From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S936116AbeCHQ7X convert rfc822-to-8bit (ORCPT ); Thu, 8 Mar 2018 11:59:23 -0500 Received: from muru.com ([72.249.23.125]:60142 "EHLO muru.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933717AbeCHQ7I (ORCPT ); Thu, 8 Mar 2018 11:59:08 -0500 Date: Thu, 8 Mar 2018 08:59:03 -0800 From: Tony Lindgren To: Pavel Machek Cc: pali.rohar@gmail.com, sre@kernel.org, kernel list , linux-arm-kernel , linux-omap@vger.kernel.org, khilman@kernel.org, aaro.koskinen@iki.fi, ivo.g.dimitrov.75@gmail.com, patrikbachan@gmail.com, serge@hallyn.com, abcloriens@gmail.com, clayton@craftyguy.net, martijn@brixit.nl, sakari.ailus@linux.intel.com, Filip =?utf-8?Q?Matijevi=C4=87?= , Suman Anna Subject: Re: Nokia N900: refcount_t underflow, use after free Message-ID: <20180308165903.GM5799@atomide.com> References: <20180308143053.GA17267@amd> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: 8BIT In-Reply-To: <20180308143053.GA17267@amd> User-Agent: Mutt/1.9.4 (2018-02-28) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org * Pavel Machek [180308 14:31]: > Hi! > > I'm getting this warning... Has anyone seen/debugged that before? > Unfortunately the backtrace does not seem to be too useful :-(. Adding Suman to Cc, as it points to arm_iommu_release_mapping(). Regards, Tony > [ 0.000000] Booting Linux on physical CPU 0x0 > [ 0.000000] Linux version 4.16.0-rc3-next-20180302 (pavel@duo) (gcc > version 4.7.2 (GC > C)) #70 Fri Mar 2 10:16:00 CET 2018 > [ 0.000000] CPU: ARMv7 Processor [411fc083] revision 3 (ARMv7), > cr=10c5387d > [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT > nonaliasing instruction cac > ... > [ 1.244140] omap3isp 480bc000.isp: 480bc000.isp supply vdd-csiphy2 > not found, using d > ummy regulator > [ 1.254089] omap3isp 480bc000.isp: Revision 2.0 found > [ 1.260009] omap-iommu 480bd400.mmu: 480bd400.mmu: version 1.1 > [ 1.266693] ------------[ cut here ]------------ > [ 1.271606] WARNING: CPU: 0 PID: 1 at lib/refcount.c:187 > refcount_sub_and_test+0x94/0xa8 > [ 1.280181] refcount_t: underflow; use-after-free. > [ 1.285247] Modules linked in: > [ 1.288482] CPU: 0 PID: 1 Comm: swapper Not tainted > 4.16.0-rc3-next-20180302 #70 > [ 1.296295] Hardware name: Nokia RX-51 board > [ 1.300811] [] (unwind_backtrace) from [] > (show_stack+0x10/0x14) > [ 1.309020] [] (show_stack) from [] > (__warn+0xe8/0x110) > [ 1.316375] [] (__warn) from [] > (warn_slowpath_fmt+0x38/0x48) > [ 1.324310] [] (warn_slowpath_fmt) from [] > (refcount_sub_and_test+0x94/0xa8) > [ 1.333557] [] (refcount_sub_and_test) from [] > (arm_iommu_release_mapping+0x18/0x2c) > [ 1.343597] [] (arm_iommu_release_mapping) from > [] (driver_probe_device+0x24c/0x314) > [ 1.353637] [] (driver_probe_device) from [] > (__driver_attach+0xac/0xb0) > [ 1.362548] [] (__driver_attach) from [] > (bus_for_each_dev+0x58/0x7c) > [ 1.371185] [] (bus_for_each_dev) from [] > (bus_add_driver+0xe0/0x1f0) > [ 1.379852] [] (bus_add_driver) from [] > (driver_register+0x78/0xf4) > [ 1.388305] [] (driver_register) from [] > (do_one_initcall+0x3c/0x16c) > [ 1.396972] [] (do_one_initcall) from [] > (kernel_init_freeable+0xf8/0x1c4) > [ 1.406066] [] (kernel_init_freeable) from [] > (kernel_init+0x8/0x108) > [ 1.414703] [] (kernel_init) from [] > (ret_from_fork+0x14/0x2c) > [ 1.422698] Exception stack(0xce049fb0 to 0xce049ff8) > [ 1.428039] 9fa0: 00000000 > 00000000 00000000 00000000 > [ 1.436676] 9fc0: 00000000 00000000 00000000 00000000 00000000 > 00000000 00000000 00000000 > [ 1.445312] 9fe0: 00000000 00000000 00000000 00000000 00000013 > 00000000 > [ 1.452270] ---[ end trace dcb3a72772bbfe7a ]--- > [ 1.459045] ti-soc-thermal 48002524.bandgap: This OMAP thermal > sensor is unreliable. You've been warned > [ 1.469055] ti-soc-thermal 48002524.bandgap: Non-trimmed BGAP, Temp > not accurate > [ 1.476898] ti-soc-thermal 48002524.bandgap: thermal zone device is > NULL > [ 1.485198] omap_wdt: OMAP Watchdog Timer Rev 0x31: initial timeout > 60 sec > [ 1.495208] omap_hsmmc 4809c000.mmc: GPIO lookup for consumer cd > > -- > (english) http://www.livejournal.com/~pavelmachek > (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html