lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CA+G9fYv_mGoDzFv33v7Y5+6yz6z=xp9FJRiFUBYDapvE_rrBXA@mail.gmail.com>
Date: Thu, 16 Oct 2025 16:22:53 +0530
From: Naresh Kamboju <naresh.kamboju@...aro.org>
To: dri-devel@...ts.freedesktop.org, open list <linux-kernel@...r.kernel.org>, 
	lkft-triage@...ts.linaro.org, Linux Regressions <regressions@...ts.linux.dev>
Cc: Luca Ceresoli <luca.ceresoli@...tlin.com>, 
	Dmitry Baryshkov <dmitry.baryshkov@....qualcomm.com>, Simona Vetter <simona@...ll.ch>, 
	David Airlie <airlied@...il.com>, Maxime Ripard <mripard@...nel.org>, Arnd Bergmann <arnd@...db.de>, 
	Dan Carpenter <dan.carpenter@...aro.org>, Anders Roxell <anders.roxell@...aro.org>, 
	Ben Copeland <benjamin.copeland@...aro.org>
Subject: Re: next-20251014: Internal error: Oops: drm_bridge_connector_hdmi_cec_init
 drmm_connector_hdmi_cec_register

On Thu, 16 Oct 2025 at 16:14, Naresh Kamboju <naresh.kamboju@...aro.org> wrote:
>
> While booting and loading kernel modules on dragonboard 410c board
> with Linux next
> kernel next-20251014 and next-20251015 the following crash noticed,
>
> First seen on next-20251014
> Good: next-20251013
> Bad:  next-20251014
>
> Regression Analysis:
> - New regression? yes
> - Reproducibility? yes
>
> Boot regressions: next-20251014: Internal error: Oops:
> drm_bridge_connector_hdmi_cec_init drmm_connector_hdmi_cec_register
>
> Reported-by: Linux Kernel Functional Testing <lkft@...aro.org>

These three patches landed recently,
$ git log --oneline  next-20251013..next-20251014
drivers/gpu/drm/display/drm_bridge_connector.c
2be300f9a0b6f drm/display: bridge_connector: get/put the stored bridges
d5c5b1de3e18b drm/display: bridge-connector: use
drm_for_each_bridge_in_chain_scoped()
c92f59bac0784 drm/display: bridge-connector: use scope-specific
variable for the bridge pointer


> The kernel modules are not built with debug_info and could not find
> the line number.
> ### Boot
> [    9.830602] Unable to handle kernel NULL pointer dereference at
> virtual address 0000000000000098
> [    9.841379] coresight-cpu-debug 856000.debug: Coresight debug-CPU3
> initialized
> [    9.843514] Mem abort info:
> [    9.843523]   ESR = 0x0000000096000004
> [    9.843528]   EC = 0x25: DABT (current EL), IL = 32 bits
> [    9.843535]   SET = 0, FnV = 0
> [    9.843539]   EA = 0, S1PTW = 0
> [    9.843543]   FSC = 0x04: level 0 translation fault
> [    9.843547] Data abort info:
> [    9.843550]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
> [    9.843554]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
> [    9.903238] usb 1-1.2: new high-speed USB device number 3 using ci_hdrc
> [    9.908692]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
> [    9.908700] user pgtable: 4k pages, 48-bit VAs, pgdp=00000000834a2000
> [    9.908708] [0000000000000098] pgd=0000000000000000, p4d=0000000000000000
> [    9.951360] Internal error: Oops: 0000000096000004 [#1]  SMP
> [    9.958091] Modules linked in: coresight_cpu_debug qcom_wcnss_pil
> coresight_stm coresight_tmc stm_core coresight_tpiu coresight_cti
> coresight_replicator coresight_funnel snd_soc_lpass_apq8016 coresight
> snd_soc_lpass_cpu msm adv7511 snd_soc_lpass_platform
> snd_soc_msm8916_digital snd_soc_msm8916_analog snd_soc_apq8016_sbc
> snd_soc_qcom_common qcom_camss snd_soc_core snd_pcm_dmaengine
> llcc_qcom snd_compress venus_core qrtr snd_pcm videobuf2_dma_sg
> ubwc_config qcom_spmi_temp_alarm qcom_pon v4l2_fwnode rtc_pm8xxx
> qcom_q6v5_mss ocmem snd_timer qcom_spmi_vadc drm_gpuvm v4l2_mem2mem
> v4l2_async qcom_pil_info snd qcom_vadc_common drm_exec qcom_q6v5
> videobuf2_v4l2 gpu_sched qcom_sysmon soundcore drm_dp_aux_bus
> qcom_common videodev qcom_glink_smem drm_display_helper mdt_loader
> videobuf2_memops qmi_helpers qnoc_msm8916 qcom_stats qcom_rng cec
> videobuf2_common mc drm_client_lib socinfo phy_qcom_usb_hs rpmsg_ctrl
> rpmsg_char display_connector ramoops rmtfs_mem drm_kms_helper
> reed_solomon fuse drm backlight ipv6
> [   10.029607] CPU: 1 UID: 0 PID: 87 Comm: kworker/u16:3 Not tainted
> 6.18.0-rc1-next-20251015 #1 PREEMPT
> [   10.051760] Hardware name: Qualcomm Technologies, Inc. APQ 8016 SBC (DT)
> [   10.060957] Workqueue: events_unbound deferred_probe_work_func
> [   10.067812] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
> [   10.073455] pc : drm_bridge_connector_hdmi_cec_init+0xc/0x3c
> drm_display_helper
> [   10.080320] lr : drmm_connector_hdmi_cec_register+0x104/0x1b0
> drm_display_helper
> [   10.087958] sp : ffff800082fe3640
> [   10.091389] ci_hdrc ci_hdrc.0: remove, state 1
> [   10.095399] x29: ffff800082fe3690 x28: 0000000000000001 x27: ffff00000aa97610
> [   10.095414] x26: ffff00000aa97610 x25: 0000000000000008 x24: ffff80007ab7a0a8
> [   10.095427] x23: 0000000000000003 x22: ffff0000049dd420
> [   10.098816] usb usb1: USB disconnect, device number 1
> [   10.103130]  x21: ffff000004245e10
> [   10.103138] x20: ffff00000aa59000 x19: ffff00000aa4c080 x18: 00000002425c8888
> [   10.103150] x17: 0000000000000400 x16: 00000002425c8888 x15: 0000000000000553
> [   10.110393] usb 1-1: USB disconnect, device number 2
> [   10.117450]
> [   10.117454] x14: 00000000023660af x13: 0000000000000000 x12: 0000000000000000
> [   10.117466] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
> [   10.117478] x8 : ffff80007ab4f3a0 x7 : 000000001e237337
> [   10.126995] usb 1-1.2: USB disconnect, device number 3
> [   10.127691]  x6 : 000000001e237337
> [   10.176293] x5 : ffff8000826c5974 x4 : ffff00003fc734f0 x3 : 0000000000154401
> [   10.179619] x2 : 0000000000000003 x1 : ffff00000aa4c080 x0 : 0000000000000000
> [   10.186823] Call trace:
> [   10.193932] drm_bridge_connector_hdmi_cec_init+0xc/0x3c
> drm_display_helper (P)
> [   10.196204] drm_bridge_connector_init+0x580/0x64c drm_display_helper
> [   10.203839] msm_dsi_manager_connector_init+0xa0/0xd0 msm
> [   10.210260] msm_dsi_modeset_init+0x70/0xb4 msm
> [   10.215814] mdp5_kms_init+0xbec/0xe24 msm
> [   10.220674] msm_drm_kms_init+0x80/0x220 msm
> [   10.225018] msm_drm_init+0x1a8/0x1e0 msm
> [   10.229268] msm_drm_bind+0x34/0x40 msm
> [   10.233348]  try_to_bring_up_aggregate_device
> (/builds/linux/drivers/base/component.c:249)
> [   10.237516]  __component_add (/builds/linux/drivers/base/component.c:270)
> [   10.242894]  component_add (/builds/linux/drivers/base/component.c:807)
> [   10.246538] dsi_dev_attach+0x1c/0x28 msm
> [   10.250363] dsi_host_attach+0x64/0x98 msm
> [   10.254270]  devm_mipi_dsi_attach
> (/builds/linux/drivers/gpu/drm/drm_mipi_dsi.c:384)
> [   10.258779] adv7533_attach_dsi+0xac/0xf4 adv7511
> [   10.262708] adv7511_probe+0x700/0x75c adv7511
> [   10.262733]  i2c_device_probe (/builds/linux/drivers/i2c/i2c-core-base.c:604)
> [   10.262749]  really_probe (/builds/linux/drivers/base/dd.c:583)
> [   10.276313]  __driver_probe_device (/builds/linux/drivers/base/dd.c:?)
> [   10.279962]  driver_probe_device (/builds/linux/drivers/base/dd.c:831)
> [   10.284300]  __device_attach_driver (/builds/linux/drivers/base/dd.c:960)
> [   10.288207]  bus_for_each_drv (/builds/linux/drivers/base/bus.c:462)
> [   10.292719]  __device_attach (/builds/linux/drivers/base/dd.c:?)
> [   10.296887]  device_initial_probe (/builds/linux/drivers/base/dd.c:1081)
> [   10.300445]  bus_probe_device (/builds/linux/drivers/base/bus.c:539)
> [   10.304613]  deferred_probe_work_func (/builds/linux/drivers/base/dd.c:125)
> [   10.308780]  process_scheduled_works (/builds/linux/kernel/workqueue.c:3274)
> [   10.313035]  worker_thread (/builds/linux/include/linux/list.h:381
> /builds/linux/kernel/workqueue.c:952
> /builds/linux/kernel/workqueue.c:3428)
> [   10.317893]  kthread (/builds/linux/kernel/kthread.c:465)
> [   10.321451]  ret_from_fork (/builds/linux/arch/arm64/kernel/entry.S:861)
> [   10.324845] Code: d65f03c0 d503245f aa0003e1 f9449400 (f9404c08)
> All code
> ========
>    0: d65f03c0 ret
>    4: d503245f bti c
>    8: aa0003e1 mov x1, x0
>    c: f9449400 ldr x0, [x0, #2344]
>   10:* f9404c08 ldr x8, [x0, #152] <-- trapping instruction
>
> Code starting with the faulting instruction
> ===========================================
>    0: f9404c08 ldr x8, [x0, #152]
> [   10.328407] ---[ end trace 0000000000000000 ]---
>
>
> ## Source
> * Kernel version: 6.18.0-rc1-next-20251015
> * Git tree: https://kernel.googlesource.com/pub/scm/linux/kernel/git/next/linux-next.git
> * Git commit: 1fdbb3ff1233e204e26f9f6821ae9c125a055229
> * Architectures: arm64 db410c
> * Toolchains: gcc-13 and clang-21
> * Kconfigs: defconfig+lkftconfig
>
> ## Build
> * Test log: https://lkft.validation.linaro.org/scheduler/job/8493594#L2966
> * Test details:
> https://regressions.linaro.org/lkft/linux-next-master/next-20251015/log-parser-test/oops-Oops_SMP-ad06dc06/
> * Build plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/346UvyvsORKa7GkJXNgOdZm4Jc9
> * Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/346UvE5jXrKAGFTkdkd35Z9HsUM/
> * Kernel config:
> https://storage.tuxsuite.com/public/linaro/lkft/builds/346UvE5jXrKAGFTkdkd35Z9HsUM/config
>
> --
> Linaro LKFT

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ