| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20220210143431.GA12338@xsang-OptiPlex-9020>
Date: Thu, 10 Feb 2022 22:34:43 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Manasi Navare <manasi.d.navare@...el.com>
Cc: 0day robot <lkp@...el.com>, Jani Nikula <jani.nikula@...el.com>,
LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
intel-gfx@...ts.freedesktop.org
Subject: [drm/i915/display/vrr] ba3e9d88c7: canonical_address#:#[##]
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: ba3e9d88c78ca7e398095751180e92ae07150498 ("[Intel-gfx] [PATCH v2] drm/i915/display/vrr: Reset VRR capable property on a long hpd")
url: https://github.com/0day-ci/linux/commits/Manasi-Navare/drm-i915-display-vrr-Reset-VRR-capable-property-on-a-long-hpd/20220127-033848
base: git://anongit.freedesktop.org/drm-intel for-linux-next
patch link: https://lore.kernel.org/intel-gfx/20220126195304.8262-1-manasi.d.navare@intel.com
in testcase: boot
on test machine: 4 threads Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz with 32G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 22.455183][ T210] ACPI: video: Video Device [GFX0] (multi-head: yes rom: no post: no)
[ 22.459323][ T290] microcode: Reload completed, microcode revision: 0xe2
[ 22.476035][ T309] random: ln: uninitialized urandom read (6 bytes read)
[ 22.478334][ T252] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[ 22.484201][ T210] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input3
[ 22.490603][ T275] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI
[ 22.519225][ T275] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[ 22.527415][ T275] CPU: 2 PID: 275 Comm: kworker/u8:4 Not tainted 5.16.0-rc2-00638-gba3e9d88c78c #1
[ 22.536463][ T275] Hardware name: Dell Inc. OptiPlex 7040/0Y7WYT, BIOS 1.8.1 12/05/2017
[ 22.544478][ T275] Workqueue: events_unbound async_run_entry_fn
[ 22.550432][ T275] RIP: 0010:drm_object_property_set_value (kbuild/src/consumer/drivers/gpu/drm/drm_mode_object.c:286) drm
[ 22.557459][ T275] Code: 00 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 49 89 f5 41 54 55 48 89 fd 48 8d 7e 60 53 48 89 f9 48 c1 e9 03 48 83 ec 10 <80> 3c 01 00 0f 85 72 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b
All code
========
0: 00 48 b8 add %cl,-0x48(%rax)
3: 00 00 add %al,(%rax)
5: 00 00 add %al,(%rax)
7: 00 fc add %bh,%ah
9: ff (bad)
a: df 41 57 filds 0x57(%rcx)
d: 41 56 push %r14
f: 41 55 push %r13
11: 49 89 f5 mov %rsi,%r13
14: 41 54 push %r12
16: 55 push %rbp
17: 48 89 fd mov %rdi,%rbp
1a: 48 8d 7e 60 lea 0x60(%rsi),%rdi
1e: 53 push %rbx
1f: 48 89 f9 mov %rdi,%rcx
22: 48 c1 e9 03 shr $0x3,%rcx
26: 48 83 ec 10 sub $0x10,%rsp
2a:* 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) <-- trapping instruction
2e: 0f 85 72 02 00 00 jne 0x2a6
34: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
3b: fc ff df
3e: 49 rex.WB
3f: 8b .byte 0x8b
Code starting with the faulting instruction
===========================================
0: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1)
4: 0f 85 72 02 00 00 jne 0x27c
a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
11: fc ff df
14: 49 rex.WB
15: 8b .byte 0x8b
[ 22.576740][ T275] RSP: 0018:ffffc90000b67980 EFLAGS: 00010282
[ 22.582606][ T275] RAX: dffffc0000000000 RBX: ffff8881372e0008 RCX: 000000000000000c
[ 22.590365][ T275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000060
[ 22.598127][ T275] RBP: ffff88811fb69040 R08: ffff888193bcd488 R09: ffff88811fb741a7
[ 22.605890][ T275] R10: ffff88811fb741b5 R11: ffffed1023f6e836 R12: ffff8881372e0000
[ 22.613650][ T275] R13: 0000000000000000 R14: ffff88811fb74820 R15: ffff88811fb74000
[ 22.621410][ T275] FS: 0000000000000000(0000) GS:ffff888797100000(0000) knlGS:0000000000000000
[ 22.630117][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 22.636499][ T275] CR2: 00007f73531bf1b8 CR3: 000000081022a005 CR4: 00000000003706e0
[ 22.644261][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 22.652019][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 22.659793][ T275] Call Trace:
[ 22.662916][ T275] <TASK>
[ 22.665694][ T275] intel_dp_detect (kbuild/src/consumer/drivers/gpu/drm/i915/display/intel_dp.c:4455 (discriminator 1)) i915
[ 22.671153][ T275] ? drm_modeset_lock (kbuild/src/consumer/drivers/gpu/drm/drm_modeset_lock.c:306 kbuild/src/consumer/drivers/gpu/drm/drm_modeset_lock.c:387 kbuild/src/consumer/drivers/gpu/drm/drm_modeset_lock.c:383) drm
[ 22.676470][ T275] drm_helper_probe_detect (kbuild/src/consumer/drivers/gpu/drm/drm_probe_helper.c:344) drm_kms_helper
[ 22.683151][ T275] drm_helper_probe_single_connector_modes (kbuild/src/consumer/drivers/gpu/drm/drm_probe_helper.c:459) drm_kms_helper
To reproduce:
# build kernel
cd linux
cp config-5.16.0-rc2-00638-gba3e9d88c78c .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage modules
make HOSTCC=gcc-9 CC=gcc-9 ARCH=x86_64 INSTALL_MOD_PATH=<mod-install-dir> modules_install
cd <mod-install-dir>
find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org Intel Corporation
Thanks,
Oliver Sang
View attachment "config-5.16.0-rc2-00638-gba3e9d88c78c" of type "text/plain" (177705 bytes)
View attachment "job-script" of type "text/plain" (5359 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (17848 bytes)
Powered by blists - more mailing lists