All of lore.kernel.org
 help / color / mirror / Atom feed
From: bugzilla-daemon@bugzilla.kernel.org
To: dri-devel@lists.freedesktop.org
Subject: [Bug 199425] BUG: KASAN: use-after-free in drm_atomic_helper_wait_for_flip_done+0x247/0x260
Date: Fri, 25 May 2018 12:00:10 +0000	[thread overview]
Message-ID: <bug-199425-2300-jC1qIzlDhQ@https.bugzilla.kernel.org/> (raw)
In-Reply-To: <bug-199425-2300@https.bugzilla.kernel.org/>

https://bugzilla.kernel.org/show_bug.cgi?id=199425

--- Comment #7 from Johannes Hirte (johannes.hirte@datenkhaos.de) ---
dmesg output with drm.debug=0x6 and without your patch:

May 25 13:40:54 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1a010000 
May 25 13:40:54 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:54 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1de10000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel:
==================================================================
May 25 13:40:55 probook kernel: BUG: KASAN: use-after-free in
drm_atomic_helper_wait_for_flip_done+0x247/0x260
May 25 13:40:55 probook kernel: Read of size 8 at addr ffff8801aa0a0688 by task
kworker/u8:10/7828
May 25 13:40:55 probook kernel: 
May 25 13:40:55 probook kernel: CPU: 2 PID: 7828 Comm: kworker/u8:10 Not
tainted 4.17.0-rc6-00152-ga048a07d7f45 #606
May 25 13:40:55 probook kernel: Hardware name: HP HP ProBook 645 G2/80FE, BIOS
N77 Ver. 01.15 03/26/2018
May 25 13:40:55 probook kernel: Workqueue: events_unbound commit_work
May 25 13:40:55 probook kernel: Call Trace:
May 25 13:40:55 probook kernel:  dump_stack+0x5b/0x8b
May 25 13:40:55 probook kernel:  ?
drm_atomic_helper_wait_for_flip_done+0x247/0x260
May 25 13:40:55 probook kernel:  print_address_description+0x65/0x270
May 25 13:40:55 probook kernel:  ?
drm_atomic_helper_wait_for_flip_done+0x247/0x260
May 25 13:40:55 probook kernel:  kasan_report+0x232/0x350
May 25 13:40:55 probook kernel: 
drm_atomic_helper_wait_for_flip_done+0x247/0x260
May 25 13:40:55 probook kernel:  amdgpu_dm_atomic_commit_tail+0x1b19/0x4010
May 25 13:40:55 probook kernel:  ? _raw_spin_unlock_irq+0x35/0x50
May 25 13:40:55 probook kernel:  ? wait_for_completion_timeout+0x215/0x2b0
May 25 13:40:55 probook kernel:  ? dm_update_crtcs_state+0xde0/0xde0
May 25 13:40:55 probook kernel:  ? _raw_spin_unlock_irq+0x35/0x50
May 25 13:40:55 probook kernel:  ? finish_task_switch+0x12f/0x770
May 25 13:40:55 probook kernel:  ?
drm_atomic_helper_wait_for_dependencies+0x3de/0x7d0
May 25 13:40:55 probook kernel:  commit_tail+0x95/0xf0
May 25 13:40:55 probook kernel:  process_one_work+0x7c8/0x1330
May 25 13:40:55 probook kernel:  ? _raw_spin_lock_irq+0x1c/0x40
May 25 13:40:55 probook kernel:  worker_thread+0xc9/0xef0
May 25 13:40:55 probook kernel:  ? process_one_work+0x1330/0x1330
May 25 13:40:55 probook kernel:  kthread+0x2d6/0x390
May 25 13:40:55 probook kernel:  ? kthread_create_worker+0xd0/0xd0
May 25 13:40:55 probook kernel:  ret_from_fork+0x22/0x40
May 25 13:40:55 probook kernel:
May 25 13:40:55 probook kernel: Allocated by task 614:
May 25 13:40:55 probook kernel:  kasan_kmalloc+0xa0/0xd0
May 25 13:40:55 probook kernel:  kmem_cache_alloc_trace+0xf3/0x1f0
May 25 13:40:55 probook kernel:  dm_crtc_duplicate_state+0x73/0x130
May 25 13:40:55 probook kernel:  drm_atomic_get_crtc_state+0x142/0x400
May 25 13:40:55 probook kernel:  page_flip_common+0x52/0x220
May 25 13:40:55 probook kernel:  drm_atomic_helper_page_flip+0xa1/0x100
May 25 13:40:55 probook kernel:  drm_mode_page_flip_ioctl+0xbe3/0xff0
May 25 13:40:55 probook kernel:  drm_ioctl_kernel+0x13d/0x1d0
May 25 13:40:55 probook kernel:  drm_ioctl+0x63d/0x920
May 25 13:40:55 probook kernel:  amdgpu_drm_ioctl+0xc7/0x1a0
May 25 13:40:55 probook kernel:  do_vfs_ioctl+0x173/0xde0
May 25 13:40:55 probook kernel:  ksys_ioctl+0x6b/0x80
May 25 13:40:55 probook kernel:  __x64_sys_ioctl+0x6a/0xb0
May 25 13:40:55 probook kernel:  do_syscall_64+0x95/0x2f0
May 25 13:40:55 probook kernel:  entry_SYSCALL_64_after_hwframe+0x44/0xa9
May 25 13:40:55 probook kernel:
May 25 13:40:55 probook kernel: Freed by task 626:
May 25 13:40:55 probook kernel:  __kasan_slab_free+0x130/0x180
May 25 13:40:55 probook kernel:  kfree+0x8b/0x1c0
May 25 13:40:55 probook kernel:  drm_atomic_state_default_clear+0x30f/0xbd0
May 25 13:40:55 probook kernel:  __drm_atomic_state_free+0x30/0xc0
May 25 13:40:55 probook kernel:  drm_atomic_helper_update_plane+0xb6/0x350
May 25 13:40:55 probook kernel:  __setplane_internal+0x48c/0x7f0
May 25 13:40:55 probook kernel:  drm_mode_cursor_universal+0x2e7/0x970
May 25 13:40:55 probook kernel:  drm_mode_cursor_common+0x493/0x860
May 25 13:40:55 probook kernel:  drm_mode_cursor_ioctl+0x7a/0xa0
May 25 13:40:55 probook kernel:  drm_ioctl_kernel+0x13d/0x1d0
May 25 13:40:55 probook kernel:  drm_ioctl+0x63d/0x920
May 25 13:40:55 probook kernel:  amdgpu_drm_ioctl+0xc7/0x1a0
May 25 13:40:55 probook kernel:  do_vfs_ioctl+0x173/0xde0
May 25 13:40:55 probook kernel:  ksys_ioctl+0x6b/0x80
May 25 13:40:55 probook kernel:  __x64_sys_ioctl+0x6a/0xb0
May 25 13:40:55 probook kernel:  do_syscall_64+0x95/0x2f0
May 25 13:40:55 probook kernel:  entry_SYSCALL_64_after_hwframe+0x44/0xa9
May 25 13:40:55 probook kernel: 
May 25 13:40:55 probook kernel: The buggy address belongs to the object at
ffff8801aa0a0480
 which belongs to the cache kmalloc-1024 of size 1024
May 25 13:40:55 probook kernel: The buggy address is located 520 bytes inside
of
 1024-byte region [ffff8801aa0a0480, ffff8801aa0a0880)
May 25 13:40:55 probook kernel: The buggy address belongs to the page:
May 25 13:40:55 probook kernel: page:ffffea0006a82800 count:1 mapcount:0
mapping:0000000000000000 index:0xffff8801aa0a7080 compound_mapcount: 0
May 25 13:40:55 probook kernel: flags: 0x2000000000008100(slab|head)
May 25 13:40:55 probook kernel: raw: 2000000000008100 0000000000000000
ffff8801aa0a7080 00000001801c001a
May 25 13:40:55 probook kernel: raw: 0000000000000000 0000000100000001
ffff8803f3402c40 0000000000000000
May 25 13:40:55 probook kernel: page dumped because: kasan: bad access detected
May 25 13:40:55 probook kernel: 
May 25 13:40:55 probook kernel: Memory state around the buggy address:
May 25 13:40:55 probook kernel:  ffff8801aa0a0580: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
May 25 13:40:55 probook kernel:  ffff8801aa0a0600: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
May 25 13:40:55 probook kernel: >ffff8801aa0a0680: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
May 25 13:40:55 probook kernel:                       ^
May 25 13:40:55 probook kernel:  ffff8801aa0a0700: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
May 25 13:40:55 probook kernel:  ffff8801aa0a0780: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
May 25 13:40:55 probook kernel:
==================================================================
May 25 13:40:55 probook kernel: Disabling lock debugging due to kernel taint
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1a010000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1de10000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1a010000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1de10000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1a010000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1de10000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] amdgpu_dm_do_flip
Flipping to hi: 0xf4, low: 0x1a010000 
May 25 13:40:55 probook kernel: [drm:dm_pflip_high_irq] dm_pflip_high_irq -
crtc :0[00000000bae227b0], pflip_stat:AMDGPU_FLIP_NONE
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail]
handle_cursor_update: crtc_id=0 with size 128 to 128
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_atomic_commit_tail] amdgpu_crtc
id:0 crtc_state_flags: enable:1, active:1, planes_changed:1,
mode_changed:0,active_changed:0,connectors_changed:0
May 25 13:40:55 probook kernel: [drm:amdgpu_dm_do_flip] crtc:0,
pflip_stat:AMDGPU_FLIP_SUBMITTED


I'm trying your patch if it makes any difference.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

  parent reply	other threads:[~2018-05-25 12:00 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-04-17  8:01 [Bug 199425] New: BUG: KASAN: use-after-free in drm_atomic_helper_wait_for_flip_done+0x247/0x260 bugzilla-daemon
2018-04-25 21:08 ` [Bug 199425] " bugzilla-daemon
2018-05-22 16:34 ` bugzilla-daemon
2018-05-23 17:22 ` bugzilla-daemon
2018-05-23 17:30 ` bugzilla-daemon
2018-05-24 18:33 ` bugzilla-daemon
2018-05-24 20:47 ` bugzilla-daemon
2018-05-25 12:00 ` bugzilla-daemon [this message]
2018-05-28 16:01 ` bugzilla-daemon
2018-06-15 14:24 ` bugzilla-daemon
2018-06-21 13:10 ` bugzilla-daemon
2018-06-27 15:04 ` bugzilla-daemon
2018-07-03 20:57 ` bugzilla-daemon
2018-07-24 19:38 ` bugzilla-daemon
2018-07-25 13:02 ` bugzilla-daemon
2018-07-25 14:12 ` bugzilla-daemon
2018-07-25 16:40 ` bugzilla-daemon
2018-08-17  9:31 ` bugzilla-daemon
2018-08-20  6:28 ` bugzilla-daemon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=bug-199425-2300-jC1qIzlDhQ@https.bugzilla.kernel.org/ \
    --to=bugzilla-daemon@bugzilla.kernel.org \
    --cc=dri-devel@lists.freedesktop.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.