[Openchrome-devel] general protection fault on rmmod via

[Ruslan N. Marchenko]

Hi,

As I asked previously on irc - could calling ttm_bo_device_release twice in via_driver_unload be the reason of general protection fault?

Full stack trace is below but what I see (and what hints me) is a double call of ttm_bo_device_release
First in via_driver_unload
drivers/gpu/drm/via/via_drv.c:309:      ttm_bo_device_release(&dev_priv->bdev);

and then in next line, ttm_global_fini is again calling ttm_bo_device_release

drivers/gpu/drm/via/init_ttm.c:58:              ttm_bo_device_release(bdev);

Regards,
Ruslan

[61815.264453] general protection fault: 0000 [#1] PREEMPT SMP 
[61815.264611] Modules linked in: btrfs libcrc32c xor zlib_deflate raid6_pq xt_LOG nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables ipt_ULOG xt_limit xt_conntr
ack xt_multiport iptable_filter xt_REDIRECT xt_tcpudp iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables f2fs mousedev arc4 s
nd_hda_codec_hdmi snd_hda_codec_via snd_hda_intel rt2800pci eeprom_93cx6 snd_seq_midi rt2x00pci snd_seq_midi_event rt2800lib snd_hda_codec snd_rawmidi snd_hwdep via_wdt v
ia_rng via_sdmmc rt2x00lib mmc_core padlock_sha snd_pcm padlock_aes via_cputemp hwmon_vid snd_seq snd_page_alloc mac80211 ir_lirc_codec lirc_dev ir_mce_kbd_decoder ir_sanyo_decoder ir_sony_decoder ir_jvc_decoder ir_rc6_decoder ir_rc5_decoder ir_nec_decoder snd_seq_device snd_timer rc_rc6_mce led_class ite_cir rc_core snd cfg80211 soundcore rfcomm bnep bluetooth viafb rfkill via(-) i2c_algo_bit drm_kms_helper ttm drm loop nfsd auth_rpcgss nfs_acl binfmt_misc nfs lockd sunrpc dns_resolver fscache fuse hid_generic usbhid hid ums_realtek xhci_hcd via_velocity crc_ccitt
[61815.267051] CPU 0 
[61815.267104] Pid: 8297, comm: rmmod Not tainted 3.9.0-rc5+ #55 ZOTAC ZBOXNANO-VD01/ZBOXNANO-VD01
[61815.267164] RIP: 0010:[<ffffffffa01d2c08>]  [<ffffffffa01d2c08>] ttm_bo_device_release+0x98/0x140 [ttm]
[61815.267164] RSP: 0018:ffff88007042be00  EFLAGS: 00010246
[61815.267164] RAX: dead000000200200 RBX: ffff8800770e5ad8 RCX: 00000001802a0014
[61815.267164] RDX: dead000000100100 RSI: ffff8800767c0028 RDI: ffff8800770e5ad8
[61815.267164] RBP: ffff88007042be28 R08: 0000000000000000 R09: 0000000000000001
[61815.267164] R10: ffffea000101e4c0 R11: ffffffffa017b8cb R12: ffff8800767c0058
[61815.267164] R13: ffff8800770e5a80 R14: 0000000000000000 R15: ffff8800767c0080
[61815.267164] FS:  00007fe726a50740(0000) GS:ffff88007bc00000(0000) knlGS:0000000000000000
[61815.267164] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[61815.267164] CR2: 00007fe72635a3e0 CR3: 00000000019fa000 CR4: 00000000000006f0
[61815.267164] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[61815.267164] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[61815.267164] Process rmmod (pid: 8297, threadinfo ffff88007042a000, task ffff880079319700)
[61815.267164] Stack:
[61815.267164]  ffff8800767c0000 ffff8800767c0028 0000000000000000 ffff8800767c0058
[61815.267164]  0000000000000800 ffff88007042be48 ffffffffa01ea59f ffff8800767c0000
[61815.267164]  ffff880078aea000 ffff88007042be88 ffffffffa01e5354 0000000000000000
[61815.267164] Call Trace:
[61815.267164]  [<ffffffffa01ea59f>] ttm_global_fini+0x2f/0x60 [via]
[61815.267164]  [<ffffffffa01e5354>] via_driver_unload+0x174/0x240 [via]
[61815.267164]  [<ffffffffa0176465>] drm_put_dev+0x75/0x220 [drm]
[61815.267164]  [<ffffffffa017879d>] drm_pci_exit+0x5d/0x90 [drm]
[61815.267164]  [<ffffffffa01fc3f3>] via_exit+0x17/0xc24 [via]
[61815.267164]  [<ffffffff81095f72>] sys_delete_module+0x152/0x270
[61815.267164]  [<ffffffff81053684>] ? task_work_run+0xa4/0xe0
[61815.267164]  [<ffffffff815066ae>] ? do_page_fault+0xe/0x10
[61815.267164]  [<ffffffff8150a506>] system_call_fastpath+0x1a/0x1f
[61815.267164] Code: e1 41 be f0 ff ff ff eb b2 66 2e 0f 1f 84 00 00 00 00 00 49 8d 5d 58 48 89 df e8 44 d0 32 e1 49 8b 44 24 08 48 89 df 49 8b 14 24 <48> 89 42 08 48 89 10 48 b8 00 01 10 00 00 00 ad de 49 89 04 24 
[61815.267164] RIP  [<ffffffffa01d2c08>] ttm_bo_device_release+0x98/0x140 [ttm]
[61815.267164]  RSP <ffff88007042be00>
[61815.384209] ---[ end trace a683e782905cff98 ]---