https://bugzilla.kernel.org/show_bug.cgi?id=46471

Summary: udl causes panic on X exit or xrandr action Product: Drivers Version: 2.5 Kernel Version: 3.5.3 Platform: All OS/Version: Linux Tree: Mainline Status: NEW Severity: high Priority: P1 Component: Video(DRI - non Intel) AssignedTo: drivers_video-dri@kernel-bugs.osdl.org ReportedBy: jh+kbugs@daria.co.uk Regression: No

The DRM UDL driver causes kernel panics / lockups on X termination and other X related activities, such as xrandr rotation. The following log is from the standard mainline 3.5.3 tree (using the standard ArchLinux config, hence the kernel designation). This IS a mainline kernel. Machine is an Atom 1.6Mhz board with 1GB RAM and is normally outstandingly stable. The following was captured using netconsole.

[ 116.957651] open /dev/fb1 user=1 fb_info=f42b1800 count=1 [ 117.031397] [drm] write mode info 144 [ 120.984895] [drm] write mode info 144 [ 121.532829] [drm] write mode info 144 [ 212.828371] BUG: unable to handle kernel paging request at 00100104 [ 212.828572] IP: [<c01f2d27>] __activate_page+0x97/0x130 [ 212.828720] *pde = 00000000 [ 212.828805] Oops: 0002 [#1] PREEMPT SMP [ 212.828934] Modules linked in: netconsole configfs udl drm_usb syscopyarea sysfillrect sysimgblt hwmon_vid i915 i2c_algo_bit drm_kms_helper snd_hda_codec_realtek gpio_ich snd_hda_intel snd_hda_codec drm i2c_i801 lpc_ich psmouse i2c_core intel_agp intel_gtt agpgart ppdev snd_hwdep snd_pcm snd_page_alloc snd_timer snd parport_pc parport serio_raw evdev coretemp pcspkr soundcore e1000e acpi_cpufreq mperf video processor microcode button nfs nfs_acl auth_rpcgss fscache lockd sunrpc autofs4 sd_mod pata_acpi ata_generic uhci_hcd ata_piix libata scsi_mod ehci_hcd usbcore usb_common ext4 crc16 jbd2 mbcache [ 212.830830] [ 212.830851] Pid: 455, comm: X Not tainted 3.5.3-ARCH #1 MSI A9830IMS/A9830IMS [ 212.830851] EIP: 0060:[<c01f2d27>] EFLAGS: 00010007 CPU: 0 [ 212.830851] EIP is at __activate_page+0x97/0x130 [ 212.830851] EAX: 00200200 EBX: f7464060 ECX: ffffffff EDX: 00100100 [ 212.830851] ESI: f6435da8 EDI: ffffffff EBP: f433be30 ESP: f433be18 [ 212.830851] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 [ 212.830851] CR0: 80050033 CR2: 00100104 CR3: 354dd000 CR4: 000007c0 [ 212.830851] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000 [ 212.830851] DR6: ffff0ff0 DR7: 00000400 [ 212.830851] Process X (pid: 455, ti=f433a000 task=f5508aa0 task.ti=f433a000) [ 212.830851] Stack: [ 212.830851] 00000002 00000001 00000000 c0638080 00000001 c01f2c90 f433be58 c01f34b2 [ 212.830851] c0638080 00000000 c01f2c90 00000246 f6cde600 f7464200 f6cde600 f5434510 [ 212.830851] f433be68 c01f38e6 f7464200 b7144000 f433be74 c01f394b f7464200 f433bed8 [ 212.830851] Call Trace: [ 212.830851] [<c01f2c90>] ? pagevec_move_tail_fn+0x70/0x70 [ 212.830851] [<c01f34b2>] pagevec_lru_move_fn+0x92/0xe0 [ 212.830851] [<c01f2c90>] ? pagevec_move_tail_fn+0x70/0x70 [ 212.830851] [<c01f38e6>] activate_page+0x86/0xb0 [ 212.830851] [<c01f394b>] mark_page_accessed+0x3b/0x50 [ 212.830851] [<c02097b4>] unmap_single_vma+0x404/0x5f0 [ 212.830851] [<c020a26c>] unmap_vmas+0x4c/0x90 [ 212.830851] [<c020d5d3>] unmap_region+0x63/0xb0 [ 212.830851] [<c03259b1>] ? fb_ioctl+0x1/0x60 [ 212.830851] [<c020ee66>] do_munmap+0x1d6/0x2e0 [ 212.830851] [<c020efad>] vm_munmap+0x3d/0x60 [ 212.830851] [<c020fbbd>] sys_munmap+0x1d/0x20 [ 212.830851] [<c04cc0df>] sysenter_do_call+0x12/0x28 [ 212.830851] Code: 03 89 55 ec 19 d2 83 e2 02 c1 e8 0e 83 e0 01 83 f8 01 89 f0 19 ff 81 cf 00 fc ff ff 89 f9 e8 31 a6 03 00 8b 53 14 89 f9 8b 43 18 <89> 42 04 89 10 8b 55 ec c7 43 14 00 01 10 00 c7 43 18 00 02 20 [ 212.830851] EIP: [<c01f2d27>] __activate_page+0x97/0x130 SS:ESP 0068:f433be18 [ 212.830851] CR2: 0000000000100104 [ 212.830851] ---[ end trace 338b2b653abfa9ff ]--- [ 212.830851] note: X[455] exited with preempt_count 3 [ 212.859675] BUG: scheduling while atomic: X/455/0x00000004 [ 212.859693] Modules linked in: netconsole configfs udl drm_usb syscopyarea sysfillrect sysimgblt hwmon_vid i915 i2c_algo_bit drm_kms_helper snd_hda_codec_realtek gpio_ich snd_hda_intel snd_hda_codec drm i2c_i801 lpc_ich psmouse i2c_core intel_agp intel_gtt agpgart ppdev snd_hwdep snd_pcm snd_page_alloc snd_timer snd parport_pc parport serio_raw evdev coretemp pcspkr soundcore e1000e acpi_cpufreq mperf video processor microcode button nfs nfs_acl auth_rpcgss fscache lockd sunrpc autofs4 sd_mod pata_acpi ata_generic uhci_hcd ata_piix libata scsi_mod ehci_hcd usbcore usb_common ext4 crc16 jbd2 mbcache [ 212.860313] Pid: 455, comm: X Tainted: G D 3.5.3-ARCH #1 [ 212.860336] Call Trace: [ 212.860365] [<c04bec37>] __schedule_bug+0x52/0x5e [ 212.860396] [<c04c4f42>] __schedule+0x712/0x7b0 [ 212.860419] [<c04cc80e>] ? smp_apic_timer_interrupt+0x5e/0x8d [ 212.860441] [<c04c66e9>] ? apic_timer_interrupt+0x31/0x38 [ 212.860473] [<c04c50d3>] schedule+0x23/0x60 [ 212.860495] [<c04c5a05>] rwsem_down_failed_common+0x95/0xe0 [ 212.860516] [<c04c5a82>] rwsem_down_read_failed+0x12/0x14 [ 212.860538] [<c02f1f67>] call_rwsem_down_read_failed+0x7/0xc [ 212.860568] [<c04c4282>] ? down_read+0x12/0x20 [ 212.860589] [<c0195f82>] acct_collect+0x42/0x170 [ 212.860607] [<c013c51a>] do_exit+0x5ea/0x800 [ 212.860627] [<c04be775>] ? printk+0x3d/0x3f [ 212.860656] [<c0139d4b>] ? kmsg_dump+0xbb/0xd0 [ 212.860676] [<c04c70e9>] oops_end+0x89/0xd0 [ 212.860698] [<c04be0ff>] no_context+0x18d/0x195 [ 212.860721] [<c04be41a>] __bad_area_nosemaphore+0x134/0x13c [ 212.860754] [<c01ece24>] ? zone_watermark_ok+0x34/0x40 [ 212.860773] [<c04c8b90>] ? spurious_fault+0xbd/0xbd [ 212.860789] [<c04be439>] bad_area_nosemaphore+0x17/0x19 [ 212.860804] [<c04c8fd0>] do_page_fault+0x440/0x510 [ 212.860829] [<c01ef159>] ? __alloc_pages_nodemask+0x139/0x770 [ 212.860846] [<c04c8b90>] ? spurious_fault+0xbd/0xbd [ 212.860860] [<c04c6917>] error_code+0x67/0x6c [ 212.860877] [<c01f2d27>] ? __activate_page+0x97/0x130 [ 212.860900] [<c01f2c90>] ? pagevec_move_tail_fn+0x70/0x70 [ 212.860915] [<c01f34b2>] pagevec_lru_move_fn+0x92/0xe0 [ 212.860930] [<c01f2c90>] ? pagevec_move_tail_fn+0x70/0x70 [ 212.860945] [<c01f38e6>] activate_page+0x86/0xb0 [ 212.860967] [<c01f394b>] mark_page_accessed+0x3b/0x50 [ 212.860984] [<c02097b4>] unmap_single_vma+0x404/0x5f0 [ 212.861001] [<c020a26c>] unmap_vmas+0x4c/0x90 [ 212.861016] [<c020d5d3>] unmap_region+0x63/0xb0 [ 212.861039] [<c03259b1>] ? fb_ioctl+0x1/0x60 [ 212.861055] [<c020ee66>] do_munmap+0x1d6/0x2e0 [ 212.861070] [<c020efad>] vm_munmap+0x3d/0x60 [ 212.861085] [<c020fbbd>] sys_munmap+0x1d/0x20 [ 212.861107] [<c04cc0df>] sysenter_do_call+0x12/0x28 [ 218.363337] ------------[ cut here ]------------ [ 218.363337] WARNING: at kernel/watchdog.c:242 watchdog_overflow_callback+0xac/0xd0() [ 218.363337] Hardware name: A9830IMS [ 218.363337] Watchdog detected hard LOCKUP on cpu 0 [ 218.363337] Modules linked in:[ 218.363337] netconsole configfs udl drm_usb syscopyarea sysfillrect sysimgblt hwmon_vid i915 i2c_algo_bit drm_kms_helper snd_hda_codec_realtek gpio_ich snd_hda_intel snd_hda_codec drm i2c_i801 lpc_ich psmouse i2c_core intel_agp intel_gtt agpgart ppdev snd_hwdep snd_pcm snd_page_alloc snd_timer snd parport_pc parport serio_raw evdev coretemp pcspkr soundcore e1000e acpi_cpufreq mperf video processor microcode button nfs nfs_acl auth_rpcgss fscache lockd sunrpc autofs4 sd_mod pata_acpi ata_generic uhci_hcd ata_piix libata scsi_mod ehci_hcd usbcore usb_common ext4 crc16 jbd2 mbcache Pid: 68, comm: jbd2/sda2-8 Tainted: G D W 3.5.3-ARCH #1 [ 218.363337] Call Trace: [ 218.363337] [<c0136902>] warn_slowpath_common+0x72/0xa0 [ 218.363337] [<c01aba5c>] ? watchdog_overflow_callback+0xac/0xd0 [ 218.363337] [<c01aba5c>] ? watchdog_overflow_callback+0xac/0xd0 [ 218.363337] [<c01ab9b0>] ? touch_nmi_watchdog+0x70/0x70 [ 218.363337] [<c01369d3>] warn_slowpath_fmt+0x33/0x40 [ 218.363337] [<c01aba5c>] watchdog_overflow_callback+0xac/0xd0 [ 218.363337] [<c01e1006>] __perf_event_overflow+0xa6/0x280 [ 218.363337] [<c01e1ae5>] perf_event_overflow+0x15/0x20 [ 218.363337] [<c0115da4>] intel_pmu_handle_irq+0x154/0x2c0 [ 218.363337] [<c02c9e62>] ? drive_stat_acct+0xc2/0x190 [ 218.363337] [<c02cc4d2>] ? submit_bio+0x72/0x100 [ 218.363337] [<f83ddfde>] ? ata_sff_exec_command+0x1e/0x30 [libata] [ 218.363337] [<c04c7afb>] perf_event_nmi_handler+0x1b/0x20 [ 218.363337] [<c04c7291>] nmi_handle.isra.0+0x41/0x60 [ 218.363337] [<c04c7392>] do_nmi+0xe2/0x400 [ 218.363337] [<c01e8a7d>] ? unlock_page+0x1d/0x20 [ 218.363337] [<c02610e9>] ? __block_write_full_page+0x229/0x370 [ 218.363337] [<c04c69d4>] nmi_stack_correct+0x2f/0x34 [ 218.363337] [<c04c5b0a>] ? _raw_spin_lock_irqsave+0x3a/0x50 [ 218.363337] [<c01f3492>] pagevec_lru_move_fn+0x72/0xe0 [ 218.363337] [<c01f2c90>] ? pagevec_move_tail_fn+0x70/0x70 [ 218.363337] [<c01f3aca>] lru_add_drain_cpu+0x7a/0xc0 [ 218.363337] [<c01f3bce>] lru_add_drain+0x1e/0x40 [ 218.363337] [<c01f3c00>] __pagevec_release+0x10/0x30 [ 218.363337] [<c01f087e>] write_cache_pages+0x1fe/0x430 [ 218.363337] [<c01f0400>] ? bdi_set_max_ratio+0x80/0x80 [ 218.363337] [<f8049a99>] ? jbd2_journal_put_journal_head+0xe9/0x1c0 [jbd2] [ 218.363337] [<f8043fed>] ? __jbd2_journal_remove_checkpoint+0x4d/0x170 [jbd2] [ 218.363337] [<c016b9dd>] ? update_curr+0x13d/0x210 [ 218.363337] [<c0169092>] ? sched_clock_local+0xb2/0x1a0 [ 218.363337] [<f8044189>] ? journal_clean_one_cp_list+0x79/0xc0 [jbd2] [ 218.363337] [<c01f0ae7>] generic_writepages+0x37/0x60 [ 218.363337] [<f8041abe>] jbd2_journal_commit_transaction+0x37e/0x1730 [jbd2] [ 218.363337] [<c0169ed5>] ? __dequeue_entity+0x25/0x40 [ 218.363337] [<c01026f1>] ? __switch_to+0xe1/0x290 [ 218.363337] [<c0161911>] ? finish_task_switch+0x41/0xc0 [ 218.363337] [<f8046ce9>] kjournald2+0x99/0x200 [jbd2] [ 218.363337] [<c01566b0>] ? abort_exclusive_wait+0x80/0x80 [ 218.363337] [<f8046c50>] ? commit_timeout+0x10/0x10 [jbd2] [ 218.363337] [<c0155f72>] kthread+0x72/0x80 [ 218.363337] [<c0155f00>] ? kthread_freezable_should_stop+0x50/0x50 [ 218.363337] [<c04cc67e>] kernel_thread_helper+0x6/0x10 [ 218.363337] ---[ end trace 338b2b653abfaa00 ]--- [ 212.863327] ------------[ cut here ]------------ [ 212.863327] WARNING: at kernel/watchdog.c:242 watchdog_overflow_callback+0xac/0xd0() [ 212.863327] Hardware name: A9830IMS [ 212.863327] Watchdog detected hard LOCKUP on cpu 1 [ 212.863327] Modules linked in:[ 212.863327] netconsole configfs udl drm_usb syscopyarea sysfillrect sysimgblt hwmon_vid i915 i2c_algo_bit drm_kms_helper snd_hda_codec_realtek gpio_ich snd_hda_intel snd_hda_codec drm i2c_i801 lpc_ich psmouse i2c_core intel_agp intel_gtt agpgart ppdev snd_hwdep snd_pcm snd_page_alloc snd_timer snd parport_pc parport serio_raw evdev coretemp pcspkr soundcore e1000e acpi_cpufreq mperf video processor microcode button nfs[ 212.863327] [<c01f378f>] __lru_cache_add+0x6f/0x90 [ 212.863327] [<c01f3983>] lru_cache_add_lru+0x23/0x40 [ 212.863327] [<c0211f0c>] page_add_new_anon_rmap+0x8c/0xa0 [ 212.863327] [<c020b204>] handle_pte_fault+0x724/0x880 [ 212.863327] [<c012e0ba>] ? pte_alloc_one+0x3a/0x50 [ 212.863327] [<c020b4c7>] handle_mm_fault+0x167/0x1f0 [ 212.863327] [<c04c8b90>] ? spurious_fault+0xbd/0xbd [ 212.863327] [<c04c8ca0>] do_page_fault+0x110/0x510 [ 212.863327] [<c020fab6>] ? do_mmap_pgoff+0x1e6/0x2d0 [ 212.863327] [<c0200ba0>] ? vm_mmap_pgoff+0x70/0x90 [ 212.863327] [<c020e581>] ? sys_mmap_pgoff+0xb1/0x140 [ 212.863327] [<c04c8b90>] ? spurious_fault+0xbd/0xbd [ 212.863327] [<c04c6917>] error_code+0x67/0x6c [ 212.863327] ---[ end trace 338b2b653abfaa01 ]--- nfs_acl auth_rpcgss fscache lockd sunrpc autofs4 sd_mod pata_acpi ata_generic uhci_hcd ata_piix libata scsi_mod ehci_hcd usbcore usb_common ext4 crc16 jbd2 mbcache Pid: 90, comm: systemd-journal Tainted: G D W 3.5.3-ARCH #1 [ 212.863327] Call Trace: [ 212.863327] [<c0136902>] warn_slowpath_common+0x72/0xa0 [ 212.863327] [<c01aba5c>] ? watchdog_overflow_callback+0xac/0xd0 [ 212.863327] [<c01aba5c>] ? watchdog_overflow_callback+0xac/0xd0 [ 212.863327] [<c01ab9b0>] ? touch_nmi_watchdog+0x70/0x70 [ 212.863327] [<c01369d3>] warn_slowpath_fmt+0x33/0x40 [ 212.863327] [<c01aba5c>] watchdog_overflow_callback+0xac/0xd0 [ 212.863327] [<c01e1006>] __perf_event_overflow+0xa6/0x280 [ 212.863327] [<c01e1ae5>] perf_event_overflow+0x15/0x20 [ 212.863327] [<c0115da4>] intel_pmu_handle_irq+0x154/0x2c0 [ 212.863327] [<c01ef159>] ? __alloc_pages_nodemask+0x139/0x770 [ 212.863327] [<c01f234b>] ? __do_page_cache_readahead+0xbb/0x210 [ 212.863327] [<c012fcb5>] ? kmap_atomic_prot+0xc5/0xe0 [ 212.863327] [<c04c7afb>] perf_event_nmi_handler+0x1b/0x20 [ 212.863327] [<c04c7291>] nmi_handle.isra.0+0x41/0x60 [ 212.863327] [<c04c7392>] do_nmi+0xe2/0x400 [ 212.863327] [<c01e8aa1>] ? find_lock_page+0x21/0x70 [ 212.863327] [<c04c69d4>] nmi_stack_correct+0x2f/0x34 [ 212.863327] [<c022007b>] ? ksm_scan_thread+0x8b/0xab0 [ 212.863327] [<c01e00d8>] ? perf_adjust_freq_unthr_context.part.72+0x158/0x180 [ 212.863327] [<c04c5b0a>] ? _raw_spin_lock_irqsave+0x3a/0x50 [ 212.863327] [<c01f3492>] pagevec_lru_move_fn+0x72/0xe0 [ 212.863327] [<c01f2b70>] ? pagevec_lookup+0x30/0x30 [ 212.863327] [<c01f3514>] __pagevec_lru_add+0x14/0x20