BUG in drivers/gpu/drm/qxl/qxl_display.c

[Christian Hesse]

Hello everybody,

I just started an Arch Linux guest in qemu with qxl display and received this
in syslog:

------------[ cut here ]------------
kernel BUG at drivers/gpu/drm/qxl/qxl_display.c:555!
invalid opcode: 0000 [#1] PREEMPT SMP 
Modules linked in: mousedev ppdev qxl ttm input_leds led_class drm_kms_helper serio_raw pcspkr psmouse nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_meta nf_conntrack_ipv6 nf_defrag_ipv6 drm syscopyarea sysfillrect nf_conntrack_ipv4 nf_defrag_ipv4 sysimgblt nft_ct nf_conntrack i2c_piix4 nft_hash nft_rbtree nf_tables_inet nf_tables_ipv6 nf_tables_ipv4 parport_pc parport evdev acpi_cpufreq mac_hid processor nf_tables nfnetlink sch_fq_codel nfs lockd grace sunrpc fscache ip_tables x_tables ext4 crc16 mbcache jbd2 dm_snapshot dm_bufio squashfs loop isofs nbd dm_mirror dm_region_hash dm_log dm_mod sr_mod cdrom ata_generic pata_acpi atkbd libps2 ata_piix e1000 libata scsi_mod intel_agp intel_gtt floppy i8042 serio button
CPU: 0 PID: 436 Comm: Xorg Not tainted 4.2.5-1-ARCH #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.8.2-20150617_082717-anatol 04/01/2014
task: ffff88007fa13e80 ti: ffff88006e67c000 task.ti: ffff88006e67c000
RIP: 0010:[<ffffffffa04436b5>]  [<ffffffffa04436b5>] qxl_send_monitors_config+0x155/0x170 [qxl]
RSP: 0018:ffff88006e67f678  EFLAGS: 00010246
RAX: ffffc90000658000 RBX: ffff8800745167a0 RCX: 0000000000000001
RDX: ffffc90000652000 RSI: 0000000000000000 RDI: ffff88006e44e000
RBP: ffff88006e67f678 R08: 0000000000000400 R09: 0000000000000300
R10: ffffffff81803df0 R11: ffffffff81803e10 R12: ffffc90000652000
R13: 0000000000000000 R14: ffff88006e44e000 R15: 0000000000000000
FS:  00007f385119a940(0000) GS:ffff88007e200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00007fec114ba000 CR3: 000000006e4f8000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff88006e67f6c8 ffffffffa0443922 ffff88006e6ca200 ffff88006e44e000
 ffff88006e6ca200 ffff8800745167a0 ffff88006e7a3800 ffff88006e7a3b50
 ffff88006e7a3b48 ffff88007f8fc800 ffff88006e67f908 ffffffffa0408a67
Call Trace:
 [<ffffffffa0443922>] qxl_enc_commit+0x102/0x1f0 [qxl]
 [<ffffffffa0408a67>] drm_crtc_helper_set_mode+0x477/0x520 [drm_kms_helper]
 [<ffffffffa0409669>] drm_crtc_helper_set_config+0x929/0xab0 [drm_kms_helper]
 [<ffffffff810baf72>] ? cpuacct_charge+0x52/0x60
 [<ffffffffa036d9d6>] drm_mode_set_config_internal+0x66/0x100 [drm]
 [<ffffffffa04145c2>] restore_fbdev_mode+0xc2/0xf0 [drm_kms_helper]
 [<ffffffffa0416529>] drm_fb_helper_restore_fbdev_mode_unlocked+0x29/0x70 [drm_kms_helper]
 [<ffffffffa0416592>] drm_fb_helper_set_par+0x22/0x40 [drm_kms_helper]
 [<ffffffff813290a6>] fb_set_var+0x236/0x460
 [<ffffffff8107965c>] ? find_next_iomem_res+0x7c/0x130
 [<ffffffff81177fec>] ? zone_statistics+0x7c/0xa0
 [<ffffffff810790f0>] ? release_resource+0x90/0x90
 [<ffffffff8107a038>] ? walk_system_ram_range+0x88/0xf0
 [<ffffffff8131fc92>] fbcon_blank+0x312/0x360
 [<ffffffff81399f73>] do_unblank_screen+0xc3/0x190
 [<ffffffff8139032a>] vt_ioctl+0x50a/0x12e0
 [<ffffffff811b3e68>] ? __slab_free+0x298/0x400
 [<ffffffff811b3f8a>] ? __slab_free+0x3ba/0x400
 [<ffffffff81384475>] tty_ioctl+0x3b5/0xbb0
 [<ffffffff8118d722>] ? unmap_region+0xe2/0x120
 [<ffffffff813cb273>] ? vga_arb_release+0xe3/0x130
 [<ffffffff811e2b65>] do_vfs_ioctl+0x295/0x480
 [<ffffffff811efa54>] ? mntput+0x24/0x40
 [<ffffffff811d25ba>] ? __fput+0x13a/0x1f0
 [<ffffffff811e2dc9>] SyS_ioctl+0x79/0x90
 [<ffffffff8157626e>] entry_SYSCALL_64_fastpath+0x12/0x71
Code: 48 63 c6 48 c7 c7 93 c7 44 a0 48 8d 14 85 00 00 00 00 48 c1 e0 05 48 29 d0 49 01 c3 41 8b 4b 10 41 8b 53 0c e8 1d 36 f2 ff eb 8f <0f> 0b 41 8b 4b 10 41 8b 53 0c 31 f6 e9 72 ff ff ff 31 f6 e9 6b 
RIP  [<ffffffffa04436b5>] qxl_send_monitors_config+0x155/0x170 [qxl]
 RSP <ffff88006e67f678>
---[ end trace 6bc75cd149ee4bae ]---

-- 
main(a){char*c=/*    Schoene Gruesse                         */"B?IJj;MEH"
"CX:;",b;for(a/*    Chris           get my mail address:    */=0;b=c[a++];)
putchar(b-1/(/*               gcc -o sig sig.c && ./sig    */b/42*2-3)*42);}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20151127/478e8362/attachment-0001.sig>