From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hans de Goede Subject: Kernel oops in udl driver Date: Tue, 18 Mar 2014 16:13:26 +0100 Message-ID: <53286296.20209@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) by gabe.freedesktop.org (Postfix) with ESMTP id 1A52F6EFBA for ; Tue, 18 Mar 2014 08:13:52 -0700 (PDT) Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id s2IFDUXg006795 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 18 Mar 2014 11:13:32 -0400 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: Dave Airlie Cc: dri-devel List-Id: dri-devel@lists.freedesktop.org Hi, While testing server managed fd support for the xf86-video-modesetting driver I encountered the following oops on exiting the Xserver (this happened only once during all my testing). This was with the Xserver / udev configured to use a single Xserver for both the intel-gfx of my workstation as well as the udl. Here is the log: [ 2206.402405] [drm] wait for urb interrupted: ffffffc2 available: 4 [ 2206.405149] BUG: unable to handle kernel NULL pointer dereference at 000000000000003c [ 2206.406642] IP: [] i915_gem_unmap_dma_buf+0x80/0x110 [i915] [ 2206.408182] PGD 0 [ 2206.409704] Oops: 0000 [#1] SMP [ 2206.411246] Modules linked in: asix usbnet mii udl drm_usb fuse ipt_MASQUERADE xt_CHECKSUM tun ip6t_rpfilter ip6t_REJECT xt_conntrack cfg80211 rfkill ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw sch5636 sch56xx_common iTCO_wdt iTCO_vendor_support gpio_ich ppdev snd_usb_audio snd_usbmidi_lib snd_rawmidi x86_pkg_temp_thermal coretemp kvm_intel kvm snd_hda_codec_hdmi crct10dif_pclmul crc32_pclmul ghash_clmulni_intel microcode snd_hda_codec_conexant snd_hda_codec_generic tuner_simple tuner_types tuner msp3400 serio_raw snd_hda_intel [ 2206.417063] i2c_i801 snd_bt87x snd_hda_codec snd_hwdep snd_seq snd_seq_device bttv snd_pcm btcx_risc tveeprom videobuf_dma_sg videobuf_core snd_timer rc_core snd v4l2_common soundcore videodev media lpc_ich mfd_core shpchp e1000e ptp pps_core tpm_infineon parport_pc parport tpm_tis tpm binfmt_misc usb_storage crc32c_intel i915 video i2c_algo_bit drm_kms_helper drm i2c_core [ 2206.421350] CPU: 3 PID: 7173 Comm: Xorg.bin Not tainted 3.14.0-0.rc6.git4.1.fc21.x86_64 #1 [ 2206.423512] Hardware name: FUJITSU D3071-S1/D3071-S1, BIOS V4.6.4.0 R1.12.0.SR.4 for D3071-S1x 05/03/2013 [ 2206.425727] task: ffff8801f5a29970 ti: ffff8801ae60e000 task.ti: ffff8801ae60e000 [ 2206.427975] RIP: 0010:[] [] i915_gem_unmap_dma_buf+0x80/0x110 [i915] [ 2206.430297] RSP: 0018:ffff8801ae60fc48 EFLAGS: 00010246 [ 2206.432626] RAX: 0000000000000000 RBX: ffff8801a8189210 RCX: 0000000000000001 [ 2206.434992] RDX: 00000000000007e9 RSI: ffff88018430f000 RDI: ffff8800a0a91830 [ 2206.437381] RBP: ffff8801ae60fc80 R08: 0000000000000000 R09: 00000000000007e9 [ 2206.439797] R10: 0000000000000000 R11: ffffffffffffffdc R12: ffff8800662b9880 [ 2206.442244] R13: ffff8800a0a91830 R14: 0000000000000000 R15: 0000000000000004 [ 2206.444721] FS: 00007fcc5c024900(0000) GS:ffff880235a00000(0000) knlGS:0000000000000000 [ 2206.447240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2206.449782] CR2: 000000000000003c CR3: 00000001a957e000 CR4: 00000000000407e0 [ 2206.452362] Stack: [ 2206.454946] 000007e9810f8c1d ffff88018430f000 ffff8800568a0500 ffff8801a8189210 [ 2206.457616] 0000000000000000 ffff8801c6394e00 ffff8801ae60fd60 ffff8801ae60fca8 [ 2206.460296] ffffffff8150bac1 ffff8800568a0500 ffff8801c63fd068 ffff8801c63fd000 [ 2206.462998] Call Trace: [ 2206.465700] [] dma_buf_unmap_attachment+0x51/0x80 [ 2206.468471] [] drm_prime_gem_destroy+0x22/0x40 [drm] [ 2206.471240] [] udl_gem_free_object+0x35/0x60 [udl] [ 2206.474054] [] drm_gem_object_free+0x2a/0x30 [drm] [ 2206.476880] [] drm_gem_object_handle_unreference_unlocked+0xe4/0x120 [drm] [ 2206.479751] [] drm_gem_object_release_handle+0x5c/0x80 [drm] [ 2206.482608] [] idr_for_each+0x114/0x1c0 [ 2206.485477] [] ? drm_gem_dumb_destroy+0x20/0x20 [drm] [ 2206.488366] [] ? mutex_unlock+0xe/0x10 [ 2206.491261] [] drm_gem_release+0x20/0x30 [drm] [ 2206.494150] [] drm_release+0x533/0x5c0 [drm] [ 2206.497052] [] __fput+0xf5/0x2c0 [ 2206.499937] [] ____fput+0xe/0x10 [ 2206.502802] [] task_work_run+0xb4/0xe0 [ 2206.505655] [] do_exit+0x304/0xd00 [ 2206.508497] [] ? wake_up_state+0x10/0x20 [ 2206.511333] [] ? signal_wake_up_state+0x1e/0x30 [ 2206.514162] [] do_group_exit+0x4c/0xc0 [ 2206.516978] [] SyS_exit_group+0x14/0x20 [ 2206.519789] [] system_call_fastpath+0x16/0x1b [ 2206.522594] Code: 85 ff 0f 84 93 00 00 00 41 83 fe 02 0f 87 95 00 00 00 44 89 f1 44 89 ca 48 89 c6 4c 89 ef 44 89 4d cc 48 89 45 d0 e8 90 f2 2f e1 <4d> 8b 57 38 4d 85 d2 74 1a 44 8b 4d cc 48 8b 45 d0 45 31 c0 44 [ 2206.525878] RIP [] i915_gem_unmap_dma_buf+0x80/0x110 [i915] [ 2206.528933] RSP [ 2206.531951] CR2: 000000000000003c [ 2206.534936] ---[ end trace 3cc7e685273df0dd ]--- As stated in the oops I was running the following kernel when this happened: 3.14.0-0.rc6.git4.1.fc21.x86_64 Regards, Hans