Revision 595cb5e0b832a3e100cbbdefef797b0c27bf725a authored by Kim Phillips on 21 October 2021, 15:30:06 UTC, committed by Dave Airlie on 21 October 2021, 19:52:12 UTC
This reverts commit aae74ff9caa8de9a45ae2e46068c417817392a26,
since it prevents my AMD Milan system from booting, with:
[ 27.189558] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 27.197506] #PF: supervisor write access in kernel mode
[ 27.203333] #PF: error_code(0x0002) - not-present page
[ 27.209064] PGD 0 P4D 0
[ 27.211885] Oops: 0002 [#1] PREEMPT SMP NOPTI
[ 27.216744] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.0-rc6+ #15
[ 27.223928] Hardware name: AMD Corporation ETHANOL_X/ETHANOL_X, BIOS RXM1006B 08/20/2021
[ 27.232955] RIP: 0010:run_timer_softirq+0x38b/0x4a0
[ 27.238397] Code: 4c 89 f7 e8 37 27 ac 00 49 c7 46 08 00 00 00 00 49 8b 04 24 48 85 c0 74 71 4d 8b 3c 24 4d 89 7e 08 66 90 49 8b 07 49 8b 57 08 <48> 89 02 48 85 c0 74 04 48 89 50 08 49 8b 77 18 41 f6 47 22 20 4c
[ 27.259350] RSP: 0018:ffffc42d00003ee8 EFLAGS: 00010086
[ 27.265176] RAX: dead000000000122 RBX: 0000000000000000 RCX: 0000000000000101
[ 27.273134] RDX: 0000000000000000 RSI: 0000000000000087 RDI: 0000000000000001
[ 27.281084] RBP: ffffc42d00003f70 R08: 0000000000000000 R09: 00000000000003eb
[ 27.289043] R10: ffffa0860cb300d0 R11: ffffa0c44de290b0 R12: ffffc42d00003ef8
[ 27.297002] R13: 00000000fffef200 R14: ffffa0c44de18dc0 R15: ffffa0867a882350
[ 27.304961] FS: 0000000000000000(0000) GS:ffffa0c44de00000(0000) knlGS:0000000000000000
[ 27.313988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.320396] CR2: 0000000000000000 CR3: 000000014569c001 CR4: 0000000000770ef0
[ 27.328346] PKRU: 55555554
[ 27.331359] Call Trace:
[ 27.334073] <IRQ>
[ 27.336314] ? __queue_work+0x420/0x420
[ 27.340589] ? lapic_next_event+0x21/0x30
[ 27.345060] ? clockevents_program_event+0x8f/0xe0
[ 27.350402] __do_softirq+0xfb/0x2db
[ 27.354388] irq_exit_rcu+0x98/0xd0
[ 27.358275] sysvec_apic_timer_interrupt+0xac/0xd0
[ 27.363620] </IRQ>
[ 27.365955] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 27.371685] RIP: 0010:cpuidle_enter_state+0xcc/0x390
[ 27.377292] Code: 3d 01 79 0a 50 e8 44 ed 77 ff 49 89 c6 0f 1f 44 00 00 31 ff e8 f5 f8 77 ff 80 7d d7 00 0f 85 e6 01 00 00 fb 66 0f 1f 44 00 00 <45> 85 ff 0f 88 17 01 00 00 49 63 c7 4c 2b 75 c8 48 8d 14 40 48 8d
[ 27.398243] RSP: 0018:ffffffffb0e03dc8 EFLAGS: 00000246
[ 27.404069] RAX: ffffa0c44de00000 RBX: 0000000000000001 RCX: 000000000000001f
[ 27.412028] RDX: 0000000000000000 RSI: ffffffffb0bafc1f RDI: ffffffffb0bbdb81
[ 27.419986] RBP: ffffffffb0e03e00 R08: 00000006549f8f3f R09: ffffffffb1065200
[ 27.427935] R10: ffffa0c44de27ae4 R11: ffffa0c44de27ac4 R12: ffffa0c5634cb000
[ 27.435894] R13: ffffffffb1065200 R14: 00000006549f8f3f R15: 0000000000000001
[ 27.443854] ? cpuidle_enter_state+0xbb/0x390
[ 27.448712] cpuidle_enter+0x2e/0x40
[ 27.452695] call_cpuidle+0x23/0x40
[ 27.456584] do_idle+0x1f0/0x270
[ 27.460181] cpu_startup_entry+0x20/0x30
[ 27.464553] rest_init+0xd4/0xe0
[ 27.468149] arch_call_rest_init+0xe/0x1b
[ 27.472619] start_kernel+0x6bc/0x6e2
[ 27.476764] x86_64_start_reservations+0x24/0x26
[ 27.481912] x86_64_start_kernel+0x75/0x79
[ 27.486477] secondary_startup_64_no_verify+0xb0/0xbb
[ 27.492111] Modules linked in: kvm_amd(+) kvm ipmi_si(+) ipmi_devintf rapl wmi_bmof ipmi_msghandler input_leds ccp k10temp mac_hid sch_fq_codel msr ip_tables x_tables autofs4 btrfs blake2b_generic zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear ast i2c_algo_bit drm_vram_helper drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul ghash_clmulni_intel syscopyarea aesni_intel sysfillrect crypto_simd sysimgblt fb_sys_fops cryptd hid_generic cec nvme ahci usbhid drm e1000e nvme_core hid libahci i2c_piix4 wmi
[ 27.551789] CR2: 0000000000000000
[ 27.555482] ---[ end trace 897987dfe93dccc6 ]---
[ 27.560630] RIP: 0010:run_timer_softirq+0x38b/0x4a0
[ 27.566069] Code: 4c 89 f7 e8 37 27 ac 00 49 c7 46 08 00 00 00 00 49 8b 04 24 48 85 c0 74 71 4d 8b 3c 24 4d 89 7e 08 66 90 49 8b 07 49 8b 57 08 <48> 89 02 48 85 c0 74 04 48 89 50 08 49 8b 77 18 41 f6 47 22 20 4c
[ 27.587021] RSP: 0018:ffffc42d00003ee8 EFLAGS: 00010086
[ 27.592848] RAX: dead000000000122 RBX: 0000000000000000 RCX: 0000000000000101
[ 27.600808] RDX: 0000000000000000 RSI: 0000000000000087 RDI: 0000000000000001
[ 27.608765] RBP: ffffc42d00003f70 R08: 0000000000000000 R09: 00000000000003eb
[ 27.616716] R10: ffffa0860cb300d0 R11: ffffa0c44de290b0 R12: ffffc42d00003ef8
[ 27.624673] R13: 00000000fffef200 R14: ffffa0c44de18dc0 R15: ffffa0867a882350
[ 27.632624] FS: 0000000000000000(0000) GS:ffffa0c44de00000(0000) knlGS:0000000000000000
[ 27.641650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.648159] CR2: 0000000000000000 CR3: 000000014569c001 CR4: 0000000000770ef0
[ 27.656119] PKRU: 55555554
[ 27.659133] Kernel panic - not syncing: Fatal exception in interrupt
[ 29.030411] Shutting down cpus with NMI
[ 29.034699] Kernel Offset: 0x2e600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 29.046790] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
Since unreliable, found by bisecting for KASAN's use-after-free in
enqueue_timer+0x4f/0x1e0, where the timer callback is called.
Reported-by: Kim Phillips <kim.phillips@amd.com>
Signed-off-by: Kim Phillips <kim.phillips@amd.com>
Fixes: aae74ff9caa8 ("drm/ast: Add detect function support")
Link: https://lore.kernel.org/lkml/0f7871be-9ca6-5ae4-3a40-5db9a8fb2365@amd.com/
Cc: Ainux <ainux.wang@gmail.com>
Cc: Thomas Zimmermann <tzimmermann@suse.de>
Cc: David Airlie <airlied@redhat.com>
Cc: David Airlie <airlied@linux.ie>
Cc: Daniel Vetter <daniel@ffwll.ch>
Cc: sterlingteng@gmail.com
Cc: chenhuacai@kernel.org
Cc: Chuck Lever III <chuck.lever@oracle.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Borislav Petkov <bp@suse.de>
Cc: Jon Grimm <jon.grimm@amd.com>
Cc: dri-devel <dri-devel@lists.freedesktop.org>
Cc: linux-kernel <linux-kernel@vger.kernel.org>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20211021153006.92983-1-kim.phillips@amd.com
1 parent 7e1c544
| File | Mode | Size |
|---|---|---|
| damon | ||
| kasan | ||
| kfence | ||
| Kconfig | -rw-r--r-- | 28.3 KB |
| Kconfig.debug | -rw-r--r-- | 5.6 KB |
| Makefile | -rw-r--r-- | 4.7 KB |
| backing-dev.c | -rw-r--r-- | 27.3 KB |
| balloon_compaction.c | -rw-r--r-- | 8.2 KB |
| bootmem_info.c | -rw-r--r-- | 3.4 KB |
| cleancache.c | -rw-r--r-- | 9.8 KB |
| cma.c | -rw-r--r-- | 15.4 KB |
| cma.h | -rw-r--r-- | 1.4 KB |
| cma_debug.c | -rw-r--r-- | 4.5 KB |
| cma_sysfs.c | -rw-r--r-- | 2.4 KB |
| compaction.c | -rw-r--r-- | 83.5 KB |
| debug.c | -rw-r--r-- | 8.2 KB |
| debug_page_ref.c | -rw-r--r-- | 1.4 KB |
| debug_vm_pgtable.c | -rw-r--r-- | 38.0 KB |
| dmapool.c | -rw-r--r-- | 13.6 KB |
| early_ioremap.c | -rw-r--r-- | 6.7 KB |
| fadvise.c | -rw-r--r-- | 5.3 KB |
| failslab.c | -rw-r--r-- | 1.4 KB |
| filemap.c | -rw-r--r-- | 111.4 KB |
| frontswap.c | -rw-r--r-- | 14.2 KB |
| gup.c | -rw-r--r-- | 86.0 KB |
| gup_test.c | -rw-r--r-- | 5.6 KB |
| gup_test.h | -rw-r--r-- | 938 bytes |
| highmem.c | -rw-r--r-- | 19.4 KB |
| hmm.c | -rw-r--r-- | 16.7 KB |
| huge_memory.c | -rw-r--r-- | 85.5 KB |
| hugetlb.c | -rw-r--r-- | 176.8 KB |
| hugetlb_cgroup.c | -rw-r--r-- | 21.5 KB |
| hugetlb_vmemmap.c | -rw-r--r-- | 13.0 KB |
| hugetlb_vmemmap.h | -rw-r--r-- | 1.1 KB |
| hwpoison-inject.c | -rw-r--r-- | 2.6 KB |
| init-mm.c | -rw-r--r-- | 1.6 KB |
| internal.h | -rw-r--r-- | 20.8 KB |
| interval_tree.c | -rw-r--r-- | 3.1 KB |
| io-mapping.c | -rw-r--r-- | 993 bytes |
| ioremap.c | -rw-r--r-- | 1.2 KB |
| khugepaged.c | -rw-r--r-- | 59.3 KB |
| kmemleak.c | -rw-r--r-- | 56.5 KB |
| ksm.c | -rw-r--r-- | 88.4 KB |
| list_lru.c | -rw-r--r-- | 14.1 KB |
| maccess.c | -rw-r--r-- | 9.1 KB |
| madvise.c | -rw-r--r-- | 32.4 KB |
| mapping_dirty_helpers.c | -rw-r--r-- | 10.5 KB |
| memblock.c | -rw-r--r-- | 60.1 KB |
| memcontrol.c | -rw-r--r-- | 192.2 KB |
| memfd.c | -rw-r--r-- | 7.9 KB |
| memory-failure.c | -rw-r--r-- | 58.9 KB |
| memory.c | -rw-r--r-- | 148.3 KB |
| memory_hotplug.c | -rw-r--r-- | 66.2 KB |
| mempolicy.c | -rw-r--r-- | 74.9 KB |
| mempool.c | -rw-r--r-- | 15.9 KB |
| memremap.c | -rw-r--r-- | 14.4 KB |
| memtest.c | -rw-r--r-- | 2.8 KB |
| migrate.c | -rw-r--r-- | 85.7 KB |
| mincore.c | -rw-r--r-- | 7.0 KB |
| mlock.c | -rw-r--r-- | 22.4 KB |
| mm_init.c | -rw-r--r-- | 5.3 KB |
| mmap.c | -rw-r--r-- | 101.7 KB |
| mmap_lock.c | -rw-r--r-- | 6.2 KB |
| mmu_gather.c | -rw-r--r-- | 8.5 KB |
| mmu_notifier.c | -rw-r--r-- | 35.0 KB |
| mmzone.c | -rw-r--r-- | 2.2 KB |
| mprotect.c | -rw-r--r-- | 17.7 KB |
| mremap.c | -rw-r--r-- | 27.8 KB |
| msync.c | -rw-r--r-- | 2.8 KB |
| nommu.c | -rw-r--r-- | 44.5 KB |
| oom_kill.c | -rw-r--r-- | 31.5 KB |
| page-writeback.c | -rw-r--r-- | 86.7 KB |
| page_alloc.c | -rw-r--r-- | 262.5 KB |
| page_counter.c | -rw-r--r-- | 6.8 KB |
| page_ext.c | -rw-r--r-- | 11.1 KB |
| page_idle.c | -rw-r--r-- | 5.2 KB |
| page_io.c | -rw-r--r-- | 11.2 KB |
| page_isolation.c | -rw-r--r-- | 9.2 KB |
| page_owner.c | -rw-r--r-- | 15.9 KB |
| page_poison.c | -rw-r--r-- | 2.5 KB |
| page_reporting.c | -rw-r--r-- | 10.3 KB |
| page_reporting.h | -rw-r--r-- | 1.6 KB |
| page_vma_mapped.c | -rw-r--r-- | 8.7 KB |
| pagewalk.c | -rw-r--r-- | 15.5 KB |
| percpu-internal.h | -rw-r--r-- | 6.6 KB |
| percpu-km.c | -rw-r--r-- | 3.2 KB |
| percpu-stats.c | -rw-r--r-- | 5.9 KB |
| percpu-vm.c | -rw-r--r-- | 11.7 KB |
| percpu.c | -rw-r--r-- | 100.9 KB |
| pgalloc-track.h | -rw-r--r-- | 1.3 KB |
| pgtable-generic.c | -rw-r--r-- | 5.6 KB |
| process_vm_access.c | -rw-r--r-- | 8.2 KB |
| ptdump.c | -rw-r--r-- | 4.0 KB |
| readahead.c | -rw-r--r-- | 19.5 KB |
| rmap.c | -rw-r--r-- | 67.9 KB |
| rodata_test.c | -rw-r--r-- | 1.3 KB |
| secretmem.c | -rw-r--r-- | 5.5 KB |
| shmem.c | -rw-r--r-- | 107.8 KB |
| shuffle.c | -rw-r--r-- | 4.7 KB |
| shuffle.h | -rw-r--r-- | 1.2 KB |
| slab.c | -rw-r--r-- | 106.5 KB |
| slab.h | -rw-r--r-- | 17.3 KB |
| slab_common.c | -rw-r--r-- | 33.3 KB |
| slob.c | -rw-r--r-- | 18.2 KB |
| slub.c | -rw-r--r-- | 152.8 KB |
| sparse-vmemmap.c | -rw-r--r-- | 15.7 KB |
| sparse.c | -rw-r--r-- | 26.0 KB |
| swap.c | -rw-r--r-- | 31.6 KB |
| swap_cgroup.c | -rw-r--r-- | 5.1 KB |
| swap_slots.c | -rw-r--r-- | 9.2 KB |
| swap_state.c | -rw-r--r-- | 24.0 KB |
| swapfile.c | -rw-r--r-- | 96.4 KB |
| truncate.c | -rw-r--r-- | 25.0 KB |
| usercopy.c | -rw-r--r-- | 9.5 KB |
| userfaultfd.c | -rw-r--r-- | 17.6 KB |
| util.c | -rw-r--r-- | 26.6 KB |
| vmacache.c | -rw-r--r-- | 2.7 KB |
| vmalloc.c | -rw-r--r-- | 100.2 KB |
| vmpressure.c | -rw-r--r-- | 13.8 KB |
| vmscan.c | -rw-r--r-- | 133.4 KB |
| vmstat.c | -rw-r--r-- | 54.2 KB |
| workingset.c | -rw-r--r-- | 21.4 KB |
| z3fold.c | -rw-r--r-- | 47.0 KB |
| zbud.c | -rw-r--r-- | 18.4 KB |
| zpool.c | -rw-r--r-- | 11.5 KB |
| zsmalloc.c | -rw-r--r-- | 61.0 KB |
| zswap.c | -rw-r--r-- | 38.9 KB |
Computing file changes ...
