Anthony Eden
2017-Dec-14 21:09 UTC
[Nouveau] [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
With linux-next-2017-12-14, I get a crash when nouveau is loaded by systemd-udevd. [ 12.050625] Unable to handle kernel NULL pointer dereference at virtual address 00000058 [ 12.050627] Mem abort info: [ 12.050628] ESR = 0x96000004 [ 12.050630] Exception class = DABT (current EL), IL = 32 bits [ 12.050631] SET = 0, FnV = 0 [ 12.050632] EA = 0, S1PTW = 0 [ 12.050633] Data abort info: [ 12.050634] ISV = 0, ISS = 0x00000004 [ 12.050635] CM = 0, WnR = 0 [ 12.050637] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000af2ac1b1 [ 12.050639] [0000000000000058] *pgd=0000000000000000 [ 12.050643] Internal error: Oops: 96000004 [#1] SMP [ 12.050644] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac ptp nouveau(+) tegra_drm(+) i2c_algo_bit ttm gpio_keys drm_kms_helper drm drm_panel_orientation_quirks(P) syscopy area sysfillrect sysimgblt fb_sys_fops pps_core host1x [ 12.050665] CPU: 0 PID: 261 Comm: systemd-udevd Tainted: P S 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 12.050666] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 12.050668] pstate: 80000005 (Nzcv daif -PAN -UAO) [ 12.050675] pc : mutex_lock+0x28/0x58 [ 12.050676] lr : mutex_lock+0x1c/0x58 [ 12.050677] sp : ffff00000a33b970 [ 12.050679] x29: ffff00000a33b970 x28: ffff000009527a20 [ 12.050682] x27: ffff8001c5089c00 x26: ffffffffffffffff [ 12.050684] x25: 0000000000000001 x24: 0000000000000001 [ 12.050686] x23: 0000000000000000 x22: 0000000000000000 [ 12.050689] x21: ffff8001c8c5af80 x20: 0000000000000058 [ 12.050691] x19: 0000000000000058 x18: 0000000000000230 [ 12.050693] x17: fffffffffffffff0 x16: ffff7e00071fb300 [ 12.050695] x15: 0000000000000000 x14: ffffffffffffffff [ 12.050697] x13: 0000000000000038 x12: 0000000000000018 [ 12.050700] x11: 0101010101010101 x10: 7f7f7f7f7f7f7f7f [ 12.050702] x9 : 0000000000000000 x8 : ffff8001c8c5b000 [ 12.050704] x7 : 0000000000000000 x6 : 000000000000003f [ 12.050706] x5 : 0000000000000040 x4 : 0000000000000000 [ 12.050708] x3 : 0000000000000004 x2 : 0000000000000000 [ 12.050710] x1 : ffff8001c915b800 x0 : 0000000000000000 [ 12.050713] Process systemd-udevd (pid: 261, stack limit 0x00000000247b2b64) [ 12.050714] Call trace: [ 12.050717] mutex_lock+0x28/0x58 [ 12.050721] iommu_attach_device+0xac/0xf8 [ 12.050948] nvkm_device_tegra_new+0x260/0x510 [nouveau] [ 12.051166] nouveau_platform_device_create+0x48/0xa8 [nouveau] [ 12.051364] nouveau_platform_probe+0x34/0x80 [nouveau] [ 12.051368] platform_drv_probe+0x60/0xc0 [ 12.051372] driver_probe_device+0x33c/0x4a0 [ 12.051375] __driver_attach+0xdc/0x128 [ 12.051377] bus_for_each_dev+0x5c/0xa8 [ 12.051379] driver_attach+0x30/0x40 [ 12.051381] bus_add_driver+0x218/0x2b8 [ 12.051384] driver_register+0x6c/0x118 [ 12.051385] __platform_driver_register+0x54/0x60 [ 12.051578] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.051584] do_one_initcall+0x44/0x138 [ 12.051588] do_init_module+0x64/0x1dc [ 12.051590] load_module+0x12f4/0x14b8 [ 12.051592] SyS_finit_module+0xd8/0xf0 [ 12.051594] el0_svc_naked+0x20/0x24 [ 12.051597] Code: 97fffa1e d2800000 d5384101 f9800271 (c85ffe62) [ 12.051600] ---[ end trace 7e15532ee457d321 ]--- [ 12.346156] iommu: Adding device 15220000.display to group 1 [ 12.360735] tegra-dpaux 15040000.dpaux: 15040000.dpaux supply vdd not found, using dummy regulator [ 12.372895] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not found, using dummy regulator [ 12.384763] tegra-sor 15580000.sor: failed to probe output: -517 [ 12.391830] tegra-sor 15580000.sor: failed to probe output: -517 Here's the trace with files and line numbers (via addr2line -pfi): __cmpxchg_case_acq_8 at arch/arm64/include/asm/atomic_ll_sc.h:284 (inlined by) __cmpxchg_acq at arch/arm64/include/asm/cmpxchg.h:140 (inlined by) __mutex_trylock_fast at kernel/locking/mutex.c:143 (inlined by) mutex_lock at kernel/locking/mutex.c:240 iommu_group_device_count at drivers/iommu/iommu.c:673 (inlined by) iommu_attach_device at drivers/iommu/iommu.c:1312 clk_prepare_enable at include/linux/clk.h:646 (inlined by) nvkm_device_tegra_power_up at drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c:37 (inlined by) nvkm_device_tegra_new at drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c:319 nouveau_platform_device_create at drivers/gpu/drm/nouveau/nouveau_drm.c:1193 nouveau_platform_probe at drivers/gpu/drm/nouveau/nouveau_platform.c:44 platform_drv_probe at drivers/base/platform.c:577 really_probe at drivers/base/dd.c:423 (inlined by) driver_probe_device at drivers/base/dd.c:565 __driver_attach at drivers/base/dd.c:799 bus_for_each_dev at drivers/base/bus.c:311 driver_attach at drivers/base/dd.c:819 bus_add_driver at drivers/base/bus.c:668 driver_register at drivers/base/driver.c:166 __platform_driver_register at drivers/base/platform.c:636 nouveau_drm_init at drivers/gpu/drm/nouveau/nouveau_drm.c:1212 do_one_initcall at init/main.c:833 do_init_module at kernel/module.c:3451 load_module at kernel/module.c:3775 SYSC_finit_module at kernel/module.c:3874 (inlined by) SyS_finit_module at kernel/module.c:3850 el0_svc_naked at arch/arm64/kernel/entry.S:937 Serial output is attached which includes rest of dmesg. Thanks, -Anthony -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freedesktop.org/archives/nouveau/attachments/20171214/6d038d9b/attachment-0001.html> -------------- next part -------------- [0001.143] I> 4) Base:0xf7b00000 Size:0x00100000 [0001.147] I> 5) Base:0xf7a00000 Size:0x00100000 [0001.152] I> 6) Base:0xf7600000 Size:0x00200000 [0001.156] I> 7) Base:0xf7000000 Size:0x00400000 [0001.160] I> 8) Base:0xf7900000 Size:0x00100000 [0001.165] I> 9) Base:0xf7800000 Size:0x00100000 [0001.169] I> 10) Base:0xf6800000 Size:0x00800000 [0001.174] I> 11) Base:0x30000000 Size:0x00040000 [0001.178] I> 12) Base:0xf7500000 Size:0x00100000 [0001.183] I> 13) Base:0x30040000 Size:0x00001000 [0001.187] I> 14) Base:0x30048000 Size:0x00001000 [0001.191] I> 15) Base:0x30049000 Size:0x00001000 [0001.196] I> 16) Base:0x3004a000 Size:0x00001000 [0001.200] I> 17) Base:0x3004b000 Size:0x00001000 [0001.205] I> 18) Base:0x3004c000 Size:0x00001000 [0001.209] I> 19) Base:0x3004d000 Size:0x00001000 [0001.214] I> 20) Base:0x3004e000 Size:0x00001000 [0001.218] I> 21) Base:0x3004f000 Size:0x00001000 [0001.222] I> 22) Base:0x00000000 Size:0x00000000 [0001.227] I> 23) Base:0xf7ff0000 Size:0x00010000 [0001.231] I> 24) Base:0x00000000 Size:0x00000000 [0001.236] I> 25) Base:0x00000000 Size:0x00000000 [0001.240] I> 26) Base:0x00000000 Size:0x00000000 [0001.245] I> 27) Base:0x00000000 Size:0x00000000 [0001.249] I> 28) Base:0x84400000 Size:0x00400000 [0001.253] I> 29) Base:0x30000000 Size:0x00010000 [0001.258] I> 30) Base:0xf8000000 Size:0x08000000 [0001.262] I> 31) Base:0x00000000 Size:0x00000000 [0001.267] I> 32) Base:0xf6000000 Size:0x00600000 [0001.271] I> 33) Base:0x80000000 Size:0x76000000 [0001.276] I> 34) Base:0x100000000 Size:0x180000000 [0001.280] I> 35) Base:0x00000000 Size:0x00000000 [0001.285] I> 36) Base:0x00000000 Size:0x00000000 [0001.289] I> 37) Base:0xf7fc0000 Size:0x00020000 [0001.293] I> 38) Base:0x84000000 Size:0x00400000 [0001.298] I> 39) Base:0x96000000 Size:0x02000000 [0001.302] I> 40) Base:0x84800000 Size:0x00b00000 [0001.307] I> 41) Base:0xf7f00000 Size:0x00080000 [0001.311] I> 42) Base:0x00000000 Size:0x00000000 [0001.316] I> 43) Base:0x00000000 Size:0x00000000 [0001.320] platform_init_interrupts-121, 1* [0001.324] Interrupts Init done [0001.327] calling constructors [0001.331] initializing heap [0001.333] initializing threads [0001.336] initializing timers [0001.339] creating bootstrap completion thread [0001.344] top of bootstrap2() [0001.347] CPU: ARM Cortex A57 [0001.350] CPU: MIDR: 0x411FD073, MPIDR: 0x80000100 [0001.355] initializing platform [0001.358] I> Boot-device: eMMC [0001.362] I> odm data is 1090000 [0001.365] I> Reading GPT from 512 for device 00000003 [0001.371] I> Reading GPT from 8388096 for device 00000003 [0001.377] I> Found 6 partitions in 00000003 device [0001.382] I> Reading GPT from 512 for device 00010003 [0001.388] I> Found 17 partitions in 00010003 device [0001.393] W> No valid slot number is found in scratch register [0001.398] W> Return default slot: _a [0001.402] I> A/B: bin_type (1) slot 0 [0001.405] I> Select partition: kernel-dtb [0001.409] I> Loading partition kernel-dtb at 0x92000000 [0001.418] I> Kernel_dtb @0x92000000 [0001.421] I> Bl_dtb @0x85300000 [0001.424] I> gpio framework initialized [0001.428] I> tegrabl_gpio_driver_register: register 'tegra_gpio_main_driver' driver [0001.435] I> tegrabl_gpio_driver_register: register 'tegra_gpio_aon_driver' driver [0001.443] I> tegrabl_tca9539_init: i2c bus: 0, slave addr: 0xee [0001.451] I> tegrabl_gpio_driver_register: register 'tca9539_gpio_driver' driver [0001.458] I> tegrabl_tca9539_init: i2c bus: 0, slave addr: 0xe8 [0001.466] I> tegrabl_gpio_driver_register: register 'tca9539_gpio_driver' driver [0001.474] E> tegrabl_blob_init: BMP partition does not have valid Blob [0001.481] E> tegrabl_load_bmp_blob: BMP blob initialization failed [0001.487] W> Loading bmp blob to memory failed [0001.495] I> Find /i2c at c250000's alias i2c7 [0001.499] I> Reading eeprom i2c=7 address=0x50 [0001.528] I> Device at /i2c at c250000:0x50 [0001.532] I> Reading eeprom i2c=7 address=0x57 [0001.561] I> Device at /i2c at c250000:0x57 [0001.566] I> Find /i2c at c240000's alias i2c1 [0001.570] I> Reading eeprom i2c=1 address=0x51 [0001.575] I> Eeprom read failed 0x1a800027 [0001.580] I> Find /i2c at 3160000's alias i2c0 [0001.584] I> Reading eeprom i2c=0 address=0x50 [0001.589] I> Eeprom read failed 0x1a800027 [0001.594] I> Find /i2c at 3180000's alias i2c2 [0001.598] I> Reading eeprom i2c=2 address=0x54 [0001.602] I> Enabling gpio chip_id = 2, gpio pin = 9 [0001.633] I> Disabling gpio chip_id = 2, gpio pin = 9 [0001.638] I> Device at /i2c at 3180000:0x54 [0001.642] I> create_pm_ids: id: 3310-1000-B00-E, len: 15 [0001.647] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0001.658] I> create_pm_ids: id: 2597-0000-500-C, len: 15 [0001.663] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0001.674] I> create_pm_ids: id: 3326-1000-100-M, len: 15 [0001.679] I> config: mem-type:ff,power-config:ff,misc-config:ff,modem-config:ff,touch-config:ff,display-config:ff,, len: 93 [0001.690] initializing target [0001.693] calling apps_init() [0001.696] starting app android_boot_app [0001.700] I> Gpio keyboard init success [0001.704] I> Kernel type = Normal [0001.707] I> Loading kernel/boot.img ... [0001.711] W> No valid slot number is found in scratch register [0001.716] W> Return default slot: _a [0001.720] I> A/B: bin_type (0) slot 0 [0001.723] I> Select partition: kernel [0001.727] I> Loading partition kernel at 0xa8000000 [0001.808] W> No valid slot number is found in scratch register [0001.813] W> Return default slot: _a [0001.817] I> A/B: bin_type (1) slot 0 [0001.820] I> Select partition: kernel-dtb [0001.824] I> Loading partition kernel-dtb at 0x92000000 [0001.833] I> Kernel DTB @ 0x92000000 [0001.836] I> Verified boot state = Orange [0001.840] E> tegrabl_display_clear: display is not initialized [0001.846] I> Checking boot.img header magic ... [0001.850] I> [OK] [0001.852] I> Valid boot.img @ 0xa8000000 [0001.856] I> decompressor handler not found [0001.860] I> Copying kernel image (451792 bytes) from 0xa8000800 to 0x80080000 ... [0001.867] I> Done [0001.869] I> Move ramdisk (len: 6252235) from 0xa806f000 to 0x98000000 [0001.878] I> Updated bpmp info to DTB [0001.884] I> Ramdisk: Base: 0x98000000; Size: 0x5f66cb [0001.889] I> Updated initrd info to DTB [0001.892] I> disabled_core_mask: 0xffffff0c [0001.896] I> Kernel type = Normal [0001.900] I> add_serialno: Serial Num = 0320717048574 [0001.904] W> No valid slot number is found in scratch register [0001.910] W> Return default slot: _a [0001.914] I> Linux Cmdline: root=/dev/mmcblk1p1 rw rootwait fbcon=map:0 net.ifnames=0 console=tty0 OS=l4t console=ttyS0,115200n8 memtype=0 video=tegrafb no_console_suspend=1 earlycon=uart825 0,mmio32,0x03100000 nvdumper_reserved=0xf7fc0000 gpt androidboot.secureos=none tegraid=18.1.2.0.0 tegra_keep_boot_clocks maxcpus=6 android.kerneltype=normal androidboot.serialno=0320717048574 androidboot.security=non-secure sdhci_tegra.en_boot_part_access=1 [0001.953] I> Updated bootarg info to DTB [0001.958] I> eeprom_get_mac_addr: MAC (type: 0): 00:04:4b:8c:3b:b6 [0001.964] I> eeprom_get_mac_addr: MAC (type: 1): 00:04:4b:8c:3b:b7 [0001.970] I> eeprom_get_mac_addr: MAC (type: 2): 00:04:4b:8c:3b:b8 [0001.976] E> "ids" doesn't exist, creating [0001.980] E> "connection" doesn't exist, creating [0001.985] E> "configs" doesn't exist, creating [0001.989] I> create_pm_ids: id: 3310-1000-B00-E, len: 15 [0001.994] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0002.005] I> create_pm_ids: id: 2597-0000-500-C, len: 15 [0002.010] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0002.021] I> create_pm_ids: id: 3326-1000-100-M, len: 15 [0002.026] I> config: mem-type:ff,power-config:ff,misc-config:ff,modem-config:ff,touch-config:ff,display-config:ff,, len: 93 [0002.037] I> Adding plugin-manager/ids/3310-1000-B00=/i2c at c250000:module at 0x50 [0002.044] E> "i2c at c250000" doesn't exist, creating [0002.049] E> "module at 0x50" doesn't exist, creating [0002.054] I> Adding plugin-manager/ids/2597-0000-500=/i2c at c250000:module at 0x57 [0002.061] E> "module at 0x57" doesn't exist, creating [0002.066] I> Adding plugin-manager/ids/3326-1000-100=/i2c at 3180000:module at 0x54 [0002.073] E> "i2c at 3180000" doesn't exist, creating [0002.077] E> "module at 0x54" doesn't exist, creating [0002.084] I> Adding plugin-manager/ids/3310-1000-B00-E [0002.091] I> Adding plugin-manager/configs/3310-mem-type 00 [0002.097] I> Adding plugin-manager/configs/3310-power-config 00 [0002.102] I> Adding plugin-manager/configs/3310-misc-config 00 [0002.108] I> Adding plugin-manager/configs/3310-modem-config 00 [0002.114] I> Adding plugin-manager/configs/3310-touch-config 00 [0002.120] I> Adding plugin-manager/configs/3310-display-config 00 [0002.126] E> "chip-id" doesn't exist, creating [0002.130] I> Adding plugin-manager/chip-id/A02P [0002.137] I> Updated memory info to DTB [0002.142] E> "reset" doesn't exist, creating [0002.146] E> "pmc-reset-reason" doesn't exist, creating [0002.152] E> "pmic-reset-reason" doesn't exist, creating [0002.157] I> disabled_core_mask: 0xffffff0c [0002.167] I> tegrabl_load_kernel_and_dtb: Done U-Boot 2017.05 (May 09 2017 - 20:03:11 -0400) TEGRA186 Model: NVIDIA P2771-0000-500 DRAM: 7.8 GiB MMC: Tegra SD/MMC: 0, Tegra SD/MMC: 1 *** Warning - bad CRC, using default environment In: serial Out: serial Err: serial Net: eth0: ethernet at 2490000 Hit any key to stop autoboot: 0 MMC: no card present mmc_init: -123, time 0 switch to partitions #0, OK mmc0(part 0) is current device Scanning mmc 0:1... Found /boot/extlinux/extlinux.conf Retrieving file: /boot/extlinux/extlinux.conf 838 bytes read in 88 ms (8.8 KiB/s) p2771-0000 eMMC boot options 1: primary kernel 2: secondary kernel 3: next kernel Enter choice: 3 3: next kernel Retrieving file: /boot/next/initramfs-linux.img 206787469 bytes read in 166111 ms (1.2 MiB/s) Retrieving file: /boot/next/Image 22598144 bytes read in 18256 ms (1.2 MiB/s) append: console=ttyS0,115200n8 root=UUID=7388bb07-be26-4f1d-a11c-48675d650192 rw rootfstype=ext4 rootwait Retrieving file: /boot/next/tegra186-p2771-0000.dtb 23524 bytes read in 91 ms (252 KiB/s) ## Flattened Device Tree blob at 82000000 Booting using the fdt blob at 0x82000000 Using Device Tree in place at 0000000082000000, end 0000000082008be3 Starting kernel ... [ 0.000000] Booting Linux on physical CPU 0x0000000100 [0x411fd073] [ 0.000000] Linux version 4.15.0-rc3-next-20171214-ARCH-AEDEN+ (root at rhino) (gcc version 7.2.0 (GCC)) #3 SMP Thu Dec 14 14:49:29 EST 2017 [ 0.000000] Machine model: NVIDIA Tegra186 P2771-0000 Development Board [ 0.000000] efi: Getting EFI parameters from FDT: [ 0.000000] efi: UEFI not found. [ 0.000000] cma: Reserved 64 MiB at 0x00000000f2000000 [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] random: fast init done [ 0.000000] percpu: Embedded 24 pages/cpu @ (ptrval) s60712 r8192 d29400 u98304 [ 0.000000] Detected PIPT I-cache on CPU0 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 2024064 [ 0.000000] Kernel command line: console=ttyS0,115200n8 root=UUID=7388bb07-be26-4f1d-a11c-48675d650192 rw rootfstype=ext4 rootwait [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] software IO TLB [mem 0xedfff000-0xf1fff000] (64MB) mapped at [ (ptrval)- (ptrval)] [ 0.000000] Memory: 7724200K/8224768K available (12604K kernel code, 2356K rwdata, 5572K rodata, 1472K init, 882K bss, 435032K reserved, 65536K cma-reserved) [ 0.000000] Virtual kernel memory layout: [ 0.000000] modules : 0xffff000000000000 - 0xffff000008000000 ( 128 MB) [ 0.000000] vmalloc : 0xffff000008000000 - 0xffff7dffbfff0000 (129022 GB) [ 0.000000] .text : 0x (ptrval) - 0x (ptrval) ( 12608 KB) [ 0.000000] .rodata : 0x (ptrval) - 0x (ptrval) ( 5632 KB) [ 0.000000] .init : 0x (ptrval) - 0x (ptrval) ( 1472 KB) [ 0.000000] .data : 0x (ptrval) - 0x (ptrval) ( 2357 KB) [ 0.000000] .bss : 0x (ptrval) - 0x (ptrval) ( 883 KB) [ 0.000000] fixed : 0xffff7dfffe7fb000 - 0xffff7dfffec00000 ( 4116 KB) [ 0.000000] PCI I/O : 0xffff7dfffee00000 - 0xffff7dffffe00000 ( 16 MB) [ 0.000000] vmemmap : 0xffff7e0000000000 - 0xffff800000000000 ( 2048 GB maximum) [ 0.000000] 0xffff7e0000000000 - 0xffff7e0008000000 ( 128 MB actual) [ 0.000000] memory : 0xffff800000000000 - 0xffff800200000000 ( 8192 MB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=6, Nodes=1 [ 0.000000] ftrace: allocating 45524 entries in 178 pages [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=6. [ 0.000000] Tasks RCU enabled. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=6 [ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 [ 0.000000] GIC: Using split EOI/Deactivate mode [ 0.000000] arch_timer: cp15 timer(s) running at 31.25MHz (phys). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xe6a171046, max_idle_ns: 881590405314 ns [ 0.000003] sched_clock: 56 bits at 31MHz, resolution 32ns, wraps every 4398046511088ns [ 0.000087] Console: colour dummy device 80x25 [ 0.000103] Calibrating delay loop (skipped), value calculated using timer frequency.. 62.50 BogoMIPS (lpj=312500) [ 0.000111] pid_max: default: 32768 minimum: 301 [ 0.000223] Security Framework initialized [ 0.000229] Yama: becoming mindful. [ 0.000303] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.000334] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.000997] ASID allocator initialised with 32768 entries [ 0.001043] Hierarchical SRCU implementation. [ 0.002451] Tegra Revision: A02 SKU: 220 CPU Process: 0 SoC Process: 0 [ 0.002610] EFI services will not be available. [ 0.002814] smp: Bringing up secondary CPUs ... [ 0.003693] Detected PIPT I-cache on CPU1 [ 0.003709] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_AA64DFR0_EL1. Boot CPU: 0x00000010305106, CPU1: 0x00000010305116 [ 0.003723] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_DFR0_EL1. Boot CPU: 0x00000003010066, CPU1: 0x00000003001066 [ 0.003735] CPU features: Unsupported CPU feature variation detected. [ 0.003781] CPU1: Booted secondary processor 0x0000000000 [0x4e0f0030] [ 0.004422] Detected PIPT I-cache on CPU2 [ 0.004436] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_AA64DFR0_EL1. Boot CPU: 0x00000010305106, CPU2: 0x00000010305116 [ 0.004449] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_DFR0_EL1. Boot CPU: 0x00000003010066, CPU2: 0x00000003001066 [ 0.004489] CPU2: Booted secondary processor 0x0000000001 [0x4e0f0030] [ 0.004963] Detected PIPT I-cache on CPU3 [ 0.004993] CPU3: Booted secondary processor 0x0000000101 [0x411fd073] [ 0.005356] Detected PIPT I-cache on CPU4 [ 0.005376] CPU4: Booted secondary processor 0x0000000102 [0x411fd073] [ 0.005737] Detected PIPT I-cache on CPU5 [ 0.005756] CPU5: Booted secondary processor 0x0000000103 [0x411fd073] [ 0.005802] smp: Brought up 1 node, 6 CPUs [ 0.005827] SMP: Total of 6 processors activated. [ 0.005831] CPU features: detected feature: 32-bit EL0 Support [ 0.007361] CPU: All CPU(s) started at EL2 [ 0.009110] devtmpfs: initialized [ 0.011693] Built 1 zonelists, mobility grouping on. Total pages: 1947434 [ 0.012963] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.012975] futex hash table entries: 2048 (order: 6, 262144 bytes) [ 0.013218] pinctrl core: initialized pinctrl subsystem [ 0.013631] DMI not present or invalid. [ 0.013841] NET: Registered protocol family 16 [ 0.014581] cpuidle: using governor ladder [ 0.014645] cpuidle: using governor menu [ 0.014951] vdso: 2 pages (1 code @ 00000000d0f02166, 1 data @ 00000000b83b57a7) [ 0.014958] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. [ 0.015667] DMA: preallocated 256 KiB pool for atomic allocations [ 0.015869] Serial: AMBA PL011 UART driver [ 0.021604] tegra-bpmp bpmp: firmware: c11dd04ae487c849cc552f8f702ed8 [ 0.956489] random: crng init done [ 1.173598] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 1.173801] cryptd: max_cpu_qlen set to 1000 [ 1.174239] ACPI: Interpreter disabled. [ 1.174984] vgaarb: loaded [ 1.176248] SCSI subsystem initialized [ 1.176751] usbcore: registered new interface driver usbfs [ 1.176806] usbcore: registered new interface driver hub [ 1.176924] usbcore: registered new device driver usb [ 1.177637] EDAC MC: Ver: 3.0.0 [ 1.178571] Advanced Linux Sound Architecture Driver Initialized. [ 1.179087] NetLabel: Initializing [ 1.179099] NetLabel: domain hash size = 128 [ 1.179108] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 1.179182] NetLabel: unlabeled traffic allowed by default [ 1.179622] clocksource: Switched to clocksource arch_sys_counter [ 1.253788] VFS: Disk quotas dquot_6.6.0 [ 1.253877] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.254241] pnp: PnP ACPI: disabled [ 1.265316] NET: Registered protocol family 2 [ 1.266008] tcp_listen_portaddr_hash hash table entries: 4096 (order: 5, 163840 bytes) [ 1.266225] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 1.266940] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes) [ 1.269224] TCP: Hash tables configured (established 65536 bind 65536) [ 1.269469] UDP hash table entries: 4096 (order: 6, 393216 bytes) [ 1.269935] UDP-Lite hash table entries: 4096 (order: 6, 393216 bytes) [ 1.270488] NET: Registered protocol family 1 [ 1.271093] RPC: Registered named UNIX socket transport module. [ 1.271106] RPC: Registered udp transport module. [ 1.271115] RPC: Registered tcp transport module. [ 1.271123] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 1.271286] Unpacking initramfs... [ 8.322008] Freeing initrd memory: 201940K [ 8.322558] kvm [1]: 8-bit VMID [ 8.322564] kvm [1]: IDMAP page: 80cc5000 [ 8.322569] kvm [1]: HYP VA range: 800000000000:ffffffffffff [ 8.323429] kvm [1]: virtual timer IRQ4 [ 8.323584] kvm [1]: Hyp mode initialized successfully [ 8.374075] Initialise system trusted keyrings [ 8.374202] workingset: timestamp_bits=46 max_order=21 bucket_order=0 [ 8.376793] zbud: loaded [ 8.378295] NFS: Registering the id_resolver key type [ 8.378306] Key type id_resolver registered [ 8.378310] Key type id_legacy registered [ 8.378319] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 8.378415] SGI XFS with ACLs, security attributes, no debug enabled [ 8.922391] NET: Registered protocol family 38 [ 8.922402] Key type asymmetric registered [ 8.922407] Asymmetric key parser 'x509' registered [ 8.922464] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245) [ 8.922554] io scheduler noop registered [ 8.922559] io scheduler deadline registered [ 8.922661] io scheduler cfq registered (default) [ 8.922666] io scheduler mq-deadline registered [ 8.922669] io scheduler kyber registered [ 8.922748] io scheduler bfq registered [ 8.926709] tegra-pcie 10003000.pcie: 4x1, 1x1 configuration [ 8.926736] tegra-pcie 10003000.pcie: Failed to get supply 'dvdd-pex': -517 [ 8.927206] ipmi message handler version 39.2 [ 8.930002] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 8.931212] console [ttyS0] disabled [ 8.931241] 3100000.serial: ttyS0 at MMIO 0x3100000 (irq = 22, base_baud = 25500000) is a Tegra [ 9.801591] console [ttyS0] enabled [ 9.805436] msm_serial: driver initialized [ 9.810616] arm-smmu 12000000.iommu: probing hardware configuration... [ 9.817131] arm-smmu 12000000.iommu: SMMUv2 with: [ 9.821835] arm-smmu 12000000.iommu: stage 1 translation [ 9.827220] arm-smmu 12000000.iommu: stage 2 translation [ 9.832610] arm-smmu 12000000.iommu: nested translation [ 9.837911] arm-smmu 12000000.iommu: stream matching with 128 register groups [ 9.845124] arm-smmu 12000000.iommu: 64 context banks (0 stage-2 only) [ 9.851728] arm-smmu 12000000.iommu: Supported page sizes: 0x61311000 [ 9.858239] arm-smmu 12000000.iommu: Stage-1: 48-bit VA -> 48-bit IPA [ 9.864756] arm-smmu 12000000.iommu: Stage-2: 48-bit IPA -> 48-bit PA [ 9.871679] cacheinfo: Unable to detect cache hierarchy for CPU 0 [ 9.879128] libphy: Fixed MDIO Bus: probed [ 9.883912] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 9.890437] ehci-pci: EHCI PCI platform driver [ 9.894884] ehci-platform: EHCI generic platform driver [ 9.900168] ehci-orion: EHCI orion driver [ 9.904214] tegra-ehci: Tegra EHCI driver [ 9.908292] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 9.914470] ohci-pci: OHCI PCI platform driver [ 9.918917] ohci-platform: OHCI generic platform driver [ 9.924191] uhci_hcd: USB Universal Host Controller Interface driver [ 9.930813] usbcore: registered new interface driver uas [ 9.936129] usbcore: registered new interface driver usb-storage [ 9.942139] usbcore: registered new interface driver ums-alauda [ 9.948053] usbcore: registered new interface driver ums-cypress [ 9.954066] usbcore: registered new interface driver ums-datafab [ 9.960073] usbcore: registered new interface driver ums_eneub6250 [ 9.966249] usbcore: registered new interface driver ums-freecom [ 9.972259] usbcore: registered new interface driver ums-isd200 [ 9.978174] usbcore: registered new interface driver ums-jumpshot [ 9.984268] usbcore: registered new interface driver ums-karma [ 9.990104] usbcore: registered new interface driver ums-onetouch [ 9.996198] usbcore: registered new interface driver ums-realtek [ 10.002207] usbcore: registered new interface driver ums-sddr09 [ 10.008123] usbcore: registered new interface driver ums-sddr55 [ 10.014048] usbcore: registered new interface driver ums-usbat [ 10.019905] usbcore: registered new interface driver usbserial_generic [ 10.026426] usbserial: USB Serial support registered for generic [ 10.033050] mousedev: PS/2 mouse device common for all mice [ 10.040536] max77620 0-003c: PMIC Version OTP:0x45 and ES:0x8 [ 10.050688] max77620-sd0: supplied by regulator-dummy [ 10.055883] VDD_DDR_1V1_PMIC: Bringing 1125000uV into 1100000-1100000uV [ 10.064339] max77620-sd1: supplied by regulator-dummy [ 10.070608] max77620-sd2: supplied by regulator-dummy [ 10.076881] max77620-sd3: supplied by regulator-dummy [ 10.083348] max77620-ldo0: supplied by regulator-dummy [ 10.089318] max77620-ldo1: supplied by regulator-dummy [ 10.095126] max77620-ldo2: supplied by regulator-dummy [ 10.101388] max77620-ldo3: supplied by regulator-dummy [ 10.107019] max77620-ldo4: supplied by regulator-dummy [ 10.112796] max77620-ldo5: supplied by regulator-dummy [ 10.118155] max77620-ldo6: supplied by regulator-dummy [ 10.123945] max77620-ldo7: supplied by regulator-dummy [ 10.129087] VDD_HDMI_1V05: Bringing 1000000uV into 1050000-1050000uV [ 10.136689] max77620-ldo8: supplied by regulator-dummy [ 10.141839] VDD_PEX_1V05: Bringing 1000000uV into 1050000-1050000uV [ 10.152126] max77620-thermal max77620-thermal: Failed to register thermal zone: -19 [ 10.160821] device-mapper: uevent: version 1.0.3 [ 10.165592] device-mapper: ioctl: 4.37.0-ioctl (2017-09-20) initialised: dm-devel at redhat.com [ 10.175541] sdhci: Secure Digital Host Controller Interface driver [ 10.181717] sdhci: Copyright(c) Pierre Ossman [ 10.186254] Synopsys Designware Multimedia Card Interface Driver [ 10.192583] sdhci-pltfm: SDHCI platform and OF driver helper [ 10.198348] sdhci-tegra 3400000.sdhci: Got CD GPIO [ 10.203138] sdhci-tegra 3400000.sdhci: Got WP GPIO [ 10.223693] mmc0: Unknown controller version (4). You may experience problems. [ 10.262301] mmc0: SDHCI controller on 3440000.sdhci [3440000.sdhci] using ADMA [ 10.278546] ledtrig-cpu: registered to indicate activity on CPUs [ 10.285004] hidraw: raw HID events driver (C) Jiri Kosina [ 10.290721] usbcore: registered new interface driver usbhid [ 10.296472] usbhid: USB HID core driver [ 10.302498] drop_monitor: Initializing network drop monitor service [ 10.309039] ip_tables: (C) 2000-2006 Netfilter Core Team [ 10.314353] Initializing XFRM netlink socket [ 10.318871] NET: Registered protocol family 10 [ 10.329153] Segment Routing with IPv6 [ 10.332852] mip6: Mobile IPv6 [ 10.335826] NET: Registered protocol family 17 [ 10.340706] Key type dns_resolver registered [ 10.345250] registered taskstats version 1 [ 10.349333] Loading compiled-in X.509 certificates [ 10.354291] zswap: loaded using pool lzo/zbud [ 10.359109] Key type big_key registered [ 10.366155] Key type encrypted registered [ 10.376825] VDD_1V8_AP: supplied by VDD_1V8 [ 10.381320] SD_CARD_SW_PWR: supplied by VDD_3V3_SYS [ 10.386849] tegra-pcie 10003000.pcie: 4x1, 1x1 configuration [ 10.393188] tegra-pcie 10003000.pcie: probing port 0, using 4 lanes [ 10.401453] tegra-pcie 10003000.pcie: Slot present pin change, signature: 00000018 [ 10.802447] tegra-pcie 10003000.pcie: link 0 down, retrying [ 11.210810] tegra-pcie 10003000.pcie: link 0 down, retrying [ 11.619166] tegra-pcie 10003000.pcie: link 0 down, retrying [ 11.626736] tegra-pcie 10003000.pcie: link 0 down, ignoring [ 11.632351] tegra-pcie 10003000.pcie: PCI host bridge to bus 0000:00 [ 11.638690] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 11.644859] pci_bus 0000:00: root bus resource [mem 0x50100000-0x57ffffff] [ 11.651721] pci_bus 0000:00: root bus resource [mem 0x58000000-0x7fffffff pref] [ 11.659013] pci_bus 0000:00: root bus resource [bus 00-ff] [ 11.664816] sdhci-tegra 3400000.sdhci: Got CD GPIO [ 11.669601] sdhci-tegra 3400000.sdhci: Got WP GPIO [ 11.682655] mmc1: Unknown controller version (4). You may experience problems. [ 11.721306] mmc1: SDHCI controller on 3400000.sdhci [3400000.sdhci] using ADMA [ 11.737369] mmc2: Unknown controller version (4). You may experience problems. [ 11.744970] mmc2: Switching to 3.3V signalling voltage failed [ 11.776226] mmc2: SDHCI controller on 3460000.sdhci [3460000.sdhci] using ADMA [ 11.783900] hctosys: unable to open rtc device (rtc0) [ 11.804505] VDD_RTC: disabling [ 11.807555] VDDIO_SDMMC3_AP: disabling [ 11.811499] SD_CARD_SW_PWR: disabling [ 11.815167] ALSA device list: [ 11.818127] No soundcards found. [ 11.823539] Freeing unused kernel memory: 1472K :: running early hook [udev] starting version 235 :: running hook [udev] :: Triggering uevents... [ 11.897570] mmc2: new high speed MMC card at address 0001 [ 11.903350] mmcblk2: mmc2:0001 032G34 29.1 GiB [ 11.908138] mmcblk2boot0: mmc2:0001 032G34 partition 1 4.00 MiB [ 11.914330] mmcblk2boot1: mmc2:0001 032G34 partition 2 4.00 MiB [ 11.920383] mmcblk2rpmb: mmc2:0001 032G34 partition 3 4.00 MiB, chardev (239:0) [ 11.929660] mmcblk2: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 [ 11.994469] pps_core: LinuxPPS API ver. 1 registered [ 11.994656] iommu: Adding device 13e00000.host1x to group 0 [ 11.998997] drm_panel_orientation_quirks: module license 'unspecified' taints kernel. [ 11.998998] Disabling lock debugging due to kernel taint [ 12.011503] input: gpio-keys as /devices/platform/gpio-keys/input/input0 [ 12.024915] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti at linux.it> [ 12.029947] iommu: Adding device 15200000.display to group 1 [ 12.041919] iommu: Adding device 15210000.display to group 1 [ 12.044776] PTP clock support registered [ 12.050625] Unable to handle kernel NULL pointer dereference at virtual address 00000058 [ 12.050627] Mem abort info: [ 12.050628] ESR = 0x96000004 [ 12.050630] Exception class = DABT (current EL), IL = 32 bits [ 12.050631] SET = 0, FnV = 0 [ 12.050632] EA = 0, S1PTW = 0 [ 12.050633] Data abort info: [ 12.050634] ISV = 0, ISS = 0x00000004 [ 12.050635] CM = 0, WnR = 0 [ 12.050637] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000af2ac1b1 [ 12.050639] [0000000000000058] *pgd=0000000000000000 [ 12.050643] Internal error: Oops: 96000004 [#1] SMP [ 12.050644] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac ptp nouveau(+) tegra_drm(+) i2c_algo_bit ttm gpio_keys drm_kms_helper drm drm_panel_orientation_quirks(P) syscopy area sysfillrect sysimgblt fb_sys_fops pps_core host1x [ 12.050665] CPU: 0 PID: 261 Comm: systemd-udevd Tainted: P S 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 12.050666] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 12.050668] pstate: 80000005 (Nzcv daif -PAN -UAO) [ 12.050675] pc : mutex_lock+0x28/0x58 [ 12.050676] lr : mutex_lock+0x1c/0x58 [ 12.050677] sp : ffff00000a33b970 [ 12.050679] x29: ffff00000a33b970 x28: ffff000009527a20 [ 12.050682] x27: ffff8001c5089c00 x26: ffffffffffffffff [ 12.050684] x25: 0000000000000001 x24: 0000000000000001 [ 12.050686] x23: 0000000000000000 x22: 0000000000000000 [ 12.050689] x21: ffff8001c8c5af80 x20: 0000000000000058 [ 12.050691] x19: 0000000000000058 x18: 0000000000000230 [ 12.050693] x17: fffffffffffffff0 x16: ffff7e00071fb300 [ 12.050695] x15: 0000000000000000 x14: ffffffffffffffff [ 12.050697] x13: 0000000000000038 x12: 0000000000000018 [ 12.050700] x11: 0101010101010101 x10: 7f7f7f7f7f7f7f7f [ 12.050702] x9 : 0000000000000000 x8 : ffff8001c8c5b000 [ 12.050704] x7 : 0000000000000000 x6 : 000000000000003f [ 12.050706] x5 : 0000000000000040 x4 : 0000000000000000 [ 12.050708] x3 : 0000000000000004 x2 : 0000000000000000 [ 12.050710] x1 : ffff8001c915b800 x0 : 0000000000000000 [ 12.050713] Process systemd-udevd (pid: 261, stack limit = 0x00000000247b2b64) [ 12.050714] Call trace: [ 12.050717] mutex_lock+0x28/0x58 [ 12.050721] iommu_attach_device+0xac/0xf8 [ 12.050948] nvkm_device_tegra_new+0x260/0x510 [nouveau] [ 12.051166] nouveau_platform_device_create+0x48/0xa8 [nouveau] [ 12.051364] nouveau_platform_probe+0x34/0x80 [nouveau] [ 12.051368] platform_drv_probe+0x60/0xc0 [ 12.051372] driver_probe_device+0x33c/0x4a0 [ 12.051375] __driver_attach+0xdc/0x128 [ 12.051377] bus_for_each_dev+0x5c/0xa8 [ 12.051379] driver_attach+0x30/0x40 [ 12.051381] bus_add_driver+0x218/0x2b8 [ 12.051384] driver_register+0x6c/0x118 [ 12.051385] __platform_driver_register+0x54/0x60 [ 12.051578] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.051584] do_one_initcall+0x44/0x138 [ 12.051588] do_init_module+0x64/0x1dc [ 12.051590] load_module+0x12f4/0x14b8 [ 12.051592] SyS_finit_module+0xd8/0xf0 [ 12.051594] el0_svc_naked+0x20/0x24 [ 12.051597] Code: 97fffa1e d2800000 d5384101 f9800271 (c85ffe62) [ 12.051600] ---[ end trace 7e15532ee457d321 ]--- [ 12.346156] iommu: Adding device 15220000.display to group 1 [ 12.360735] tegra-dpaux 15040000.dpaux: 15040000.dpaux supply vdd not found, using dummy regulator [ 12.372895] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not found, using dummy regulator [ 12.384763] tegra-sor 15580000.sor: failed to probe output: -517 [ 12.391830] tegra-sor 15580000.sor: failed to probe output: -517
Thierry Reding
2017-Dec-20 19:04 UTC
[Nouveau] [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
On Thu, Dec 14, 2017 at 04:09:14PM -0500, Anthony Eden wrote:> With linux-next-2017-12-14, I get a crash when nouveau is loaded by > systemd-udevd. > > [ 12.050625] Unable to handle kernel NULL pointer dereference at virtual > address 00000058 > [ 12.050627] Mem abort info: > [ 12.050628] ESR = 0x96000004 > [ 12.050630] Exception class = DABT (current EL), IL = 32 bits > [ 12.050631] SET = 0, FnV = 0 > [ 12.050632] EA = 0, S1PTW = 0 > [ 12.050633] Data abort info: > [ 12.050634] ISV = 0, ISS = 0x00000004 > [ 12.050635] CM = 0, WnR = 0 > [ 12.050637] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000af2ac1b1 > [ 12.050639] [0000000000000058] *pgd=0000000000000000 > [ 12.050643] Internal error: Oops: 96000004 [#1] SMP > [ 12.050644] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform > stmmac ptp nouveau(+) tegra_drm(+) i2c_algo_bit ttm gpio_keys > drm_kms_helper drm drm_panel_orientation_quirks(P) syscopy > area sysfillrect sysimgblt fb_sys_fops pps_core host1x > [ 12.050665] CPU: 0 PID: 261 Comm: systemd-udevd Tainted: P S > 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 > [ 12.050666] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board > (DT) > [ 12.050668] pstate: 80000005 (Nzcv daif -PAN -UAO) > [ 12.050675] pc : mutex_lock+0x28/0x58 > [ 12.050676] lr : mutex_lock+0x1c/0x58 > [ 12.050677] sp : ffff00000a33b970 > [ 12.050679] x29: ffff00000a33b970 x28: ffff000009527a20 > [ 12.050682] x27: ffff8001c5089c00 x26: ffffffffffffffff > [ 12.050684] x25: 0000000000000001 x24: 0000000000000001 > [ 12.050686] x23: 0000000000000000 x22: 0000000000000000 > [ 12.050689] x21: ffff8001c8c5af80 x20: 0000000000000058 > [ 12.050691] x19: 0000000000000058 x18: 0000000000000230 > [ 12.050693] x17: fffffffffffffff0 x16: ffff7e00071fb300 > [ 12.050695] x15: 0000000000000000 x14: ffffffffffffffff > [ 12.050697] x13: 0000000000000038 x12: 0000000000000018 > [ 12.050700] x11: 0101010101010101 x10: 7f7f7f7f7f7f7f7f > [ 12.050702] x9 : 0000000000000000 x8 : ffff8001c8c5b000 > [ 12.050704] x7 : 0000000000000000 x6 : 000000000000003f > [ 12.050706] x5 : 0000000000000040 x4 : 0000000000000000 > [ 12.050708] x3 : 0000000000000004 x2 : 0000000000000000 > [ 12.050710] x1 : ffff8001c915b800 x0 : 0000000000000000 > [ 12.050713] Process systemd-udevd (pid: 261, stack limit > 0x00000000247b2b64) > [ 12.050714] Call trace: > [ 12.050717] mutex_lock+0x28/0x58 > [ 12.050721] iommu_attach_device+0xac/0xf8 > [ 12.050948] nvkm_device_tegra_new+0x260/0x510 [nouveau] > [ 12.051166] nouveau_platform_device_create+0x48/0xa8 [nouveau] > [ 12.051364] nouveau_platform_probe+0x34/0x80 [nouveau] > [ 12.051368] platform_drv_probe+0x60/0xc0 > [ 12.051372] driver_probe_device+0x33c/0x4a0 > [ 12.051375] __driver_attach+0xdc/0x128 > [ 12.051377] bus_for_each_dev+0x5c/0xa8 > [ 12.051379] driver_attach+0x30/0x40 > [ 12.051381] bus_add_driver+0x218/0x2b8 > [ 12.051384] driver_register+0x6c/0x118 > [ 12.051385] __platform_driver_register+0x54/0x60 > [ 12.051578] nouveau_drm_init+0x164/0x1000 [nouveau] > [ 12.051584] do_one_initcall+0x44/0x138 > [ 12.051588] do_init_module+0x64/0x1dc > [ 12.051590] load_module+0x12f4/0x14b8 > [ 12.051592] SyS_finit_module+0xd8/0xf0 > [ 12.051594] el0_svc_naked+0x20/0x24 > [ 12.051597] Code: 97fffa1e d2800000 d5384101 f9800271 (c85ffe62) > [ 12.051600] ---[ end trace 7e15532ee457d321 ]--- > [ 12.346156] iommu: Adding device 15220000.display to group 1 > [ 12.360735] tegra-dpaux 15040000.dpaux: 15040000.dpaux supply vdd not > found, using dummy regulator > [ 12.372895] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not > found, using dummy regulator > [ 12.384763] tegra-sor 15580000.sor: failed to probe output: -517 > [ 12.391830] tegra-sor 15580000.sor: failed to probe output: -517Hi Anthony, can you try the attached patch? I've had that in my tree for a little while as part of a small series that fixes up IOMMU usage (groups are really better for a number of reasons than directly attaching to devices), but kept forgetting to send it out. Thierry --- >8 ---
Anthony Eden
2017-Dec-21 17:32 UTC
[Nouveau] [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
Hi Thierry, Thanks for the patch. I applied on top of linux-next-2017-12-14. Different output this time. [ 11.862495] WARNING: CPU: 1 PID: 254 at drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmmgf100.c:391 gf100_vmm_new_+0x60/0x128 [nouveau] [ 11.863458] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not found, using dummy regulator [ 11.866197] tegra-sor 15580000.sor: failed to probe output: -517 [ 11.867149] tegra-sor 15580000.sor: failed to probe output: -517 [ 11.895136] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac gpio_keys nouveau(+) ptp tegra_drm i2c_algo_bit ttm drm_kms_helper drm drm_panel_orientation_quirks(P) syscopyarea sysfillrect sysimgblt fb_sys_fops host1x pps_core [ 11.916358] CPU: 1 PID: 254 Comm: systemd-udevd Tainted: P S 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 11.926685] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 11.933722] pstate: 80000005 (Nzcv daif -PAN -UAO) [ 11.939021] pc : gf100_vmm_new_+0x60/0x128 [nouveau] [ 11.944234] lr : gf100_vmm_new+0x70/0x98 [nouveau] [ 11.949015] sp : ffff00000a2234a0 [ 11.952321] x29: ffff00000a2234b0 x28: ffff0000091cf000 [ 11.957643] x27: ffff8001c880a808 x26: ffff00000114a080 [ 11.962960] x25: ffff0000010cd468 x24: ffff0000010cd3f0 [ 11.968275] x23: 0000000000000000 x22: 0000000000000000 [ 11.973578] x21: 0000000001000000 x20: 0000000000000000 [ 11.978879] x19: ffff8001c8be7000 x18: 0000000000000000 [ 11.984185] x17: 0000ffffc7939268 x16: 0000000000000000 [ 11.989490] x15: 0000000000000000 x14: 0000ffff8244eb60 [ 11.994791] x13: 0000000000000001 x12: 0400000000000001 [ 12.000095] x11: 0000000000000001 x10: ffff000049775000 [ 12.005398] x9 : 0000000000000000 x8 : ffff00000102a138 [ 12.010701] x7 : ffff00000114a080 x6 : 0000000000000000 [ 12.016005] x5 : 0000000000000000 x4 : 0000000001000000 [ 12.021310] x3 : 0000000000000000 x2 : ffff8001c8be7000 [ 12.026612] x1 : ffff0000010cd3f0 x0 : 0000000000000000 [ 12.031916] Call trace: [ 12.034601] gf100_vmm_new_+0x60/0x128 [nouveau] [ 12.039415] gf100_vmm_new+0x70/0x98 [nouveau] [ 12.044053] nvkm_vmm_new+0x78/0xb0 [nouveau] [ 12.048597] gf100_bar_oneinit_bar+0x90/0x120 [nouveau] [ 12.054012] gf100_bar_oneinit+0x74/0x88 [nouveau] [ 12.058989] nvkm_bar_oneinit+0x28/0x38 [nouveau] [ 12.063880] nvkm_subdev_init+0x6c/0x278 [nouveau] [ 12.068865] nvkm_device_init+0x150/0x2b0 [nouveau] [ 12.073942] nvkm_udevice_init+0x68/0x98 [nouveau] [ 12.078920] nvkm_object_init+0x48/0x1b8 [nouveau] [ 12.083898] nvkm_ioctl_new+0x160/0x2a8 [nouveau] [ 12.088789] nvkm_ioctl+0x118/0x290 [nouveau] [ 12.093340] nvkm_client_ioctl+0x48/0x60 [nouveau] [ 12.098318] nvif_object_ioctl+0x70/0x88 [nouveau] [ 12.103296] nvif_object_init+0xb8/0x170 [nouveau] [ 12.108273] nvif_device_init+0x50/0x80 [nouveau] [ 12.113171] nouveau_cli_init+0x170/0x520 [nouveau] [ 12.118243] nouveau_drm_load+0x50/0x888 [nouveau] [ 12.123079] drm_dev_register+0x15c/0x1f8 [drm] [ 12.127805] nouveau_platform_probe+0x4c/0x80 [nouveau] [ 12.133023] platform_drv_probe+0x60/0xc0 [ 12.137027] driver_probe_device+0x33c/0x4a0 [ 12.141306] __driver_attach+0xdc/0x128 [ 12.145147] bus_for_each_dev+0x5c/0xa8 [ 12.148987] driver_attach+0x30/0x40 [ 12.152566] bus_add_driver+0x218/0x2b8 [ 12.156394] driver_register+0x6c/0x118 [ 12.160222] __platform_driver_register+0x54/0x60 [ 12.165117] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.170074] do_one_initcall+0x44/0x138 [ 12.173904] do_init_module+0x64/0x1dc [ 12.177645] load_module+0x12f4/0x14b8 [ 12.181385] SyS_finit_module+0xd8/0xf0 [ 12.185212] el0_svc_naked+0x20/0x24 [ 12.188779] ---[ end trace d2c905bc981fb633 ]--- [ 12.193437] nouveau 17000000.gpu: bar: one-time init failed, -22 [ 12.199614] nouveau 17000000.gpu: init failed with -22 [ 12.204752] nouveau: DRM-master:00000000:00000080: init failed with -22 [ 12.211394] Unable to handle kernel NULL pointer dereference at virtual address 00000510 [ 12.219487] Mem abort info: [ 12.222279] ESR = 0x96000004 [ 12.225328] Exception class = DABT (current EL), IL = 32 bits [ 12.231248] SET = 0, FnV = 0 [ 12.234294] EA = 0, S1PTW = 0 [ 12.237437] Data abort info: [ 12.240319] ISV = 0, ISS = 0x00000004 [ 12.244155] CM = 0, WnR = 0 [ 12.247133] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000fe9c3e9c [ 12.253646] [0000000000000510] *pgd=0000000000000000 [ 12.258616] Internal error: Oops: 96000004 [#1] SMP [ 12.263483] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac gpio_keys nouveau(+) ptp tegra_drm i2c_algo_bit ttm drm_kms_helper drm drm_panel_orientation_quirks(P) syscopyarea sysfillrect sysimgblt fb_sys_fops host1x pps_core [ 12.284706] CPU: 2 PID: 254 Comm: systemd-udevd Tainted: P S W 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 12.295033] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 12.302069] pstate: 40000005 (nZcv daif -PAN -UAO) [ 12.307070] pc : nouveau_cli_init+0x114/0x520 [nouveau] [ 12.312489] lr : nouveau_cli_init+0x170/0x520 [nouveau] [ 12.317702] sp : ffff00000a223950 [ 12.321011] x29: ffff00000a223950 x28: ffff0000091cf000 [ 12.326334] x27: ffff000001149ed0 x26: ffff000001149e80 [ 12.331652] x25: 0000000000000000 x24: ffff00000114a080 [ 12.336955] x23: ffff00000114a268 x22: ffff8001c9088088 [ 12.342271] x21: ffff8001c9088000 x20: 00000000ffffffea [ 12.347574] x19: ffff8001c9088000 x18: 0000000000000010 [ 12.352878] x17: ffffffffffffffff x16: ffff0000082d0a00 [ 12.358193] x15: ffffffffffffffff x14: ffff0000896176e7 [ 12.363511] x13: ffff0000096176f5 x12: ffff0000093f3000 [ 12.368826] x11: ffff0000093cbb48 x10: ffff000008761768 [ 12.374143] x9 : 00000000ffffffd0 x8 : ffff8001c8be6c00 [ 12.379446] x7 : 2074696e69203a30 x6 : ffff7e0007146f40 [ 12.384761] x5 : ffff000000fc481c x4 : 0000000000000000 [ 12.390066] x3 : ffff8001c51bd500 x2 : ffff7e0007146f50 [ 12.395370] x1 : ffff000001124450 x0 : 0000000000000000 [ 12.400678] Process systemd-udevd (pid: 254, stack limit 0x00000000d789001d) [ 12.407885] Call trace: [ 12.410544] nouveau_cli_init+0x114/0x520 [nouveau] [ 12.415616] nouveau_drm_load+0x50/0x888 [nouveau] [ 12.420451] drm_dev_register+0x15c/0x1f8 [drm] [ 12.425177] nouveau_platform_probe+0x4c/0x80 [nouveau] [ 12.430396] platform_drv_probe+0x60/0xc0 [ 12.434400] driver_probe_device+0x33c/0x4a0 [ 12.438661] __driver_attach+0xdc/0x128 [ 12.442489] bus_for_each_dev+0x5c/0xa8 [ 12.446316] driver_attach+0x30/0x40 [ 12.449884] bus_add_driver+0x218/0x2b8 [ 12.453712] driver_register+0x6c/0x118 [ 12.457538] __platform_driver_register+0x54/0x60 [ 12.462429] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.467387] do_one_initcall+0x44/0x138 [ 12.471217] do_init_module+0x64/0x1dc [ 12.474967] load_module+0x12f4/0x14b8 [ 12.478708] SyS_finit_module+0xd8/0xf0 [ 12.482535] el0_svc_naked+0x20/0x24 [ 12.486105] Code: 95f0c4c1 34000214 58001ee1 f94166a0 (f9428800) [ 12.492208] ---[ end trace d2c905bc981fb634 ]--- -Anthony On Wed, Dec 20, 2017 at 2:04 PM, Thierry Reding <thierry.reding at gmail.com> wrote:> On Thu, Dec 14, 2017 at 04:09:14PM -0500, Anthony Eden wrote: >> With linux-next-2017-12-14, I get a crash when nouveau is loaded by >> systemd-udevd. >> >> [ 12.050625] Unable to handle kernel NULL pointer dereference at virtual >> address 00000058 >> [ 12.050627] Mem abort info: >> [ 12.050628] ESR = 0x96000004 >> [ 12.050630] Exception class = DABT (current EL), IL = 32 bits >> [ 12.050631] SET = 0, FnV = 0 >> [ 12.050632] EA = 0, S1PTW = 0 >> [ 12.050633] Data abort info: >> [ 12.050634] ISV = 0, ISS = 0x00000004 >> [ 12.050635] CM = 0, WnR = 0 >> [ 12.050637] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000af2ac1b1 >> [ 12.050639] [0000000000000058] *pgd=0000000000000000 >> [ 12.050643] Internal error: Oops: 96000004 [#1] SMP >> [ 12.050644] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform >> stmmac ptp nouveau(+) tegra_drm(+) i2c_algo_bit ttm gpio_keys >> drm_kms_helper drm drm_panel_orientation_quirks(P) syscopy >> area sysfillrect sysimgblt fb_sys_fops pps_core host1x >> [ 12.050665] CPU: 0 PID: 261 Comm: systemd-udevd Tainted: P S >> 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 >> [ 12.050666] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board >> (DT) >> [ 12.050668] pstate: 80000005 (Nzcv daif -PAN -UAO) >> [ 12.050675] pc : mutex_lock+0x28/0x58 >> [ 12.050676] lr : mutex_lock+0x1c/0x58 >> [ 12.050677] sp : ffff00000a33b970 >> [ 12.050679] x29: ffff00000a33b970 x28: ffff000009527a20 >> [ 12.050682] x27: ffff8001c5089c00 x26: ffffffffffffffff >> [ 12.050684] x25: 0000000000000001 x24: 0000000000000001 >> [ 12.050686] x23: 0000000000000000 x22: 0000000000000000 >> [ 12.050689] x21: ffff8001c8c5af80 x20: 0000000000000058 >> [ 12.050691] x19: 0000000000000058 x18: 0000000000000230 >> [ 12.050693] x17: fffffffffffffff0 x16: ffff7e00071fb300 >> [ 12.050695] x15: 0000000000000000 x14: ffffffffffffffff >> [ 12.050697] x13: 0000000000000038 x12: 0000000000000018 >> [ 12.050700] x11: 0101010101010101 x10: 7f7f7f7f7f7f7f7f >> [ 12.050702] x9 : 0000000000000000 x8 : ffff8001c8c5b000 >> [ 12.050704] x7 : 0000000000000000 x6 : 000000000000003f >> [ 12.050706] x5 : 0000000000000040 x4 : 0000000000000000 >> [ 12.050708] x3 : 0000000000000004 x2 : 0000000000000000 >> [ 12.050710] x1 : ffff8001c915b800 x0 : 0000000000000000 >> [ 12.050713] Process systemd-udevd (pid: 261, stack limit >> 0x00000000247b2b64) >> [ 12.050714] Call trace: >> [ 12.050717] mutex_lock+0x28/0x58 >> [ 12.050721] iommu_attach_device+0xac/0xf8 >> [ 12.050948] nvkm_device_tegra_new+0x260/0x510 [nouveau] >> [ 12.051166] nouveau_platform_device_create+0x48/0xa8 [nouveau] >> [ 12.051364] nouveau_platform_probe+0x34/0x80 [nouveau] >> [ 12.051368] platform_drv_probe+0x60/0xc0 >> [ 12.051372] driver_probe_device+0x33c/0x4a0 >> [ 12.051375] __driver_attach+0xdc/0x128 >> [ 12.051377] bus_for_each_dev+0x5c/0xa8 >> [ 12.051379] driver_attach+0x30/0x40 >> [ 12.051381] bus_add_driver+0x218/0x2b8 >> [ 12.051384] driver_register+0x6c/0x118 >> [ 12.051385] __platform_driver_register+0x54/0x60 >> [ 12.051578] nouveau_drm_init+0x164/0x1000 [nouveau] >> [ 12.051584] do_one_initcall+0x44/0x138 >> [ 12.051588] do_init_module+0x64/0x1dc >> [ 12.051590] load_module+0x12f4/0x14b8 >> [ 12.051592] SyS_finit_module+0xd8/0xf0 >> [ 12.051594] el0_svc_naked+0x20/0x24 >> [ 12.051597] Code: 97fffa1e d2800000 d5384101 f9800271 (c85ffe62) >> [ 12.051600] ---[ end trace 7e15532ee457d321 ]--- >> [ 12.346156] iommu: Adding device 15220000.display to group 1 >> [ 12.360735] tegra-dpaux 15040000.dpaux: 15040000.dpaux supply vdd not >> found, using dummy regulator >> [ 12.372895] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not >> found, using dummy regulator >> [ 12.384763] tegra-sor 15580000.sor: failed to probe output: -517 >> [ 12.391830] tegra-sor 15580000.sor: failed to probe output: -517 > > Hi Anthony, > > can you try the attached patch? I've had that in my tree for a little > while as part of a small series that fixes up IOMMU usage (groups are > really better for a number of reasons than directly attaching to > devices), but kept forgetting to send it out. > > Thierry > --- >8 --- > From c7684f9fab66cf59838f3efbb271fb50d68711a5 Mon Sep 17 00:00:00 2001 > From: Thierry Reding <treding at nvidia.com> > Date: Thu, 14 Dec 2017 13:54:54 +0100 > Subject: [PATCH] drm/nouveau: tegra: Use IOMMU groups > > Use IOMMU groups to attach the GPU to its IOMMU domain. This is not > strictly necessary because the domain isn't shared with any other > device, but it makes the code consistent with how IOMMU is handled in > other drivers and provides an easy way to detect when no IOMMU has > been attached via device tree. > > Signed-off-by: Thierry Reding <treding at nvidia.com> > --- > drivers/gpu/drm/nouveau/include/nvkm/core/tegra.h | 1 + > drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 18 +++++++++++------- > 2 files changed, 12 insertions(+), 7 deletions(-) > > diff --git a/drivers/gpu/drm/nouveau/include/nvkm/core/tegra.h b/drivers/gpu/drm/nouveau/include/nvkm/core/tegra.h > index 5c102d0206a7..5a9a796380dc 100644 > --- a/drivers/gpu/drm/nouveau/include/nvkm/core/tegra.h > +++ b/drivers/gpu/drm/nouveau/include/nvkm/core/tegra.h > @@ -25,6 +25,7 @@ struct nvkm_device_tegra { > > struct nvkm_mm mm; > struct iommu_domain *domain; > + struct iommu_group *group; > unsigned long pgshift; > } iommu; > > diff --git a/drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c b/drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c > index 78597da6313a..1f07999aea1d 100644 > --- a/drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c > +++ b/drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c > @@ -110,7 +110,8 @@ nvkm_device_tegra_probe_iommu(struct nvkm_device_tegra *tdev) > > mutex_init(&tdev->iommu.mutex); > > - if (iommu_present(&platform_bus_type)) { > + tdev->iommu.group = iommu_group_get(dev); > + if (tdev->iommu.group) { > tdev->iommu.domain = iommu_domain_alloc(&platform_bus_type); > if (!tdev->iommu.domain) > goto error; > @@ -132,7 +133,7 @@ nvkm_device_tegra_probe_iommu(struct nvkm_device_tegra *tdev) > tdev->iommu.pgshift -= 1; > } > > - ret = iommu_attach_device(tdev->iommu.domain, dev); > + ret = iommu_attach_group(tdev->iommu.domain, tdev->iommu.group); > if (ret) > goto free_domain; > > @@ -140,19 +141,21 @@ nvkm_device_tegra_probe_iommu(struct nvkm_device_tegra *tdev) > (1ULL << tdev->func->iommu_bit) >> > tdev->iommu.pgshift, 1); > if (ret) > - goto detach_device; > + goto detach_group; > } > > return; > > -detach_device: > - iommu_detach_device(tdev->iommu.domain, dev); > +detach_group: > + iommu_detach_group(tdev->iommu.domain, tdev->iommu.group); > > free_domain: > iommu_domain_free(tdev->iommu.domain); > > error: > + iommu_group_put(tdev->iommu.group); > tdev->iommu.domain = NULL; > + tdev->iommu.group = NULL; > tdev->iommu.pgshift = 0; > dev_err(dev, "cannot initialize IOMMU MM\n"); > #endif > @@ -162,10 +165,11 @@ static void > nvkm_device_tegra_remove_iommu(struct nvkm_device_tegra *tdev) > { > #if IS_ENABLED(CONFIG_IOMMU_API) > - if (tdev->iommu.domain) { > + if (tdev->iommu.group && tdev->iommu.domain) { > nvkm_mm_fini(&tdev->iommu.mm); > - iommu_detach_device(tdev->iommu.domain, tdev->device.dev); > + iommu_detach_group(tdev->iommu.domain, tdev->iommu.group); > iommu_domain_free(tdev->iommu.domain); > + iommu_group_put(tdev->iommu.group); > } > #endif > } > -- > 2.15.1 >-------------- next part -------------- [0000.235] I> Welcome to MB2(TBoot-BPMP)(version: 01.00.160913-t186-M-00.00-mobile-f4c42291) [0000.244] I> Default Heap @ [0xd486400 - 0xd488400] [0000.248] I> DMA Heap @ [0x84900000 - 0x85300000] [0000.253] I> bit @ 0xd480000 [0000.256] I> BR-BCT relocated to 0xf7f20000 [0000.260] I> Boot-device: eMMC [0000.264] I> pmic: reset reason (nverc) : 0x0 [0000.268] I> Reading GPT from 512 for device 00000003 [0000.274] I> Reading GPT from 8388096 for device 00000003 [0000.281] I> Found 6 partitions in 00000003 device [0000.286] I> Reading GPT from 512 for device 00010003 [0000.293] I> Found 17 partitions in 00010003 device [0000.298] W> No valid slot number is found in scratch register [0000.303] W> Return default slot: _a [0000.307] I> A/B: bin_type (16) slot 0 [0000.310] I> Select partition: bpmp-fw [0000.314] I> Loading partition bpmp-fw at 0xf7600000 [0000.319] I> Reading two headers - addr:0xf7600000 blocks:1 [0000.324] I> Addr: 0xf7600000, start-block: 58739717, num_blocks: 1 [0000.339] I> Binary(16) of size 524480 is loaded @ 0xf7600000 [0000.345] W> No valid slot number is found in scratch register [0000.351] W> Return default slot: _a [0000.354] I> A/B: bin_type (17) slot 0 [0000.358] I> Select partition: bpmp-fw-dtb [0000.362] I> Loading partition bpmp-fw-dtb at 0xf77f0000 [0000.367] I> Reading two headers - addr:0xf77f0000 blocks:1 [0000.372] I> Addr: 0xf77f0000, start-block: 58740925, num_blocks: 1 [0000.384] I> Binary(17) of size 326672 is loaded @ 0xf77b0200 [0000.511] I> BPMP-FW load address = 0xf7600000 [0000.515] I> BPMP-FW DTB load address = 0x501b0200 [0000.520] I> Loading SCE-FW ... [0000.523] W> No valid slot number is found in scratch register [0000.529] W> Return default slot: _a [0000.532] I> A/B: bin_type (12) slot 0 [0000.536] I> Select partition: sce-fw [0000.539] I> Loading partition sce-fw at 0xf7800000 [0000.544] I> Reading two headers - addr:0xf7800000 blocks:1 [0000.550] I> Addr: 0xf7800000, start-block: 58741925, num_blocks: 1 [0000.558] I> Binary(12) of size 65088 is loaded @ 0xf7800000 [0000.564] I> Init SCE [0000.566] I> Copy BTCM section [0000.569] W> No valid slot number is found in scratch register [0000.575] W> Return default slot: _a [0000.578] I> A/B: bin_type (13) slot 0 [0000.582] I> Select partition: cpu-bootloader [0000.586] I> Loading partition cpu-bootloader at 0x96000000 [0000.591] I> Reading two headers - addr:0x96000000 blocks:1 [0000.597] I> Addr: 0x96000000, start-block: 58732545, num_blocks: 1 [0000.607] I> Binary(13) of size 195776 is loaded @ 0x96000000 [0000.613] W> No valid slot number is found in scratch register [0000.618] W> Return default slot: _a [0000.622] I> A/B: bin_type (20) slot 0 [0000.625] I> Select partition: bootloader-dtb [0000.629] I> Loading partition bootloader-dtb at 0x85300000 [0000.635] I> Reading two headers - addr:0x85300000 blocks:1 [0000.640] I> Addr: 0x85300000, start-block: 58733057, num_blocks: 1 [0000.651] I> Binary(20) of size 248032 is loaded @ 0x85300000 [0000.657] I> MB2-params @ 0xf7f00000 [0000.660] I> CPUBL-params @ 0xf7f00000 [0000.664] I> CPU-BL loaded at : 0x96000000 [0000.668] I> Loading TOS ... [0000.671] W> No valid slot number is found in scratch register [0000.677] W> Return default slot: _a [0000.680] I> A/B: bin_type (14) slot 0 [0000.684] I> Select partition: secure-os [0000.687] I> Loading partition secure-os at 0x8490f400 [0000.692] I> Reading two headers - addr:0x8490f400 blocks:1 [0000.698] I> Addr: 0x8490f400, start-block: 58733569, num_blocks: 1 [0000.706] I> Binary(14) of size 54384 is loaded @ 0x8490f400 [0000.712] I> Copying Monitor (length: 0xd270) from 0x8490f600 to 0x40000000 [0000.719] I> Erasing Monitor @ 0x8490f600 [0000.723] I> Unhalting SCE [0000.727] I> Waypoint2-ACK: 0x5200b8d0 [0000.731] I> MB2(TBoot-BPMP) done NOTICE: BL31: v1.2(release):ff7a644 NOTICE: BL31: Built : 21:06:35, Mar 1 2017 NOTICE: Trusty image missing. ERROR: Error initializing runtime service trusty_fast [0001.093] I> Welcome to Cboot [0001.096] I> Cboot Version: 00.00.2014.50-t186-fabbc56c [0001.101] I> CPU-BL Params @ 0xf7f00000 [0001.104] I> 0) Base:0x00000000 Size:0x00000000 [0001.109] I> 1) Base:0xf7e00000 Size:0x00100000 [0001.113] I> 2) Base:0xf7d00000 Size:0x00100000 [0001.118] I> 3) Base:0xf7c00000 Size:0x00100000 [0001.122] I> 4) Base:0xf7b00000 Size:0x00100000 [0001.126] I> 5) Base:0xf7a00000 Size:0x00100000 [0001.131] I> 6) Base:0xf7600000 Size:0x00200000 [0001.135] I> 7) Base:0xf7000000 Size:0x00400000 [0001.140] I> 8) Base:0xf7900000 Size:0x00100000 [0001.144] I> 9) Base:0xf7800000 Size:0x00100000 [0001.149] I> 10) Base:0xf6800000 Size:0x00800000 [0001.153] I> 11) Base:0x30000000 Size:0x00040000 [0001.157] I> 12) Base:0xf7500000 Size:0x00100000 [0001.162] I> 13) Base:0x30040000 Size:0x00001000 [0001.166] I> 14) Base:0x30048000 Size:0x00001000 [0001.171] I> 15) Base:0x30049000 Size:0x00001000 [0001.175] I> 16) Base:0x3004a000 Size:0x00001000 [0001.180] I> 17) Base:0x3004b000 Size:0x00001000 [0001.184] I> 18) Base:0x3004c000 Size:0x00001000 [0001.188] I> 19) Base:0x3004d000 Size:0x00001000 [0001.193] I> 20) Base:0x3004e000 Size:0x00001000 [0001.197] I> 21) Base:0x3004f000 Size:0x00001000 [0001.202] I> 22) Base:0x00000000 Size:0x00000000 [0001.206] I> 23) Base:0xf7ff0000 Size:0x00010000 [0001.211] I> 24) Base:0x00000000 Size:0x00000000 [0001.215] I> 25) Base:0x00000000 Size:0x00000000 [0001.219] I> 26) Base:0x00000000 Size:0x00000000 [0001.224] I> 27) Base:0x00000000 Size:0x00000000 [0001.228] I> 28) Base:0x84400000 Size:0x00400000 [0001.233] I> 29) Base:0x30000000 Size:0x00010000 [0001.237] I> 30) Base:0xf8000000 Size:0x08000000 [0001.242] I> 31) Base:0x00000000 Size:0x00000000 [0001.246] I> 32) Base:0xf6000000 Size:0x00600000 [0001.250] I> 33) Base:0x80000000 Size:0x76000000 [0001.255] I> 34) Base:0x100000000 Size:0x180000000 [0001.259] I> 35) Base:0x00000000 Size:0x00000000 [0001.264] I> 36) Base:0x00000000 Size:0x00000000 [0001.268] I> 37) Base:0xf7fc0000 Size:0x00020000 [0001.273] I> 38) Base:0x84000000 Size:0x00400000 [0001.277] I> 39) Base:0x96000000 Size:0x02000000 [0001.282] I> 40) Base:0x84800000 Size:0x00b00000 [0001.286] I> 41) Base:0xf7f00000 Size:0x00080000 [0001.291] I> 42) Base:0x00000000 Size:0x00000000 [0001.295] I> 43) Base:0x00000000 Size:0x00000000 [0001.299] platform_init_interrupts-121, 1* [0001.304] Interrupts Init done [0001.307] calling constructors [0001.310] initializing heap [0001.313] initializing threads [0001.316] initializing timers [0001.319] creating bootstrap completion thread [0001.323] top of bootstrap2() [0001.327] CPU: ARM Cortex A57 [0001.330] CPU: MIDR: 0x411FD073, MPIDR: 0x80000100 [0001.335] initializing platform [0001.338] I> Boot-device: eMMC [0001.341] I> odm data is 1090000 [0001.345] I> Reading GPT from 512 for device 00000003 [0001.350] I> Reading GPT from 8388096 for device 00000003 [0001.357] I> Found 6 partitions in 00000003 device [0001.361] I> Reading GPT from 512 for device 00010003 [0001.367] I> Found 17 partitions in 00010003 device [0001.372] W> No valid slot number is found in scratch register [0001.378] W> Return default slot: _a [0001.381] I> A/B: bin_type (1) slot 0 [0001.384] I> Select partition: kernel-dtb [0001.388] I> Loading partition kernel-dtb at 0x92000000 [0001.397] I> Kernel_dtb @0x92000000 [0001.400] I> Bl_dtb @0x85300000 [0001.403] I> gpio framework initialized [0001.407] I> tegrabl_gpio_driver_register: register 'tegra_gpio_main_driver' driver [0001.414] I> tegrabl_gpio_driver_register: register 'tegra_gpio_aon_driver' driver [0001.422] I> tegrabl_tca9539_init: i2c bus: 0, slave addr: 0xee [0001.430] I> tegrabl_gpio_driver_register: register 'tca9539_gpio_driver' driver [0001.438] I> tegrabl_tca9539_init: i2c bus: 0, slave addr: 0xe8 [0001.446] I> tegrabl_gpio_driver_register: register 'tca9539_gpio_driver' driver [0001.454] E> tegrabl_blob_init: BMP partition does not have valid Blob [0001.460] E> tegrabl_load_bmp_blob: BMP blob initialization failed [0001.466] W> Loading bmp blob to memory failed [0001.474] I> Find /i2c at c250000's alias i2c7 [0001.478] I> Reading eeprom i2c=7 address=0x50 [0001.508] I> Device at /i2c at c250000:0x50 [0001.512] I> Reading eeprom i2c=7 address=0x57 [0001.541] I> Device at /i2c at c250000:0x57 [0001.545] I> Find /i2c at c240000's alias i2c1 [0001.549] I> Reading eeprom i2c=1 address=0x51 [0001.555] I> Eeprom read failed 0x1a800027 [0001.559] I> Find /i2c at 3160000's alias i2c0 [0001.563] I> Reading eeprom i2c=0 address=0x50 [0001.569] I> Eeprom read failed 0x1a800027 [0001.574] I> Find /i2c at 3180000's alias i2c2 [0001.578] I> Reading eeprom i2c=2 address=0x54 [0001.582] I> Enabling gpio chip_id = 2, gpio pin = 9 [0001.612] I> Disabling gpio chip_id = 2, gpio pin = 9 [0001.618] I> Device at /i2c at 3180000:0x54 [0001.621] I> create_pm_ids: id: 3310-1000-B00-E, len: 15 [0001.626] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0001.637] I> create_pm_ids: id: 2597-0000-500-C, len: 15 [0001.643] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0001.653] I> create_pm_ids: id: 3326-1000-100-M, len: 15 [0001.659] I> config: mem-type:ff,power-config:ff,misc-config:ff,modem-config:ff,touch-config:ff,display-config:ff,, len: 93 [0001.670] initializing target [0001.673] calling apps_init() [0001.676] starting app android_boot_app [0001.680] I> Gpio keyboard init success [0001.683] I> Kernel type = Normal [0001.686] I> Loading kernel/boot.img ... [0001.690] W> No valid slot number is found in scratch register [0001.696] W> Return default slot: _a [0001.699] I> A/B: bin_type (0) slot 0 [0001.703] I> Select partition: kernel [0001.706] I> Loading partition kernel at 0xa8000000 [0001.787] W> No valid slot number is found in scratch register [0001.793] W> Return default slot: _a [0001.796] I> A/B: bin_type (1) slot 0 [0001.800] I> Select partition: kernel-dtb [0001.804] I> Loading partition kernel-dtb at 0x92000000 [0001.812] I> Kernel DTB @ 0x92000000 [0001.816] I> Verified boot state = Orange [0001.820] E> tegrabl_display_clear: display is not initialized [0001.825] I> Checking boot.img header magic ... [0001.830] I> [OK] [0001.831] I> Valid boot.img @ 0xa8000000 [0001.835] I> decompressor handler not found [0001.839] I> Copying kernel image (451792 bytes) from 0xa8000800 to 0x80080000 ... [0001.846] I> Done [0001.848] I> Move ramdisk (len: 6252235) from 0xa806f000 to 0x98000000 [0001.858] I> Updated bpmp info to DTB [0001.863] I> Ramdisk: Base: 0x98000000; Size: 0x5f66cb [0001.868] I> Updated initrd info to DTB [0001.872] I> disabled_core_mask: 0xffffff0c [0001.876] I> Kernel type = Normal [0001.879] I> add_serialno: Serial Num = 0320717048574 [0001.884] W> No valid slot number is found in scratch register [0001.890] W> Return default slot: _a [0001.893] I> Linux Cmdline: root=/dev/mmcblk1p1 rw rootwait fbcon=map:0 net.ifnames=0 console=tty0 OS=l4t console=ttyS0,115200n8 memtype=0 video=tegrafb no_console_suspend=1 earlycon=uart8250,mmio32,0x03100000 nvdumper_reserved=0xf7fc0000 gpt androidboot.secureos=none tegraid=18.1.2.0.0 tegra_keep_boot_clocks maxcpus=6 android.kerneltype=normal androidboot.serialno=0320717048574 androidboot.security=non-secure sdhci_tegra.en_boot_part_access=1 [0001.932] I> Updated bootarg info to DTB [0001.937] I> eeprom_get_mac_addr: MAC (type: 0): 00:04:4b:8c:3b:b6 [0001.943] I> eeprom_get_mac_addr: MAC (type: 1): 00:04:4b:8c:3b:b7 [0001.949] I> eeprom_get_mac_addr: MAC (type: 2): 00:04:4b:8c:3b:b8 [0001.956] E> "ids" doesn't exist, creating [0001.960] E> "connection" doesn't exist, creating [0001.964] E> "configs" doesn't exist, creating [0001.969] I> create_pm_ids: id: 3310-1000-B00-E, len: 15 [0001.974] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0001.985] I> create_pm_ids: id: 2597-0000-500-C, len: 15 [0001.990] I> config: mem-type:00,power-config:00,misc-config:00,modem-config:00,touch-config:00,display-config:00,, len: 93 [0002.001] I> create_pm_ids: id: 3326-1000-100-M, len: 15 [0002.006] I> config: mem-type:ff,power-config:ff,misc-config:ff,modem-config:ff,touch-config:ff,display-config:ff,, len: 93 [0002.017] I> Adding plugin-manager/ids/3310-1000-B00=/i2c at c250000:module at 0x50 [0002.024] E> "i2c at c250000" doesn't exist, creating [0002.028] E> "module at 0x50" doesn't exist, creating [0002.033] I> Adding plugin-manager/ids/2597-0000-500=/i2c at c250000:module at 0x57 [0002.040] E> "module at 0x57" doesn't exist, creating [0002.045] I> Adding plugin-manager/ids/3326-1000-100=/i2c at 3180000:module at 0x54 [0002.052] E> "i2c at 3180000" doesn't exist, creating [0002.057] E> "module at 0x54" doesn't exist, creating [0002.064] I> Adding plugin-manager/ids/3310-1000-B00-E [0002.071] I> Adding plugin-manager/configs/3310-mem-type 00 [0002.076] I> Adding plugin-manager/configs/3310-power-config 00 [0002.082] I> Adding plugin-manager/configs/3310-misc-config 00 [0002.088] I> Adding plugin-manager/configs/3310-modem-config 00 [0002.093] I> Adding plugin-manager/configs/3310-touch-config 00 [0002.099] I> Adding plugin-manager/configs/3310-display-config 00 [0002.105] E> "chip-id" doesn't exist, creating [0002.110] I> Adding plugin-manager/chip-id/A02P [0002.116] I> Updated memory info to DTB [0002.122] E> "reset" doesn't exist, creating [0002.126] E> "pmc-reset-reason" doesn't exist, creating [0002.131] E> "pmic-reset-reason" doesn't exist, creating [0002.137] I> disabled_core_mask: 0xffffff0c [0002.147] I> tegrabl_load_kernel_and_dtb: Done U-Boot 2017.05 (May 09 2017 - 20:03:11 -0400) TEGRA186 Model: NVIDIA P2771-0000-500 DRAM: 7.8 GiB MMC: Tegra SD/MMC: 0, Tegra SD/MMC: 1 *** Warning - bad CRC, using default environment In: serial Out: serial Err: serial Net: eth0: ethernet at 2490000 Hit any key to stop autoboot: 0 MMC: no card present mmc_init: -123, time 1 switch to partitions #0, OK mmc0(part 0) is current device Scanning mmc 0:1... Found /boot/extlinux/extlinux.conf Retrieving file: /boot/extlinux/extlinux.conf 838 bytes read in 89 ms (8.8 KiB/s) p2771-0000 eMMC boot options 1: primary kernel 2: secondary kernel 3: next kernel Enter choice: 3 3: next kernel Retrieving file: /boot/next/initramfs-linux.img 206796317 bytes read in 166219 ms (1.2 MiB/s) Retrieving file: /boot/next/Image 22598144 bytes read in 18260 ms (1.2 MiB/s) append: console=ttyS0,115200n8 root=UUID=7388bb07-be26-4f1d-a11c-48675d650192 rw rootfstype=ext4 rootwait Retrieving file: /boot/next/tegra186-p2771-0000.dtb 23524 bytes read in 90 ms (254.9 KiB/s) ## Flattened Device Tree blob at 82000000 Booting using the fdt blob at 0x82000000 Using Device Tree in place at 0000000082000000, end 0000000082008be3 Starting kernel ... [ 0.000000] Booting Linux on physical CPU 0x0000000100 [0x411fd073] [ 0.000000] Linux version 4.15.0-rc3-next-20171214-ARCH-AEDEN+ (root at rhino) (gcc version 7.2.0 (GCC)) #3 SMP Thu Dec 14 14:49:29 EST 2017 [ 0.000000] Machine model: NVIDIA Tegra186 P2771-0000 Development Board [ 0.000000] efi: Getting EFI parameters from FDT: [ 0.000000] efi: UEFI not found. [ 0.000000] cma: Reserved 64 MiB at 0x00000000f2000000 [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] random: fast init done [ 0.000000] percpu: Embedded 24 pages/cpu @ (ptrval) s60712 r8192 d29400 u98304 [ 0.000000] Detected PIPT I-cache on CPU0 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 2024064 [ 0.000000] Kernel command line: console=ttyS0,115200n8 root=UUID=7388bb07-be26-4f1d-a11c-48675d650192 rw rootfstype=ext4 rootwait [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] software IO TLB [mem 0xedfff000-0xf1fff000] (64MB) mapped at [ (ptrval)- (ptrval)] [ 0.000000] Memory: 7724192K/8224768K available (12604K kernel code, 2356K rwdata, 5572K rodata, 1472K init, 882K bss, 435040K reserved, 65536K cma-reserved) [ 0.000000] Virtual kernel memory layout: [ 0.000000] modules : 0xffff000000000000 - 0xffff000008000000 ( 128 MB) [ 0.000000] vmalloc : 0xffff000008000000 - 0xffff7dffbfff0000 (129022 GB) [ 0.000000] .text : 0x (ptrval) - 0x (ptrval) ( 12608 KB) [ 0.000000] .rodata : 0x (ptrval) - 0x (ptrval) ( 5632 KB) [ 0.000000] .init : 0x (ptrval) - 0x (ptrval) ( 1472 KB) [ 0.000000] .data : 0x (ptrval) - 0x (ptrval) ( 2357 KB) [ 0.000000] .bss : 0x (ptrval) - 0x (ptrval) ( 883 KB) [ 0.000000] fixed : 0xffff7dfffe7fb000 - 0xffff7dfffec00000 ( 4116 KB) [ 0.000000] PCI I/O : 0xffff7dfffee00000 - 0xffff7dffffe00000 ( 16 MB) [ 0.000000] vmemmap : 0xffff7e0000000000 - 0xffff800000000000 ( 2048 GB maximum) [ 0.000000] 0xffff7e0000000000 - 0xffff7e0008000000 ( 128 MB actual) [ 0.000000] memory : 0xffff800000000000 - 0xffff800200000000 ( 8192 MB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=6, Nodes=1 [ 0.000000] ftrace: allocating 45524 entries in 178 pages [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=6. [ 0.000000] Tasks RCU enabled. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=6 [ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 [ 0.000000] GIC: Using split EOI/Deactivate mode [ 0.000000] arch_timer: cp15 timer(s) running at 31.25MHz (phys). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xe6a171046, max_idle_ns: 881590405314 ns [ 0.000003] sched_clock: 56 bits at 31MHz, resolution 32ns, wraps every 4398046511088ns [ 0.000086] Console: colour dummy device 80x25 [ 0.000103] Calibrating delay loop (skipped), value calculated using timer frequency.. 62.50 BogoMIPS (lpj=312500) [ 0.000111] pid_max: default: 32768 minimum: 301 [ 0.000224] Security Framework initialized [ 0.000230] Yama: becoming mindful. [ 0.000305] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.000336] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.000994] ASID allocator initialised with 32768 entries [ 0.001039] Hierarchical SRCU implementation. [ 0.002442] Tegra Revision: A02 SKU: 220 CPU Process: 0 SoC Process: 0 [ 0.002599] EFI services will not be available. [ 0.002805] smp: Bringing up secondary CPUs ... [ 0.003684] Detected PIPT I-cache on CPU1 [ 0.003701] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_AA64DFR0_EL1. Boot CPU: 0x00000010305106, CPU1: 0x00000010305116 [ 0.003714] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_DFR0_EL1. Boot CPU: 0x00000003010066, CPU1: 0x00000003001066 [ 0.003727] CPU features: Unsupported CPU feature variation detected. [ 0.003773] CPU1: Booted secondary processor 0x0000000000 [0x4e0f0030] [ 0.004414] Detected PIPT I-cache on CPU2 [ 0.004428] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_AA64DFR0_EL1. Boot CPU: 0x00000010305106, CPU2: 0x00000010305116 [ 0.004441] CPU features: SANITY CHECK: Unexpected variation in SYS_ID_DFR0_EL1. Boot CPU: 0x00000003010066, CPU2: 0x00000003001066 [ 0.004481] CPU2: Booted secondary processor 0x0000000001 [0x4e0f0030] [ 0.004955] Detected PIPT I-cache on CPU3 [ 0.004987] CPU3: Booted secondary processor 0x0000000101 [0x411fd073] [ 0.005356] Detected PIPT I-cache on CPU4 [ 0.005375] CPU4: Booted secondary processor 0x0000000102 [0x411fd073] [ 0.005735] Detected PIPT I-cache on CPU5 [ 0.005755] CPU5: Booted secondary processor 0x0000000103 [0x411fd073] [ 0.005799] smp: Brought up 1 node, 6 CPUs [ 0.005822] SMP: Total of 6 processors activated. [ 0.005827] CPU features: detected feature: 32-bit EL0 Support [ 0.007353] CPU: All CPU(s) started at EL2 [ 0.009029] devtmpfs: initialized [ 0.011609] Built 1 zonelists, mobility grouping on. Total pages: 1947432 [ 0.012945] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.012958] futex hash table entries: 2048 (order: 6, 262144 bytes) [ 0.013231] pinctrl core: initialized pinctrl subsystem [ 0.013650] DMI not present or invalid. [ 0.013861] NET: Registered protocol family 16 [ 0.014566] cpuidle: using governor ladder [ 0.014630] cpuidle: using governor menu [ 0.014936] vdso: 2 pages (1 code @ 000000003bc0acf8, 1 data @ 00000000e823df22) [ 0.014944] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. [ 0.015648] DMA: preallocated 256 KiB pool for atomic allocations [ 0.015848] Serial: AMBA PL011 UART driver [ 0.021451] tegra-bpmp bpmp: firmware: c11dd04ae487c849cc552f8f702ed8 [ 0.956453] random: crng init done [ 1.174104] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 1.174283] cryptd: max_cpu_qlen set to 1000 [ 1.174716] ACPI: Interpreter disabled. [ 1.175407] vgaarb: loaded [ 1.175754] SCSI subsystem initialized [ 1.175944] usbcore: registered new interface driver usbfs [ 1.175965] usbcore: registered new interface driver hub [ 1.176021] usbcore: registered new device driver usb [ 1.176249] EDAC MC: Ver: 3.0.0 [ 1.176595] Advanced Linux Sound Architecture Driver Initialized. [ 1.176799] NetLabel: Initializing [ 1.176804] NetLabel: domain hash size = 128 [ 1.176807] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 1.176836] NetLabel: unlabeled traffic allowed by default [ 1.177036] clocksource: Switched to clocksource arch_sys_counter [ 1.223385] VFS: Disk quotas dquot_6.6.0 [ 1.223437] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.223657] pnp: PnP ACPI: disabled [ 1.229687] NET: Registered protocol family 2 [ 1.230011] tcp_listen_portaddr_hash hash table entries: 4096 (order: 5, 163840 bytes) [ 1.230089] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 1.230279] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes) [ 1.231125] TCP: Hash tables configured (established 65536 bind 65536) [ 1.231216] UDP hash table entries: 4096 (order: 6, 393216 bytes) [ 1.231356] UDP-Lite hash table entries: 4096 (order: 6, 393216 bytes) [ 1.231638] NET: Registered protocol family 1 [ 1.231984] RPC: Registered named UNIX socket transport module. [ 1.231990] RPC: Registered udp transport module. [ 1.231994] RPC: Registered tcp transport module. [ 1.231998] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 1.232086] Unpacking initramfs... [ 7.886445] Freeing initrd memory: 201948K [ 7.886989] kvm [1]: 8-bit VMID [ 7.886995] kvm [1]: IDMAP page: 80cc5000 [ 7.886999] kvm [1]: HYP VA range: 800000000000:ffffffffffff [ 7.887893] kvm [1]: virtual timer IRQ4 [ 7.888051] kvm [1]: Hyp mode initialized successfully [ 7.972760] Initialise system trusted keyrings [ 7.972847] workingset: timestamp_bits=46 max_order=21 bucket_order=0 [ 7.975420] zbud: loaded [ 7.976894] NFS: Registering the id_resolver key type [ 7.976906] Key type id_resolver registered [ 7.976910] Key type id_legacy registered [ 7.976918] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 7.977008] SGI XFS with ACLs, security attributes, no debug enabled [ 8.634269] NET: Registered protocol family 38 [ 8.634279] Key type asymmetric registered [ 8.634284] Asymmetric key parser 'x509' registered [ 8.634336] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245) [ 8.634418] io scheduler noop registered [ 8.634423] io scheduler deadline registered [ 8.634523] io scheduler cfq registered (default) [ 8.634528] io scheduler mq-deadline registered [ 8.634532] io scheduler kyber registered [ 8.634614] io scheduler bfq registered [ 8.638596] tegra-pcie 10003000.pcie: 4x1, 1x1 configuration [ 8.638622] tegra-pcie 10003000.pcie: Failed to get supply 'dvdd-pex': -517 [ 8.639104] ipmi message handler version 39.2 [ 8.641894] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 8.643058] console [ttyS0] disabled [ 8.643086] 3100000.serial: ttyS0 at MMIO 0x3100000 (irq = 22, base_baud = 25500000) is a Tegra [ 9.513489] console [ttyS0] enabled [ 9.517358] msm_serial: driver initialized [ 9.522534] arm-smmu 12000000.iommu: probing hardware configuration... [ 9.529061] arm-smmu 12000000.iommu: SMMUv2 with: [ 9.533753] arm-smmu 12000000.iommu: stage 1 translation [ 9.539143] arm-smmu 12000000.iommu: stage 2 translation [ 9.544528] arm-smmu 12000000.iommu: nested translation [ 9.549833] arm-smmu 12000000.iommu: stream matching with 128 register groups [ 9.557046] arm-smmu 12000000.iommu: 64 context banks (0 stage-2 only) [ 9.563646] arm-smmu 12000000.iommu: Supported page sizes: 0x61311000 [ 9.570163] arm-smmu 12000000.iommu: Stage-1: 48-bit VA -> 48-bit IPA [ 9.576674] arm-smmu 12000000.iommu: Stage-2: 48-bit IPA -> 48-bit PA [ 9.583583] cacheinfo: Unable to detect cache hierarchy for CPU 0 [ 9.592863] libphy: Fixed MDIO Bus: probed [ 9.598535] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 9.605074] ehci-pci: EHCI PCI platform driver [ 9.609645] ehci-platform: EHCI generic platform driver [ 9.615078] ehci-orion: EHCI orion driver [ 9.619235] tegra-ehci: Tegra EHCI driver [ 9.623405] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 9.629605] ohci-pci: OHCI PCI platform driver [ 9.634130] ohci-platform: OHCI generic platform driver [ 9.639481] uhci_hcd: USB Universal Host Controller Interface driver [ 9.646370] usbcore: registered new interface driver uas [ 9.651760] usbcore: registered new interface driver usb-storage [ 9.657816] usbcore: registered new interface driver ums-alauda [ 9.663749] usbcore: registered new interface driver ums-cypress [ 9.669937] usbcore: registered new interface driver ums-datafab [ 9.675990] usbcore: registered new interface driver ums_eneub6250 [ 9.682263] usbcore: registered new interface driver ums-freecom [ 9.688322] usbcore: registered new interface driver ums-isd200 [ 9.694271] usbcore: registered new interface driver ums-jumpshot [ 9.700403] usbcore: registered new interface driver ums-karma [ 9.706274] usbcore: registered new interface driver ums-onetouch [ 9.712437] usbcore: registered new interface driver ums-realtek [ 9.718473] usbcore: registered new interface driver ums-sddr09 [ 9.724428] usbcore: registered new interface driver ums-sddr55 [ 9.730389] usbcore: registered new interface driver ums-usbat [ 9.736303] usbcore: registered new interface driver usbserial_generic [ 9.742889] usbserial: USB Serial support registered for generic [ 9.750099] mousedev: PS/2 mouse device common for all mice [ 9.758336] max77620 0-003c: PMIC Version OTP:0x45 and ES:0x8 [ 9.768495] max77620-sd0: supplied by regulator-dummy [ 9.773704] VDD_DDR_1V1_PMIC: Bringing 1125000uV into 1100000-1100000uV [ 9.782137] max77620-sd1: supplied by regulator-dummy [ 9.788416] max77620-sd2: supplied by regulator-dummy [ 9.794707] max77620-sd3: supplied by regulator-dummy [ 9.801144] max77620-ldo0: supplied by regulator-dummy [ 9.807112] max77620-ldo1: supplied by regulator-dummy [ 9.812902] max77620-ldo2: supplied by regulator-dummy [ 9.819165] max77620-ldo3: supplied by regulator-dummy [ 9.824819] max77620-ldo4: supplied by regulator-dummy [ 9.830615] max77620-ldo5: supplied by regulator-dummy [ 9.835969] max77620-ldo6: supplied by regulator-dummy [ 9.841741] max77620-ldo7: supplied by regulator-dummy [ 9.846882] VDD_HDMI_1V05: Bringing 1000000uV into 1050000-1050000uV [ 9.854474] max77620-ldo8: supplied by regulator-dummy [ 9.859632] VDD_PEX_1V05: Bringing 1000000uV into 1050000-1050000uV [ 9.869954] max77620-thermal max77620-thermal: Failed to register thermal zone: -19 [ 9.878686] device-mapper: uevent: version 1.0.3 [ 9.883475] device-mapper: ioctl: 4.37.0-ioctl (2017-09-20) initialised: dm-devel at redhat.com [ 9.893440] sdhci: Secure Digital Host Controller Interface driver [ 9.899615] sdhci: Copyright(c) Pierre Ossman [ 9.904152] Synopsys Designware Multimedia Card Interface Driver [ 9.910485] sdhci-pltfm: SDHCI platform and OF driver helper [ 9.916252] sdhci-tegra 3400000.sdhci: Got CD GPIO [ 9.921043] sdhci-tegra 3400000.sdhci: Got WP GPIO [ 9.941116] mmc0: Unknown controller version (4). You may experience problems. [ 9.979732] mmc0: SDHCI controller on 3440000.sdhci [3440000.sdhci] using ADMA [ 9.995982] ledtrig-cpu: registered to indicate activity on CPUs [ 10.002441] hidraw: raw HID events driver (C) Jiri Kosina [ 10.008161] usbcore: registered new interface driver usbhid [ 10.013911] usbhid: USB HID core driver [ 10.019947] drop_monitor: Initializing network drop monitor service [ 10.026482] ip_tables: (C) 2000-2006 Netfilter Core Team [ 10.031796] Initializing XFRM netlink socket [ 10.036310] NET: Registered protocol family 10 [ 10.046212] Segment Routing with IPv6 [ 10.049908] mip6: Mobile IPv6 [ 10.052881] NET: Registered protocol family 17 [ 10.057760] Key type dns_resolver registered [ 10.062304] registered taskstats version 1 [ 10.066387] Loading compiled-in X.509 certificates [ 10.071355] zswap: loaded using pool lzo/zbud [ 10.076166] Key type big_key registered [ 10.084438] Key type encrypted registered [ 10.095040] VDD_1V8_AP: supplied by VDD_1V8 [ 10.099535] SD_CARD_SW_PWR: supplied by VDD_3V3_SYS [ 10.105069] tegra-pcie 10003000.pcie: 4x1, 1x1 configuration [ 10.111411] tegra-pcie 10003000.pcie: probing port 0, using 4 lanes [ 10.119686] tegra-pcie 10003000.pcie: Slot present pin change, signature: 00000018 [ 10.520807] tegra-pcie 10003000.pcie: link 0 down, retrying [ 10.929166] tegra-pcie 10003000.pcie: link 0 down, retrying [ 11.337537] tegra-pcie 10003000.pcie: link 0 down, retrying [ 11.345099] tegra-pcie 10003000.pcie: link 0 down, ignoring [ 11.350718] tegra-pcie 10003000.pcie: PCI host bridge to bus 0000:00 [ 11.357063] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 11.363227] pci_bus 0000:00: root bus resource [mem 0x50100000-0x57ffffff] [ 11.370090] pci_bus 0000:00: root bus resource [mem 0x58000000-0x7fffffff pref] [ 11.377385] pci_bus 0000:00: root bus resource [bus 00-ff] [ 11.383185] sdhci-tegra 3400000.sdhci: Got CD GPIO [ 11.387979] sdhci-tegra 3400000.sdhci: Got WP GPIO [ 11.401032] mmc1: Unknown controller version (4). You may experience problems. [ 11.439705] mmc1: SDHCI controller on 3400000.sdhci [3400000.sdhci] using ADMA [ 11.455777] mmc2: Unknown controller version (4). You may experience problems. [ 11.463395] mmc2: Switching to 3.3V signalling voltage failed [ 11.494708] mmc2: SDHCI controller on 3460000.sdhci [3460000.sdhci] using ADMA [ 11.502366] hctosys: unable to open rtc device (rtc0) [ 11.522802] VDD_RTC: disabling [ 11.525853] VDDIO_SDMMC3_AP: disabling [ 11.529804] SD_CARD_SW_PWR: disabling [ 11.533473] ALSA device list: [ 11.536434] No soundcards found. [ 11.541834] Freeing unused kernel memory: 1472K :: running early hook [udev] starting version 235 :: running hook [udev] :: Triggering uevents... [ 11.603154] mmc2: new high speed MMC card at address 0001 [ 11.608925] mmcblk2: mmc2:0001 032G34 29.1 GiB [ 11.613712] mmcblk2boot0: mmc2:0001 032G34 partition 1 4.00 MiB [ 11.619886] mmcblk2boot1: mmc2:0001 032G34 partition 2 4.00 MiB [ 11.625920] mmcblk2rpmb: mmc2:0001 032G34 partition 3 4.00 MiB, chardev (239:0) [ 11.635285] mmcblk2: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 [ 11.772763] pps_core: LinuxPPS API ver. 1 registered [ 11.775002] iommu: Adding device 13e00000.host1x to group 0 [ 11.775297] drm_panel_orientation_quirks: module license 'unspecified' taints kernel. [ 11.775299] Disabling lock debugging due to kernel taint [ 11.796414] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti at linux.it> [ 11.799988] iommu: Adding device 15200000.display to group 1 [ 11.811922] PTP clock support registered [ 11.812824] iommu: Adding device 15210000.display to group 1 [ 11.823853] iommu: Adding device 15220000.display to group 1 [ 11.825795] input: gpio-keys as /devices/platform/gpio-keys/input/input0 [ 11.839239] nouveau 17000000.gpu: NVIDIA GP10B (13b000a1) [ 11.844806] nouveau 17000000.gpu: imem: using DMA API [ 11.851345] tegra-dpaux 15040000.dpaux: 15040000.dpaux supply vdd not found, using dummy regulator [ 11.862495] WARNING: CPU: 1 PID: 254 at drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmmgf100.c:391 gf100_vmm_new_+0x60/0x128 [nouveau] [ 11.863458] tegra-dpaux 155c0000.dpaux: 155c0000.dpaux supply vdd not found, using dummy regulator [ 11.866197] tegra-sor 15580000.sor: failed to probe output: -517 [ 11.867149] tegra-sor 15580000.sor: failed to probe output: -517 [ 11.895136] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac gpio_keys nouveau(+) ptp tegra_drm i2c_algo_bit ttm drm_kms_helper drm drm_panel_orientation_quirks(P) syscopyarea sysfillrect sysimgblt fb_sys_fops host1x pps_core [ 11.916358] CPU: 1 PID: 254 Comm: systemd-udevd Tainted: P S 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 11.926685] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 11.933722] pstate: 80000005 (Nzcv daif -PAN -UAO) [ 11.939021] pc : gf100_vmm_new_+0x60/0x128 [nouveau] [ 11.944234] lr : gf100_vmm_new+0x70/0x98 [nouveau] [ 11.949015] sp : ffff00000a2234a0 [ 11.952321] x29: ffff00000a2234b0 x28: ffff0000091cf000 [ 11.957643] x27: ffff8001c880a808 x26: ffff00000114a080 [ 11.962960] x25: ffff0000010cd468 x24: ffff0000010cd3f0 [ 11.968275] x23: 0000000000000000 x22: 0000000000000000 [ 11.973578] x21: 0000000001000000 x20: 0000000000000000 [ 11.978879] x19: ffff8001c8be7000 x18: 0000000000000000 [ 11.984185] x17: 0000ffffc7939268 x16: 0000000000000000 [ 11.989490] x15: 0000000000000000 x14: 0000ffff8244eb60 [ 11.994791] x13: 0000000000000001 x12: 0400000000000001 [ 12.000095] x11: 0000000000000001 x10: ffff000049775000 [ 12.005398] x9 : 0000000000000000 x8 : ffff00000102a138 [ 12.010701] x7 : ffff00000114a080 x6 : 0000000000000000 [ 12.016005] x5 : 0000000000000000 x4 : 0000000001000000 [ 12.021310] x3 : 0000000000000000 x2 : ffff8001c8be7000 [ 12.026612] x1 : ffff0000010cd3f0 x0 : 0000000000000000 [ 12.031916] Call trace: [ 12.034601] gf100_vmm_new_+0x60/0x128 [nouveau] [ 12.039415] gf100_vmm_new+0x70/0x98 [nouveau] [ 12.044053] nvkm_vmm_new+0x78/0xb0 [nouveau] [ 12.048597] gf100_bar_oneinit_bar+0x90/0x120 [nouveau] [ 12.054012] gf100_bar_oneinit+0x74/0x88 [nouveau] [ 12.058989] nvkm_bar_oneinit+0x28/0x38 [nouveau] [ 12.063880] nvkm_subdev_init+0x6c/0x278 [nouveau] [ 12.068865] nvkm_device_init+0x150/0x2b0 [nouveau] [ 12.073942] nvkm_udevice_init+0x68/0x98 [nouveau] [ 12.078920] nvkm_object_init+0x48/0x1b8 [nouveau] [ 12.083898] nvkm_ioctl_new+0x160/0x2a8 [nouveau] [ 12.088789] nvkm_ioctl+0x118/0x290 [nouveau] [ 12.093340] nvkm_client_ioctl+0x48/0x60 [nouveau] [ 12.098318] nvif_object_ioctl+0x70/0x88 [nouveau] [ 12.103296] nvif_object_init+0xb8/0x170 [nouveau] [ 12.108273] nvif_device_init+0x50/0x80 [nouveau] [ 12.113171] nouveau_cli_init+0x170/0x520 [nouveau] [ 12.118243] nouveau_drm_load+0x50/0x888 [nouveau] [ 12.123079] drm_dev_register+0x15c/0x1f8 [drm] [ 12.127805] nouveau_platform_probe+0x4c/0x80 [nouveau] [ 12.133023] platform_drv_probe+0x60/0xc0 [ 12.137027] driver_probe_device+0x33c/0x4a0 [ 12.141306] __driver_attach+0xdc/0x128 [ 12.145147] bus_for_each_dev+0x5c/0xa8 [ 12.148987] driver_attach+0x30/0x40 [ 12.152566] bus_add_driver+0x218/0x2b8 [ 12.156394] driver_register+0x6c/0x118 [ 12.160222] __platform_driver_register+0x54/0x60 [ 12.165117] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.170074] do_one_initcall+0x44/0x138 [ 12.173904] do_init_module+0x64/0x1dc [ 12.177645] load_module+0x12f4/0x14b8 [ 12.181385] SyS_finit_module+0xd8/0xf0 [ 12.185212] el0_svc_naked+0x20/0x24 [ 12.188779] ---[ end trace d2c905bc981fb633 ]--- [ 12.193437] nouveau 17000000.gpu: bar: one-time init failed, -22 [ 12.199614] nouveau 17000000.gpu: init failed with -22 [ 12.204752] nouveau: DRM-master:00000000:00000080: init failed with -22 [ 12.211394] Unable to handle kernel NULL pointer dereference at virtual address 00000510 [ 12.219487] Mem abort info: [ 12.222279] ESR = 0x96000004 [ 12.225328] Exception class = DABT (current EL), IL = 32 bits [ 12.231248] SET = 0, FnV = 0 [ 12.234294] EA = 0, S1PTW = 0 [ 12.237437] Data abort info: [ 12.240319] ISV = 0, ISS = 0x00000004 [ 12.244155] CM = 0, WnR = 0 [ 12.247133] user pgtable: 4k pages, 48-bit VAs, pgd = 00000000fe9c3e9c [ 12.253646] [0000000000000510] *pgd=0000000000000000 [ 12.258616] Internal error: Oops: 96000004 [#1] SMP [ 12.263483] Modules linked in: dwmac_dwc_qos_eth(+) stmmac_platform stmmac gpio_keys nouveau(+) ptp tegra_drm i2c_algo_bit ttm drm_kms_helper drm drm_panel_orientation_quirks(P) syscopyarea sysfillrect sysimgblt fb_sys_fops host1x pps_core [ 12.284706] CPU: 2 PID: 254 Comm: systemd-udevd Tainted: P S W 4.15.0-rc3-next-20171214-ARCH-AEDEN+ #3 [ 12.295033] Hardware name: NVIDIA Tegra186 P2771-0000 Development Board (DT) [ 12.302069] pstate: 40000005 (nZcv daif -PAN -UAO) [ 12.307070] pc : nouveau_cli_init+0x114/0x520 [nouveau] [ 12.312489] lr : nouveau_cli_init+0x170/0x520 [nouveau] [ 12.317702] sp : ffff00000a223950 [ 12.321011] x29: ffff00000a223950 x28: ffff0000091cf000 [ 12.326334] x27: ffff000001149ed0 x26: ffff000001149e80 [ 12.331652] x25: 0000000000000000 x24: ffff00000114a080 [ 12.336955] x23: ffff00000114a268 x22: ffff8001c9088088 [ 12.342271] x21: ffff8001c9088000 x20: 00000000ffffffea [ 12.347574] x19: ffff8001c9088000 x18: 0000000000000010 [ 12.352878] x17: ffffffffffffffff x16: ffff0000082d0a00 [ 12.358193] x15: ffffffffffffffff x14: ffff0000896176e7 [ 12.363511] x13: ffff0000096176f5 x12: ffff0000093f3000 [ 12.368826] x11: ffff0000093cbb48 x10: ffff000008761768 [ 12.374143] x9 : 00000000ffffffd0 x8 : ffff8001c8be6c00 [ 12.379446] x7 : 2074696e69203a30 x6 : ffff7e0007146f40 [ 12.384761] x5 : ffff000000fc481c x4 : 0000000000000000 [ 12.390066] x3 : ffff8001c51bd500 x2 : ffff7e0007146f50 [ 12.395370] x1 : ffff000001124450 x0 : 0000000000000000 [ 12.400678] Process systemd-udevd (pid: 254, stack limit = 0x00000000d789001d) [ 12.407885] Call trace: [ 12.410544] nouveau_cli_init+0x114/0x520 [nouveau] [ 12.415616] nouveau_drm_load+0x50/0x888 [nouveau] [ 12.420451] drm_dev_register+0x15c/0x1f8 [drm] [ 12.425177] nouveau_platform_probe+0x4c/0x80 [nouveau] [ 12.430396] platform_drv_probe+0x60/0xc0 [ 12.434400] driver_probe_device+0x33c/0x4a0 [ 12.438661] __driver_attach+0xdc/0x128 [ 12.442489] bus_for_each_dev+0x5c/0xa8 [ 12.446316] driver_attach+0x30/0x40 [ 12.449884] bus_add_driver+0x218/0x2b8 [ 12.453712] driver_register+0x6c/0x118 [ 12.457538] __platform_driver_register+0x54/0x60 [ 12.462429] nouveau_drm_init+0x164/0x1000 [nouveau] [ 12.467387] do_one_initcall+0x44/0x138 [ 12.471217] do_init_module+0x64/0x1dc [ 12.474967] load_module+0x12f4/0x14b8 [ 12.478708] SyS_finit_module+0xd8/0xf0 [ 12.482535] el0_svc_naked+0x20/0x24 [ 12.486105] Code: 95f0c4c1 34000214 58001ee1 f94166a0 (f9428800) [ 12.492208] ---[ end trace d2c905bc981fb634 ]--- :: performing fsck on '/dev/mmcblk2p1' /dev/mmcblk2p1: clean, 436346/1835008 files, 6280355/7340032 blocks :: mounting '/dev/mmcblk2p1' on real root [ 132.060222] EXT4-fs (mmcblk2p1): mounted filesystem with ordered data mode. Opts: (null) :: running cleanup hook [udev]
Apparently Analagous Threads
- [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
- GP10B regression
- [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
- [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)
- [bug report] null ptr deref in nouveau_platform_probe (tegra186-p2771-0000)