Re: radeon ARUBA NULL pointer dereference

Re: radeon ARUBA NULL pointer dereference

[Thomas Zimmermann]

(cc: DMA and x86 folks)

Hi

Am 24.09.24 um 04:08 schrieb Arthur Marsh:
> Using current Linus git head kernel, I was able to save the dmesg output:
>
> [   17.218724] [drm] radeon kernel modesetting enabled.
> [   17.218778] radeon 0000:00:01.0: vgaarb: deactivate vga console
> [   17.219509] Console: switching to colour dummy device 80x25
> [   17.219700] [drm] initializing kernel modesetting (ARUBA 0x1002:0x990C 0x1002:0x0123 0x00).
> [   17.219773] ATOM BIOS: 113
> [   17.219838] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 0x000000002FFFFFFF (768M used)
> [   17.219841] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 0x000000006FFFFFFF
> [   17.219844] [drm] Detected VRAM RAM=768M, BAR=256M
> [   17.219845] [drm] RAM width 64bits DDR
> [   17.219851] BUG: kernel NULL pointer dereference, address: 00000000000000a0

This is 160 bytes behind NULL, which indicates a field within a struct.

> [   17.219852] #PF: supervisor read access in kernel mode
> [   17.219853] #PF: error_code(0x0000) - not-present page
> [   17.219854] PGD 0 P4D 0
> [   17.219856] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
> [   17.219858] CPU: 0 UID: 0 PID: 451 Comm: udevd Not tainted 6.11.0+ #6121
> [   17.219860] Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
> [   17.219862] RIP: 0010:dma_get_required_mask+0x11/0x50
> [   17.219868] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 68 02 00 00 48 85 c0 74 11 <48> 8b 80 a0 00 00 00 48 85 c0 74 1f e9 ee ed 94 00 f6 87 2c 03 00
> [   17.219870] RSP: 0018:ffffa54bc13a7b00 EFLAGS: 00010202
> [   17.219871] RAX: 0000000000000000 RBX: 000000ffffffffff RCX: 0000000000000000
> [   17.219872] RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff976f44e720c8
> [   17.219873] RBP: ffff976f44e720c8 R08: 00000000ffffefff R09: ffffffffab2aab08
> [   17.219874] R10: 00000000fffff000 R11: 0000000000000002 R12: 0000000000000000
> [   17.219875] R13: ffff976f48a4aa30 R14: 0000000000000000 R15: 0000000000000028
> [   17.219876] FS:  00007f59a070d840(0000) GS:ffff97726f800000(0000) knlGS:0000000000000000
> [   17.219878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   17.219879] CR2: 00000000000000a0 CR3: 00000001053b4000 CR4: 00000000000406f0
> [   17.219880] Call Trace:
> [   17.219881]  <TASK>
> [   17.219882]  ? __die_body.cold+0x19/0x1e
> [   17.219885]  ? page_fault_oops+0xa8/0x230
> [   17.219889]  ? search_module_extables+0x4f/0x90
> [   17.219891]  ? fixup_exception+0x36/0x2f0
> [   17.219894]  ? exc_page_fault+0x88/0x1b0
> [   17.219897]  ? asm_exc_page_fault+0x22/0x30
> [   17.219900]  ? dma_get_required_mask+0x11/0x50

This is not in the radeon driver but the DMA code. I'd say it's at [1], 
as get_required_mask is 160 bytes within struct drm_map_ops. The call to 
get_arch_dma_ops() probably returns NULL.

Best regards
Thomas

[1] https://elixir.bootlin.com/linux/v6.11/source/kernel/dma/mapping.c#L523
[2] 
https://elixir.bootlin.com/linux/v6.11/source/include/linux/dma-map-ops.h#L98

> [   17.219902]  dma_addressing_limited+0x6c/0xb0
> [   17.219905]  radeon_ttm_init+0x3f/0x210 [radeon]
> [   17.219977]  cayman_init+0x97/0x290 [radeon]
> [   17.220057]  radeon_device_init+0x5e9/0xb40 [radeon]
> [   17.220115]  radeon_driver_load_kms+0xb0/0x260 [radeon]
> [   17.220174]  radeon_pci_probe+0xff/0x170 [radeon]
> [   17.220231]  pci_device_probe+0xbe/0x1a0
> [   17.220234]  really_probe+0xde/0x350
> [   17.220237]  ? pm_runtime_barrier+0x61/0xb0
> [   17.220240]  ? __pfx___driver_attach+0x10/0x10
> [   17.220242]  __driver_probe_device+0x78/0x110
> [   17.220245]  driver_probe_device+0x2d/0xc0
> [   17.220247]  __driver_attach+0xc9/0x1c0
> [   17.220249]  bus_for_each_dev+0x6a/0xb0
> [   17.220251]  ? migrate_enable+0xbf/0xf0
> [   17.220254]  bus_add_driver+0x139/0x220
> [   17.220256]  driver_register+0x6e/0xc0
> [   17.220258]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
> [   17.220315]  do_one_initcall+0x42/0x210
> [   17.220318]  ? __kmalloc_cache_noprof+0x89/0x230
> [   17.220321]  do_init_module+0x60/0x210
> [   17.220324]  init_module_from_file+0x89/0xc0
> [   17.220326]  __x64_sys_finit_module+0x142/0x390
> [   17.220329]  do_syscall_64+0x47/0x110
> [   17.220331]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [   17.220334] RIP: 0033:0x7f59a0625279
> [   17.220336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64 89 01 48
> [   17.220337] RSP: 002b:00007ffd15ee7df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
> [   17.220339] RAX: ffffffffffffffda RBX: 00005578ae660840 RCX: 00007f59a0625279
> [   17.220340] RDX: 0000000000000000 RSI: 00005578ae677fc0 RDI: 0000000000000011
> [   17.220341] RBP: 0000000000000000 R08: 00007f59a06fcb20 R09: 00005578ae640550
> [   17.220342] R10: 0000000000000040 R11: 0000000000000246 R12: 00005578ae677fc0
> [   17.220342] R13: 0000000000020000 R14: 00005578ae651750 R15: 0000000000000000
> [   17.220344]  </TASK>
> [   17.220345] Modules linked in: radeon(+) snd_hda_codec_hdmi snd_seq_midi snd_seq_midi_event snd_seq snd_hda_intel snd_intel_dspcfg snd_emu10k1 snd_hda_codec drm_ttm_helper ttm snd_util_mem drm_suballoc_helper snd_ac97_codec snd_hda_core drm_display_helper ac97_bus snd_rawmidi snd_hwdep snd_seq_device snd_pcm drm_kms_helper edac_mce_amd sha512_ssse3 sha512_generic k10temp sha256_ssse3 sha1_ssse3 drm aesni_intel snd_timer gf128mul crypto_simd cryptd acpi_cpufreq evdev pcspkr serio_raw emu10k1_gp gameport at24 regmap_i2c i2c_algo_bit snd video soundcore wmi button sp5100_tco ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage hid_generic usbhid hid sg sr_mod sd_mod cdrom ata_generic firewire_ohci crc32_pclmul crc32c_intel firewire_core crc_itu_t pata_atiixp i2c_piix4 i2c_smbus ahci r8169 libahci xhci_pci ohci_pci realtek libata mdio_devres ehci_pci ohci_hcd xhci_hcd scsi_mod ehci_hcd scsi_common usbcore libphy usb_common
> [   17.220388] CR2: 00000000000000a0
> [   17.220390] ---[ end trace 0000000000000000 ]---
>
> Happy to provide additional information and run tests.
>
> Regards,
>
> Arthur Marsh.

-- 
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstrasse 146, 90461 Nuernberg, Germany
GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
HRB 36809 (AG Nuernberg)

Re: radeon ARUBA NULL pointer dereference

[Thomas Zimmermann]

Am 24.09.24 um 14:20 schrieb Thomas Zimmermann:
> (cc: DMA and x86 folks)
>
> Hi
>
> Am 24.09.24 um 04:08 schrieb Arthur Marsh:
>> Using current Linus git head kernel, I was able to save the dmesg 
>> output:
>>
>> [   17.218724] [drm] radeon kernel modesetting enabled.
>> [   17.218778] radeon 0000:00:01.0: vgaarb: deactivate vga console
>> [   17.219509] Console: switching to colour dummy device 80x25
>> [   17.219700] [drm] initializing kernel modesetting (ARUBA 
>> 0x1002:0x990C 0x1002:0x0123 0x00).
>> [   17.219773] ATOM BIOS: 113
>> [   17.219838] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 
>> 0x000000002FFFFFFF (768M used)
>> [   17.219841] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 
>> 0x000000006FFFFFFF
>> [   17.219844] [drm] Detected VRAM RAM=768M, BAR=256M
>> [   17.219845] [drm] RAM width 64bits DDR
>> [   17.219851] BUG: kernel NULL pointer dereference, address: 
>> 00000000000000a0
>
> This is 160 bytes behind NULL, which indicates a field within a struct.
>
>> [   17.219852] #PF: supervisor read access in kernel mode
>> [   17.219853] #PF: error_code(0x0000) - not-present page
>> [   17.219854] PGD 0 P4D 0
>> [   17.219856] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
>> [   17.219858] CPU: 0 UID: 0 PID: 451 Comm: udevd Not tainted 6.11.0+ 
>> #6121
>> [   17.219860] Hardware name: Gigabyte Technology Co., Ltd. To be 
>> filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
>> [   17.219862] RIP: 0010:dma_get_required_mask+0x11/0x50
>> [   17.219868] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 
>> 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 68 02 00 00 48 85 
>> c0 74 11 <48> 8b 80 a0 00 00 00 48 85 c0 74 1f e9 ee ed 94 00 f6 87 
>> 2c 03 00
>> [   17.219870] RSP: 0018:ffffa54bc13a7b00 EFLAGS: 00010202
>> [   17.219871] RAX: 0000000000000000 RBX: 000000ffffffffff RCX: 
>> 0000000000000000
>> [   17.219872] RDX: 0000000000000000 RSI: 0000000000000027 RDI: 
>> ffff976f44e720c8
>> [   17.219873] RBP: ffff976f44e720c8 R08: 00000000ffffefff R09: 
>> ffffffffab2aab08
>> [   17.219874] R10: 00000000fffff000 R11: 0000000000000002 R12: 
>> 0000000000000000
>> [   17.219875] R13: ffff976f48a4aa30 R14: 0000000000000000 R15: 
>> 0000000000000028
>> [   17.219876] FS:  00007f59a070d840(0000) GS:ffff97726f800000(0000) 
>> knlGS:0000000000000000
>> [   17.219878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> [   17.219879] CR2: 00000000000000a0 CR3: 00000001053b4000 CR4: 
>> 00000000000406f0
>> [   17.219880] Call Trace:
>> [   17.219881]  <TASK>
>> [   17.219882]  ? __die_body.cold+0x19/0x1e
>> [   17.219885]  ? page_fault_oops+0xa8/0x230
>> [   17.219889]  ? search_module_extables+0x4f/0x90
>> [   17.219891]  ? fixup_exception+0x36/0x2f0
>> [   17.219894]  ? exc_page_fault+0x88/0x1b0
>> [   17.219897]  ? asm_exc_page_fault+0x22/0x30
>> [   17.219900]  ? dma_get_required_mask+0x11/0x50
>
> This is not in the radeon driver but the DMA code. I'd say it's at 
> [1], as get_required_mask is 160 bytes within struct drm_map_ops. The 
> call to get_arch_dma_ops() probably returns NULL.

And indeed, when I added

     pr_warn("dev dma ops: 0x%p\n", pdev->dev.dma_ops);
     pr_warn("arch dma ops: 0x%p\n", get_arch_dma_ops());

to radeon_pci_probe(), I got

[   22.325657] dev dma ops: 0x0000000000000000
[   22.342921] arch dma ops: 0x0000000000000000

as a result.

Best regards
Thomas

>
> Best regards
> Thomas
>
> [1] 
> https://elixir.bootlin.com/linux/v6.11/source/kernel/dma/mapping.c#L523
> [2] 
> https://elixir.bootlin.com/linux/v6.11/source/include/linux/dma-map-ops.h#L98
>
>> [   17.219902] dma_addressing_limited+0x6c/0xb0
>> [   17.219905]  radeon_ttm_init+0x3f/0x210 [radeon]
>> [   17.219977]  cayman_init+0x97/0x290 [radeon]
>> [   17.220057]  radeon_device_init+0x5e9/0xb40 [radeon]
>> [   17.220115]  radeon_driver_load_kms+0xb0/0x260 [radeon]
>> [   17.220174]  radeon_pci_probe+0xff/0x170 [radeon]
>> [   17.220231]  pci_device_probe+0xbe/0x1a0
>> [   17.220234]  really_probe+0xde/0x350
>> [   17.220237]  ? pm_runtime_barrier+0x61/0xb0
>> [   17.220240]  ? __pfx___driver_attach+0x10/0x10
>> [   17.220242]  __driver_probe_device+0x78/0x110
>> [   17.220245]  driver_probe_device+0x2d/0xc0
>> [   17.220247]  __driver_attach+0xc9/0x1c0
>> [   17.220249]  bus_for_each_dev+0x6a/0xb0
>> [   17.220251]  ? migrate_enable+0xbf/0xf0
>> [   17.220254]  bus_add_driver+0x139/0x220
>> [   17.220256]  driver_register+0x6e/0xc0
>> [   17.220258]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
>> [   17.220315]  do_one_initcall+0x42/0x210
>> [   17.220318]  ? __kmalloc_cache_noprof+0x89/0x230
>> [   17.220321]  do_init_module+0x60/0x210
>> [   17.220324]  init_module_from_file+0x89/0xc0
>> [   17.220326]  __x64_sys_finit_module+0x142/0x390
>> [   17.220329]  do_syscall_64+0x47/0x110
>> [   17.220331]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
>> [   17.220334] RIP: 0033:0x7f59a0625279
>> [   17.220336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 
>> 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 
>> 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64 
>> 89 01 48
>> [   17.220337] RSP: 002b:00007ffd15ee7df8 EFLAGS: 00000246 ORIG_RAX: 
>> 0000000000000139
>> [   17.220339] RAX: ffffffffffffffda RBX: 00005578ae660840 RCX: 
>> 00007f59a0625279
>> [   17.220340] RDX: 0000000000000000 RSI: 00005578ae677fc0 RDI: 
>> 0000000000000011
>> [   17.220341] RBP: 0000000000000000 R08: 00007f59a06fcb20 R09: 
>> 00005578ae640550
>> [   17.220342] R10: 0000000000000040 R11: 0000000000000246 R12: 
>> 00005578ae677fc0
>> [   17.220342] R13: 0000000000020000 R14: 00005578ae651750 R15: 
>> 0000000000000000
>> [   17.220344]  </TASK>
>> [   17.220345] Modules linked in: radeon(+) snd_hda_codec_hdmi 
>> snd_seq_midi snd_seq_midi_event snd_seq snd_hda_intel 
>> snd_intel_dspcfg snd_emu10k1 snd_hda_codec drm_ttm_helper ttm 
>> snd_util_mem drm_suballoc_helper snd_ac97_codec snd_hda_core 
>> drm_display_helper ac97_bus snd_rawmidi snd_hwdep snd_seq_device 
>> snd_pcm drm_kms_helper edac_mce_amd sha512_ssse3 sha512_generic 
>> k10temp sha256_ssse3 sha1_ssse3 drm aesni_intel snd_timer gf128mul 
>> crypto_simd cryptd acpi_cpufreq evdev pcspkr serio_raw emu10k1_gp 
>> gameport at24 regmap_i2c i2c_algo_bit snd video soundcore wmi button 
>> sp5100_tco ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage 
>> hid_generic usbhid hid sg sr_mod sd_mod cdrom ata_generic 
>> firewire_ohci crc32_pclmul crc32c_intel firewire_core crc_itu_t 
>> pata_atiixp i2c_piix4 i2c_smbus ahci r8169 libahci xhci_pci ohci_pci 
>> realtek libata mdio_devres ehci_pci ohci_hcd xhci_hcd scsi_mod 
>> ehci_hcd scsi_common usbcore libphy usb_common
>> [   17.220388] CR2: 00000000000000a0
>> [   17.220390] ---[ end trace 0000000000000000 ]---
>>
>> Happy to provide additional information and run tests.
>>
>> Regards,
>>
>> Arthur Marsh.
>

-- 
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstrasse 146, 90461 Nuernberg, Germany
GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
HRB 36809 (AG Nuernberg)

Re: radeon ARUBA NULL pointer dereference

[Alex Deucher]

On Tue, Sep 24, 2024 at 8:43 AM Thomas Zimmermann <tzimmermann@suse.de> wrote:
>
>
>
> Am 24.09.24 um 14:20 schrieb Thomas Zimmermann:
> > (cc: DMA and x86 folks)
> >
> > Hi
> >
> > Am 24.09.24 um 04:08 schrieb Arthur Marsh:
> >> Using current Linus git head kernel, I was able to save the dmesg
> >> output:
> >>
> >> [   17.218724] [drm] radeon kernel modesetting enabled.
> >> [   17.218778] radeon 0000:00:01.0: vgaarb: deactivate vga console
> >> [   17.219509] Console: switching to colour dummy device 80x25
> >> [   17.219700] [drm] initializing kernel modesetting (ARUBA
> >> 0x1002:0x990C 0x1002:0x0123 0x00).
> >> [   17.219773] ATOM BIOS: 113
> >> [   17.219838] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 -
> >> 0x000000002FFFFFFF (768M used)
> >> [   17.219841] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 -
> >> 0x000000006FFFFFFF
> >> [   17.219844] [drm] Detected VRAM RAM=768M, BAR=256M
> >> [   17.219845] [drm] RAM width 64bits DDR
> >> [   17.219851] BUG: kernel NULL pointer dereference, address:
> >> 00000000000000a0
> >
> > This is 160 bytes behind NULL, which indicates a field within a struct.
> >
> >> [   17.219852] #PF: supervisor read access in kernel mode
> >> [   17.219853] #PF: error_code(0x0000) - not-present page
> >> [   17.219854] PGD 0 P4D 0
> >> [   17.219856] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
> >> [   17.219858] CPU: 0 UID: 0 PID: 451 Comm: udevd Not tainted 6.11.0+
> >> #6121
> >> [   17.219860] Hardware name: Gigabyte Technology Co., Ltd. To be
> >> filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
> >> [   17.219862] RIP: 0010:dma_get_required_mask+0x11/0x50
> >> [   17.219868] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
> >> 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 68 02 00 00 48 85
> >> c0 74 11 <48> 8b 80 a0 00 00 00 48 85 c0 74 1f e9 ee ed 94 00 f6 87
> >> 2c 03 00
> >> [   17.219870] RSP: 0018:ffffa54bc13a7b00 EFLAGS: 00010202
> >> [   17.219871] RAX: 0000000000000000 RBX: 000000ffffffffff RCX:
> >> 0000000000000000
> >> [   17.219872] RDX: 0000000000000000 RSI: 0000000000000027 RDI:
> >> ffff976f44e720c8
> >> [   17.219873] RBP: ffff976f44e720c8 R08: 00000000ffffefff R09:
> >> ffffffffab2aab08
> >> [   17.219874] R10: 00000000fffff000 R11: 0000000000000002 R12:
> >> 0000000000000000
> >> [   17.219875] R13: ffff976f48a4aa30 R14: 0000000000000000 R15:
> >> 0000000000000028
> >> [   17.219876] FS:  00007f59a070d840(0000) GS:ffff97726f800000(0000)
> >> knlGS:0000000000000000
> >> [   17.219878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> >> [   17.219879] CR2: 00000000000000a0 CR3: 00000001053b4000 CR4:
> >> 00000000000406f0
> >> [   17.219880] Call Trace:
> >> [   17.219881]  <TASK>
> >> [   17.219882]  ? __die_body.cold+0x19/0x1e
> >> [   17.219885]  ? page_fault_oops+0xa8/0x230
> >> [   17.219889]  ? search_module_extables+0x4f/0x90
> >> [   17.219891]  ? fixup_exception+0x36/0x2f0
> >> [   17.219894]  ? exc_page_fault+0x88/0x1b0
> >> [   17.219897]  ? asm_exc_page_fault+0x22/0x30
> >> [   17.219900]  ? dma_get_required_mask+0x11/0x50

Also reported here:
https://gitlab.freedesktop.org/drm/amd/-/issues/3648

Alex

> >
> > This is not in the radeon driver but the DMA code. I'd say it's at
> > [1], as get_required_mask is 160 bytes within struct drm_map_ops. The
> > call to get_arch_dma_ops() probably returns NULL.
>
> And indeed, when I added
>
>      pr_warn("dev dma ops: 0x%p\n", pdev->dev.dma_ops);
>      pr_warn("arch dma ops: 0x%p\n", get_arch_dma_ops());
>
> to radeon_pci_probe(), I got
>
> [   22.325657] dev dma ops: 0x0000000000000000
> [   22.342921] arch dma ops: 0x0000000000000000
>
> as a result.
>
> Best regards
> Thomas
>
> >
> > Best regards
> > Thomas
> >
> > [1]
> > https://elixir.bootlin.com/linux/v6.11/source/kernel/dma/mapping.c#L523
> > [2]
> > https://elixir.bootlin.com/linux/v6.11/source/include/linux/dma-map-ops.h#L98
> >
> >> [   17.219902] dma_addressing_limited+0x6c/0xb0
> >> [   17.219905]  radeon_ttm_init+0x3f/0x210 [radeon]
> >> [   17.219977]  cayman_init+0x97/0x290 [radeon]
> >> [   17.220057]  radeon_device_init+0x5e9/0xb40 [radeon]
> >> [   17.220115]  radeon_driver_load_kms+0xb0/0x260 [radeon]
> >> [   17.220174]  radeon_pci_probe+0xff/0x170 [radeon]
> >> [   17.220231]  pci_device_probe+0xbe/0x1a0
> >> [   17.220234]  really_probe+0xde/0x350
> >> [   17.220237]  ? pm_runtime_barrier+0x61/0xb0
> >> [   17.220240]  ? __pfx___driver_attach+0x10/0x10
> >> [   17.220242]  __driver_probe_device+0x78/0x110
> >> [   17.220245]  driver_probe_device+0x2d/0xc0
> >> [   17.220247]  __driver_attach+0xc9/0x1c0
> >> [   17.220249]  bus_for_each_dev+0x6a/0xb0
> >> [   17.220251]  ? migrate_enable+0xbf/0xf0
> >> [   17.220254]  bus_add_driver+0x139/0x220
> >> [   17.220256]  driver_register+0x6e/0xc0
> >> [   17.220258]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
> >> [   17.220315]  do_one_initcall+0x42/0x210
> >> [   17.220318]  ? __kmalloc_cache_noprof+0x89/0x230
> >> [   17.220321]  do_init_module+0x60/0x210
> >> [   17.220324]  init_module_from_file+0x89/0xc0
> >> [   17.220326]  __x64_sys_finit_module+0x142/0x390
> >> [   17.220329]  do_syscall_64+0x47/0x110
> >> [   17.220331]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> >> [   17.220334] RIP: 0033:0x7f59a0625279
> >> [   17.220336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
> >> 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
> >> 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64
> >> 89 01 48
> >> [   17.220337] RSP: 002b:00007ffd15ee7df8 EFLAGS: 00000246 ORIG_RAX:
> >> 0000000000000139
> >> [   17.220339] RAX: ffffffffffffffda RBX: 00005578ae660840 RCX:
> >> 00007f59a0625279
> >> [   17.220340] RDX: 0000000000000000 RSI: 00005578ae677fc0 RDI:
> >> 0000000000000011
> >> [   17.220341] RBP: 0000000000000000 R08: 00007f59a06fcb20 R09:
> >> 00005578ae640550
> >> [   17.220342] R10: 0000000000000040 R11: 0000000000000246 R12:
> >> 00005578ae677fc0
> >> [   17.220342] R13: 0000000000020000 R14: 00005578ae651750 R15:
> >> 0000000000000000
> >> [   17.220344]  </TASK>
> >> [   17.220345] Modules linked in: radeon(+) snd_hda_codec_hdmi
> >> snd_seq_midi snd_seq_midi_event snd_seq snd_hda_intel
> >> snd_intel_dspcfg snd_emu10k1 snd_hda_codec drm_ttm_helper ttm
> >> snd_util_mem drm_suballoc_helper snd_ac97_codec snd_hda_core
> >> drm_display_helper ac97_bus snd_rawmidi snd_hwdep snd_seq_device
> >> snd_pcm drm_kms_helper edac_mce_amd sha512_ssse3 sha512_generic
> >> k10temp sha256_ssse3 sha1_ssse3 drm aesni_intel snd_timer gf128mul
> >> crypto_simd cryptd acpi_cpufreq evdev pcspkr serio_raw emu10k1_gp
> >> gameport at24 regmap_i2c i2c_algo_bit snd video soundcore wmi button
> >> sp5100_tco ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage
> >> hid_generic usbhid hid sg sr_mod sd_mod cdrom ata_generic
> >> firewire_ohci crc32_pclmul crc32c_intel firewire_core crc_itu_t
> >> pata_atiixp i2c_piix4 i2c_smbus ahci r8169 libahci xhci_pci ohci_pci
> >> realtek libata mdio_devres ehci_pci ohci_hcd xhci_hcd scsi_mod
> >> ehci_hcd scsi_common usbcore libphy usb_common
> >> [   17.220388] CR2: 00000000000000a0
> >> [   17.220390] ---[ end trace 0000000000000000 ]---
> >>
> >> Happy to provide additional information and run tests.
> >>
> >> Regards,
> >>
> >> Arthur Marsh.
> >
>
> --
> --
> Thomas Zimmermann
> Graphics Driver Developer
> SUSE Software Solutions Germany GmbH
> Frankenstrasse 146, 90461 Nuernberg, Germany
> GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
> HRB 36809 (AG Nuernberg)
>

Re: radeon ARUBA NULL pointer dereference

[Ewan Milne]

I think we are seeing a similar problem w/qla2xxx panicing at boot:

commit 1868f9d0260e9afaf7c6436d14923ae12eaea465 (HEAD -> master,
origin/master, origin/HEAD)
Merge: 056f8c437dc3 96319dacaf15
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 20 19:34:00 2024 -0700

    Merge tag 'for-linux-6.12-ofs1' of
git://git.kernel.org/pub/scm/linux/kernel/git/hubcap/linux

[    3.376687] qla2xxx [0000:00:00.0]-0005: : QLogic Fibre Channel HBA
Driver: 10.02.09.300-k.
[    3.385285] qla2xxx [0000:c4:00.0]-011c: : MSI-X vector count: 16.
[    3.391502] qla2xxx [0000:c4:00.0]-001d: : Found an ISP2261 irq 121
iobase 0x000000003b0c542c.
[    3.400118] BUG: kernel NULL pointer dereference, address: 00000000000000a0
[    3.407075] #PF: supervisor read access in kernel mode
[    3.412215] #PF: error_code(0x0000) - not-present page
[    3.417356] PGD 0 P4D 0
[    3.419896] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
[    3.424776] CPU: 0 UID: 0 PID: 413 Comm: kworker/0:2 Not tainted 6.11.0+ #1
[    3.431731] Hardware name: Dell Inc. PowerEdge R6515/04F3CJ, BIOS
2.13.3 09/12/2023
[    3.439386] Workqueue: events work_for_cpu_fn
[    3.443744] RIP: 0010:dma_get_required_mask+0x11/0x50
[    3.448796] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 38 02 00 00 48 85
c0 74 12 <48> 8b 80 a0 00 00 00 48 85 c0 74 20 e9 fe f1 b7 00 cc 48 8b
05 9e
[    3.467542] RSP: 0018:ffffb05741007d80 EFLAGS: 00010202
[    3.472769] RAX: 0000000000000000 RBX: 0000000000000055 RCX: ffff9f8601f92088
[    3.479901] RDX: ffffb05740e07000 RSI: ffffffffffffffff RDI: ffff9f8601f920c8
[    3.487032] RBP: ffff9f861b3ec000 R08: 0000000000000000 R09: ffffb05741007b10
[    3.494165] R10: ffffb05741007b08 R11: ffffffff831e15c8 R12: ffff9f8601f92000
[    3.501299] R13: ffff9f861b3ec4a8 R14: 0000000000001000 R15: 0000000000002000
[    3.508432] FS:  0000000000000000(0000) GS:ffff9f896f200000(0000)
knlGS:0000000000000000
[    3.516517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    3.522261] CR2: 00000000000000a0 CR3: 000000011d930000 CR4: 0000000000350ef0
[    3.529394] Call Trace:
[    3.531848]  <TASK>
[    3.533954]  ? __die+0x20/0x70
[    3.537012]  ? page_fault_oops+0x75/0x170
[    3.541028]  ? exc_page_fault+0x64/0x140
[    3.544951]  ? asm_exc_page_fault+0x22/0x30
[    3.549141]  ? dma_get_required_mask+0x11/0x50
[    3.553584]  qla2x00_probe_one+0x12a1/0x1cb0 [qla2xxx]
[    3.558758]  ? srso_return_thunk+0x5/0x5f
[    3.562770]  ? __update_idle_core+0x5b/0xb0
[    3.566958]  local_pci_probe+0x46/0xa0
[    3.570711]  work_for_cpu_fn+0x16/0x20
[    3.574459]  process_one_work+0x17c/0x390
[    3.578474]  worker_thread+0x239/0x340
[    3.582227]  ? __pfx_worker_thread+0x10/0x10
[    3.586497]  kthread+0xcf/0x100
[    3.589643]  ? __pfx_kthread+0x10/0x10
[    3.593398]  ret_from_fork+0x30/0x50
[    3.596975]  ? __pfx_kthread+0x10/0x10
[    3.600728]  ret_from_fork_asm+0x1a/0x30
[    3.604660]  </TASK>
[    3.606846] Modules linked in: qla2xxx(+) sd_mod sg nvme_fc
nvme_fabrics ahci(+) nvme_keyring libahci crct10dif_pclmul
crc32_pclmul ccp nvme_core crc32c_intel libata nvme_auth
ghash_clmulni_intel megaraid_sas tg3 scsi_transport_fc sp5100_tco wmi
dm_mirror dm_region_hash dm_log dm_mod
[    3.631945] CR2: 00000000000000a0
[    3.635265] ---[ end trace 0000000000000000 ]---
[    3.728765] RIP: 0010:dma_get_required_mask+0x11/0x50
[    3.733828] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 38 02 00 00 48 85
c0 74 12 <48> 8b 80 a0 00 00 00 48 85 c0 74 20 e9 fe f1 b7 00 cc 48 8b
05 9e
[    3.752572] RSP: 0018:ffffb05741007d80 EFLAGS: 00010202
[    3.757798] RAX: 0000000000000000 RBX: 0000000000000055 RCX: ffff9f8601f92088
[    3.764930] RDX: ffffb05740e07000 RSI: ffffffffffffffff RDI: ffff9f8601f920c8
[    3.772062] RBP: ffff9f861b3ec000 R08: 0000000000000000 R09: ffffb05741007b10
[    3.779197] R10: ffffb05741007b08 R11: ffffffff831e15c8 R12: ffff9f8601f92000
[    3.786328] R13: ffff9f861b3ec4a8 R14: 0000000000001000 R15: 0000000000002000
[    3.793460] FS:  0000000000000000(0000) GS:ffff9f896f200000(0000)
knlGS:0000000000000000
[    3.801548] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    3.807292] CR2: 00000000000000a0 CR3: 000000011d930000 CR4: 0000000000350ef0
[    3.814425] Kernel panic - not syncing: Fatal exception
[    3.821267] Kernel Offset: 0x600000 from 0xffffffff81000000
(relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[    3.890453] pstore: backend (erst) writing error (-28)
[    3.895598] ---[ end Kernel panic - not syncing: Fatal exception ]---

On Tue, Sep 24, 2024 at 10:23 AM Alex Deucher <alexdeucher@gmail.com> wrote:
>
> On Tue, Sep 24, 2024 at 8:43 AM Thomas Zimmermann <tzimmermann@suse.de> wrote:
> >
> >
> >
> > Am 24.09.24 um 14:20 schrieb Thomas Zimmermann:
> > > (cc: DMA and x86 folks)
> > >
> > > Hi
> > >
> > > Am 24.09.24 um 04:08 schrieb Arthur Marsh:
> > >> Using current Linus git head kernel, I was able to save the dmesg
> > >> output:
> > >>
> > >> [   17.218724] [drm] radeon kernel modesetting enabled.
> > >> [   17.218778] radeon 0000:00:01.0: vgaarb: deactivate vga console
> > >> [   17.219509] Console: switching to colour dummy device 80x25
> > >> [   17.219700] [drm] initializing kernel modesetting (ARUBA
> > >> 0x1002:0x990C 0x1002:0x0123 0x00).
> > >> [   17.219773] ATOM BIOS: 113
> > >> [   17.219838] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 -
> > >> 0x000000002FFFFFFF (768M used)
> > >> [   17.219841] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 -
> > >> 0x000000006FFFFFFF
> > >> [   17.219844] [drm] Detected VRAM RAM=768M, BAR=256M
> > >> [   17.219845] [drm] RAM width 64bits DDR
> > >> [   17.219851] BUG: kernel NULL pointer dereference, address:
> > >> 00000000000000a0
> > >
> > > This is 160 bytes behind NULL, which indicates a field within a struct.
> > >
> > >> [   17.219852] #PF: supervisor read access in kernel mode
> > >> [   17.219853] #PF: error_code(0x0000) - not-present page
> > >> [   17.219854] PGD 0 P4D 0
> > >> [   17.219856] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
> > >> [   17.219858] CPU: 0 UID: 0 PID: 451 Comm: udevd Not tainted 6.11.0+
> > >> #6121
> > >> [   17.219860] Hardware name: Gigabyte Technology Co., Ltd. To be
> > >> filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
> > >> [   17.219862] RIP: 0010:dma_get_required_mask+0x11/0x50
> > >> [   17.219868] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
> > >> 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 8b 87 68 02 00 00 48 85
> > >> c0 74 11 <48> 8b 80 a0 00 00 00 48 85 c0 74 1f e9 ee ed 94 00 f6 87
> > >> 2c 03 00
> > >> [   17.219870] RSP: 0018:ffffa54bc13a7b00 EFLAGS: 00010202
> > >> [   17.219871] RAX: 0000000000000000 RBX: 000000ffffffffff RCX:
> > >> 0000000000000000
> > >> [   17.219872] RDX: 0000000000000000 RSI: 0000000000000027 RDI:
> > >> ffff976f44e720c8
> > >> [   17.219873] RBP: ffff976f44e720c8 R08: 00000000ffffefff R09:
> > >> ffffffffab2aab08
> > >> [   17.219874] R10: 00000000fffff000 R11: 0000000000000002 R12:
> > >> 0000000000000000
> > >> [   17.219875] R13: ffff976f48a4aa30 R14: 0000000000000000 R15:
> > >> 0000000000000028
> > >> [   17.219876] FS:  00007f59a070d840(0000) GS:ffff97726f800000(0000)
> > >> knlGS:0000000000000000
> > >> [   17.219878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > >> [   17.219879] CR2: 00000000000000a0 CR3: 00000001053b4000 CR4:
> > >> 00000000000406f0
> > >> [   17.219880] Call Trace:
> > >> [   17.219881]  <TASK>
> > >> [   17.219882]  ? __die_body.cold+0x19/0x1e
> > >> [   17.219885]  ? page_fault_oops+0xa8/0x230
> > >> [   17.219889]  ? search_module_extables+0x4f/0x90
> > >> [   17.219891]  ? fixup_exception+0x36/0x2f0
> > >> [   17.219894]  ? exc_page_fault+0x88/0x1b0
> > >> [   17.219897]  ? asm_exc_page_fault+0x22/0x30
> > >> [   17.219900]  ? dma_get_required_mask+0x11/0x50
>
> Also reported here:
> https://gitlab.freedesktop.org/drm/amd/-/issues/3648
>
> Alex
>
> > >
> > > This is not in the radeon driver but the DMA code. I'd say it's at
> > > [1], as get_required_mask is 160 bytes within struct drm_map_ops. The
> > > call to get_arch_dma_ops() probably returns NULL.
> >
> > And indeed, when I added
> >
> >      pr_warn("dev dma ops: 0x%p\n", pdev->dev.dma_ops);
> >      pr_warn("arch dma ops: 0x%p\n", get_arch_dma_ops());
> >
> > to radeon_pci_probe(), I got
> >
> > [   22.325657] dev dma ops: 0x0000000000000000
> > [   22.342921] arch dma ops: 0x0000000000000000
> >
> > as a result.
> >
> > Best regards
> > Thomas
> >
> > >
> > > Best regards
> > > Thomas
> > >
> > > [1]
> > > https://elixir.bootlin.com/linux/v6.11/source/kernel/dma/mapping.c#L523
> > > [2]
> > > https://elixir.bootlin.com/linux/v6.11/source/include/linux/dma-map-ops.h#L98
> > >
> > >> [   17.219902] dma_addressing_limited+0x6c/0xb0
> > >> [   17.219905]  radeon_ttm_init+0x3f/0x210 [radeon]
> > >> [   17.219977]  cayman_init+0x97/0x290 [radeon]
> > >> [   17.220057]  radeon_device_init+0x5e9/0xb40 [radeon]
> > >> [   17.220115]  radeon_driver_load_kms+0xb0/0x260 [radeon]
> > >> [   17.220174]  radeon_pci_probe+0xff/0x170 [radeon]
> > >> [   17.220231]  pci_device_probe+0xbe/0x1a0
> > >> [   17.220234]  really_probe+0xde/0x350
> > >> [   17.220237]  ? pm_runtime_barrier+0x61/0xb0
> > >> [   17.220240]  ? __pfx___driver_attach+0x10/0x10
> > >> [   17.220242]  __driver_probe_device+0x78/0x110
> > >> [   17.220245]  driver_probe_device+0x2d/0xc0
> > >> [   17.220247]  __driver_attach+0xc9/0x1c0
> > >> [   17.220249]  bus_for_each_dev+0x6a/0xb0
> > >> [   17.220251]  ? migrate_enable+0xbf/0xf0
> > >> [   17.220254]  bus_add_driver+0x139/0x220
> > >> [   17.220256]  driver_register+0x6e/0xc0
> > >> [   17.220258]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
> > >> [   17.220315]  do_one_initcall+0x42/0x210
> > >> [   17.220318]  ? __kmalloc_cache_noprof+0x89/0x230
> > >> [   17.220321]  do_init_module+0x60/0x210
> > >> [   17.220324]  init_module_from_file+0x89/0xc0
> > >> [   17.220326]  __x64_sys_finit_module+0x142/0x390
> > >> [   17.220329]  do_syscall_64+0x47/0x110
> > >> [   17.220331]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> > >> [   17.220334] RIP: 0033:0x7f59a0625279
> > >> [   17.220336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
> > >> 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
> > >> 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64
> > >> 89 01 48
> > >> [   17.220337] RSP: 002b:00007ffd15ee7df8 EFLAGS: 00000246 ORIG_RAX:
> > >> 0000000000000139
> > >> [   17.220339] RAX: ffffffffffffffda RBX: 00005578ae660840 RCX:
> > >> 00007f59a0625279
> > >> [   17.220340] RDX: 0000000000000000 RSI: 00005578ae677fc0 RDI:
> > >> 0000000000000011
> > >> [   17.220341] RBP: 0000000000000000 R08: 00007f59a06fcb20 R09:
> > >> 00005578ae640550
> > >> [   17.220342] R10: 0000000000000040 R11: 0000000000000246 R12:
> > >> 00005578ae677fc0
> > >> [   17.220342] R13: 0000000000020000 R14: 00005578ae651750 R15:
> > >> 0000000000000000
> > >> [   17.220344]  </TASK>
> > >> [   17.220345] Modules linked in: radeon(+) snd_hda_codec_hdmi
> > >> snd_seq_midi snd_seq_midi_event snd_seq snd_hda_intel
> > >> snd_intel_dspcfg snd_emu10k1 snd_hda_codec drm_ttm_helper ttm
> > >> snd_util_mem drm_suballoc_helper snd_ac97_codec snd_hda_core
> > >> drm_display_helper ac97_bus snd_rawmidi snd_hwdep snd_seq_device
> > >> snd_pcm drm_kms_helper edac_mce_amd sha512_ssse3 sha512_generic
> > >> k10temp sha256_ssse3 sha1_ssse3 drm aesni_intel snd_timer gf128mul
> > >> crypto_simd cryptd acpi_cpufreq evdev pcspkr serio_raw emu10k1_gp
> > >> gameport at24 regmap_i2c i2c_algo_bit snd video soundcore wmi button
> > >> sp5100_tco ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage
> > >> hid_generic usbhid hid sg sr_mod sd_mod cdrom ata_generic
> > >> firewire_ohci crc32_pclmul crc32c_intel firewire_core crc_itu_t
> > >> pata_atiixp i2c_piix4 i2c_smbus ahci r8169 libahci xhci_pci ohci_pci
> > >> realtek libata mdio_devres ehci_pci ohci_hcd xhci_hcd scsi_mod
> > >> ehci_hcd scsi_common usbcore libphy usb_common
> > >> [   17.220388] CR2: 00000000000000a0
> > >> [   17.220390] ---[ end trace 0000000000000000 ]---
> > >>
> > >> Happy to provide additional information and run tests.
> > >>
> > >> Regards,
> > >>
> > >> Arthur Marsh.
> > >
> >
> > --
> > --
> > Thomas Zimmermann
> > Graphics Driver Developer
> > SUSE Software Solutions Germany GmbH
> > Frankenstrasse 146, 90461 Nuernberg, Germany
> > GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
> > HRB 36809 (AG Nuernberg)
> >
>

Re: radeon ARUBA NULL pointer dereference

[Ewan Milne]

Follow-up, qla2xxx appears to be fixed, most recent test was with:

commit 684a64bf32b6e488004e0ad7f0d7e922798f65b6 (HEAD -> master,
origin/master, origin/HEAD)
Merge: f7fccaa77271 68898131d2df
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 24 15:44:18 2024 -0700

    Merge tag 'nfs-for-6.12-1' of
git://git.linux-nfs.org/projects/anna/linux-nfs

I suppose the most likely fix was probably this one but I do not have
the HW to verify
(report I got was on an AMD EPYC 7262):

commit b348b6d17fd1d5d89b86db602f02bea54a754bd8
Author: Leon Romanovsky <leon@kernel.org>
Date:   Sun Sep 22 21:09:48 2024 +0300

    dma-mapping: report unlimited DMA addressing in IOMMU DMA path

-Ewan

On Tue, Sep 24, 2024 at 3:30 PM Ewan Milne <emilne@redhat.com> wrote:
>
> I think we are seeing a similar problem w/qla2xxx panicing at boot:
>

NULL pointer dereference after ib test on ring 7 succeeded

[Arthur Marsh]

After rebuilding current Linus git head with:

dma-mapping: report unlimited DMA addressing in IOMMU DMA path
b348b6d17fd1d5d89b86db602f02bea54a754bd8

applied, the radeon module load gets further before hitting another
NULL pointer dereference:

[   17.777472] [drm] radeon kernel modesetting enabled.
[   17.777536] radeon 0000:00:01.0: vgaarb: deactivate vga console
[   17.778276] Console: switching to colour dummy device 80x25
[   17.778519] [drm] initializing kernel modesetting (ARUBA 0x1002:0x990C 0x1002:0x0123 0x00).
[   17.778600] ATOM BIOS: 113
[   17.778658] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 0x000000002FFFFFFF (768M used)
[   17.778661] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 0x000000006FFFFFFF
[   17.778665] [drm] Detected VRAM RAM=768M, BAR=256M
[   17.778665] [drm] RAM width 64bits DDR
[   17.778764] [drm] radeon: 768M of VRAM memory ready
[   17.778766] [drm] radeon: 1024M of GTT memory ready.
[   17.778777] [drm] Loading ARUBA Microcode
[   18.038084] [drm] Internal thermal controller without fan control
[   18.038425] [drm] radeon: dpm initialized
[   18.333508] [drm] Found VCE firmware/feedback version 50.0.1 / 17!
[   18.333548] [drm] GART: num cpu pages 262144, num gpu pages 262144
[   18.353624] [drm] PCIE GART of 1024M enabled (table at 0x00000000001D6000).
[   18.353755] radeon 0000:00:01.0: WB enabled
[   18.353758] radeon 0000:00:01.0: fence driver on ring 0 use gpu addr 0x0000000030000c00
[   18.354136] radeon 0000:00:01.0: fence driver on ring 5 use gpu addr 0x0000000000075a18
[   18.374206] radeon 0000:00:01.0: fence driver on ring 6 use gpu addr 0x0000000030000c18
[   18.374208] radeon 0000:00:01.0: fence driver on ring 7 use gpu addr 0x0000000030000c1c
[   18.374210] radeon 0000:00:01.0: fence driver on ring 1 use gpu addr 0x0000000030000c04
[   18.374212] radeon 0000:00:01.0: fence driver on ring 2 use gpu addr 0x0000000030000c08
[   18.374213] radeon 0000:00:01.0: fence driver on ring 3 use gpu addr 0x0000000030000c0c
[   18.374214] radeon 0000:00:01.0: fence driver on ring 4 use gpu addr 0x0000000030000c10
[   18.374469] radeon 0000:00:01.0: radeon: MSI limited to 32-bit
[   18.374525] radeon 0000:00:01.0: radeon: using MSI.
[   18.374604] [drm] radeon: irq initialized.
[   18.392823] [drm] ring test on 0 succeeded in 3 usecs
[   18.392831] [drm] ring test on 3 succeeded in 4 usecs
[   18.392836] [drm] ring test on 4 succeeded in 3 usecs
[   18.438526] [drm] ring test on 5 succeeded in 2 usecs
[   18.458380] [drm] UVD initialized successfully.
[   18.567616] [drm] ring test on 6 succeeded in 18 usecs
[   18.567626] [drm] ring test on 7 succeeded in 3 usecs
[   18.567627] [drm] VCE initialized successfully.
[   18.567686] snd_hda_intel 0000:00:01.1: bound 0000:00:01.0 (ops radeon_audio_component_bind_ops [radeon])
[   18.567925] [drm] ib test on ring 0 succeeded in 0 usecs
[   18.567968] [drm] ib test on ring 3 succeeded in 0 usecs
[   18.568008] [drm] ib test on ring 4 succeeded in 0 usecs
[   19.094527] [drm] ib test on ring 5 succeeded
[   19.257713] mc: Linux media interface: v0.10
[   19.638235] [drm] ib test on ring 6 succeeded
[   20.017069] usb 1-3: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state
[   20.048473] usb 1-3: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   20.048493] dvbdev: DVB: registering new adapter (Realtek RTL2832U reference design)
[   20.048497] usb 1-3: media controller created
[   20.049487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   20.150361] [drm] ib test on ring 7 succeeded
[   20.150700] BUG: kernel NULL pointer dereference, address: 0000000000000050
[   20.150702] #PF: supervisor read access in kernel mode
[   20.150704] #PF: error_code(0x0000) - not-present page
[   20.150705] PGD 0 P4D 0 
[   20.150707] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
[   20.150710] CPU: 0 UID: 0 PID: 446 Comm: udevd Not tainted 6.11.0+ #6122
[   20.150713] Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
[   20.150714] RIP: 0010:drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   20.150732] Code: a1 c0 48 85 f6 48 89 83 b8 00 00 00 74 1c 48 8d bb b4 03 00 00 ba 30 00 00 00 e8 52 e5 60 db 48 8d 7b 08 5b 5d e9 b7 ea 37 db <48> 8b 70 50 48 85 f6 75 db 48 8b 30 eb d6 48 8d ab 88 04 00 00 48
[   20.150734] RSP: 0018:ffff9eb8013cb960 EFLAGS: 00010246
[   20.150736] RAX: 0000000000000000 RBX: ffff8f1983bfc508 RCX: ffffffffc0bd1bc0
[   20.150737] RDX: ffffffffc0a1de40 RSI: 0000000000000000 RDI: ffff8f1983bfc9f0
[   20.150738] RBP: ffff8f1983bfc9f0 R08: ffff8f199ca70008 R09: 00000000c0c0c0c0
[   20.150739] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8f199da9af50
[   20.150740] R13: ffff8f199da9b092 R14: ffff8f199da9af2e R15: 0000000000000018
[   20.150741] FS:  00007ff9b9e6a840(0000) GS:ffff8f1caf800000(0000) knlGS:0000000000000000
[   20.150743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   20.150744] CR2: 0000000000000050 CR3: 00000001033e4000 CR4: 00000000000406f0
[   20.150745] Call Trace:
[   20.150747]  <TASK>
[   20.150748]  ? __die_body.cold+0x19/0x1e
[   20.150753]  ? page_fault_oops+0xa8/0x230
[   20.150757]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   20.150767]  ? search_module_extables+0x4f/0x90
[   20.150771]  ? fixup_exception+0x36/0x2f0
[   20.150773]  ? exc_page_fault+0x88/0x1b0
[   20.150776]  ? asm_exc_page_fault+0x22/0x30
[   20.150779]  ? __pfx_radeon_dp_aux_transfer_atom+0x10/0x10 [radeon]
[   20.150888]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   20.150900]  radeon_dp_aux_init+0x91/0xc0 [radeon]
[   20.150984]  radeon_get_atom_connector_info_from_object_table+0x58e/0x880 [radeon]
[   20.151047]  ? radeon_get_atom_connector_info_from_supported_devices_table+0x5cf/0x600 [radeon]
[   20.151111]  ? kstrdup+0x4c/0x70
[   20.151115]  ? __kmalloc_noprof+0x24d/0x340
[   20.151118]  radeon_modeset_init+0x375/0x470 [radeon]
[   20.151187]  ? radeon_device_init+0x667/0xb40 [radeon]
[   20.151250]  radeon_driver_load_kms+0xc2/0x260 [radeon]
[   20.151312]  radeon_pci_probe+0xff/0x170 [radeon]
[   20.151374]  pci_device_probe+0xbe/0x1a0
[   20.151377]  really_probe+0xde/0x350
[   20.151380]  ? pm_runtime_barrier+0x61/0xb0
[   20.151383]  ? __pfx___driver_attach+0x10/0x10
[   20.151386]  __driver_probe_device+0x78/0x110
[   20.151388]  driver_probe_device+0x2d/0xc0
[   20.151390]  __driver_attach+0xc9/0x1c0
[   20.151393]  bus_for_each_dev+0x6a/0xb0
[   20.151395]  ? migrate_enable+0xbf/0xf0
[   20.151397]  bus_add_driver+0x139/0x220
[   20.151400]  driver_register+0x6e/0xc0
[   20.151402]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
[   20.151463]  do_one_initcall+0x42/0x210
[   20.151467]  ? __kmalloc_cache_noprof+0x89/0x230
[   20.151469]  do_init_module+0x60/0x210
[   20.151472]  init_module_from_file+0x89/0xc0
[   20.151475]  __x64_sys_finit_module+0x142/0x390
[   20.151477]  do_syscall_64+0x47/0x110
[   20.151480]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   20.151483] RIP: 0033:0x7ff9b9d82279
[   20.151485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64 89 01 48
[   20.151486] RSP: 002b:00007fffc5f84708 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   20.151488] RAX: ffffffffffffffda RBX: 000055d02068d9b0 RCX: 00007ff9b9d82279
[   20.151489] RDX: 0000000000000000 RSI: 000055d0206807f0 RDI: 0000000000000012
[   20.151490] RBP: 0000000000000000 R08: 0000000000000001 R09: 000055d02066d540
[   20.151491] R10: 0000000000000040 R11: 0000000000000246 R12: 000055d0206807f0
[   20.151492] R13: 0000000000020000 R14: 000055d02067e510 R15: 0000000000000000
[   20.151494]  </TASK>
[   20.151494] Modules linked in: i2c_mux dvb_usb_rtl28xxu(+) dvb_usb_v2 dvb_core mc snd_emu10k1_synth radeon(+) snd_emux_synth snd_seq_midi_emul snd_seq_virmidi drm_ttm_helper snd_seq_midi snd_seq_midi_event ttm snd_seq edac_mce_amd snd_hda_codec_hdmi sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 snd_emu10k1 aesni_intel drm_suballoc_helper snd_hda_intel drm_display_helper snd_intel_dspcfg snd_hda_codec snd_util_mem gf128mul snd_ac97_codec snd_hda_core drm_kms_helper crypto_simd cryptd ac97_bus snd_rawmidi k10temp snd_seq_device snd_hwdep snd_pcm drm acpi_cpufreq evdev serio_raw pcspkr at24 emu10k1_gp gameport regmap_i2c i2c_algo_bit snd_timer video snd sp5100_tco soundcore wmi button ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage hid_generic usbhid hid sg sr_mod cdrom sd_mod ata_generic firewire_ohci crc32_pclmul crc32c_intel ahci i2c_piix4 firewire_core crc_itu_t pata_atiixp libahci i2c_smbus ohci_pci xhci_pci libata xhci_hcd ehci_pci ohci_hcd r8169 ehci_hcd realtek scsi_mod mdio_devres usbcore
[   20.151550]  scsi_common libphy usb_common
[   20.151553] CR2: 0000000000000050
[   20.151555] ---[ end trace 0000000000000000 ]---

Regards,

Arthur.

Re: NULL pointer dereference after ib test on ring 7 succeeded

[Thomas Zimmermann]

Hi

Am 25.09.24 um 02:22 schrieb Arthur Marsh:
> After rebuilding current Linus git head with:
>
> dma-mapping: report unlimited DMA addressing in IOMMU DMA path
> b348b6d17fd1d5d89b86db602f02bea54a754bd8

I cannot yet apply this patch locally as a function is missing. I'll 
wait for -rc1 to do further debugging.

Best regards
Thomas

>
> applied, the radeon module load gets further before hitting another
> NULL pointer dereference:
>
> [   17.777472] [drm] radeon kernel modesetting enabled.
> [   17.777536] radeon 0000:00:01.0: vgaarb: deactivate vga console
> [   17.778276] Console: switching to colour dummy device 80x25
> [   17.778519] [drm] initializing kernel modesetting (ARUBA 0x1002:0x990C 0x1002:0x0123 0x00).
> [   17.778600] ATOM BIOS: 113
> [   17.778658] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 0x000000002FFFFFFF (768M used)
> [   17.778661] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 0x000000006FFFFFFF
> [   17.778665] [drm] Detected VRAM RAM=768M, BAR=256M
> [   17.778665] [drm] RAM width 64bits DDR
> [   17.778764] [drm] radeon: 768M of VRAM memory ready
> [   17.778766] [drm] radeon: 1024M of GTT memory ready.
> [   17.778777] [drm] Loading ARUBA Microcode
> [   18.038084] [drm] Internal thermal controller without fan control
> [   18.038425] [drm] radeon: dpm initialized
> [   18.333508] [drm] Found VCE firmware/feedback version 50.0.1 / 17!
> [   18.333548] [drm] GART: num cpu pages 262144, num gpu pages 262144
> [   18.353624] [drm] PCIE GART of 1024M enabled (table at 0x00000000001D6000).
> [   18.353755] radeon 0000:00:01.0: WB enabled
> [   18.353758] radeon 0000:00:01.0: fence driver on ring 0 use gpu addr 0x0000000030000c00
> [   18.354136] radeon 0000:00:01.0: fence driver on ring 5 use gpu addr 0x0000000000075a18
> [   18.374206] radeon 0000:00:01.0: fence driver on ring 6 use gpu addr 0x0000000030000c18
> [   18.374208] radeon 0000:00:01.0: fence driver on ring 7 use gpu addr 0x0000000030000c1c
> [   18.374210] radeon 0000:00:01.0: fence driver on ring 1 use gpu addr 0x0000000030000c04
> [   18.374212] radeon 0000:00:01.0: fence driver on ring 2 use gpu addr 0x0000000030000c08
> [   18.374213] radeon 0000:00:01.0: fence driver on ring 3 use gpu addr 0x0000000030000c0c
> [   18.374214] radeon 0000:00:01.0: fence driver on ring 4 use gpu addr 0x0000000030000c10
> [   18.374469] radeon 0000:00:01.0: radeon: MSI limited to 32-bit
> [   18.374525] radeon 0000:00:01.0: radeon: using MSI.
> [   18.374604] [drm] radeon: irq initialized.
> [   18.392823] [drm] ring test on 0 succeeded in 3 usecs
> [   18.392831] [drm] ring test on 3 succeeded in 4 usecs
> [   18.392836] [drm] ring test on 4 succeeded in 3 usecs
> [   18.438526] [drm] ring test on 5 succeeded in 2 usecs
> [   18.458380] [drm] UVD initialized successfully.
> [   18.567616] [drm] ring test on 6 succeeded in 18 usecs
> [   18.567626] [drm] ring test on 7 succeeded in 3 usecs
> [   18.567627] [drm] VCE initialized successfully.
> [   18.567686] snd_hda_intel 0000:00:01.1: bound 0000:00:01.0 (ops radeon_audio_component_bind_ops [radeon])
> [   18.567925] [drm] ib test on ring 0 succeeded in 0 usecs
> [   18.567968] [drm] ib test on ring 3 succeeded in 0 usecs
> [   18.568008] [drm] ib test on ring 4 succeeded in 0 usecs
> [   19.094527] [drm] ib test on ring 5 succeeded
> [   19.257713] mc: Linux media interface: v0.10
> [   19.638235] [drm] ib test on ring 6 succeeded
> [   20.017069] usb 1-3: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state
> [   20.048473] usb 1-3: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
> [   20.048493] dvbdev: DVB: registering new adapter (Realtek RTL2832U reference design)
> [   20.048497] usb 1-3: media controller created
> [   20.049487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
> [   20.150361] [drm] ib test on ring 7 succeeded
> [   20.150700] BUG: kernel NULL pointer dereference, address: 0000000000000050
> [   20.150702] #PF: supervisor read access in kernel mode
> [   20.150704] #PF: error_code(0x0000) - not-present page
> [   20.150705] PGD 0 P4D 0
> [   20.150707] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
> [   20.150710] CPU: 0 UID: 0 PID: 446 Comm: udevd Not tainted 6.11.0+ #6122
> [   20.150713] Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
> [   20.150714] RIP: 0010:drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   20.150732] Code: a1 c0 48 85 f6 48 89 83 b8 00 00 00 74 1c 48 8d bb b4 03 00 00 ba 30 00 00 00 e8 52 e5 60 db 48 8d 7b 08 5b 5d e9 b7 ea 37 db <48> 8b 70 50 48 85 f6 75 db 48 8b 30 eb d6 48 8d ab 88 04 00 00 48
> [   20.150734] RSP: 0018:ffff9eb8013cb960 EFLAGS: 00010246
> [   20.150736] RAX: 0000000000000000 RBX: ffff8f1983bfc508 RCX: ffffffffc0bd1bc0
> [   20.150737] RDX: ffffffffc0a1de40 RSI: 0000000000000000 RDI: ffff8f1983bfc9f0
> [   20.150738] RBP: ffff8f1983bfc9f0 R08: ffff8f199ca70008 R09: 00000000c0c0c0c0
> [   20.150739] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8f199da9af50
> [   20.150740] R13: ffff8f199da9b092 R14: ffff8f199da9af2e R15: 0000000000000018
> [   20.150741] FS:  00007ff9b9e6a840(0000) GS:ffff8f1caf800000(0000) knlGS:0000000000000000
> [   20.150743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   20.150744] CR2: 0000000000000050 CR3: 00000001033e4000 CR4: 00000000000406f0
> [   20.150745] Call Trace:
> [   20.150747]  <TASK>
> [   20.150748]  ? __die_body.cold+0x19/0x1e
> [   20.150753]  ? page_fault_oops+0xa8/0x230
> [   20.150757]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   20.150767]  ? search_module_extables+0x4f/0x90
> [   20.150771]  ? fixup_exception+0x36/0x2f0
> [   20.150773]  ? exc_page_fault+0x88/0x1b0
> [   20.150776]  ? asm_exc_page_fault+0x22/0x30
> [   20.150779]  ? __pfx_radeon_dp_aux_transfer_atom+0x10/0x10 [radeon]
> [   20.150888]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   20.150900]  radeon_dp_aux_init+0x91/0xc0 [radeon]
> [   20.150984]  radeon_get_atom_connector_info_from_object_table+0x58e/0x880 [radeon]
> [   20.151047]  ? radeon_get_atom_connector_info_from_supported_devices_table+0x5cf/0x600 [radeon]
> [   20.151111]  ? kstrdup+0x4c/0x70
> [   20.151115]  ? __kmalloc_noprof+0x24d/0x340
> [   20.151118]  radeon_modeset_init+0x375/0x470 [radeon]
> [   20.151187]  ? radeon_device_init+0x667/0xb40 [radeon]
> [   20.151250]  radeon_driver_load_kms+0xc2/0x260 [radeon]
> [   20.151312]  radeon_pci_probe+0xff/0x170 [radeon]
> [   20.151374]  pci_device_probe+0xbe/0x1a0
> [   20.151377]  really_probe+0xde/0x350
> [   20.151380]  ? pm_runtime_barrier+0x61/0xb0
> [   20.151383]  ? __pfx___driver_attach+0x10/0x10
> [   20.151386]  __driver_probe_device+0x78/0x110
> [   20.151388]  driver_probe_device+0x2d/0xc0
> [   20.151390]  __driver_attach+0xc9/0x1c0
> [   20.151393]  bus_for_each_dev+0x6a/0xb0
> [   20.151395]  ? migrate_enable+0xbf/0xf0
> [   20.151397]  bus_add_driver+0x139/0x220
> [   20.151400]  driver_register+0x6e/0xc0
> [   20.151402]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
> [   20.151463]  do_one_initcall+0x42/0x210
> [   20.151467]  ? __kmalloc_cache_noprof+0x89/0x230
> [   20.151469]  do_init_module+0x60/0x210
> [   20.151472]  init_module_from_file+0x89/0xc0
> [   20.151475]  __x64_sys_finit_module+0x142/0x390
> [   20.151477]  do_syscall_64+0x47/0x110
> [   20.151480]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [   20.151483] RIP: 0033:0x7ff9b9d82279
> [   20.151485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 77 6b 0d 00 f7 d8 64 89 01 48
> [   20.151486] RSP: 002b:00007fffc5f84708 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
> [   20.151488] RAX: ffffffffffffffda RBX: 000055d02068d9b0 RCX: 00007ff9b9d82279
> [   20.151489] RDX: 0000000000000000 RSI: 000055d0206807f0 RDI: 0000000000000012
> [   20.151490] RBP: 0000000000000000 R08: 0000000000000001 R09: 000055d02066d540
> [   20.151491] R10: 0000000000000040 R11: 0000000000000246 R12: 000055d0206807f0
> [   20.151492] R13: 0000000000020000 R14: 000055d02067e510 R15: 0000000000000000
> [   20.151494]  </TASK>
> [   20.151494] Modules linked in: i2c_mux dvb_usb_rtl28xxu(+) dvb_usb_v2 dvb_core mc snd_emu10k1_synth radeon(+) snd_emux_synth snd_seq_midi_emul snd_seq_virmidi drm_ttm_helper snd_seq_midi snd_seq_midi_event ttm snd_seq edac_mce_amd snd_hda_codec_hdmi sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 snd_emu10k1 aesni_intel drm_suballoc_helper snd_hda_intel drm_display_helper snd_intel_dspcfg snd_hda_codec snd_util_mem gf128mul snd_ac97_codec snd_hda_core drm_kms_helper crypto_simd cryptd ac97_bus snd_rawmidi k10temp snd_seq_device snd_hwdep snd_pcm drm acpi_cpufreq evdev serio_raw pcspkr at24 emu10k1_gp gameport regmap_i2c i2c_algo_bit snd_timer video snd sp5100_tco soundcore wmi button ext4 crc32c_generic crc16 mbcache jbd2 uas usb_storage hid_generic usbhid hid sg sr_mod cdrom sd_mod ata_generic firewire_ohci crc32_pclmul crc32c_intel ahci i2c_piix4 firewire_core crc_itu_t pata_atiixp libahci i2c_smbus ohci_pci xhci_pci libata xhci_hcd ehci_pci ohci_hcd r8169 ehci_hcd realtek scsi_mod mdio_devres usbcore
> [   20.151550]  scsi_common libphy usb_common
> [   20.151553] CR2: 0000000000000050
> [   20.151555] ---[ end trace 0000000000000000 ]---
>
> Regards,
>
> Arthur.

-- 
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstrasse 146, 90461 Nuernberg, Germany
GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
HRB 36809 (AG Nuernberg)

NULL pointer dereference with kernel 6.12.0-rc1 and ARUBA GPU

[Arthur Marsh]

[   13.069630] [drm] radeon kernel modesetting enabled.
[   13.069681] radeon 0000:00:01.0: vgaarb: deactivate vga console
[   13.070435] Console: switching to colour dummy device 80x25
[   13.070632] [drm] initializing kernel modesetting (ARUBA 0x1002:0x990C 0x1002:0x0123 0x00).
[   13.070718] ATOM BIOS: 113
[   13.070778] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 0x000000002FFFFFFF (768M used)
[   13.070781] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 0x000000006FFFFFFF
[   13.070785] [drm] Detected VRAM RAM=768M, BAR=256M
[   13.070786] [drm] RAM width 64bits DDR
[   13.070884] [drm] radeon: 768M of VRAM memory ready
[   13.070885] [drm] radeon: 1024M of GTT memory ready.
[   13.070896] [drm] Loading ARUBA Microcode
[   13.504398] [drm] Internal thermal controller without fan control
[   13.504566] [drm] radeon: dpm initialized
[   13.839229] [drm] Found VCE firmware/feedback version 50.0.1 / 17!
[   13.839264] [drm] GART: num cpu pages 262144, num gpu pages 262144
[   13.863929] [drm] PCIE GART of 1024M enabled (table at 0x00000000001D6000).
[   13.864085] radeon 0000:00:01.0: WB enabled
[   13.864088] radeon 0000:00:01.0: fence driver on ring 0 use gpu addr 0x0000000030000c00
[   13.864467] radeon 0000:00:01.0: fence driver on ring 5 use gpu addr 0x0000000000075a18
[   13.884497] radeon 0000:00:01.0: fence driver on ring 6 use gpu addr 0x0000000030000c18
[   13.884502] radeon 0000:00:01.0: fence driver on ring 7 use gpu addr 0x0000000030000c1c
[   13.884503] radeon 0000:00:01.0: fence driver on ring 1 use gpu addr 0x0000000030000c04
[   13.884505] radeon 0000:00:01.0: fence driver on ring 2 use gpu addr 0x0000000030000c08
[   13.884506] radeon 0000:00:01.0: fence driver on ring 3 use gpu addr 0x0000000030000c0c
[   13.884507] radeon 0000:00:01.0: fence driver on ring 4 use gpu addr 0x0000000030000c10
[   13.884862] radeon 0000:00:01.0: radeon: MSI limited to 32-bit
[   13.884921] radeon 0000:00:01.0: radeon: using MSI.
[   13.885003] [drm] radeon: irq initialized.
[   13.903273] [drm] ring test on 0 succeeded in 3 usecs
[   13.903281] [drm] ring test on 3 succeeded in 4 usecs
[   13.903286] [drm] ring test on 4 succeeded in 3 usecs
[   13.949128] [drm] ring test on 5 succeeded in 2 usecs
[   13.968988] [drm] UVD initialized successfully.
[   14.078221] [drm] ring test on 6 succeeded in 17 usecs
[   14.078234] [drm] ring test on 7 succeeded in 3 usecs
[   14.078236] [drm] VCE initialized successfully.
[   14.078314] snd_hda_intel 0000:00:01.1: bound 0000:00:01.0 (ops radeon_audio_component_bind_ops [radeon])
[   14.078502] [drm] ib test on ring 0 succeeded in 0 usecs
[   14.078555] [drm] ib test on ring 3 succeeded in 0 usecs
[   14.078606] [drm] ib test on ring 4 succeeded in 0 usecs
[   14.153378] mc: Linux media interface: v0.10
[   14.593759] usb 1-3: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state
[   14.614227] [drm] ib test on ring 5 succeeded
[   14.625865] usb 1-3: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   14.625885] dvbdev: DVB: registering new adapter (Realtek RTL2832U reference design)
[   14.625889] usb 1-3: media controller created
[   14.627064] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   14.801142] i2c i2c-5: Added multiplexed i2c bus 6
[   14.801149] rtl2832 5-0010: Realtek RTL2832 successfully attached
[   14.801176] usb 1-3: DVB: registering adapter 0 frontend 0 (Realtek RTL2832 (DVB-T))...
[   14.801189] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[   14.957783] i2c i2c-6: fc0012: Fitipower FC0012 successfully identified
[   15.158461] [drm] ib test on ring 6 succeeded
[   15.178787] videodev: Linux video capture interface: v2.00
[   15.460709] rtl2832_sdr rtl2832_sdr.1.auto: Registered as swradio0
[   15.460715] rtl2832_sdr rtl2832_sdr.1.auto: Realtek RTL2832 SDR attached
[   15.460718] rtl2832_sdr rtl2832_sdr.1.auto: SDR API is still slightly experimental and functionality changes may follow
[   15.477759] usb 1-3: dvb_usb_v2: 'Realtek RTL2832U reference design' successfully initialized and connected
[   15.477878] usbcore: registered new interface driver dvb_usb_rtl28xxu
[   15.670413] [drm] ib test on ring 7 succeeded
[   15.671111] BUG: kernel NULL pointer dereference, address: 0000000000000050
[   15.671114] #PF: supervisor read access in kernel mode
[   15.671117] #PF: error_code(0x0000) - not-present page
[   15.671119] PGD 0 P4D 0 
[   15.671123] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
[   15.671127] CPU: 2 UID: 0 PID: 437 Comm: udevd Not tainted 6.12.0-rc1 #6131
[   15.671132] Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
[   15.671134] RIP: 0010:drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   15.671164] Code: 86 c0 48 85 f6 48 89 83 b8 00 00 00 74 1c 48 8d bb b4 03 00 00 ba 30 00 00 00 e8 52 35 bc c7 48 8d 7b 08 5b 5d e9 37 31 93 c7 <48> 8b 70 50 48 85 f6 75 db 48 8b 30 eb d6 48 8d ab 88 04 00 00 48
[   15.671167] RSP: 0018:ffffb37f80e33960 EFLAGS: 00010246
[   15.671170] RAX: 0000000000000000 RBX: ffff892d407ee508 RCX: ffffffffc09b3bc0
[   15.671172] RDX: ffffffffc0869e40 RSI: 0000000000000000 RDI: ffff892d407ee9f0
[   15.671174] RBP: ffff892d407ee9f0 R08: ffff892d42fb8008 R09: 00000000c0c0c0c0
[   15.671176] R10: 0000000000000000 R11: 0000000000000001 R12: ffff892d5b64af50
[   15.671178] R13: ffff892d5b64b092 R14: ffff892d5b64af2e R15: 0000000000000018
[   15.671181] FS:  00007f066d882840(0000) GS:ffff89306f900000(0000) knlGS:0000000000000000
[   15.671183] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   15.671185] CR2: 0000000000000050 CR3: 00000001047a6000 CR4: 00000000000406f0
[   15.671188] Call Trace:
[   15.671190]  <TASK>
[   15.671192]  ? __die_body.cold+0x19/0x1e
[   15.671200]  ? page_fault_oops+0xa8/0x230
[   15.671206]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   15.671227]  ? search_module_extables+0x4f/0x90
[   15.671233]  ? fixup_exception+0x36/0x2f0
[   15.671239]  ? exc_page_fault+0x88/0x1b0
[   15.671244]  ? asm_exc_page_fault+0x22/0x30
[   15.671251]  ? __pfx_radeon_dp_aux_transfer_atom+0x10/0x10 [radeon]
[   15.671437]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
[   15.671463]  radeon_dp_aux_init+0x91/0xc0 [radeon]
[   15.671634]  radeon_get_atom_connector_info_from_object_table+0x58e/0x880 [radeon]
[   15.671764]  ? radeon_get_atom_connector_info_from_supported_devices_table+0x5cf/0x600 [radeon]
[   15.671895]  ? kstrdup+0x4c/0x70
[   15.671902]  ? __kmalloc_noprof+0x24d/0x340
[   15.671908]  radeon_modeset_init+0x375/0x470 [radeon]
[   15.672050]  ? radeon_device_init+0x667/0xb40 [radeon]
[   15.672179]  radeon_driver_load_kms+0xc2/0x260 [radeon]
[   15.672308]  radeon_pci_probe+0xff/0x170 [radeon]
[   15.672436]  pci_device_probe+0xbe/0x1a0
[   15.672441]  really_probe+0xde/0x350
[   15.672447]  ? pm_runtime_barrier+0x61/0xb0
[   15.672452]  ? __pfx___driver_attach+0x10/0x10
[   15.672457]  __driver_probe_device+0x78/0x110
[   15.672462]  driver_probe_device+0x2d/0xc0
[   15.672467]  __driver_attach+0xc9/0x1c0
[   15.672472]  bus_for_each_dev+0x6a/0xb0
[   15.672476]  ? migrate_enable+0xbf/0xf0
[   15.672480]  bus_add_driver+0x139/0x220
[   15.672485]  driver_register+0x6e/0xc0
[   15.672491]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
[   15.672616]  do_one_initcall+0x42/0x210
[   15.672622]  ? __kmalloc_cache_noprof+0x89/0x230
[   15.672627]  do_init_module+0x60/0x210
[   15.672631]  init_module_from_file+0x89/0xc0
[   15.672637]  __x64_sys_finit_module+0x142/0x390
[   15.672643]  do_syscall_64+0x47/0x110
[   15.672647]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   15.672653] RIP: 0033:0x7f066d6b3839
[   15.672657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 85 0d 00 f7 d8 64 89 01 48
[   15.672659] RSP: 002b:00007ffead344b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   15.672663] RAX: ffffffffffffffda RBX: 00005586f29e09b0 RCX: 00007f066d6b3839
[   15.672665] RDX: 0000000000000000 RSI: 00005586f29d08d0 RDI: 0000000000000011
[   15.672667] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005586f29c0540
[   15.672669] R10: 00007f066d78cac0 R11: 0000000000000246 R12: 00005586f29d08d0
[   15.672671] R13: 0000000000020000 R14: 00005586f29d82e0 R15: 0000000000000000
[   15.672675]  </TASK>
[   15.672676] Modules linked in: rtl2832_sdr videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev fc0012 rtl2832 i2c_mux dvb_usb_rtl28xxu dvb_usb_v2 dvb_core mc snd_emu10k1_synth snd_emux_synth snd_seq_midi_emul snd_seq_virmidi radeon(+) snd_seq_midi snd_seq_midi_event snd_seq snd_emu10k1 drm_ttm_helper ttm snd_hda_codec_hdmi drm_suballoc_helper snd_hda_intel snd_util_mem drm_display_helper snd_ac97_codec snd_intel_dspcfg snd_hda_codec snd_hda_core ac97_bus snd_hwdep snd_rawmidi snd_seq_device snd_pcm drm_kms_helper snd_timer edac_mce_amd k10temp sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 drm aesni_intel snd gf128mul at24 crypto_simd cryptd soundcore acpi_cpufreq regmap_i2c emu10k1_gp gameport pcspkr evdev serio_raw i2c_algo_bit video sp5100_tco wmi button ext4 crc32c_generic crc16 mbcache jbd2 hid_generic usbhid hid sg sr_mod cdrom sd_mod ata_generic crc32_pclmul firewire_ohci crc32c_intel firewire_core ahci i2c_piix4 crc_itu_t pata_atiixp i2c_smbus r8169 libahci ohci_pci xhci_pci libata
[   15.672761]  realtek ohci_hcd ehci_pci xhci_hcd ehci_hcd mdio_devres scsi_mod scsi_common libphy usbcore usb_common
[   15.672773] CR2: 0000000000000050
[   15.672776] ---[ end trace 0000000000000000 ]---

Re: NULL pointer dereference with kernel 6.12.0-rc1 and ARUBA GPU

[Christian König]

I've been running into the same issue as well. Going to take a look.

Christian.

Am 30.09.24 um 17:25 schrieb Arthur Marsh:
> [   13.069630] [drm] radeon kernel modesetting enabled.
> [   13.069681] radeon 0000:00:01.0: vgaarb: deactivate vga console
> [   13.070435] Console: switching to colour dummy device 80x25
> [   13.070632] [drm] initializing kernel modesetting (ARUBA 0x1002:0x990C 0x1002:0x0123 0x00).
> [   13.070718] ATOM BIOS: 113
> [   13.070778] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 0x000000002FFFFFFF (768M used)
> [   13.070781] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 0x000000006FFFFFFF
> [   13.070785] [drm] Detected VRAM RAM=768M, BAR=256M
> [   13.070786] [drm] RAM width 64bits DDR
> [   13.070884] [drm] radeon: 768M of VRAM memory ready
> [   13.070885] [drm] radeon: 1024M of GTT memory ready.
> [   13.070896] [drm] Loading ARUBA Microcode
> [   13.504398] [drm] Internal thermal controller without fan control
> [   13.504566] [drm] radeon: dpm initialized
> [   13.839229] [drm] Found VCE firmware/feedback version 50.0.1 / 17!
> [   13.839264] [drm] GART: num cpu pages 262144, num gpu pages 262144
> [   13.863929] [drm] PCIE GART of 1024M enabled (table at 0x00000000001D6000).
> [   13.864085] radeon 0000:00:01.0: WB enabled
> [   13.864088] radeon 0000:00:01.0: fence driver on ring 0 use gpu addr 0x0000000030000c00
> [   13.864467] radeon 0000:00:01.0: fence driver on ring 5 use gpu addr 0x0000000000075a18
> [   13.884497] radeon 0000:00:01.0: fence driver on ring 6 use gpu addr 0x0000000030000c18
> [   13.884502] radeon 0000:00:01.0: fence driver on ring 7 use gpu addr 0x0000000030000c1c
> [   13.884503] radeon 0000:00:01.0: fence driver on ring 1 use gpu addr 0x0000000030000c04
> [   13.884505] radeon 0000:00:01.0: fence driver on ring 2 use gpu addr 0x0000000030000c08
> [   13.884506] radeon 0000:00:01.0: fence driver on ring 3 use gpu addr 0x0000000030000c0c
> [   13.884507] radeon 0000:00:01.0: fence driver on ring 4 use gpu addr 0x0000000030000c10
> [   13.884862] radeon 0000:00:01.0: radeon: MSI limited to 32-bit
> [   13.884921] radeon 0000:00:01.0: radeon: using MSI.
> [   13.885003] [drm] radeon: irq initialized.
> [   13.903273] [drm] ring test on 0 succeeded in 3 usecs
> [   13.903281] [drm] ring test on 3 succeeded in 4 usecs
> [   13.903286] [drm] ring test on 4 succeeded in 3 usecs
> [   13.949128] [drm] ring test on 5 succeeded in 2 usecs
> [   13.968988] [drm] UVD initialized successfully.
> [   14.078221] [drm] ring test on 6 succeeded in 17 usecs
> [   14.078234] [drm] ring test on 7 succeeded in 3 usecs
> [   14.078236] [drm] VCE initialized successfully.
> [   14.078314] snd_hda_intel 0000:00:01.1: bound 0000:00:01.0 (ops radeon_audio_component_bind_ops [radeon])
> [   14.078502] [drm] ib test on ring 0 succeeded in 0 usecs
> [   14.078555] [drm] ib test on ring 3 succeeded in 0 usecs
> [   14.078606] [drm] ib test on ring 4 succeeded in 0 usecs
> [   14.153378] mc: Linux media interface: v0.10
> [   14.593759] usb 1-3: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state
> [   14.614227] [drm] ib test on ring 5 succeeded
> [   14.625865] usb 1-3: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
> [   14.625885] dvbdev: DVB: registering new adapter (Realtek RTL2832U reference design)
> [   14.625889] usb 1-3: media controller created
> [   14.627064] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
> [   14.801142] i2c i2c-5: Added multiplexed i2c bus 6
> [   14.801149] rtl2832 5-0010: Realtek RTL2832 successfully attached
> [   14.801176] usb 1-3: DVB: registering adapter 0 frontend 0 (Realtek RTL2832 (DVB-T))...
> [   14.801189] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
> [   14.957783] i2c i2c-6: fc0012: Fitipower FC0012 successfully identified
> [   15.158461] [drm] ib test on ring 6 succeeded
> [   15.178787] videodev: Linux video capture interface: v2.00
> [   15.460709] rtl2832_sdr rtl2832_sdr.1.auto: Registered as swradio0
> [   15.460715] rtl2832_sdr rtl2832_sdr.1.auto: Realtek RTL2832 SDR attached
> [   15.460718] rtl2832_sdr rtl2832_sdr.1.auto: SDR API is still slightly experimental and functionality changes may follow
> [   15.477759] usb 1-3: dvb_usb_v2: 'Realtek RTL2832U reference design' successfully initialized and connected
> [   15.477878] usbcore: registered new interface driver dvb_usb_rtl28xxu
> [   15.670413] [drm] ib test on ring 7 succeeded
> [   15.671111] BUG: kernel NULL pointer dereference, address: 0000000000000050
> [   15.671114] #PF: supervisor read access in kernel mode
> [   15.671117] #PF: error_code(0x0000) - not-present page
> [   15.671119] PGD 0 P4D 0
> [   15.671123] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
> [   15.671127] CPU: 2 UID: 0 PID: 437 Comm: udevd Not tainted 6.12.0-rc1 #6131
> [   15.671132] Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
> [   15.671134] RIP: 0010:drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   15.671164] Code: 86 c0 48 85 f6 48 89 83 b8 00 00 00 74 1c 48 8d bb b4 03 00 00 ba 30 00 00 00 e8 52 35 bc c7 48 8d 7b 08 5b 5d e9 37 31 93 c7 <48> 8b 70 50 48 85 f6 75 db 48 8b 30 eb d6 48 8d ab 88 04 00 00 48
> [   15.671167] RSP: 0018:ffffb37f80e33960 EFLAGS: 00010246
> [   15.671170] RAX: 0000000000000000 RBX: ffff892d407ee508 RCX: ffffffffc09b3bc0
> [   15.671172] RDX: ffffffffc0869e40 RSI: 0000000000000000 RDI: ffff892d407ee9f0
> [   15.671174] RBP: ffff892d407ee9f0 R08: ffff892d42fb8008 R09: 00000000c0c0c0c0
> [   15.671176] R10: 0000000000000000 R11: 0000000000000001 R12: ffff892d5b64af50
> [   15.671178] R13: ffff892d5b64b092 R14: ffff892d5b64af2e R15: 0000000000000018
> [   15.671181] FS:  00007f066d882840(0000) GS:ffff89306f900000(0000) knlGS:0000000000000000
> [   15.671183] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   15.671185] CR2: 0000000000000050 CR3: 00000001047a6000 CR4: 00000000000406f0
> [   15.671188] Call Trace:
> [   15.671190]  <TASK>
> [   15.671192]  ? __die_body.cold+0x19/0x1e
> [   15.671200]  ? page_fault_oops+0xa8/0x230
> [   15.671206]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   15.671227]  ? search_module_extables+0x4f/0x90
> [   15.671233]  ? fixup_exception+0x36/0x2f0
> [   15.671239]  ? exc_page_fault+0x88/0x1b0
> [   15.671244]  ? asm_exc_page_fault+0x22/0x30
> [   15.671251]  ? __pfx_radeon_dp_aux_transfer_atom+0x10/0x10 [radeon]
> [   15.671437]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
> [   15.671463]  radeon_dp_aux_init+0x91/0xc0 [radeon]
> [   15.671634]  radeon_get_atom_connector_info_from_object_table+0x58e/0x880 [radeon]
> [   15.671764]  ? radeon_get_atom_connector_info_from_supported_devices_table+0x5cf/0x600 [radeon]
> [   15.671895]  ? kstrdup+0x4c/0x70
> [   15.671902]  ? __kmalloc_noprof+0x24d/0x340
> [   15.671908]  radeon_modeset_init+0x375/0x470 [radeon]
> [   15.672050]  ? radeon_device_init+0x667/0xb40 [radeon]
> [   15.672179]  radeon_driver_load_kms+0xc2/0x260 [radeon]
> [   15.672308]  radeon_pci_probe+0xff/0x170 [radeon]
> [   15.672436]  pci_device_probe+0xbe/0x1a0
> [   15.672441]  really_probe+0xde/0x350
> [   15.672447]  ? pm_runtime_barrier+0x61/0xb0
> [   15.672452]  ? __pfx___driver_attach+0x10/0x10
> [   15.672457]  __driver_probe_device+0x78/0x110
> [   15.672462]  driver_probe_device+0x2d/0xc0
> [   15.672467]  __driver_attach+0xc9/0x1c0
> [   15.672472]  bus_for_each_dev+0x6a/0xb0
> [   15.672476]  ? migrate_enable+0xbf/0xf0
> [   15.672480]  bus_add_driver+0x139/0x220
> [   15.672485]  driver_register+0x6e/0xc0
> [   15.672491]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
> [   15.672616]  do_one_initcall+0x42/0x210
> [   15.672622]  ? __kmalloc_cache_noprof+0x89/0x230
> [   15.672627]  do_init_module+0x60/0x210
> [   15.672631]  init_module_from_file+0x89/0xc0
> [   15.672637]  __x64_sys_finit_module+0x142/0x390
> [   15.672643]  do_syscall_64+0x47/0x110
> [   15.672647]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [   15.672653] RIP: 0033:0x7f066d6b3839
> [   15.672657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 85 0d 00 f7 d8 64 89 01 48
> [   15.672659] RSP: 002b:00007ffead344b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
> [   15.672663] RAX: ffffffffffffffda RBX: 00005586f29e09b0 RCX: 00007f066d6b3839
> [   15.672665] RDX: 0000000000000000 RSI: 00005586f29d08d0 RDI: 0000000000000011
> [   15.672667] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005586f29c0540
> [   15.672669] R10: 00007f066d78cac0 R11: 0000000000000246 R12: 00005586f29d08d0
> [   15.672671] R13: 0000000000020000 R14: 00005586f29d82e0 R15: 0000000000000000
> [   15.672675]  </TASK>
> [   15.672676] Modules linked in: rtl2832_sdr videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev fc0012 rtl2832 i2c_mux dvb_usb_rtl28xxu dvb_usb_v2 dvb_core mc snd_emu10k1_synth snd_emux_synth snd_seq_midi_emul snd_seq_virmidi radeon(+) snd_seq_midi snd_seq_midi_event snd_seq snd_emu10k1 drm_ttm_helper ttm snd_hda_codec_hdmi drm_suballoc_helper snd_hda_intel snd_util_mem drm_display_helper snd_ac97_codec snd_intel_dspcfg snd_hda_codec snd_hda_core ac97_bus snd_hwdep snd_rawmidi snd_seq_device snd_pcm drm_kms_helper snd_timer edac_mce_amd k10temp sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 drm aesni_intel snd gf128mul at24 crypto_simd cryptd soundcore acpi_cpufreq regmap_i2c emu10k1_gp gameport pcspkr evdev serio_raw i2c_algo_bit video sp5100_tco wmi button ext4 crc32c_generic crc16 mbcache jbd2 hid_generic usbhid hid sg sr_mod cdrom sd_mod ata_generic crc32_pclmul firewire_ohci crc32c_intel firewire_core ahci i2c_piix4 crc_itu_t pata_atiixp i2c_smbus r8169 libahci ohci_pci xhci_pci libata
> [   15.672761]  realtek ohci_hcd ehci_pci xhci_hcd ehci_hcd mdio_devres scsi_mod scsi_common libphy usbcore usb_common
> [   15.672773] CR2: 0000000000000050
> [   15.672776] ---[ end trace 0000000000000000 ]---

Re: NULL pointer dereference with kernel 6.12.0-rc1 and ARUBA GPU

[Thomas Zimmermann]

Hi

Am 30.09.24 um 19:54 schrieb Christian König:
> I've been running into the same issue as well. Going to take a look.

Any results?

>
> Christian.
>
> Am 30.09.24 um 17:25 schrieb Arthur Marsh:
>> [   13.069630] [drm] radeon kernel modesetting enabled.
>> [   13.069681] radeon 0000:00:01.0: vgaarb: deactivate vga console
>> [   13.070435] Console: switching to colour dummy device 80x25
>> [   13.070632] [drm] initializing kernel modesetting (ARUBA 
>> 0x1002:0x990C 0x1002:0x0123 0x00).
>> [   13.070718] ATOM BIOS: 113
>> [   13.070778] radeon 0000:00:01.0: VRAM: 768M 0x0000000000000000 - 
>> 0x000000002FFFFFFF (768M used)
>> [   13.070781] radeon 0000:00:01.0: GTT: 1024M 0x0000000030000000 - 
>> 0x000000006FFFFFFF
>> [   13.070785] [drm] Detected VRAM RAM=768M, BAR=256M
>> [   13.070786] [drm] RAM width 64bits DDR
>> [   13.070884] [drm] radeon: 768M of VRAM memory ready
>> [   13.070885] [drm] radeon: 1024M of GTT memory ready.
>> [   13.070896] [drm] Loading ARUBA Microcode
>> [   13.504398] [drm] Internal thermal controller without fan control
>> [   13.504566] [drm] radeon: dpm initialized
>> [   13.839229] [drm] Found VCE firmware/feedback version 50.0.1 / 17!
>> [   13.839264] [drm] GART: num cpu pages 262144, num gpu pages 262144
>> [   13.863929] [drm] PCIE GART of 1024M enabled (table at 
>> 0x00000000001D6000).
>> [   13.864085] radeon 0000:00:01.0: WB enabled
>> [   13.864088] radeon 0000:00:01.0: fence driver on ring 0 use gpu 
>> addr 0x0000000030000c00
>> [   13.864467] radeon 0000:00:01.0: fence driver on ring 5 use gpu 
>> addr 0x0000000000075a18
>> [   13.884497] radeon 0000:00:01.0: fence driver on ring 6 use gpu 
>> addr 0x0000000030000c18
>> [   13.884502] radeon 0000:00:01.0: fence driver on ring 7 use gpu 
>> addr 0x0000000030000c1c
>> [   13.884503] radeon 0000:00:01.0: fence driver on ring 1 use gpu 
>> addr 0x0000000030000c04
>> [   13.884505] radeon 0000:00:01.0: fence driver on ring 2 use gpu 
>> addr 0x0000000030000c08
>> [   13.884506] radeon 0000:00:01.0: fence driver on ring 3 use gpu 
>> addr 0x0000000030000c0c
>> [   13.884507] radeon 0000:00:01.0: fence driver on ring 4 use gpu 
>> addr 0x0000000030000c10
>> [   13.884862] radeon 0000:00:01.0: radeon: MSI limited to 32-bit
>> [   13.884921] radeon 0000:00:01.0: radeon: using MSI.
>> [   13.885003] [drm] radeon: irq initialized.
>> [   13.903273] [drm] ring test on 0 succeeded in 3 usecs
>> [   13.903281] [drm] ring test on 3 succeeded in 4 usecs
>> [   13.903286] [drm] ring test on 4 succeeded in 3 usecs
>> [   13.949128] [drm] ring test on 5 succeeded in 2 usecs
>> [   13.968988] [drm] UVD initialized successfully.
>> [   14.078221] [drm] ring test on 6 succeeded in 17 usecs
>> [   14.078234] [drm] ring test on 7 succeeded in 3 usecs
>> [   14.078236] [drm] VCE initialized successfully.
>> [   14.078314] snd_hda_intel 0000:00:01.1: bound 0000:00:01.0 (ops 
>> radeon_audio_component_bind_ops [radeon])
>> [   14.078502] [drm] ib test on ring 0 succeeded in 0 usecs
>> [   14.078555] [drm] ib test on ring 3 succeeded in 0 usecs
>> [   14.078606] [drm] ib test on ring 4 succeeded in 0 usecs
>> [   14.153378] mc: Linux media interface: v0.10
>> [   14.593759] usb 1-3: dvb_usb_v2: found a 'Realtek RTL2832U 
>> reference design' in warm state
>> [   14.614227] [drm] ib test on ring 5 succeeded
>> [   14.625865] usb 1-3: dvb_usb_v2: will pass the complete MPEG2 
>> transport stream to the software demuxer
>> [   14.625885] dvbdev: DVB: registering new adapter (Realtek RTL2832U 
>> reference design)
>> [   14.625889] usb 1-3: media controller created
>> [   14.627064] dvbdev: dvb_create_media_entity: media entity 
>> 'dvb-demux' registered.
>> [   14.801142] i2c i2c-5: Added multiplexed i2c bus 6
>> [   14.801149] rtl2832 5-0010: Realtek RTL2832 successfully attached
>> [   14.801176] usb 1-3: DVB: registering adapter 0 frontend 0 
>> (Realtek RTL2832 (DVB-T))...
>> [   14.801189] dvbdev: dvb_create_media_entity: media entity 'Realtek 
>> RTL2832 (DVB-T)' registered.
>> [   14.957783] i2c i2c-6: fc0012: Fitipower FC0012 successfully 
>> identified
>> [   15.158461] [drm] ib test on ring 6 succeeded
>> [   15.178787] videodev: Linux video capture interface: v2.00
>> [   15.460709] rtl2832_sdr rtl2832_sdr.1.auto: Registered as swradio0
>> [   15.460715] rtl2832_sdr rtl2832_sdr.1.auto: Realtek RTL2832 SDR 
>> attached
>> [   15.460718] rtl2832_sdr rtl2832_sdr.1.auto: SDR API is still 
>> slightly experimental and functionality changes may follow
>> [   15.477759] usb 1-3: dvb_usb_v2: 'Realtek RTL2832U reference 
>> design' successfully initialized and connected
>> [   15.477878] usbcore: registered new interface driver dvb_usb_rtl28xxu
>> [   15.670413] [drm] ib test on ring 7 succeeded
>> [   15.671111] BUG: kernel NULL pointer dereference, address: 
>> 0000000000000050
>> [   15.671114] #PF: supervisor read access in kernel mode
>> [   15.671117] #PF: error_code(0x0000) - not-present page
>> [   15.671119] PGD 0 P4D 0
>> [   15.671123] Oops: Oops: 0000 [#1] PREEMPT_RT SMP NOPTI
>> [   15.671127] CPU: 2 UID: 0 PID: 437 Comm: udevd Not tainted 
>> 6.12.0-rc1 #6131
>> [   15.671132] Hardware name: Gigabyte Technology Co., Ltd. To be 
>> filled by O.E.M./F2A78M-HD2, BIOS F2 05/28/2014
>> [   15.671134] RIP: 0010:drm_dp_aux_register+0x59/0x110 
>> [drm_display_helper]
>> [   15.671164] Code: 86 c0 48 85 f6 48 89 83 b8 00 00 00 74 1c 48 8d 
>> bb b4 03 00 00 ba 30 00 00 00 e8 52 35 bc c7 48 8d 7b 08 5b 5d e9 37 
>> 31 93 c7 <48> 8b 70 50 48 85 f6 75 db 48 8b 30 eb d6 48 8d ab 88 04 
>> 00 00 48
>> [   15.671167] RSP: 0018:ffffb37f80e33960 EFLAGS: 00010246
>> [   15.671170] RAX: 0000000000000000 RBX: ffff892d407ee508 RCX: 
>> ffffffffc09b3bc0
>> [   15.671172] RDX: ffffffffc0869e40 RSI: 0000000000000000 RDI: 
>> ffff892d407ee9f0
>> [   15.671174] RBP: ffff892d407ee9f0 R08: ffff892d42fb8008 R09: 
>> 00000000c0c0c0c0
>> [   15.671176] R10: 0000000000000000 R11: 0000000000000001 R12: 
>> ffff892d5b64af50
>> [   15.671178] R13: ffff892d5b64b092 R14: ffff892d5b64af2e R15: 
>> 0000000000000018
>> [   15.671181] FS:  00007f066d882840(0000) GS:ffff89306f900000(0000) 
>> knlGS:0000000000000000
>> [   15.671183] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> [   15.671185] CR2: 0000000000000050 CR3: 00000001047a6000 CR4: 
>> 00000000000406f0
>> [   15.671188] Call Trace:
>> [   15.671190]  <TASK>
>> [   15.671192]  ? __die_body.cold+0x19/0x1e
>> [   15.671200]  ? page_fault_oops+0xa8/0x230
>> [   15.671206]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
>> [   15.671227]  ? search_module_extables+0x4f/0x90
>> [   15.671233]  ? fixup_exception+0x36/0x2f0
>> [   15.671239]  ? exc_page_fault+0x88/0x1b0
>> [   15.671244]  ? asm_exc_page_fault+0x22/0x30
>> [   15.671251]  ? __pfx_radeon_dp_aux_transfer_atom+0x10/0x10 [radeon]
>> [   15.671437]  ? drm_dp_aux_register+0x59/0x110 [drm_display_helper]
>> [   15.671463]  radeon_dp_aux_init+0x91/0xc0 [radeon]
>> [   15.671634] 
>> radeon_get_atom_connector_info_from_object_table+0x58e/0x880 [radeon]
>> [   15.671764]  ? 
>> radeon_get_atom_connector_info_from_supported_devices_table+0x5cf/0x600 
>> [radeon]
>> [   15.671895]  ? kstrdup+0x4c/0x70
>> [   15.671902]  ? __kmalloc_noprof+0x24d/0x340
>> [   15.671908]  radeon_modeset_init+0x375/0x470 [radeon]
>> [   15.672050]  ? radeon_device_init+0x667/0xb40 [radeon]
>> [   15.672179]  radeon_driver_load_kms+0xc2/0x260 [radeon]
>> [   15.672308]  radeon_pci_probe+0xff/0x170 [radeon]
>> [   15.672436]  pci_device_probe+0xbe/0x1a0
>> [   15.672441]  really_probe+0xde/0x350
>> [   15.672447]  ? pm_runtime_barrier+0x61/0xb0
>> [   15.672452]  ? __pfx___driver_attach+0x10/0x10
>> [   15.672457]  __driver_probe_device+0x78/0x110
>> [   15.672462]  driver_probe_device+0x2d/0xc0
>> [   15.672467]  __driver_attach+0xc9/0x1c0
>> [   15.672472]  bus_for_each_dev+0x6a/0xb0
>> [   15.672476]  ? migrate_enable+0xbf/0xf0
>> [   15.672480]  bus_add_driver+0x139/0x220
>> [   15.672485]  driver_register+0x6e/0xc0
>> [   15.672491]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
>> [   15.672616]  do_one_initcall+0x42/0x210
>> [   15.672622]  ? __kmalloc_cache_noprof+0x89/0x230
>> [   15.672627]  do_init_module+0x60/0x210
>> [   15.672631]  init_module_from_file+0x89/0xc0
>> [   15.672637]  __x64_sys_finit_module+0x142/0x390
>> [   15.672643]  do_syscall_64+0x47/0x110
>> [   15.672647]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
>> [   15.672653] RIP: 0033:0x7f066d6b3839
>> [   15.672657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 
>> 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 
>> 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 85 0d 00 f7 d8 64 
>> 89 01 48
>> [   15.672659] RSP: 002b:00007ffead344b38 EFLAGS: 00000246 ORIG_RAX: 
>> 0000000000000139
>> [   15.672663] RAX: ffffffffffffffda RBX: 00005586f29e09b0 RCX: 
>> 00007f066d6b3839
>> [   15.672665] RDX: 0000000000000000 RSI: 00005586f29d08d0 RDI: 
>> 0000000000000011
>> [   15.672667] RBP: 0000000000000000 R08: 0000000000000000 R09: 
>> 00005586f29c0540
>> [   15.672669] R10: 00007f066d78cac0 R11: 0000000000000246 R12: 
>> 00005586f29d08d0
>> [   15.672671] R13: 0000000000020000 R14: 00005586f29d82e0 R15: 
>> 0000000000000000
>> [   15.672675]  </TASK>
>> [   15.672676] Modules linked in: rtl2832_sdr videobuf2_vmalloc 
>> videobuf2_memops videobuf2_v4l2 videobuf2_common videodev fc0012 
>> rtl2832 i2c_mux dvb_usb_rtl28xxu dvb_usb_v2 dvb_core mc 
>> snd_emu10k1_synth snd_emux_synth snd_seq_midi_emul snd_seq_virmidi 
>> radeon(+) snd_seq_midi snd_seq_midi_event snd_seq snd_emu10k1 
>> drm_ttm_helper ttm snd_hda_codec_hdmi drm_suballoc_helper 
>> snd_hda_intel snd_util_mem drm_display_helper snd_ac97_codec 
>> snd_intel_dspcfg snd_hda_codec snd_hda_core ac97_bus snd_hwdep 
>> snd_rawmidi snd_seq_device snd_pcm drm_kms_helper snd_timer 
>> edac_mce_amd k10temp sha512_ssse3 sha512_generic sha256_ssse3 
>> sha1_ssse3 drm aesni_intel snd gf128mul at24 crypto_simd cryptd 
>> soundcore acpi_cpufreq regmap_i2c emu10k1_gp gameport pcspkr evdev 
>> serio_raw i2c_algo_bit video sp5100_tco wmi button ext4 
>> crc32c_generic crc16 mbcache jbd2 hid_generic usbhid hid sg sr_mod 
>> cdrom sd_mod ata_generic crc32_pclmul firewire_ohci crc32c_intel 
>> firewire_core ahci i2c_piix4 crc_itu_t pata_atiixp i2c_smbus r8169 
>> libahci ohci_pci xhci_pci libata
>> [   15.672761]  realtek ohci_hcd ehci_pci xhci_hcd ehci_hcd 
>> mdio_devres scsi_mod scsi_common libphy usbcore usb_common
>> [   15.672773] CR2: 0000000000000050
>> [   15.672776] ---[ end trace 0000000000000000 ]---
>

-- 
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstrasse 146, 90461 Nuernberg, Germany
GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
HRB 36809 (AG Nuernberg)