From: Sasha Levin <sashal@kernel.org>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org
Cc: xinhui pan <xinhui.pan@amd.com>, Feifei Xu <FeifeiXu@amd.com>,
Alex Deucher <alexander.deucher@amd.com>,
Sasha Levin <sashal@kernel.org>,
amd-gfx@lists.freedesktop.org, dri-devel@lists.freedesktop.org
Subject: [PATCH AUTOSEL 5.8 084/101] drm/amd/display: Fix a list corruption
Date: Sun, 18 Oct 2020 15:20:09 -0400 [thread overview]
Message-ID: <20201018192026.4053674-84-sashal@kernel.org> (raw)
In-Reply-To: <20201018192026.4053674-1-sashal@kernel.org>
From: xinhui pan <xinhui.pan@amd.com>
[ Upstream commit 1545fbf97eafc1dbdc2923e58b4186b16a834784 ]
Remove the private obj from the internal list before we free aconnector.
[ 56.925828] BUG: unable to handle page fault for address: ffff8f84a870a560
[ 56.933272] #PF: supervisor read access in kernel mode
[ 56.938801] #PF: error_code(0x0000) - not-present page
[ 56.944376] PGD 18e605067 P4D 18e605067 PUD 86a614067 PMD 86a4d0067 PTE 800ffff8578f5060
[ 56.953260] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI
[ 56.958815] CPU: 6 PID: 1407 Comm: bash Tainted: G O 5.9.0-rc2+ #46
[ 56.967092] Hardware name: System manufacturer System Product Name/PRIME Z390-A, BIOS 1401 11/26/2019
[ 56.977162] RIP: 0010:__list_del_entry_valid+0x31/0xa0
[ 56.982768] Code: 00 ad de 55 48 8b 17 4c 8b 47 08 48 89 e5 48 39 c2 74 27 48 b8 22 01 00 00 00 00 ad de 49 39 c0 74 2d 49 8b 30 48 39 fe 75 3d <48> 8b 52 08 48 39 f2 75 4c b8 01 00 00 00 5d c3 48 89 7
[ 57.003327] RSP: 0018:ffffb40c81687c90 EFLAGS: 00010246
[ 57.009048] RAX: dead000000000122 RBX: ffff8f84ea41f4f0 RCX: 0000000000000006
[ 57.016871] RDX: ffff8f84a870a558 RSI: ffff8f84ea41f4f0 RDI: ffff8f84ea41f4f0
[ 57.024672] RBP: ffffb40c81687c90 R08: ffff8f84ea400998 R09: 0000000000000001
[ 57.032490] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000006
[ 57.040287] R13: ffff8f84ea422a90 R14: ffff8f84b4129a20 R15: fffffffffffffff2
[ 57.048105] FS: 00007f550d885740(0000) GS:ffff8f8509600000(0000) knlGS:0000000000000000
[ 57.056979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.063260] CR2: ffff8f84a870a560 CR3: 00000007e5144001 CR4: 00000000003706e0
[ 57.071053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.078849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.086684] Call Trace:
[ 57.089381] drm_atomic_private_obj_fini+0x29/0x82 [drm]
[ 57.095247] amdgpu_dm_fini+0x83/0x170 [amdgpu]
[ 57.100264] dm_hw_fini+0x23/0x30 [amdgpu]
[ 57.104814] amdgpu_device_fini+0x1df/0x4fe [amdgpu]
[ 57.110271] amdgpu_driver_unload_kms+0x43/0x70 [amdgpu]
[ 57.116136] amdgpu_pci_remove+0x3b/0x60 [amdgpu]
[ 57.121291] pci_device_remove+0x3e/0xb0
[ 57.125583] device_release_driver_internal+0xff/0x1d0
[ 57.131223] device_release_driver+0x12/0x20
[ 57.135903] pci_stop_bus_device+0x70/0xa0
[ 57.140401] pci_stop_and_remove_bus_device_locked+0x1b/0x30
[ 57.146571] remove_store+0x7b/0x90
[ 57.150429] dev_attr_store+0x17/0x30
[ 57.154441] sysfs_kf_write+0x4b/0x60
[ 57.158479] kernfs_fop_write+0xe8/0x1d0
[ 57.162788] vfs_write+0xf5/0x230
[ 57.166426] ksys_write+0x70/0xf0
[ 57.170087] __x64_sys_write+0x1a/0x20
[ 57.174219] do_syscall_64+0x38/0x90
[ 57.178145] entry_SYSCALL_64_after_hwframe+0x44/0xa9
Signed-off-by: xinhui pan <xinhui.pan@amd.com>
Acked-by: Feifei Xu <Feifei Xu@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c
index 7c1cc0ba30a55..a3b39b6398737 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c
@@ -4862,6 +4862,7 @@ static void amdgpu_dm_connector_destroy(struct drm_connector *connector)
struct amdgpu_device *adev = connector->dev->dev_private;
struct amdgpu_display_manager *dm = &adev->dm;
+ drm_atomic_private_obj_fini(&aconnector->mst_mgr.base);
#if defined(CONFIG_BACKLIGHT_CLASS_DEVICE) ||\
defined(CONFIG_BACKLIGHT_CLASS_DEVICE_MODULE)
--
2.25.1
next prev parent reply other threads:[~2020-10-18 19:47 UTC|newest]
Thread overview: 101+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-10-18 19:18 [PATCH AUTOSEL 5.8 001/101] md/bitmap: fix memory leak of temporary bitmap Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 002/101] block: ratelimit handle_bad_sector() message Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 003/101] x86/dumpstack: Fix misleading instruction pointer error message Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 004/101] crypto: ccp - fix error handling Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 005/101] x86/asm: Replace __force_order with a memory clobber Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 006/101] x86/mce: Add Skylake quirk for patrol scrub reported errors Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 007/101] media: firewire: fix memory leak Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 008/101] media: ati_remote: sanity check for both endpoints Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 009/101] media: st-delta: Fix reference count leak in delta_run_work Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 010/101] media: sti: Fix reference count leaks Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 011/101] media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 012/101] media: exynos4-is: Fix a reference count leak " Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 013/101] media: exynos4-is: Fix a reference count leak Sasha Levin
2020-10-18 19:18 ` [PATCH AUTOSEL 5.8 014/101] media: vsp1: Fix runtime PM imbalance on error Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 015/101] media: platform: s3c-camif: " Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 016/101] media: platform: sti: hva: " Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 017/101] media: bdisp: " Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 018/101] media: media/pci: prevent memory leak in bttv_probe Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 019/101] x86/mce: Annotate mce_rd/wrmsrl() with noinstr Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 020/101] crypto: hisilicon - fixed memory allocation error Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 021/101] spi: fsi: Fix clock running too fast Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 022/101] x86/mce: Make mce_rdmsrl() panic on an inaccessible MSR Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 023/101] media: rcar_drif: Fix fwnode reference leak when parsing DT Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 024/101] media: uvcvideo: Ensure all probed info is returned to v4l2 Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 025/101] seccomp: kill process instead of thread for unknown actions Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 026/101] mmc: sdio: Check for CISTPL_VERS_1 buffer size Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 027/101] media: saa7134: avoid a shift overflow Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 028/101] media: atomisp: fix memleak in ia_css_stream_create Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 029/101] media: venus: fixes for list corruption Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 030/101] fs: dlm: fix configfs memory leak Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 031/101] media: venus: core: Fix error handling in probe Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 032/101] media: venus: core: Fix runtime PM imbalance in venus_probe Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 033/101] ipv6/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 034/101] ntfs: add check for mft record size in superblock Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 035/101] ip_gre: set dev->hard_header_len and dev->needed_headroom properly Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 036/101] mac80211: handle lack of sband->bitrates in rates Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 037/101] staging: wfx: fix handling of MMIC error Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 038/101] libbpf: Close map fd if init map slots failed Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 039/101] bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 040/101] PM: hibernate: remove the bogus call to get_gendisk() in software_resume() Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 041/101] scsi: mvumi: Fix error return in mvumi_io_attach() Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 042/101] scsi: target: core: Add CONTROL field for trace events Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 043/101] mic: vop: copy data to kernel space then write to io memory Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 044/101] misc: vop: add round_up(x,4) for vring_size to avoid kernel panic Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 045/101] usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 046/101] usb: gadget: function: printer: fix use-after-free in __lock_acquire Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 047/101] rtw88: pci: Power cycle device during shutdown Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 048/101] udf: Limit sparing table size Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 049/101] udf: Avoid accessing uninitialized data on failed inode read Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 050/101] rtw88: increse the size of rx buffer size Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 051/101] selftests/bpf: Fix overflow tests to reflect iter size increase Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 052/101] USB: cdc-acm: handle broken union descriptors Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 053/101] usb: dwc3: simple: add support for Hikey 970 Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 054/101] habanalabs: cast to u64 before shift > 31 bits Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 055/101] can: flexcan: flexcan_chip_stop(): add error handling and propagate error value Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 056/101] HID: multitouch: Lenovo X1 Tablet Gen3 trackpoint and buttons Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 057/101] ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 058/101] drm/panfrost: add Amlogic GPU integration quirks Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 059/101] drm/panfrost: add amlogic reset quirk callback Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 060/101] drm/panfrost: add support for vendor quirk Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 061/101] bpf: Limit caller's stack depth 256 for subprogs with tailcalls Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 062/101] misc: rtsx: Fix memory leak in rtsx_pci_probe Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 063/101] reiserfs: only call unlock_new_inode() if I_NEW Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 064/101] opp: Prevent memory leak in dev_pm_opp_attach_genpd() Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 065/101] xfs: make sure the rt allocator doesn't run off the end Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 066/101] usb: ohci: Default to per-port over-current protection Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 067/101] drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 068/101] Bluetooth: Only mark socket zapped after unlocking Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 069/101] drm/msm/a6xx: fix a potential overflow issue Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 070/101] iomap: fix WARN_ON_ONCE() from unprivileged users Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 071/101] scsi: ibmvfc: Fix error return in ibmvfc_probe() Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 072/101] scsi: qla2xxx: Warn if done() or free() are called on an already freed srb Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 073/101] selftests/bpf: Fix test_sysctl_loop{1, 2} failure due to clang change Sasha Levin
2020-10-18 19:19 ` [PATCH AUTOSEL 5.8 074/101] brcmsmac: fix memory leak in wlc_phy_attach_lcnphy Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 075/101] rtl8xxxu: prevent potential memory leak Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 076/101] Fix use after free in get_capset_info callback Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 077/101] HID: ite: Add USB id match for Acer One S1003 keyboard dock Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 078/101] scsi: qedf: Return SUCCESS if stale rport is encountered Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 079/101] scsi: qedi: Mark all connections for recovery on link down event Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 080/101] scsi: qedi: Protect active command list to avoid list corruption Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 081/101] scsi: qedi: Fix list_del corruption while removing active I/O Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 082/101] fbmem: add margin check to fb_check_caps() Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 083/101] tty: ipwireless: fix error handling Sasha Levin
2020-10-18 19:20 ` Sasha Levin [this message]
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 085/101] Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 086/101] ipvs: Fix uninit-value in do_ip_vs_set_ctl() Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 087/101] reiserfs: Fix memory leak in reiserfs_parse_options() Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 088/101] s390/qeth: strictly order bridge address events Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 089/101] mwifiex: don't call del_timer_sync() on uninitialized timer Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 090/101] ALSA: hda/ca0132 - Add AE-7 microphone selection commands Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 091/101] ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7 Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 092/101] ASoC: SOF: Add topology filename override based on dmi data match Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 093/101] ASoC: Intel: sof_rt5682: override quirk data for tgl_max98373_rt5682 Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 094/101] scsi: smartpqi: Avoid crashing kernel for controller issues Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 095/101] brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 096/101] usb: core: Solve race condition in anchor cleanup functions Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 097/101] scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 098/101] drm/amd/display: Screen corruption on dual displays (DP+USB-C) Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 099/101] dmaengine: dw: Add DMA-channels mask cell support Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 100/101] dmaengine: dw: Activate FIFO-mode for memory peripherals only Sasha Levin
2020-10-18 19:20 ` [PATCH AUTOSEL 5.8 101/101] ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() Sasha Levin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201018192026.4053674-84-sashal@kernel.org \
--to=sashal@kernel.org \
--cc=FeifeiXu@amd.com \
--cc=alexander.deucher@amd.com \
--cc=amd-gfx@lists.freedesktop.org \
--cc=dri-devel@lists.freedesktop.org \
--cc=linux-kernel@vger.kernel.org \
--cc=stable@vger.kernel.org \
--cc=xinhui.pan@amd.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox