[tip:x86/mm] x86/oops: Show the correct CS value in show_regs()

2018-11-22 Thread tip-bot for Andy Lutomirski
Commit-ID: d38bc89c72e7235ac889ae64fe7828e2e61a18af Gitweb: https://git.kernel.org/tip/d38bc89c72e7235ac889ae64fe7828e2e61a18af Author: Andy Lutomirski AuthorDate: Wed, 21 Nov 2018 15:11:24 -0800 Committer: Ingo Molnar CommitDate: Thu, 22 Nov 2018 09:23:01 +0100 x86/oops: Show

[tip:x86/mm] x86/oops: Show the correct CS value in show_regs()

2018-11-22 Thread tip-bot for Andy Lutomirski
Commit-ID: d38bc89c72e7235ac889ae64fe7828e2e61a18af Gitweb: https://git.kernel.org/tip/d38bc89c72e7235ac889ae64fe7828e2e61a18af Author: Andy Lutomirski AuthorDate: Wed, 21 Nov 2018 15:11:24 -0800 Committer: Ingo Molnar CommitDate: Thu, 22 Nov 2018 09:23:01 +0100 x86/oops: Show

[PATCH 6/5] x86/fault: Clean up the page fault oops decoder a bit

2018-11-22 Thread Ingo Molnar
* Andy Lutomirski wrote: > One of Linus' favorite hobbies seems to be looking at OOPSes and > decoding the error code in his head. This is not one of my favorite > hobbies :) > > Teach the page fault OOPS hander to decode the error code. If it's > a !USER fault fro

[PATCH 6/5] x86/fault: Clean up the page fault oops decoder a bit

2018-11-22 Thread Ingo Molnar
* Andy Lutomirski wrote: > One of Linus' favorite hobbies seems to be looking at OOPSes and > decoding the error code in his head. This is not one of my favorite > hobbies :) > > Teach the page fault OOPS hander to decode the error code. If it's > a !USER fault fro

[PATCH v2 3/5] x86/oops: Show the correct CS value in show_regs()

2018-11-21 Thread Andy Lutomirski
show_regs() shows the CS in the CPU register instead of the value in regs. This means that we'll probably print "CS: 0010" almost all the time regardless of what was actually in CS when the kernel malfunctioned. This gives a particularly confusing result if we OOPSed due to an implicit

[PATCH v2 3/5] x86/oops: Show the correct CS value in show_regs()

2018-11-21 Thread Andy Lutomirski
show_regs() shows the CS in the CPU register instead of the value in regs. This means that we'll probably print "CS: 0010" almost all the time regardless of what was actually in CS when the kernel malfunctioned. This gives a particularly confusing result if we OOPSed due to an implicit

Re: dcache_readdir NULL inode oops

2018-11-21 Thread Jan Glauber
ri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > > > I'm seeing the following oops reproducible with upstream kernel on > > > > > arm64 > > > > > (ThunderX2): > > > > > > > > [...] > > > > > >

Re: dcache_readdir NULL inode oops

2018-11-21 Thread Jan Glauber
ri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > > > I'm seeing the following oops reproducible with upstream kernel on > > > > > arm64 > > > > > (ThunderX2): > > > > > > > > [...] > > > > > >

Re: dcache_readdir NULL inode oops

2018-11-20 Thread Will Deacon
On Tue, Nov 20, 2018 at 06:28:54PM +, Will Deacon wrote: > On Sat, Nov 10, 2018 at 11:17:03AM +, Jan Glauber wrote: > > On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > > > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > >

Re: dcache_readdir NULL inode oops

2018-11-20 Thread Will Deacon
On Tue, Nov 20, 2018 at 06:28:54PM +, Will Deacon wrote: > On Sat, Nov 10, 2018 at 11:17:03AM +, Jan Glauber wrote: > > On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > > > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > >

Re: dcache_readdir NULL inode oops

2018-11-20 Thread Will Deacon
On Sat, Nov 10, 2018 at 11:17:03AM +, Jan Glauber wrote: > On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > I'm seeing the following oops reproducible with upstream kernel on arm6

Re: dcache_readdir NULL inode oops

2018-11-20 Thread Will Deacon
On Sat, Nov 10, 2018 at 11:17:03AM +, Jan Glauber wrote: > On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > > I'm seeing the following oops reproducible with upstream kernel on arm6

[PATCH 11/13] x86/oops: Show the correct CS value in show_regs()

2018-11-19 Thread Andy Lutomirski
show_regs() shows the CS in the CPU register instead of the value in regs. This means that we'll probably print "CS: 0010" almost all the time regardless of what was actually in CS when the kernel malfunctioned. This gives a particularly confusing result if we OOPSed due to an implicit

[PATCH 11/13] x86/oops: Show the correct CS value in show_regs()

2018-11-19 Thread Andy Lutomirski
show_regs() shows the CS in the CPU register instead of the value in regs. This means that we'll probably print "CS: 0010" almost all the time regardless of what was actually in CS when the kernel malfunctioned. This gives a particularly confusing result if we OOPSed due to an implicit

[PATCH 3.18 44/90] nfsd: Fix an Oops in free_session()

2018-11-19 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 3.18 44/90] nfsd: Fix an Oops in free_session()

2018-11-19 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.4 069/160] nfsd: Fix an Oops in free_session()

2018-11-19 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.4 069/160] nfsd: Fix an Oops in free_session()

2018-11-19 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.14 123/124] nvme-loop: fix kernel oops in case of unhandled command

2018-11-19 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit 11d9ea6f2ca69237d35d6c55755beba3e006b106 upstream. When nvmet_req_init() fails, __nvmet_req_complete() is called to handle the target request via .queue_response(), so

[PATCH 4.14 123/124] nvme-loop: fix kernel oops in case of unhandled command

2018-11-19 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit 11d9ea6f2ca69237d35d6c55755beba3e006b106 upstream. When nvmet_req_init() fails, __nvmet_req_complete() is called to handle the target request via .queue_response(), so

[PATCH 4.14 117/124] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

[PATCH 4.14 117/124] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

[PATCH 4.18 166/171] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

[PATCH 4.18 166/171] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

[PATCH 4.19 198/205] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

[PATCH 4.19 198/205] drm/i915: Dont oops during modeset shutdown after lpe audio deinit

2018-11-19 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ville Syrjälä commit 6a8915d0f8cf323e1beb792a33095cf652db4056 upstream. We deinit the lpe audio device before we call drm_atomic_helper_shutdown(), which means the platform device may already

Re: Oops: 0003 [#1] PREEMPT SMP NOPTI

2018-11-16 Thread Linus Torvalds
On Thu, Nov 15, 2018 at 8:29 PM Kyle Sanderson wrote: > > 2008(!) dual-core Atom box. > [1027541.963573] BUG: unable to handle kernel paging request at > b0428a44 > [1027541.963647] IP: format_decode+0x20/0x3d0 The code decodes to: 0: 55push %rbp 1: 48 8d 2e

Re: Oops: 0003 [#1] PREEMPT SMP NOPTI

2018-11-16 Thread Linus Torvalds
On Thu, Nov 15, 2018 at 8:29 PM Kyle Sanderson wrote: > > 2008(!) dual-core Atom box. > [1027541.963573] BUG: unable to handle kernel paging request at > b0428a44 > [1027541.963647] IP: format_decode+0x20/0x3d0 The code decodes to: 0: 55push %rbp 1: 48 8d 2e

Oops: 0003 [#1] PREEMPT SMP NOPTI

2018-11-15 Thread Kyle Sanderson
wering kernel.perf_event_max_sample_rate to 12000 [1027541.963573] BUG: unable to handle kernel paging request at b0428a44 [1027541.963647] IP: format_decode+0x20/0x3d0 [1027541.963676] PGD 2100c067 P4D 2100c067 PUD 2100d063 PMD 800020e001e1 [1027541.963723] Oops: 0003 [#1] PREEMPT SMP NOPTI [1027541.963752] M

Oops: 0003 [#1] PREEMPT SMP NOPTI

2018-11-15 Thread Kyle Sanderson
wering kernel.perf_event_max_sample_rate to 12000 [1027541.963573] BUG: unable to handle kernel paging request at b0428a44 [1027541.963647] IP: format_decode+0x20/0x3d0 [1027541.963676] PGD 2100c067 P4D 2100c067 PUD 2100d063 PMD 800020e001e1 [1027541.963723] Oops: 0003 [#1] PREEMPT SMP NOPTI [1027541.963752] M

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-15 Thread Oleg Nesterov
On 11/15, Ravi Bangoria wrote: > > There could be a race between task exit and probe unregister: > > exit_mm() > mmput() > __mmput() uprobe_unregister() > uprobe_clear_state() put_uprobe() > delayed_uprobe_remove() delayed_uprobe_remove() > >

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-15 Thread Oleg Nesterov
On 11/15, Ravi Bangoria wrote: > > There could be a race between task exit and probe unregister: > > exit_mm() > mmput() > __mmput() uprobe_unregister() > uprobe_clear_state() put_uprobe() > delayed_uprobe_remove() delayed_uprobe_remove() > >

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Ravi Bangoria
Hi Oleg, On 11/14/18 9:36 PM, Oleg Nesterov wrote: > On 11/14, Ravi Bangoria wrote: >> >> syzbot reported a kernel crash with delayed_uprobe_remove(): >> https://lkml.org/lkml/2018/11/1/1244 >> >> Backtrace mentioned in the link points to a race between process >> exit and uprobe_unregister().

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Ravi Bangoria
Hi Oleg, On 11/14/18 9:36 PM, Oleg Nesterov wrote: > On 11/14, Ravi Bangoria wrote: >> >> syzbot reported a kernel crash with delayed_uprobe_remove(): >> https://lkml.org/lkml/2018/11/1/1244 >> >> Backtrace mentioned in the link points to a race between process >> exit and uprobe_unregister().

[PATCH AUTOSEL 4.19 02/73] netfilter: ipv6: fix oops when defragmenting locally generated fragments

2018-11-14 Thread Sasha Levin
From: Florian Westphal [ Upstream commit 61792b677415b77c8db04991c22966bb8de7603e ] Unlike ipv4 and normal ipv6 defrag, netfilter ipv6 defragmentation did not save/restore skb->dst. This causes oops when handling locally generated ipv6 fragments, as output path needs a valid dst. Repor

[PATCH AUTOSEL 4.19 02/73] netfilter: ipv6: fix oops when defragmenting locally generated fragments

2018-11-14 Thread Sasha Levin
From: Florian Westphal [ Upstream commit 61792b677415b77c8db04991c22966bb8de7603e ] Unlike ipv4 and normal ipv6 defrag, netfilter ipv6 defragmentation did not save/restore skb->dst. This causes oops when handling locally generated ipv6 fragments, as output path needs a valid dst. Repor

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Oleg Nesterov
On 11/14, Ravi Bangoria wrote: > > syzbot reported a kernel crash with delayed_uprobe_remove(): > https://lkml.org/lkml/2018/11/1/1244 > > Backtrace mentioned in the link points to a race between process > exit and uprobe_unregister(). Fix it by locking delayed_uprobe_lock > before calling

Re: [PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Oleg Nesterov
On 11/14, Ravi Bangoria wrote: > > syzbot reported a kernel crash with delayed_uprobe_remove(): > https://lkml.org/lkml/2018/11/1/1244 > > Backtrace mentioned in the link points to a race between process > exit and uprobe_unregister(). Fix it by locking delayed_uprobe_lock > before calling

[PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Ravi Bangoria
syzbot reported a kernel crash with delayed_uprobe_remove(): https://lkml.org/lkml/2018/11/1/1244 Backtrace mentioned in the link points to a race between process exit and uprobe_unregister(). Fix it by locking delayed_uprobe_lock before calling delayed_uprobe_remove() from put_uprobe().

[PATCH] Uprobes: Fix kernel oops with delayed_uprobe_remove()

2018-11-14 Thread Ravi Bangoria
syzbot reported a kernel crash with delayed_uprobe_remove(): https://lkml.org/lkml/2018/11/1/1244 Backtrace mentioned in the link points to a race between process exit and uprobe_unregister(). Fix it by locking delayed_uprobe_lock before calling delayed_uprobe_remove() from put_uprobe().

[PATCH 4.19 273/361] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.19 273/361] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.19 293/361] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.19 293/361] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.18 265/350] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.18 265/350] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.18 285/350] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.18 285/350] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.14 171/222] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.14 171/222] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.14 180/222] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.14 180/222] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.9 118/141] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.9 118/141] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

2018-11-11 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.9 112/141] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

[PATCH 4.9 112/141] nfsd: Fix an Oops in free_session()

2018-11-11 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list

Re: dcache_readdir NULL inode oops

2018-11-10 Thread Jan Glauber
On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > I'm seeing the following oops reproducible with upstream kernel on arm64 > > (ThunderX2): > > [...] > > > It happens after 1-3 hours o

Re: dcache_readdir NULL inode oops

2018-11-10 Thread Jan Glauber
On Fri, Nov 09, 2018 at 03:58:56PM +, Will Deacon wrote: > On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > > I'm seeing the following oops reproducible with upstream kernel on arm64 > > (ThunderX2): > > [...] > > > It happens after 1-3 hours o

Re: dcache_readdir NULL inode oops

2018-11-09 Thread Will Deacon
On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > I'm seeing the following oops reproducible with upstream kernel on arm64 > (ThunderX2): [...] > It happens after 1-3 hours of running 'stress-ng --dev 128'. This testcase > does a scandir of /dev and then calls rando

Re: dcache_readdir NULL inode oops

2018-11-09 Thread Will Deacon
On Fri, Nov 09, 2018 at 02:37:51PM +, Jan Glauber wrote: > I'm seeing the following oops reproducible with upstream kernel on arm64 > (ThunderX2): [...] > It happens after 1-3 hours of running 'stress-ng --dev 128'. This testcase > does a scandir of /dev and then calls rando

dcache_readdir NULL inode oops

2018-11-09 Thread Jan Glauber
Hi Al, I'm seeing the following oops reproducible with upstream kernel on arm64 (ThunderX2): [ 5428.795719] Unable to handle kernel NULL pointer dereference at virtual address 0040 [ 5428.813838] Mem abort info: [ 5428.820721] ESR = 0x9606 [ 5428.828476] Exception class

dcache_readdir NULL inode oops

2018-11-09 Thread Jan Glauber
Hi Al, I'm seeing the following oops reproducible with upstream kernel on arm64 (ThunderX2): [ 5428.795719] Unable to handle kernel NULL pointer dereference at virtual address 0040 [ 5428.813838] Mem abort info: [ 5428.820721] ESR = 0x9606 [ 5428.828476] Exception class

[PATCH 4.4 052/114] drm/nouveau/fbcon: fix oops without fbdev emulation

2018-11-08 Thread Greg Kroah-Hartman
ccurrences of helper.fbdev in the source. I see oops in nouveau_fbcon_accel_save_disable() called from nouveau_fbcon_set_suspend_work() on Linux 3.13 when CONFIG_DRM_FBDEV_EMULATION option is disabled. Signed-off-by: Pavel Roskin Reviewed-by: Daniel Vetter Signed-off-by: Ben Skeggs Signed-off-by: S

[PATCH 4.4 052/114] drm/nouveau/fbcon: fix oops without fbdev emulation

2018-11-08 Thread Greg Kroah-Hartman
ccurrences of helper.fbdev in the source. I see oops in nouveau_fbcon_accel_save_disable() called from nouveau_fbcon_set_suspend_work() on Linux 3.13 when CONFIG_DRM_FBDEV_EMULATION option is disabled. Signed-off-by: Pavel Roskin Reviewed-by: Daniel Vetter Signed-off-by: Ben Skeggs Signed-off-by: S

[PATCH 3.18 039/144] usb: gadget: gadgetfs: fix an oops in ep_write()

2018-11-08 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 42d6cfa0caec4b68a7f17147fbf13a36e94a8bf2 ] We try to free an ERR_PTR on this error path. Fixes: b44be2462dbe ('usb: gadget: gadgetfs: Free memory allocated by memdup_user()')

[PATCH 3.18 039/144] usb: gadget: gadgetfs: fix an oops in ep_write()

2018-11-08 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 42d6cfa0caec4b68a7f17147fbf13a36e94a8bf2 ] We try to free an ERR_PTR on this error path. Fixes: b44be2462dbe ('usb: gadget: gadgetfs: Free memory allocated by memdup_user()')

[PATCH] drm/syncobj: Fix oops on drm_syncobj_find_fence(file_priv, 0, ...).

2018-11-05 Thread Eric Anholt
This broke rendering on V3D, where we almost always have a 0 in-syncobj. Signed-off-by: Eric Anholt Fixes: 48197bc564c7 ("drm: add syncobj timeline support v9") Cc: Chunming Zhou Cc: Christian König --- drivers/gpu/drm/drm_syncobj.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

[PATCH] drm/syncobj: Fix oops on drm_syncobj_find_fence(file_priv, 0, ...).

2018-11-05 Thread Eric Anholt
This broke rendering on V3D, where we almost always have a 0 in-syncobj. Signed-off-by: Eric Anholt Fixes: 48197bc564c7 ("drm: add syncobj timeline support v9") Cc: Chunming Zhou Cc: Christian König --- drivers/gpu/drm/drm_syncobj.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 21:49 +, Roman Gushchin wrote: > On Mon, Oct 29, 2018 at 09:46:54PM +0100, Mike Galbraith wrote: > > > Ah, I have cgroup_disable=memory on the command line, which turns out > > to be why your box doesn't explode, while mine does. > > Yeah, here it is. I'll send the fix

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 21:49 +, Roman Gushchin wrote: > On Mon, Oct 29, 2018 at 09:46:54PM +0100, Mike Galbraith wrote: > > > Ah, I have cgroup_disable=memory on the command line, which turns out > > to be why your box doesn't explode, while mine does. > > Yeah, here it is. I'll send the fix

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 09:46:54PM +0100, Mike Galbraith wrote: > On Mon, 2018-10-29 at 18:54 +, Roman Gushchin wrote: > > > > Hi Mike! > > > > Thank you for the report! > > > > Do you see it reliable every time you boot up the machine? > > Yeah. > > > How do you run kvm? > > My VMs are

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 09:46:54PM +0100, Mike Galbraith wrote: > On Mon, 2018-10-29 at 18:54 +, Roman Gushchin wrote: > > > > Hi Mike! > > > > Thank you for the report! > > > > Do you see it reliable every time you boot up the machine? > > Yeah. > > > How do you run kvm? > > My VMs are

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 09:26:34PM +0100, Michal Hocko wrote: > On Mon 29-10-18 18:54:19, Roman Gushchin wrote: > > On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > > > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 09:26:34PM +0100, Michal Hocko wrote: > On Mon 29-10-18 18:54:19, Roman Gushchin wrote: > > On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > > > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 18:54 +, Roman Gushchin wrote: > > Hi Mike! > > Thank you for the report! > > Do you see it reliable every time you boot up the machine? Yeah. > How do you run kvm? My VMs are full SW/data clones of my i7-4790/openSUSE box. > Is there something special about your

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 18:54 +, Roman Gushchin wrote: > > Hi Mike! > > Thank you for the report! > > Do you see it reliable every time you boot up the machine? Yeah. > How do you run kvm? My VMs are full SW/data clones of my i7-4790/openSUSE box. > Is there something special about your

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Michal Hocko
On Mon 29-10-18 18:54:19, Roman Gushchin wrote: > On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 > > > > 00 00 41 56 48 89 f8 41 55 49

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Michal Hocko
On Mon 29-10-18 18:54:19, Roman Gushchin wrote: > On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 > > > > 00 00 41 56 48 89 f8 41 55 49

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 > > > 00 00 41 56 48 89 f8 41 55 49 89 fe 41 54 49 89 d5 55 49 89 f4 53 48 89 > > > f3 48

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Roman Gushchin
On Mon, Oct 29, 2018 at 05:35:38PM +0100, Mike Galbraith wrote: > On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 > > > 00 00 41 56 48 89 f8 41 55 49 89 fe 41 54 49 89 d5 55 49 89 f4 53 48 89 > > > f3 48

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 00 > > 00 41 56 48 89 f8 41 55 49 89 fe 41 54 49 89 d5 55 49 89 f4 53 48 89 f3 > > 48 0f c1 1f 48 01 f3 48 39 5f 18 48 89 fd 73 17 eb 41 48 89 e8 > > [

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Mike Galbraith
On Mon, 2018-10-29 at 14:20 +0100, Michal Hocko wrote: > > > [4.420976] Code: f3 c3 0f 1f 00 0f 1f 44 00 00 48 85 ff 0f 84 a8 00 00 > > 00 41 56 48 89 f8 41 55 49 89 fe 41 54 49 89 d5 55 49 89 f4 53 48 89 f3 > > 48 0f c1 1f 48 01 f3 48 39 5f 18 48 89 fd 73 17 eb 41 48 89 e8 > > [

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Michal Hocko
irgin source with > config based on the enterprise-ish RT config. > > [4.412732] BUG: unable to handle kernel NULL pointer dereference at > 00f8 > [4.414047] PGD 0 P4D 0 > [4.414769] Oops: 0002 [#1] PREEMPT SMP PTI > [4.415651] CPU: 7 PID: 1 Co

Re: memcg oops: memcg_kmem_charge_memcg()->try_charge()->page_counter_try_charge()->BOOM

2018-10-29 Thread Michal Hocko
irgin source with > config based on the enterprise-ish RT config. > > [4.412732] BUG: unable to handle kernel NULL pointer dereference at > 00f8 > [4.414047] PGD 0 P4D 0 > [4.414769] Oops: 0002 [#1] PREEMPT SMP PTI > [4.415651] CPU: 7 PID: 1 Co

Re: Oops in current tree in i2c

2018-10-29 Thread Benjamin Tissoires
; > >9ee3e06610fd ("HID: i2c-hid: override HID descriptors for certain > > devices") > > > > but that's simply because it's the only thing that seems to touch this > > particular area in this merge window. > > > > The oops looks like this: >

Re: Oops in current tree in i2c

2018-10-29 Thread Benjamin Tissoires
; > >9ee3e06610fd ("HID: i2c-hid: override HID descriptors for certain > > devices") > > > > but that's simply because it's the only thing that seems to touch this > > particular area in this merge window. > > > > The oops looks like this: >

Re: Oops in current tree in i2c

2018-10-28 Thread Hans de Goede
s the only thing that seems to touch this particular area in this merge window. The oops looks like this: BUG: unable to handle kernel paging request at 7a25d598 PGD 0 P4D 0 Oops: [#1] SMP PTI CPU: 1 PID: 888 Comm: systemd-udevd Not tainted 4.19.0-07715-g345671ea0f92 #4

Re: Oops in current tree in i2c

2018-10-28 Thread Hans de Goede
s the only thing that seems to touch this particular area in this merge window. The oops looks like this: BUG: unable to handle kernel paging request at 7a25d598 PGD 0 P4D 0 Oops: [#1] SMP PTI CPU: 1 PID: 888 Comm: systemd-udevd Not tainted 4.19.0-07715-g345671ea0f92 #4

Re: Oops in current tree in i2c

2018-10-27 Thread Linus Torvalds
On Sat, Oct 27, 2018 at 9:08 AM Linus Torvalds wrote: > > I *think* the problem is that the i2c_hid_dmi_desc_override_table[] > isn't terminated by a NULL entry, and I will test that next. Confirmed. That makes my laptop boot cleanly. See commit b59dfdaef173 ("i2c-hid: properly terminate

Re: Oops in current tree in i2c

2018-10-27 Thread Linus Torvalds
On Sat, Oct 27, 2018 at 9:08 AM Linus Torvalds wrote: > > I *think* the problem is that the i2c_hid_dmi_desc_override_table[] > isn't terminated by a NULL entry, and I will test that next. Confirmed. That makes my laptop boot cleanly. See commit b59dfdaef173 ("i2c-hid: properly terminate

Re: Oops in current tree in i2c

2018-10-27 Thread Jiri Kosina
On Sat, 27 Oct 2018, Linus Torvalds wrote: > I *think* the problem is that the i2c_hid_dmi_desc_override_table[] > isn't terminated by a NULL entry, and I will test that next. Hm, that almost certainly is indeed the issue, thanks a lot for reporting it. > What makes me *very* unhappy about

Re: Oops in current tree in i2c

2018-10-27 Thread Jiri Kosina
On Sat, 27 Oct 2018, Linus Torvalds wrote: > I *think* the problem is that the i2c_hid_dmi_desc_override_table[] > isn't terminated by a NULL entry, and I will test that next. Hm, that almost certainly is indeed the issue, thanks a lot for reporting it. > What makes me *very* unhappy about

Oops in current tree in i2c

2018-10-27 Thread Linus Torvalds
cular area in this merge window. The oops looks like this: BUG: unable to handle kernel paging request at 7a25d598 PGD 0 P4D 0 Oops: [#1] SMP PTI CPU: 1 PID: 888 Comm: systemd-udevd Not tainted 4.19.0-07715-g345671ea0f92 #4 Hardware name: Dell Inc. XPS 13 9350/09JHRY, BIOS 1.7.0

Oops in current tree in i2c

2018-10-27 Thread Linus Torvalds
cular area in this merge window. The oops looks like this: BUG: unable to handle kernel paging request at 7a25d598 PGD 0 P4D 0 Oops: [#1] SMP PTI CPU: 1 PID: 888 Comm: systemd-udevd Not tainted 4.19.0-07715-g345671ea0f92 #4 Hardware name: Dell Inc. XPS 13 9350/09JHRY, BIOS 1.7.0

RE: [PATCH] uio: Fix an Oops on load

2018-10-26 Thread Mathias Thore
] uio: Fix an Oops on load CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. I was trying to solve a double free but I introduced a more serious NULL dereference bug. The problem

RE: [PATCH] uio: Fix an Oops on load

2018-10-26 Thread Mathias Thore
] uio: Fix an Oops on load CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. I was trying to solve a double free but I introduced a more serious NULL dereference bug. The problem

[PATCH] uio: Fix an Oops on load

2018-10-26 Thread Dan Carpenter
ust sets info->uio_dev to NULL on the error path so it should solve both the Oops and the double free. Fixes: f019f07ecf6a ("uio: potential double frees if __uio_register_device() fails") Reported-by: Mathias Thore Signed-off-by: Dan Carpenter --- drivers/uio/uio.c | 7 +-- 1 file c

[PATCH] uio: Fix an Oops on load

2018-10-26 Thread Dan Carpenter
ust sets info->uio_dev to NULL on the error path so it should solve both the Oops and the double free. Fixes: f019f07ecf6a ("uio: potential double frees if __uio_register_device() fails") Reported-by: Mathias Thore Signed-off-by: Dan Carpenter --- drivers/uio/uio.c | 7 +-- 1 file c

Re: Regression: OOPs on boot due to "wlcore: Add support for optional wakeirq"

2018-10-25 Thread Tony Lindgren
Hi, * John Stultz [181025 17:15]: > On Thu, Oct 25, 2018 at 10:04 AM, John Stultz wrote: > > Should we check wakeirq before we set the second elements of res[]? > > Here's my first swing at doing the above. It seems to work ok. Let me > know if it looks reasonable and I'll submit it as a

Re: Regression: OOPs on boot due to "wlcore: Add support for optional wakeirq"

2018-10-25 Thread Tony Lindgren
Hi, * John Stultz [181025 17:15]: > On Thu, Oct 25, 2018 at 10:04 AM, John Stultz wrote: > > Should we check wakeirq before we set the second elements of res[]? > > Here's my first swing at doing the above. It seems to work ok. Let me > know if it looks reasonable and I'll submit it as a

<    5   6   7   8   9   10   11   12   13   14   >