[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

Alex Deucher  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #6 from Alex Deucher  ---
(In reply to Frederik Himpe from comment #5)
> Will this patch be included in Linux 3.18?

Yes.  It's already upstream:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8efe82ca908400785253c8f0dfcf301e6bd93488

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

--- Comment #5 from Frederik Himpe  ---
Will this patch be included in Linux 3.18?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

--- Comment #4 from Frederik Himpe  ---
I can confirm that this patch fixes the problem: Linux 3.17.2 boots fine with
KMS and laptop-mode-tools enabled.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

--- Comment #3 from Alex Deucher  ---
Created attachment 108842
  --> https://bugs.freedesktop.org/attachment.cgi?id=108842&action=edit
possible fix

Does this patch help?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

--- Comment #2 from Frederik Himpe  ---
Could this be the same bug?: https://bugzilla.kernel.org/show_bug.cgi?id=83611

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

--- Comment #1 from Ben Hutchings  ---
(In reply to Frederik Himpe from comment #0)
> [6.440842] BUG: unable to handle kernel NULL pointer dereference at
> 0090
> [6.441017] IP: [] dce6_bandwidth_update+0x43/0x100
> [radeon]
> [6.441143] PGD 0 
> [6.441241] Oops:  [#1] SMP 
> [6.441380] Modules linked in: snd_hda_codec_hdmi x86_pkg_temp_thermal
> evdev intel_powerclamp snd_hda_codec_realtek iTCO_wdt intel_rapl
> iTCO_vendor_support snd_hda_codec_generic acpi_cpufreq(-) coretemp kvm_intel
> kvm crc32_pclmul ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul
> glue_helper ablk_helper psmouse cryptd pcspkr serio_raw snd_hda_intel(+)
> snd_hda_controller sr_mod sg cdrom radeon(+) snd_hda_codec ttm snd_hwdep
> drm_kms_helper snd_pcm nuvoton_cir video intel_smartconnect drm rc_core
> battery tpm_tis i2c_algo_bit tpm i2c_i801 snd_timer ehci_pci ehci_hcd snd
> i2c_core xhci_hcd mei_me soundcore processor button mei usbcore lpc_ich
> ie31200_edac usb_common mfd_core edac_core thermal_sys fuse autofs4 btrfs
> xor raid6_pq dm_mod netconsole configfs sd_mod crc_t10dif crct10dif_generic
> ahci libahci crct10dif_pclmul crct10dif_common crc32c_intel libata scsi_mod
> r8169 mii shpchp
> [6.445512] CPU: 3 PID: 933 Comm: laptop_mode Not tainted 3.17.2.1 #1
[...]
> [6.447200]  [] ? radeon_set_dpm_state+0x6e/0xe0
> [radeon]
> [6.447255]  [] ? kernfs_fop_write+0xe3/0x160
> [6.447307]  [] ? vfs_write+0xb2/0x1f0
[...]

So this is triggered by laptop_mode writing to the dpm_state attribute. 
Presumably that doesn't happen if the driver fails to initialise at boot (as it
will with modeset=0) and is reloaded after booting.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-- next part --
An HTML attachment was scrubbed...
URL: 

[Bug 85771] unable to handle kernel NULL pointer dereference in dce6_bandwidth_update

[bugzilla-dae...@freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=85771

Bug ID: 85771
   Summary: unable to handle kernel NULL pointer dereference in
dce6_bandwidth_update
   Product: DRI
   Version: XOrg git
  Hardware: x86-64 (AMD64)
OS: Linux (All)
Status: NEW
  Severity: major
  Priority: medium
 Component: DRM/Radeon
  Assignee: dri-devel at lists.freedesktop.org
  Reporter: fhimpe at telenet.be

When my system boots and switches on KMS for my radeon graphics card, the
screen goes blank and stays like that. I configured netconsole, and could
capture this output with a null pointer dereference:

[5.028256] device-mapper: uevent: version 1.0.3
[5.028454] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised:
dm-devel at redhat.com
[5.161378] raid6: sse2x16263 MB/s
[5.229408] raid6: sse2x29678 MB/s
[5.297441] raid6: sse2x4   13655 MB/s
[5.297492] raid6: using algorithm sse2x4 (13655 MB/s)
[5.297543] raid6: using ssse3x2 recovery algorithm
[5.297920] xor: automatically using best checksumming function:
[5.337455]avx   : 28637.000 MB/sec
[5.339874] Btrfs loaded
[5.404045] BTRFS: device fsid 5c6276a1-4ed4-440b-a88c-ef31ff30b9db devid 1
transid 18706 /dev/sdb2
[5.404504] BTRFS: device fsid 8810aab6-9344-48f4-ae25-828e60854b73 devid 1
transid 637 /dev/mapper/debian-root
[5.406878] PM: Starting manual resume from disk
[5.409361] BTRFS info (device dm-0): disk space caching is enabled
[5.414950] BTRFS: detected SSD devices, enabling SSD mode
[5.651353] systemd[1]: RTC configured in localtime, applying delta of 60
minutes to system time.
[5.652742] systemd[1]: systemd 215 running in system mode. (+PAM +AUDIT
+SELINUX +IMA +SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ -SECCOMP -APPARMOR)
[5.653010] systemd[1]: Detected architecture 'x86-64'.
[5.672246] systemd[1]: Inserted module 'autofs4'
[5.672799] systemd[1]: Set hostname to .
[5.815370] systemd[1]: Starting Forward Password Requests to Wall Directory
Watch.
[5.815504] systemd[1]: Started Forward Password Requests to Wall Directory
Watch.
[5.815582] systemd[1]: Starting Remote File Systems (Pre).
[5.816000] systemd[1]: Reached target Remote File Systems (Pre).
[5.816084] systemd[1]: Starting Arbitrary Executable File Formats File
System Automount Point.
[5.816553] systemd[1]: Set up automount Arbitrary Executable File Formats
File System Automount Point.
[5.816636] systemd[1]: Starting Dispatch Password Requests to Console
Directory Watch.
[5.816731] systemd[1]: Started Dispatch Password Requests to Console
Directory Watch.
[5.816812] systemd[1]: Starting Paths.
[5.817201] systemd[1]: Reached target Paths.
[5.817266] systemd[1]: Expecting device dev-mapper-debian\x2dswap.device...
[5.817558] systemd[1]: Expecting device
dev-disk-by\x2duuid-fd7f3585\x2dbe5e\x2d432a\x2da6ad\x2d1ac043d62114.device...
[5.817873] systemd[1]: Expecting device dev-mapper-debian\x2dhome.device...
[5.818164] systemd[1]: Expecting device
dev-disk-by\x2duuid-5c6276a1\x2d4ed4\x2d440b\x2da88c\x2def31ff30b9db.device...
[5.818463] systemd[1]: Starting Root Slice.
[5.827367] systemd[1]: Created slice Root Slice.
[5.827437] systemd[1]: Starting User and Session Slice.
[5.827964] systemd[1]: Created slice User and Session Slice.
[5.828032] systemd[1]: Starting Delayed Shutdown Socket.
[5.828441] systemd[1]: Listening on Delayed Shutdown Socket.
[5.828507] systemd[1]: Starting /dev/initctl Compatibility Named Pipe.
[5.828923] systemd[1]: Listening on /dev/initctl Compatibility Named Pipe.
[5.828990] systemd[1]: Starting Journal Socket (/dev/log).
[5.829398] systemd[1]: Listening on Journal Socket (/dev/log).
[5.829465] systemd[1]: Starting Syslog Socket.
[5.829881] systemd[1]: Listening on Syslog Socket.
[5.829946] systemd[1]: Starting LVM2 metadata daemon socket.
[5.830350] systemd[1]: Listening on LVM2 metadata daemon socket.
[5.830416] systemd[1]: Starting Device-mapper event daemon FIFOs.
[5.831182] systemd[1]: Listening on Device-mapper event daemon FIFOs.
[5.831253] systemd[1]: Starting udev Control Socket.
[5.831652] systemd[1]: Listening on udev Control Socket.
[5.831720] systemd[1]: Starting udev Kernel Socket.
[5.832114] systemd[1]: Listening on udev Kernel Socket.
[5.832181] systemd[1]: Starting Journal Socket.
[5.832585] systemd[1]: Listening on Journal Socket.
[5.832658] systemd[1]: Starting System Slice.
[5.833171] systemd[1]: Created slice System Slice.
[5.833248] systemd[1]: Starting File System Check on Root Device...
[5.833856] systemd[1]: Starting system-systemd\x2dfsck.slice.
[5.834397] systemd[1]: Created slice system-systemd\x2dfsck.slice.
[5.834472] systemd[1]: Starting system-getty.slice.
[5.83501