cascade panic in cirrus framebuffer mode setting

Stephen Hemminger stephen at networkplumber.org
Thu May 16 21:29:03 PDT 2013


I use KVM VM's to test kernels, and lately with 3.9.2 when my code panic's the
kernel mode setting panic's as well. 

In this example, the first one is my fault; but then cirrus framebuffer DRM
modesetting craps out.

[   66.440071] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
[   66.442118] BUG: unable to handle kernel paging request at ffff88007c80a7c0
[   66.444030] IP: [<ffff88007c80a7c0>] 0xffff88007c80a7bf
[   66.445695] PGD 1b58067 PUD 1b5b067 PMD 374fb063 PTE 800000007c80a163
[   66.447580] Oops: 0011 [#1] SMP 
[   66.449123] Modules linked in: 9p 9pnet fscache ipv6 tun mperf virtio_uio(O) igb_uio(O) cpufreq_userspace uio cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative ghash_clmulni_intel crc32_pclmul crc32c_intel aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul cirrus ttm drm_kms_helper drm sysimgblt sysfillrect serio_raw hid_generic i2c_piix4 microcode pcspkr i2c_core psmouse syscopyarea evdev virtio_balloon intel_agp intel_gtt agpgart processor thermal_sys button vfat fat usb_storage ohci_hcd squashfs loop overlayfs raid10 raid456 async_pq async_xor xor async_memcpy async_raid6_recov usbhid hid raid6_pq async_tx raid1 raid0 multipath linear md_mod pata_acpi ata_generic virtio_net floppy virtio_blk ata_piix 8139cp virtio_pci 8139too virtio_ring virtio mii
[   66.450021] CPU 2 
[   66.450021] Pid: 0, comm: swapper/2 Tainted: G           O 3.9.2-1-amd64-vyatta #1 Bochs Bochs
[   66.450021] RIP: 0010:[<ffff88007c80a7c0>]  [<ffff88007c80a7c0>] 0xffff88007c80a7bf
[   66.450021] RSP: 0018:ffff88007fd03e90  EFLAGS: 00010292
[   66.450021] RAX: ffff88007c80a7c0 RBX: ffff88007fd0e520 RCX: 0000000000000000
[   66.450021] RDX: ffff88007c80a7b0 RSI: 0000000000000286 RDI: ffff88007c80a7b8
[   66.450021] RBP: ffffffff8183a980 R08: 0000000000000001 R09: 0000000000000001
[   66.450021] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88007d3be010
[   66.450021] R13: ffff88007d37f200 R14: ffff88007fd0e550 R15: 0000000000000246
[   66.450021] FS:  0000000000000000(0000) GS:ffff88007fd00000(0000) knlGS:0000000000000000
[   66.450021] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.450021] CR2: ffff88007c80a7c0 CR3: 0000000079c75000 CR4: 00000000000407e0
[   66.450021] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   66.450021] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   66.450021] Process swapper/2 (pid: 0, threadinfo ffff88007d3be000, task ffff88007d37f200)
[   66.450021] Stack:
[   66.450021]  ffffffff810d37a7 0000000000000002 ffff88007c80a7b0 0000000000000000
[   66.450021]  0000000000000000 000000000000000a ffff880079de1c08 ffff88007fd0e100
[   66.450021]  0000000000000048 0000000000000001 0000000000000009 0000000000000100
[   66.450021] Call Trace:
[   66.450021]  <IRQ> 
[   66.450021]  [<ffffffff810d37a7>] ? rcu_process_callbacks+0x237/0x600
[   66.450021]  [<ffffffff8105d9f1>] ? __do_softirq+0xe1/0x270
[   66.450021]  [<ffffffff8105dc85>] ? irq_exit+0xb5/0xc0
[   66.450021]  [<ffffffff81039fe8>] ? smp_apic_timer_interrupt+0x68/0xa0
[   66.450021]  [<ffffffff814e1ddd>] ? apic_timer_interrupt+0x6d/0x80
[   66.450021]  <EOI> 
[   66.450021]  [<ffffffff81042152>] ? native_safe_halt+0x2/0x10
[   66.450021]  [<ffffffff8101e1ef>] ? default_idle+0x3f/0xf0
[   66.450021]  [<ffffffff8101db48>] ? cpu_idle+0x88/0xd0
[   66.450021]  [<ffffffff814d5d4a>] ? start_secondary+0x211/0x216
[   66.450021] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 a7 80 7c 00 88 ff ff b0 a7 80 7c 00 88 ff ff <c0> a7 80 7c 00 88 ff ff c0 a7 80 7c 00 88 ff ff 80 73 14 37 00 
[   66.450021] RIP  [<ffff88007c80a7c0>] 0xffff88007c80a7bf
[   66.450021]  RSP <ffff88007fd03e90>
[   66.450021] CR2: ffff88007c80a7c0
[   66.450021] ---[ end trace 443568eed084994b ]---
[   66.450021] Kernel panic - not syncing: Fatal exception in interrupt
[   66.450021] drm_kms_helper: panic occurred, switching back to text console
[   66.450021] ------------[ cut here ]------------
[   66.450021] WARNING: at drivers/gpu/drm/drm_crtc.c:82 drm_warn_on_modeset_not_all_locked+0x58/0x70 [drm]()
[   66.450021] Hardware name: Bochs
[   66.450021] Modules linked in: 9p 9pnet fscache ipv6 tun mperf virtio_uio(O) igb_uio(O) cpufreq_userspace uio cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative ghash_clmulni_intel crc32_pclmul crc32c_intel aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul cirrus ttm drm_kms_helper drm sysimgblt sysfillrect serio_raw hid_generic i2c_piix4 microcode pcspkr i2c_core psmouse syscopyarea evdev virtio_balloon intel_agp intel_gtt agpgart processor thermal_sys button vfat fat usb_storage ohci_hcd squashfs loop overlayfs raid10 raid456 async_pq async_xor xor async_memcpy async_raid6_recov usbhid hid raid6_pq async_tx raid1 raid0 multipath linear md_mod pata_acpi ata_generic virtio_net floppy virtio_blk ata_piix 8139cp virtio_pci 8139too virtio_ring virtio mii
[   66.450021] Pid: 0, comm: swapper/2 Tainted: G      D    O 3.9.2-1-amd64-vyatta #1
[   66.450021] Call Trace:
[   66.450021]  <IRQ>  [<ffffffff8105574b>] ? warn_slowpath_common+0x7b/0xc0
[   66.450021]  [<ffffffffa025d398>] ? drm_warn_on_modeset_not_all_locked+0x58/0x70 [drm]
[   66.450021]  [<ffffffffa02a301b>] ? drm_fb_helper_restore_fbdev_mode+0x1b/0x70 [drm_kms_helper]
[   66.450021]  [<ffffffffa02a3177>] ? drm_fb_helper_panic+0x77/0xa0 [drm_kms_helper]
[   66.450021]  [<ffffffff8107e426>] ? notifier_call_chain+0x46/0x70
[   66.450021]  [<ffffffff8107e45d>] ? __atomic_notifier_call_chain+0xd/0x20
[   66.450021]  [<ffffffff814dd0cf>] ? panic+0xf3/0x1e3
[   66.450021]  [<ffffffff8101804f>] ? oops_end+0xef/0xf0
[   66.450021]  [<ffffffff81047f2d>] ? no_context+0x12d/0x2e0
[   66.450021]  [<ffffffff81048733>] ? __do_page_fault+0xe3/0x400
[   66.450021]  [<ffffffff81086d04>] ? set_task_cpu+0x84/0x160
[   66.450021]  [<ffffffff8109202c>] ? enqueue_task_fair+0x7ec/0xb90
[   66.450021]  [<ffffffff81081bef>] ? resched_task+0x1f/0x70
[   66.450021]  [<ffffffff81081ca5>] ? check_preempt_curr+0x65/0x90
[   66.450021]  [<ffffffff8108672d>] ? ttwu_do_wakeup+0x3d/0x100
[   66.450021]  [<ffffffff81048a74>] ? do_page_fault+0x24/0x60
[   66.450021]  [<ffffffff814e0c48>] ? async_page_fault+0x28/0x30
[   66.450021]  [<ffffffff810d37a7>] ? rcu_process_callbacks+0x237/0x600
[   66.450021]  [<ffffffff8105d9f1>] ? __do_softirq+0xe1/0x270
[   66.450021]  [<ffffffff8105dc85>] ? irq_exit+0xb5/0xc0
[   66.450021]  [<ffffffff81039fe8>] ? smp_apic_timer_interrupt+0x68/0xa0
[   66.450021]  [<ffffffff814e1ddd>] ? apic_timer_interrupt+0x6d/0x80
[   66.450021]  <EOI>  [<ffffffff81042152>] ? native_safe_halt+0x2/0x10
[   66.450021]  [<ffffffff8101e1ef>] ? default_idle+0x3f/0xf0
[   66.450021]  [<ffffffff8101db48>] ? cpu_idle+0x88/0xd0
[   66.450021]  [<ffffffff814d5d4a>] ? start_secondary+0x211/0x216
[   66.450021] ---[ end trace 443568eed084994c ]---
[   66.450021] ------------[ cut here ]------------
[   66.450021] WARNING: at drivers/gpu/drm/drm_crtc.c:84 drm_fb_helper_restore_fbdev_mode+0x1b/0x70 [drm_kms_helper]()
[   66.450021] Hardware name: Bochs
[   66.450021] Modules linked in: 9p 9pnet fscache ipv6 tun mperf virtio_uio(O) igb_uio(O) cpufreq_userspace uio cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative ghash_clmulni_intel crc32_pclmul crc32c_intel aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul cirrus ttm drm_kms_helper drm sysimgblt sysfillrect serio_raw hid_generic i2c_piix4 microcode pcspkr i2c_core psmouse syscopyarea evdev virtio_balloon intel_agp intel_gtt agpgart processor thermal_sys button vfat fat usb_storage ohci_hcd squashfs loop overlayfs raid10 raid456 async_pq async_xor xor async_memcpy async_raid6_recov usbhid hid raid6_pq async_tx raid1 raid0 multipath linear md_mod pata_acpi ata_generic virtio_net floppy virtio_blk ata_piix 8139cp virtio_pci 8139too virtio_ring virtio mii
[   66.450021] Pid: 0, comm: swapper/2 Tainted: G      D W  O 3.9.2-1-amd64-vyatta #1
[   66.450021] Call Trace:
[   66.450021]  <IRQ>  [<ffffffff8105574b>] ? warn_slowpath_common+0x7b/0xc0
[   66.450021]  [<ffffffffa02a301b>] ? drm_fb_helper_restore_fbdev_mode+0x1b/0x70 [drm_kms_helper]
[   66.450021]  [<ffffffffa02a3177>] ? drm_fb_helper_panic+0x77/0xa0 [drm_kms_helper]
[   66.450021]  [<ffffffff8107e426>] ? notifier_call_chain+0x46/0x70
[   66.450021]  [<ffffffff8107e45d>] ? __atomic_notifier_call_chain+0xd/0x20
[   66.450021]  [<ffffffff814dd0cf>] ? panic+0xf3/0x1e3
[   66.450021]  [<ffffffff8101804f>] ? oops_end+0xef/0xf0
[   66.450021]  [<ffffffff81047f2d>] ? no_context+0x12d/0x2e0
[   66.450021]  [<ffffffff81048733>] ? __do_page_fault+0xe3/0x400
[   66.450021]  [<ffffffff81086d04>] ? set_task_cpu+0x84/0x160
[   66.450021]  [<ffffffff8109202c>] ? enqueue_task_fair+0x7ec/0xb90
[   66.450021]  [<ffffffff81081bef>] ? resched_task+0x1f/0x70
[   66.450021]  [<ffffffff81081ca5>] ? check_preempt_curr+0x65/0x90
[   66.450021]  [<ffffffff8108672d>] ? ttwu_do_wakeup+0x3d/0x100
[   66.450021]  [<ffffffff81048a74>] ? do_page_fault+0x24/0x60
[   66.450021]  [<ffffffff814e0c48>] ? async_page_fault+0x28/0x30
[   66.450021]  [<ffffffff810d37a7>] ? rcu_process_callbacks+0x237/0x600
[   66.450021]  [<ffffffff8105d9f1>] ? __do_softirq+0xe1/0x270
[   66.450021]  [<ffffffff8105dc85>] ? irq_exit+0xb5/0xc0
[   66.450021]  [<ffffffff81039fe8>] ? smp_apic_timer_interrupt+0x68/0xa0
[   66.450021]  [<ffffffff814e1ddd>] ? apic_timer_interrupt+0x6d/0x80
[   66.450021]  <EOI>  [<ffffffff81042152>] ? native_safe_halt+0x2/0x10
[   66.450021]  [<ffffffff8101e1ef>] ? default_idle+0x3f/0xf0
[   66.450021]  [<ffffffff8101db48>] ? cpu_idle+0x88/0xd0
[   66.450021]  [<ffffffff814d5d4a>] ? start_secondary+0x211/0x216
[   66.450021] ---[ end trace 443568eed084994d ]---
[   66.450021] Rebooting in 60 seconds..


More information about the dri-devel mailing list