BUG in drivers/gpu/drm/qxl/qxl_display.c

[Christian Hesse]

Christian Hesse <list at eworm.de> on Fri, 2015/11/27 15:46:
> Hello everybody,
> 
> I just started an Arch Linux guest in qemu with qxl display and received
> this in syslog:

And the same with Linux 4.3.3:

------------[ cut here ]------------
kernel BUG at drivers/gpu/drm/qxl/qxl_display.c:563!
invalid opcode: 0000 [#1] PREEMPT SMP 
Modules linked in: mousedev ppdev qxl ttm drm_kms_helper input_leds led_class psmouse pcspkr serio_raw drm syscopyarea sysfillrect nft_reject_inet sysimgblt nf_reject_ipv4 fb_sys_fops nf_          reject_ipv6 nft_reject nft_meta nf_conntrack_ipv6 nf_defrag_ipv6 i2c_piix4 nf_conntrack_ipv4 nf_defrag_ipv4 nft_ct nf_conntrack nft_hash nft_rbtree nf_tables_inet nf_tables_ipv6 nf_tables_ipv4 parport_pc acpi_cpufreq parport evdev processor mac_hid nf_tables nfnetlink sch_fq_codel nfs lockd grace sunrpc fscache ip_tables x_tables ext4 crc16 mbcache jbd2 dm_snapshot dm_bufio squashfs loop isofs nbd dm_mirror dm_region_hash dm_log dm_mod sr_mod cdrom ata_generic pata_acpi atkbd libps2 floppy ata_piix i8042 serio intel_agp intel_gtt e1000 libata scsi_mod button
CPU: 0 PID: 452 Comm: Xorg Not tainted 4.3.3-1-ARCH #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.0-20151117_093733-anatol 04/01/2014
task: ffff88007fab0000 ti: ffff880069cac000 task.ti: ffff880069cac000
RIP: 0010:[<ffffffffa0456795>]  [<ffffffffa0456795>] qxl_send_monitors_config+0x155/0x170 [qxl]
RSP: 0018:ffff880069caf708  EFLAGS: 00010246
RAX: ffffc90000674000 RBX: ffff88007ab17fa0 RCX: 0000000000000001
RDX: ffffc9000066e000 RSI: 0000000000000000 RDI: ffff880069df9000
RBP: ffff880069caf708 R08: 0000000000000400 R09: 0000000000000300
R10: afb504000afb5041 R11: 0000000000000000 R12: ffffc9000066e000
R13: 0000000000000000 R14: ffff880069df9000 R15: 0000000000000000
FS:  00007f910ae91940(0000) GS:ffff88007e200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 000055b2854f49f8 CR3: 000000006fbe0000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff880069caf750 ffffffffa0456a02 ffff88007f848d00 ffff880069df9000
 ffff88007ab17fa0 ffff880069db1000 ffff880069db1350 ffff880069db1348
 ffff880069db2800 ffff880069caf990 ffffffffa043aa78 ffffffffa0457497
Call Trace:
 [<ffffffffa0456a02>] qxl_enc_commit+0x102/0x1f0 [qxl]
 [<ffffffffa043aa78>] drm_crtc_helper_set_mode+0x428/0x4d0 [drm_kms_helper]
 [<ffffffffa0457497>] ? qxl_bo_move_notify+0x17/0x50 [qxl]
 [<ffffffff811ba7a2>] ? __kmalloc+0x212/0x270
 [<ffffffffa043b67f>] drm_crtc_helper_set_config+0xa2f/0xbb0 [drm_kms_helper]
 [<ffffffffa03a8642>] drm_mode_set_config_internal+0x62/0x100 [drm]
 [<ffffffffa0446a23>] restore_fbdev_mode+0xb3/0x110 [drm_kms_helper]
 [<ffffffffa04489b5>] drm_fb_helper_restore_fbdev_mode_unlocked+0x25/0x70 [drm_kms_helper]
 [<ffffffffa0448a2d>] drm_fb_helper_set_par+0x2d/0x50 [drm_kms_helper]
 [<ffffffff81334ae6>] fb_set_var+0x236/0x460
 [<ffffffff811679b2>] ? __alloc_pages_nodemask+0x182/0x960
 [<ffffffff8107a2bc>] ? find_next_iomem_res+0x7c/0x130
 [<ffffffff81079d60>] ? release_resource+0x90/0x90
 [<ffffffff8107ac88>] ? walk_system_ram_range+0x88/0xf0
 [<ffffffff8132b78f>] fbcon_blank+0x30f/0x350
 [<ffffffff813a5aa3>] do_unblank_screen+0xc3/0x190
 [<ffffffff8139bf9a>] vt_ioctl+0x50a/0x12e0
 [<ffffffff811bba97>] ? kfree+0x147/0x150
 [<ffffffff811f815c>] ? mntput_no_expire+0x2c/0x1b0
 [<ffffffff813900c1>] tty_ioctl+0x361/0xc10
 [<ffffffff811db48e>] ? ____fput+0xe/0x10
 [<ffffffff81091178>] ? task_work_run+0x78/0x90
 [<ffffffff810039f6>] ? prepare_exit_to_usermode+0xd6/0x100
 [<ffffffff811eb5f5>] do_vfs_ioctl+0x295/0x480
 [<ffffffff81196115>] ? do_munmap+0x335/0x400
 [<ffffffff81091074>] ? task_work_add+0x44/0x60
 [<ffffffff811db4d7>] ? fput+0x47/0x90
 [<ffffffff811eb859>] SyS_ioctl+0x79/0x90
 [<ffffffff81583d2e>] entry_SYSCALL_64_fastpath+0x12/0x71
Code: 48 63 c6 48 c7 c7 93 f7 45 a0 48 8d 14 85 00 00 00 00 48 c1 e0 05 48 29 d0 49 01 c3 41 8b 4b 10 41 8b 53 0c e8 1d b4 f4 ff eb 8f <0f> 0b 41 8b 4b 10 41 8b 53 0c 31 f6 e9 72 ff ff ff

RIP  [<ffffffffa0456795>] qxl_send_monitors_config+0x155/0x170 [qxl]
 RSP <ffff880069caf708>
---[ end trace 0a680fadc3a287f8 ]---

-- 
main(a){char*c=/*    Schoene Gruesse                         */"B?IJj;MEH"
"CX:;",b;for(a/*    Chris           get my mail address:    */=0;b=c[a++];)
putchar(b-1/(/*               gcc -o sig sig.c && ./sig    */b/42*2-3)*42);}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20151217/131a5b23/attachment.sig>