#PF: supervisor read access in kernel mode, #PF: error_code(0x0000) - not-present page while building a large project

Bug 206697 Andrew Morton 1 participant 2 messages Mar 2, 2020 – Apr 17, 2020 2 messages not in the archive Memory management

lore

Share & tools

lore

Andrew Morton

author maintainer

2020-03-02 23:03 UTC #2 lore raw

In reply to a message not in the archive

(switched to email. Please respond via emailed reply-to-all, not via the bugzilla web interface).

Quoted 8 lines · On Mon, 02 Mar 2020 21:55:10 +0000 [email protected] wrote:

https://bugzilla.kernel.org/show_bug.cgi?id=206697
--- Comment #2 from Erhard F. ([email protected]) --- Created attachment 287765
--> https://bugzilla.kernel.org/attachment.cgi?id=287765&action=edit
dmesg (kernel 5.6-rc4, Shuttle XPC FS51, Pentium 4)
Same on kernel 5.6-rc4:

Thanks. This looks like a regression in the DRM code. I've added suitable Ccs.

Quoted 56 lines

[...]

[  908.356444] BUG: kernel NULL pointer dereference, address: 00000000
[  908.356670] #PF: supervisor read access in kernel mode
[  908.356823] #PF: error_code(0x0000) - not-present page
[  908.356974] *pde = 00000000 
[  908.357064] Oops: 0000 [#1] SMP
[  908.357163] CPU: 0 PID: 53 Comm: kswapd0 Not tainted 5.6.0-rc4-Pentium4 #1
[  908.357367] Hardware name:  /FS51, BIOS 6.00 PG 12/02/2003
[  908.357535] EIP: __cpa_process_fault+0x205/0x226
[  908.357674] Code: 2d 00 00 00 40 39 d0 76 1f 81 fa ff ff ff bf 76 17 c7 47
10 01 00 00 00 81 c3 00 00 00 40 c1 eb 0c 89 5f 18 31 f6 eb 19 8b 07 <ff> 30 53
68 56 ba 89 c9 e8 f8 68 00 00 0f 0b 83 c4 0c be f2 ff ff
[  908.358228] EAX: 00000000 EBX: 00000000 ECX: 00000001 EDX: 00000000
[  908.358411] ESI: 00000001 EDI: f5e6fd4c EBP: f5e6fcc4 ESP: f5e6fca0
[  908.358598] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010213
[  908.358798] CR0: 80050033 CR2: 00000000 CR3: 00333000 CR4: 000006d0
[  908.358981] Call Trace:
[  908.359062]  ? _raw_spin_lock+0x22/0x2a
[  908.359176]  ? lookup_address+0x1d/0x20
[  908.359289]  __change_page_attr_set_clr+0x85/0x551
[  908.359436]  ? __mutex_unlock_slowpath+0x20/0x1b6
[  908.368244]  ? mutex_unlock+0xb/0xd
[  908.377037]  ? _vm_unmap_aliases.part.0+0x11f/0x127
[  908.385944]  change_page_attr_set_clr+0xdc/0x1af
[  908.394889]  set_pages_array_wb+0x20/0x7b
[  908.403630]  ttm_pages_put+0x22/0x71 [ttm]
[  908.412159]  ttm_page_pool_free+0xf6/0x111 [ttm]
[  908.420492]  ttm_pool_shrink_scan+0x9c/0xd1 [ttm]
[  908.428885]  shrink_slab.constprop.0+0x248/0x38f
[  908.437241]  shrink_node+0x533/0x6f2
[  908.445492]  kswapd+0x4b9/0x62d
[  908.453714]  ? kswapd+0x4b9/0x62d
[  908.461937]  kthread+0xd1/0xd3
[  908.470055]  ? try_to_free_pages+0x3d4/0x3d4
[  908.478143]  ? kthread_delayed_work_timer_fn+0x6a/0x6a
[  908.486242]  ret_from_fork+0x2e/0x38
[  908.494256] Modules linked in: auth_rpcgss nfsv4 dns_resolver nfs lockd

grace sunrpc ctr aes_generic libaes ccm hid_generic usbhid hid rt2500pci eeprom_93cx6 rt2x00pci rt2x00mmio rt2x00lib led_class mac80211 radeon evdev hwmon i2c_algo_bit drm_kms_helper cfbfillrect syscopyarea cfg80211 cfbimgblt sysfillrect sysimgblt fb_sys_fops cfbcopyarea firewire_ohci firewire_core fb rfkill font crc_itu_t 8139too libarc4 mii fbdev sr_mod cdrom ttm thermal fan ohci_pci drm 8250 snd_intel8x0 8250_base serial_core snd_ac97_codec ac97_bus ehci_pci ohci_hcd snd_pcm drm_panel_orientation_quirks ehci_hcd button backlight snd_timer usbcore sis_agp agpgart snd i2c_sis96x usb_common processor soundcore zstd zram zsmalloc

[  908.522107] CR2: 0000000000000000
[  908.531646] ---[ end trace f8cc5b63e4c76d19 ]---
[  908.541190] EIP: __cpa_process_fault+0x205/0x226
[  908.550708] Code: 2d 00 00 00 40 39 d0 76 1f 81 fa ff ff ff bf 76 17 c7 47
10 01 00 00 00 81 c3 00 00 00 40 c1 eb 0c 89 5f 18 31 f6 eb 19 8b 07 <ff> 30 53
68 56 ba 89 c9 e8 f8 68 00 00 0f 0b 83 c4 0c be f2 ff ff
[  908.560958] EAX: 00000000 EBX: 00000000 ECX: 00000001 EDX: 00000000
[  908.571156] ESI: 00000001 EDI: f5e6fd4c EBP: f5e6fcc4 ESP: f5e6fca0
[  908.581412] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010213
[  908.591710] CR0: 80050033 CR2: 00000000 CR3: 00333000 CR4: 000006d0

Andrew Morton

author maintainer

2020-04-17 21:58 UTC #3 lore raw

Quoted 13 lines · On Mon, 2 Mar 2020 15:03:29 -0800 Andrew Morton <[email protected]>…

(switched to email. Please respond via emailed reply-to-all, not via the bugzilla web interface).
Quoted 7 lines · On Mon, 02 Mar 2020 21:55:10 +0000 [email protected] wrote:
https://bugzilla.kernel.org/show_bug.cgi?id=206697
--- Comment #2 from Erhard F. ([email protected]) --- Created attachment 287765
--> https://bugzilla.kernel.org/attachment.cgi?id=287765&action=edit
dmesg (kernel 5.6-rc4, Shuttle XPC FS51, Pentium 4)

Quoted 4 lines

Quoted 1 line
Same on kernel 5.6-rc4:
Thanks. This looks like a regression in the DRM code. I've added suitable Ccs.

Erhard, please let's handle this issue via email, not via the bugzilla interface.

This does appear to be a DRM issue, and it has been reproduced in 5.7-rc1.

Latest update below:

From: [email protected]
To: [email protected]
Subject: [Bug 206697] #PF: supervisor read access in kernel mode, #PF: error_code(0x0000) - not-present page while building a large project
Date: Fri, 17 Apr 2020 07:45:23 +0000

https://bugzilla.kernel.org/show_bug.cgi?id=206697

--- Comment #5 from Erhard F. ([email protected]) ---
Looks mostly the same on kernel 5.7-rc1. The line after kthread+0xd1/0xd3 is different. It was "? try_to_free_pages+0x3d4/0x3d4" on 5.5.6 and 5.6-rc4, but is "? shrink_node+0x6f2/0x6f2" on 5.7-rc1 now.

[...]

Apr 17 00:28:40 BUG: kernel NULL pointer dereference, address: 00000000
Apr 17 00:28:40 #PF: supervisor read access in kernel mode
Apr 17 00:28:40 #PF: error_code(0x0000) - not-present page
Apr 17 00:28:40 *pde = 00000000 
Apr 17 00:28:40 Oops: 0000 [#1] SMP
Apr 17 00:28:40 CPU: 0 PID: 53 Comm: kswapd0 Not tainted 5.7.0-rc1-Pentium4 #1
Apr 17 00:28:40 Hardware name:  /FS51, BIOS 6.00 PG 12/02/2003
Apr 17 00:28:40 EIP: __cpa_process_fault+0x205/0x226
Apr 17 00:28:40 Code: 2d 00 00 00 40 39 d0 76 1f 81 fa ff ff ff bf 76 17 c7 47
10 01 00 00 00 81 c3 00 00 00 40 c1 eb 0c 89 5f 18 31 f6 eb 19 8b 07 <ff> 30 53
68 d5 c7 cb d8 e8 cb 68 00 00 0f 0b>
Apr 17 00:28:40 EAX: 00000000 EBX: 00000000 ECX: 00000001 EDX: 00000000
Apr 17 00:28:40 ESI: 00000001 EDI: f5e5bd4c EBP: f5e5bcc4 ESP: f5e5bca0
Apr 17 00:28:40 DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010213
Apr 17 00:28:40 CR0: 80050033 CR2: 00000000 CR3: 05ab3000 CR4: 000006d0
Apr 17 00:28:40 Call Trace:
Apr 17 00:28:40  ? _raw_spin_lock+0x22/0x2a
Apr 17 00:28:40  ? lookup_address+0x1d/0x20
Apr 17 00:28:40  __change_page_attr_set_clr+0x85/0x551
Apr 17 00:28:40  ? __mutex_unlock_slowpath+0x20/0x1b6
Apr 17 00:28:40  ? mutex_unlock+0xb/0xd
Apr 17 00:28:40  ? _vm_unmap_aliases.part.0+0x11f/0x127
Apr 17 00:28:40  change_page_attr_set_clr+0xdc/0x1af
Apr 17 00:28:40  set_pages_array_wb+0x20/0x7b
Apr 17 00:28:40  ttm_pages_put+0x22/0x71 [ttm]
Apr 17 00:28:40  ttm_page_pool_free+0xa1/0x111 [ttm]
Apr 17 00:28:40  ttm_pool_shrink_scan+0x9c/0xd1 [ttm]
Apr 17 00:28:40  shrink_slab.constprop.0+0x248/0x38f
Apr 17 00:28:40  shrink_node+0x533/0x6f2
Apr 17 00:28:40  kswapd+0x4b6/0x628
Apr 17 00:28:40  ? kswapd+0x4b6/0x628
Apr 17 00:28:40  kthread+0xd1/0xd3
Apr 17 00:28:40  ? shrink_node+0x6f2/0x6f2
Apr 17 00:28:40  ? kthread_delayed_work_timer_fn+0x6a/0x6a
Apr 17 00:28:40  ret_from_fork+0x2e/0x38
Apr 17 00:28:40 Modules linked in: fuse auth_rpcgss nfsv4 dns_resolver nfs
lockd grace sunrpc rt2500pci eeprom_93cx6 rt2x00pci rt2x00mmio rt2x00lib
led_class mac80211 radeon hwmon i2c_algo_bit d>
Apr 17 00:28:40 CR2: 0000000000000000
Apr 17 00:28:40 ---[ end trace 49fbdfbb6e459a06 ]---
Apr 17 00:28:40 EIP: __cpa_process_fault+0x205/0x226
Apr 17 00:28:40 Code: 2d 00 00 00 40 39 d0 76 1f 81 fa ff ff ff bf 76 17 c7 47
10 01 00 00 00 81 c3 00 00 00 40 c1 eb 0c 89 5f 18 31 f6 eb 19 8b 07 <ff> 30 53
68 d5 c7 cb d8 e8 cb 68 00 00 0f 0b>
Apr 17 00:28:40 EAX: 00000000 EBX: 00000000 ECX: 00000001 EDX: 00000000
Apr 17 00:28:40 ESI: 00000001 EDI: f5e5bd4c EBP: f5e5bcc4 ESP: f5e5bca0
Apr 17 00:28:40 DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010213
Apr 17 00:28:40 CR0: 80050033 CR2: 00000000 CR3: 05ab3000 CR4: 000006d0

Signature · 7 lines

You are receiving this mail because:
You are the assignee for the bug.

_______________________________________________
dri-devel mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/dri-devel