From: Erhard Furtner <erhard_f@mailbox.org>
To: linuxppc-dev@lists.ozlabs.org
Cc: Linux DRI Development <dri-devel@lists.freedesktop.org>
Subject: Re: "BUG: Kernel NULL pointer dereference on read at 0x00000000" at running drm_gem_shmem_test on a Talos II, kernel 6.8-rc5
Date: Fri, 23 Feb 2024 13:47:13 +0100 [thread overview]
Message-ID: <20240223134537.41a7eb16@yea> (raw)
In-Reply-To: <20240223024222.6852d94b@yea>
On Fri, 23 Feb 2024 02:42:22 +0100
Erhard Furtner <erhard_f@mailbox.org> wrote:
> Greetings!
>
> Looks like my Talos II (running a BE kernel+system) fails some of the kernels internal unit tests. At running drm_gem_shmem_test via 'modprobe -v drm_gem_shmem_test' I get:
KASAN gets some additional information out of it:
[...]
KTAP version 1
1..1
KTAP version 1
# Subtest: drm_gem_shmem
# module: drm_gem_shmem_test
1..8
ok 1 drm_gem_shmem_test_obj_create
==================================================================
BUG: KASAN: null-ptr-deref in dma_unmap_sg_attrs+0x7c/0x210
Read of size 8 at addr 0000000000000000 by task kunit_try_catch/4023
CPU: 24 PID: 4023 Comm: kunit_try_catch Tainted: G W TN 6.8.0-rc5-P9-dirty #4
Hardware name: T2P9D01 REV 1.01 POWER9 0x4e1202 opal:skiboot-bc106a0 PowerNV
Call Trace:
[c00020004560f920] [c0000000013c2618] dump_stack_lvl+0x74/0xb8 (unreliable)
[c00020004560f950] [c00000000055831c] print_report+0x200/0xa64
[c00020004560fa50] [c000000000558f5c] kasan_report+0x160/0x28c
[c00020004560fb70] [c00000000055b3f8] __asan_load8+0xec/0x140
[c00020004560fb90] [c000000000283d9c] dma_unmap_sg_attrs+0x7c/0x210
[c00020004560fbf0] [c0080000227ed3bc] drm_gem_shmem_free+0x160/0x398 [drm_shmem_helper]
[c00020004560fc80] [c008000022812cf8] drm_gem_shmem_test_obj_create_private+0x288/0x588 [drm_gem_shmem_test]
[c00020004560fe90] [c000000000b15ca4] kunit_try_run_case+0xfc/0x34c
[c00020004560ff50] [c000000000b1a698] kunit_generic_run_threadfn_adapter+0x50/0x7c
[c00020004560ff80] [c0000000001cd7bc] kthread+0x1d4/0x1e0
[c00020004560ffe0] [c00000000000d030] start_kernel_thread+0x14/0x18
==================================================================
BUG: Kernel NULL pointer dereference on read at 0x00000000
Faulting instruction address: 0xc000000000283da4
Oops: Kernel access of bad area, sig: 7 [#1]
BE PAGE_SIZE=4K MMU=Radix SMP NR_CPUS=32 NUMA PowerNV
Modules linked in: drm_gem_shmem_test drm_shmem_helper slub_kunit drm_rect_test drm_modes_test drm_mm_test drm_managed_test drm_framebuffer_test drm_format_test drm_exec_test drm_kunit_helpers drm_exec drm_dp_mst_helper_test drm_damage_helper_test drm_connector_test drm_cmdline_parser_test drm_buddy_test drm_buddy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore evdev input_leds hid_generic usbhid hid radeon xts ctr cbc xhci_pci xhci_hcd drm_suballoc_helper i2c_algo_bit drm_ttm_helper ofpart aes_generic libaes cfg80211 ttm drm_display_helper vmx_crypto powernv_flash gf128mul
usbcore mtd backlight rfkill at24 usb_common regmap_i2c opal_prd ibmpowernv lz4 lz4_compress lz4_decompress zram pkcs8_key_parser powernv_cpufreq dm_mod loop configfs
CPU: 24 PID: 4023 Comm: kunit_try_catch Tainted: G B W TN 6.8.0-rc5-P9-dirty #4
Hardware name: T2P9D01 REV 1.01 POWER9 0x4e1202 opal:skiboot-bc106a0 PowerNV
NIP: c000000000283da4 LR: c000000000283d9c CTR: 0000000000000000
REGS: c00020004560f8f0 TRAP: 0300 Tainted: G B W TN (6.8.0-rc5-P9-dirty)
MSR: 9000000000009032 <SF,HV,EE,ME,IR,DR,RI> CR: 28000200 XER: 00000000
CFAR: c00000000055b42c DAR: 0000000000000000 DSISR: 00080000 IRQMASK: 0
GPR00: 0000000000000000 c00020004560fb90 c0000000018f1c00 0000000000000000
GPR04: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
GPR08: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
GPR12: 0000000000000000 c0002005fc3ffd80 c0000000001cd5f0 c000000098368940
GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
GPR20: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
GPR24: 0000000000000000 0000000000000001 c00020000a992340 0000000000000000
GPR28: 0000000000000000 0000000000000000 0000000000000000 c000200046dfe400
NIP [c000000000283da4] dma_unmap_sg_attrs+0x84/0x210
LR [c000000000283d9c] dma_unmap_sg_attrs+0x7c/0x210
Call Trace:
[c00020004560fb90] [c000000000283d9c] dma_unmap_sg_attrs+0x7c/0x210 (unreliable)
[c00020004560fbf0] [c0080000227ed3bc] drm_gem_shmem_free+0x160/0x398 [drm_shmem_helper]
[c00020004560fc80] [c008000022812cf8] drm_gem_shmem_test_obj_create_private+0x288/0x588 [drm_gem_shmem_test]
[c00020004560fe90] [c000000000b15ca4] kunit_try_run_case+0xfc/0x34c
[c00020004560ff50] [c000000000b1a698] kunit_generic_run_threadfn_adapter+0x50/0x7c
[c00020004560ff80] [c0000000001cd7bc] kthread+0x1d4/0x1e0
[c00020004560ffe0] [c00000000000d030] start_kernel_thread+0x14/0x18
Code: 39200001 eb7f0238 7d20481e 0b090000 387f0240 482d758d 60000000 eb9f0240 7f83e378 482d757d 60000000 2c3b0000 <eb9c0000> 40820078 7fa7eb78 7fc6f378
---[ end trace 0000000000000000 ]---
Regards,
Erhard
prev parent reply other threads:[~2024-02-23 12:48 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-02-23 1:42 "BUG: Kernel NULL pointer dereference on read at 0x00000000" at running drm_gem_shmem_test on a Talos II, kernel 6.8-rc5 Erhard Furtner
2024-02-23 12:47 ` Erhard Furtner [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240223134537.41a7eb16@yea \
--to=erhard_f@mailbox.org \
--cc=dri-devel@lists.freedesktop.org \
--cc=linuxppc-dev@lists.ozlabs.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.