffff8800b47637b8 ffffffff816c0bd3
Mär 25 09:02:42 localhost.localdomain kernel:  0000000000000000 0000000000013840 ffff8800b47637c8 ffffffff81076103
Mär 25 09:02:42 localhost.localdomain kernel:  ffff8800b4763838 ffffffff816c29ba ffff8800b4763848 ffff880234e08d90
Mär 25 09:02:42 localhost.localdomain kernel: Call Trace:
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c0bd3>] dump_stack+0x4c/0x6e
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81076103>] __schedule_bug+0x43/0x60
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c29ba>] __schedule+0x5ea/0x9b0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c2db2>] schedule+0x32/0x80
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c30c0>] schedule_preempt_disabled+0x10/0x20
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81090ebd>] mutex_optimistic_spin+0x18d/0x1f0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81159961>] ? map_vm_area+0x31/0x40
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c4cdc>] __mutex_lock_slowpath+0x3c/0x150
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c4e06>] mutex_lock+0x16/0x30
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fa833>] drm_release+0x33/0x520
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81184669>] __fput+0xc9/0x1e0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff811847c9>] ____fput+0x9/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8106f4d4>] task_work_run+0xd4/0xf0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81056105>] do_exit+0x2e5/0xa90
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81007498>] oops_end+0x88/0xd0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81044d2b>] no_context+0x13b/0x390
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c3680>] ? bit_wait_timeout+0x70/0x70
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81044ff5>] __bad_area_nosemaphore+0x75/0x200
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8100e8a2>] ? __switch_to_xtra+0x132/0x160
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8104518e>] bad_area_nosemaphore+0xe/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81045426>] __do_page_fault+0xa6/0x470
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c267b>] ? __schedule+0x2ab/0x9b0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff810457fc>] do_page_fault+0xc/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c8a12>] page_fault+0x22/0x30
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fcf07>] ? vblank_disable_and_save+0x97/0x210
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fe9ad>] drm_vblank_cleanup+0x5d/0xa0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffffc02f6283>] udl_driver_unload+0x13/0x50 [udl]
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400178>] drm_dev_unregister+0x28/0xb0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400842>] drm_put_dev+0x22/0x70
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fab3f>] drm_release+0x33f/0x520
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81184669>] __fput+0xc9/0x1e0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff811847c9>] ____fput+0x9/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8106f4b7>] task_work_run+0xb7/0xf0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81003c1c>] do_notify_resume+0x5c/0x80
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c71a9>] int_signal+0x12/0x17
Mär 25 09:02:42 localhost.localdomain kernel: BUG: scheduling while atomic: Xorg.bin/1956/0x00000003
Mär 25 09:02:42 localhost.localdomain kernel: Modules linked in: bluetooth fuse ipt_MASQUERADE nf_nat_masquerade_ipv4 ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iwldvm snd_hda_codec_hdmi kvm_intel kvm snd_hda_codec_realtek acer_wmi mac80211 snd_hda_codec_generic sparse_keymap acerhdf pcspkr joydev snd_hda_intel snd_usb_audio snd_hda_controller snd_hda_codec snd_usbmidi_lib snd_hwdep snd_rawmidi snd_seq snd_seq_device iwlwifi snd_pcm snd_timer snd soundcore cfg80211 rfkill wmi acpi_cpufreq sch_fq_codel asix usbnet mii udl syscopyarea sysfillrect sysimgblt atl1c ipv6
Mär 25 09:02:42 localhost.localdomain kernel: CPU: 0 PID: 1956 Comm: Xorg.bin Tainted: G      D W       4.0.0-rc4-24381-gb314aca #15
Mär 25 09:02:42 localhost.localdomain kernel: Hardware name: Acer Aspire 1810T/JM11-MS, BIOS v1.3310 03/25/2010
Mär 25 09:02:42 localhost.localdomain kernel:  0000000000000000 00000000c255a405 ffff8800b4763818 ffffffff816c0bd3
Mär 25 09:02:42 localhost.localdomain kernel:  0000000000000000 0000000000013840 ffff8800b4763828 ffffffff81076103
Mär 25 09:02:42 localhost.localdomain kernel:  ffff8800b4763898 ffffffff816c29ba ffff8800b4763858 ffff880234e08d90
Mär 25 09:02:42 localhost.localdomain kernel: Call Trace:
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c0bd3>] dump_stack+0x4c/0x6e
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81076103>] __schedule_bug+0x43/0x60
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c29ba>] __schedule+0x5ea/0x9b0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c2db2>] schedule+0x32/0x80
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c30c0>] schedule_preempt_disabled+0x10/0x20
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c4d75>] __mutex_lock_slowpath+0xd5/0x150
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c4e06>] mutex_lock+0x16/0x30
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fa833>] drm_release+0x33/0x520
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81184669>] __fput+0xc9/0x1e0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff811847c9>] ____fput+0x9/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8106f4d4>] task_work_run+0xd4/0xf0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81056105>] do_exit+0x2e5/0xa90
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81007498>] oops_end+0x88/0xd0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81044d2b>] no_context+0x13b/0x390
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c3680>] ? bit_wait_timeout+0x70/0x70
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81044ff5>] __bad_area_nosemaphore+0x75/0x200
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8100e8a2>] ? __switch_to_xtra+0x132/0x160
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8104518e>] bad_area_nosemaphore+0xe/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81045426>] __do_page_fault+0xa6/0x470
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c267b>] ? __schedule+0x2ab/0x9b0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff810457fc>] do_page_fault+0xc/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c8a12>] page_fault+0x22/0x30
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fcf07>] ? vblank_disable_and_save+0x97/0x210
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fe9ad>] drm_vblank_cleanup+0x5d/0xa0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffffc02f6283>] udl_driver_unload+0x13/0x50 [udl]
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400178>] drm_dev_unregister+0x28/0xb0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81400842>] drm_put_dev+0x22/0x70
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff813fab3f>] drm_release+0x33f/0x520
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81184669>] __fput+0xc9/0x1e0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff811847c9>] ____fput+0x9/0x10
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff8106f4b7>] task_work_run+0xb7/0xf0
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff81003c1c>] do_notify_resume+0x5c/0x80
Mär 25 09:02:42 localhost.localdomain kernel:  [<ffffffff816c71a9>] int_signal+0x12/0x17


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/