https://bugzilla.kernel.org/show_bug.cgi?id=194731
Bug ID: 194731 Summary: drm general protection fault in drm_atomic_init Product: Drivers Version: 2.5 Kernel Version: 4.10.0 Hardware: x86-64 OS: Linux Tree: Mainline Status: NEW Severity: high Priority: P1 Component: Video(DRI - non Intel) Assignee: drivers_video-dri@kernel-bugs.osdl.org Reporter: janpieter.sollie@dommel.be Regression: No
I modified the drm_atomic.c a bit to be more verbose. the drm_init calls a general protection fault when allocating my second GPU(does it work this way?) of the amdgpu module. afterwards, the system is unable to allocate more kernel memory. init does not even manage to reboot, I can not do sudo without segfault dmesg: [ 77.946291] [drm] Cannot find any crtc or sizes - going 1024x768 [ 77.946575] [drm] fb mappable at 0xC0CCB000 [ 77.946576] [drm] vram apper at 0xC0000000 [ 77.946577] [drm] size 786432 [ 77.946578] [drm] fb depth is 24 [ 77.946578] [drm] pitch is 1024 [ 77.950389] kcalloc called [ 77.950390] kcalloc2 called [ 77.950433] kcalloc called [ 77.950444] general protection fault: 0000 [#1] SMP [ 77.950445] Modules linked in: amdkfd amdgpu(O+) amdttm(O) amdkcl(O) ipt_MASQUERADE nf_nat_masquerade_ipv4 xt_nat iptable_nat nf_nat_ipv4 nf_nat l2tp_ppp l2tp_netlink l2tp_core ip6_udp_tunnel udp_tunnel pppoe pppox ppp_generic slhc deflate cmac af_key w83627ehf hwmon_vid k10temp fam15h_power i2c_piix4 pcspkr [ 77.950462] CPU: 16 PID: 5094 Comm: kworker/16:2 Tainted: G O 4.10.0-rc8 #12 [ 77.950463] Hardware name: Supermicro H8DG6/H8DGi/H8DG6/H8DGi, BIOS 2.0a 01/09/2012 [ 77.950470] Workqueue: events work_for_cpu_fn [ 77.950471] task: ffff88183c027000 task.stack: ffffc90020cfc000 [ 77.950476] RIP: 0010:__kmalloc+0x6f/0x100 [ 77.950477] RSP: 0018:ffffc90020cff6b0 EFLAGS: 00010286 [ 77.950478] RAX: 0000000000000000 RBX: ffff8818362628ff RCX: 0000000000000897 [ 77.950479] RDX: 0000000000000896 RSI: 0000000000000000 RDI: 0000000000019b70 [ 77.950479] RBP: ffffc90020cff6d0 R08: ffff88183fc19b70 R09: ffffffff81417df1 [ 77.950480] R10: 0000000000000300 R11: 0000000000000000 R12: ff88183626296000 [ 77.950481] R13: ffff88083f803a00 R14: 00000000014080c0 R15: ffff88183602b238 [ 77.950483] FS: 0000000000000000(0000) GS:ffff88183fc00000(0000) knlGS:0000000000000000 [ 77.950484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.950485] CR2: 00005590d5ce93d8 CR3: 0000000001c11000 CR4: 00000000000406e0 [ 77.950485] Call Trace: [ 77.950492] drm_atomic_state_init+0x81/0xf0 [ 77.950494] drm_atomic_state_alloc+0x53/0x80 [ 77.950497] drm_fb_helper_pan_display+0xf4/0x2a0 [ 77.950501] fb_pan_display+0xd6/0x170 [ 77.950502] bit_update_start+0x24/0x60 [ 77.950504] fbcon_switch+0x3e2/0x670 [ 77.950507] redraw_screen+0x15d/0x220 [ 77.950510] ? tty_do_resize+0x4d/0xa0 [ 77.950512] vc_do_resize+0x4c3/0x4f0 [ 77.950513] vc_resize+0x1a/0x20 [ 77.950515] fbcon_init+0x40b/0x660 [ 77.950516] visual_init+0xce/0x130 [ 77.950517] do_bind_con_driver+0x1c1/0x3a0 [ 77.950519] do_take_over_console+0x113/0x180 [ 77.950520] do_fbcon_takeover+0x51/0xb0 [ 77.950522] fbcon_event_notify+0x75a/0x880 [ 77.950525] notifier_call_chain+0x44/0x70 [ 77.950526] __blocking_notifier_call_chain+0x4e/0x80 [ 77.950528] blocking_notifier_call_chain+0x11/0x20 [ 77.950529] fb_notifier_call_chain+0x16/0x20 [ 77.950531] register_framebuffer+0x200/0x340 [ 77.950533] drm_fb_helper_initial_config+0x201/0x390
piece of code that prints the "kcalloc(2) called": drm_atomic_state_init(struct drm_device *dev, struct drm_atomic_state *state) { kref_init(&(state->ref));
/* TODO legacy paths should maybe do a better job about * setting this appropriately? */ state->allow_modeset = true;
state->crtcs = kcalloc(dev->mode_config.num_crtc, sizeof(struct __drm_crtcs_state), GFP_KERNEL); printk("kcalloc called \n"); if (!(state->crtcs)) goto fail; state->planes = kcalloc(dev->mode_config.num_total_plane, sizeof(struct __drm_planes_state), GFP_KERNEL); printk("kcalloc2 called \n"); if (!(state->planes)) goto fail; state->dev = dev;
DRM_DEBUG_ATOMIC("Allocated atomic state %p\n", state);
return 0; fail: printk("fail called \n"); drm_atomic_state_default_release(state); return -ENOMEM; } EXPORT_SYMBOL(drm_atomic_state_init);