Bug 38138 - [SNB] mplayer –vo fbdev videofile will cause system hang on HuronRiver
Summary: [SNB] mplayer –vo fbdev videofile will cause system hang on HuronRiver
Status: CLOSED FIXED
Alias: None
Product: DRI
Classification: Unclassified
Component: DRM/Intel (show other bugs)
Version: XOrg git
Hardware: Other Linux (All)
: medium normal
Assignee: Chris Wilson
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-09 23:14 UTC by bo.b.wang
Modified: 2017-10-06 14:52 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments
Use the BLT for fbdev (40.81 KB, patch)
2011-07-10 04:14 UTC, Chris Wilson
no flags Details | Splinter Review
Clip the clear of the right-hand margin. (1.33 KB, patch)
2012-03-26 11:20 UTC, Chris Wilson
no flags Details | Splinter Review
Validate requested panning size (1.87 KB, patch)
2012-03-26 13:13 UTC, Chris Wilson
no flags Details | Splinter Review

Description bo.b.wang 2011-06-09 23:14:08 UTC
System Environment:
--------------------------
kernel (drm-intel-fixes)2fb4e61d9471867677c97bf11dba8f1e9dfa7f7c
platform: HuronRiver 

Bug detailed description:
-------------------------
when do "mplayer -vo fbdev videofile" will cause system hang.

Reproduce steps:
----------------
1. no X
2. mplayer -vo fbdev videofile
Comment 1 Jesse Barnes 2011-06-16 12:27:59 UTC
Nanhai, can you take a look?
Comment 2 bo.b.wang 2011-06-30 17:46:48 UTC
(In reply to comment #0)
> System Environment:
> --------------------------
> kernel (drm-intel-fixes)2fb4e61d9471867677c97bf11dba8f1e9dfa7f7c
> platform: HuronRiver 
> 
> Bug detailed description:
> -------------------------
> when do "mplayer -vo fbdev videofile" will cause system hang.
> 
> Reproduce steps:
> ----------------
> 1. no X
> 2. mplayer -vo fbdev videofile

Hello  Chris:
I have found that if I login testmachine with ssh and  do that command , this would do cause testmachine hang, But If I do that command in the localhost of testmachine, it would works well.
Comment 3 Chris Wilson 2011-07-10 04:14:14 UTC
Created attachment 48933 [details] [review]
Use the BLT for fbdev

Right, I'm still able to reproduce this on -next, but similarly only over ssh. The one time I got a hang, but had not the good sense to write it down, it looked like a buffer overrun.

With the attached patch, mplayer works again, but the bug is more likely the stride mishandling that is fixed within that patch.
Comment 4 Chris Wilson 2011-12-06 14:33:05 UTC
And by accident I triggered it:

[ 1399.719063] BUG: unable to handle kernel paging request at ffffc90011909540
[ 1399.719075] IP: [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.719093] PGD 13d80f067 PUD 13d830067 PMD 131f96067 PTE 0
[ 1399.719104] Oops: 0002 [#1] SMP 
[ 1399.719112] CPU 0 
[ 1399.719116] Modules linked in: nfs lockd fscache auth_rpcgss nfs_acl 8021q garp stp llc sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf snd_hda_codec_hdmi snd_hda_codec_idt arc4 iwlagn mac80211 cfg80211 snd_hda_intel snd_hda_codec snd_hwdep e1000e snd_seq snd_seq_device snd_pcm snd_timer snd uvcvideo hp_wmi sparse_keymap rfkill iTCO_wdt soundcore snd_page_alloc videodev ppdev parport_pc parport wmi iTCO_vendor_support serio_raw pcspkr tpm_infineon microcode v4l2_compat_ioctl32 joydev uinput ipv6 sdhci_pci firewire_ohci sdhci mmc_core firewire_core crc_itu_t i915 drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: scsi_wait_scan]
[ 1399.719213] 
[ 1399.719221] Pid: 7653, comm: mplayer Not tainted 3.1.0-rc6+ #38 Hewlett-Packard HP ProBook 6360b/1620
[ 1399.719233] RIP: 0010:[<ffffffff8127f687>]  [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.719247] RSP: 0018:ffff8801346e37e8  EFLAGS: 00010206
[ 1399.719253] RAX: 0000000000000003 RBX: 00000000000000c0 RCX: 0000000000000003
[ 1399.719260] RDX: ffffc90011909540 RSI: ffffc90011909540 RDI: ff000000ff000000
[ 1399.719267] RBP: ffff8801346e37f8 R08: ffffc90011909548 R09: 0000000000000040
[ 1399.719274] R10: 0000000000000000 R11: ffffffffffffffff R12: 0000000000000000
[ 1399.719280] R13: ffff880130a23000 R14: 00000000000000c0 R15: ffffc90011909540
[ 1399.719289] FS:  00007f7f6864b780(0000) GS:ffff88013dc00000(0000) knlGS:0000000000000000
[ 1399.719297] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1399.719303] CR2: ffffc90011909540 CR3: 000000011a9af000 CR4: 00000000000406f0
[ 1399.719310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1399.719317] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1399.719325] Process mplayer (pid: 7653, threadinfo ffff8801346e2000, task ffff8801331bc560)
[ 1399.719330] Stack:
[ 1399.719334]  ff000000ff000000 0000000000000000 ffff8801346e3878 ffffffff8127f4c6
[ 1399.719346]  0000000100000000 ffff88013329ec00 ffff88013329ecb8 0000ffff0000ffff
[ 1399.719357]  ffffffff8127f5ae 0000ffff00000010 0000000600000006 0000000000000300
[ 1399.719367] Call Trace:
[ 1399.719379]  [<ffffffff8127f4c6>] cfb_fillrect+0x1f2/0x2da
[ 1399.719388]  [<ffffffff8127f5ae>] ? cfb_fillrect+0x2da/0x2da
[ 1399.719402]  [<ffffffff8127b57e>] bit_clear_margins+0xbc/0xfa
[ 1399.719412]  [<ffffffff8127144e>] ? fb_set_cmap+0xe6/0xf7
[ 1399.719423]  [<ffffffff81275889>] fbcon_clear_margins+0x4e/0x57
[ 1399.719434]  [<ffffffff8127952e>] fbcon_switch+0x371/0x3d9
[ 1399.719446]  [<ffffffff812d4c19>] redraw_screen+0xef/0x171
[ 1399.719457]  [<ffffffff81276662>] fbcon_modechanged+0x154/0x173
[ 1399.719468]  [<ffffffff8127a419>] fbcon_event_notify+0xbf/0x61e
[ 1399.719481]  [<ffffffff81497d13>] notifier_call_chain+0x37/0x63
[ 1399.719497]  [<ffffffff8107642b>] __blocking_notifier_call_chain+0x4b/0x60
[ 1399.719509]  [<ffffffff81076454>] blocking_notifier_call_chain+0x14/0x16
[ 1399.719518]  [<ffffffff8126cc97>] fb_notifier_call_chain+0x1b/0x1d
[ 1399.719527]  [<ffffffff8126db2d>] fb_set_var+0x2a9/0x2cb
[ 1399.719543]  [<ffffffff8123d5f8>] ? radix_tree_lookup_slot+0xe/0x10
[ 1399.719553]  [<ffffffff810da671>] ? find_get_page+0x48/0x6a
[ 1399.719565]  [<ffffffff810430e3>] ? should_resched+0xe/0x2d
[ 1399.719575]  [<ffffffff812396d7>] ? cpumask_any_but+0x27/0x38
[ 1399.719585]  [<ffffffff814949fc>] ? _raw_spin_unlock_irqrestore+0x17/0x19
[ 1399.719595]  [<ffffffff8126dca8>] do_fb_ioctl+0x159/0x4d4
[ 1399.719610]  [<ffffffff811facc2>] ? avc_has_perm_flags+0x61/0x7a
[ 1399.719621]  [<ffffffff811fbd3c>] ? inode_has_perm+0x32/0x34
[ 1399.719630]  [<ffffffff8126e42c>] fb_ioctl+0x34/0x36
[ 1399.719641]  [<ffffffff81133717>] do_vfs_ioctl+0x452/0x493
[ 1399.719652]  [<ffffffff811337ae>] sys_ioctl+0x56/0x7c
[ 1399.719662]  [<ffffffff8149b142>] system_call_fastpath+0x16/0x1b
[ 1399.719668] Code: 42 38 48 83 c2 40 49 89 38 83 e9 08 83 f9 07 77 d2 89 c2 83 e0 07 c1 ea 03 89 c1 48 c1 e2 06 48 01 d6 48 89 f2 eb 0c 4c 8d 42 08 
[ 1399.719711]  89 3a ff c9 4c 89 c2 85 c9 75 f0 4d 85 e4 48 8d 04 c6 74 0f 
[ 1399.719731] RIP  [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.719742]  RSP <ffff8801346e37e8>
[ 1399.719746] CR2: ffffc90011909540
[ 1399.828111] BUG: unable to handle kernel paging request at ffffc90011909540
[ 1399.828120] IP: [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.828135] PGD 13d80f067 PUD 13d830067 PMD 131f96067 PTE 0
[ 1399.828144] Oops: 0002 [#2] SMP 
[ 1399.828150] CPU 0 
[ 1399.828153] Modules linked in: nfs lockd fscache auth_rpcgss nfs_acl 8021q garp stp llc sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf snd_hda_codec_hdmi snd_hda_codec_idt arc4 iwlagn mac80211 cfg80211 snd_hda_intel snd_hda_codec snd_hwdep e1000e snd_seq snd_seq_device snd_pcm snd_timer snd uvcvideo hp_wmi sparse_keymap rfkill iTCO_wdt soundcore snd_page_alloc videodev ppdev parport_pc parport wmi iTCO_vendor_support serio_raw pcspkr tpm_infineon microcode v4l2_compat_ioctl32 joydev uinput ipv6 sdhci_pci firewire_ohci sdhci mmc_core firewire_core crc_itu_t i915 drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: scsi_wait_scan]
[ 1399.828222] 
[ 1399.828228] Pid: 7653, comm: mplayer Not tainted 3.1.0-rc6+ #38 Hewlett-Packard HP ProBook 6360b/1620
[ 1399.828236] RIP: 0010:[<ffffffff8127f687>]  [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.828245] RSP: 0018:ffff8801346e3188  EFLAGS: 00010206
[ 1399.828249] RAX: 0000000000000003 RBX: 00000000000000c0 RCX: 0000000000000003
[ 1399.828254] RDX: ffffc90011909540 RSI: ffffc90011909540 RDI: ff000000ff000000
[ 1399.828259] RBP: ffff8801346e3198 R08: ffffc90011909548 R09: 0000000000000040
[ 1399.828263] R10: 0000000000000000 R11: ffffffffffffffff R12: 0000000000000000
[ 1399.828268] R13: ffff880130a23000 R14: 00000000000000c0 R15: ffffc90011909540
[ 1399.828274] FS:  00007f7f6864b780(0000) GS:ffff88013dc00000(0000) knlGS:0000000000000000
[ 1399.828280] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 1399.828284] CR2: ffffc90011909540 CR3: 000000011a9af000 CR4: 00000000000406f0
[ 1399.828290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1399.828295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1399.828300] Process mplayer (pid: 7653, threadinfo ffff8801346e2000, task ffff8801331bc560)
[ 1399.828304] Stack:
[ 1399.828307]  ff000000ff000000 0000000000000000 ffff8801346e3218 ffffffff8127f4c6
[ 1399.828315]  0000000100000000 ffff88013329ec00 ffff88013329ecb8 0000ffff0000ffff
[ 1399.828322]  ffffffff8127f5ae 0000ffff00000010 0000000600000006 0000000000000300
[ 1399.828329] Call Trace:
[ 1399.828337]  [<ffffffff8127f4c6>] cfb_fillrect+0x1f2/0x2da
[ 1399.828344]  [<ffffffff8127f5ae>] ? cfb_fillrect+0x2da/0x2da
[ 1399.828354]  [<ffffffff8127b57e>] bit_clear_margins+0xbc/0xfa
[ 1399.828361]  [<ffffffff8127144e>] ? fb_set_cmap+0xe6/0xf7
[ 1399.828369]  [<ffffffff81275889>] fbcon_clear_margins+0x4e/0x57
[ 1399.828377]  [<ffffffff8127952e>] fbcon_switch+0x371/0x3d9
[ 1399.828387]  [<ffffffff812d4c19>] redraw_screen+0xef/0x171
[ 1399.828394]  [<ffffffff81278081>] fbcon_blank+0x1a4/0x1e8
[ 1399.828404]  [<ffffffff81084ae7>] ? arch_local_irq_save+0x15/0x1b
[ 1399.828412]  [<ffffffff814949aa>] ? _raw_spin_lock_irqsave+0x12/0x2f
[ 1399.828419]  [<ffffffff814949fc>] ? _raw_spin_unlock_irqrestore+0x17/0x19
[ 1399.828429]  [<ffffffff81063d05>] ? __mod_timer+0x131/0x143
[ 1399.828436]  [<ffffffff812d64d5>] do_unblank_screen+0xf2/0x144
[ 1399.828443]  [<ffffffff812d6537>] unblank_screen+0x10/0x12
[ 1399.828452]  [<ffffffff81245099>] bust_spinlocks+0x15/0x34
[ 1399.828458]  [<ffffffff81495af0>] oops_end+0x3e/0xc5
[ 1399.828465]  [<ffffffff8148b1d2>] no_context+0x203/0x212
[ 1399.828471]  [<ffffffff8148b3ac>] __bad_area_nosemaphore+0x1cb/0x1ec
[ 1399.828477]  [<ffffffff8148aa48>] ? pte_offset_kernel+0x19/0x3f
[ 1399.828483]  [<ffffffff8148aa48>] ? pte_offset_kernel+0x19/0x3f
[ 1399.828489]  [<ffffffff8148b3e0>] bad_area_nosemaphore+0x13/0x15
[ 1399.828497]  [<ffffffff81497b16>] do_page_fault+0x1b8/0x37e
[ 1399.828503]  [<ffffffff81240fe0>] ? number+0x13a/0x256
[ 1399.828513]  [<ffffffff810e0697>] ? __free_one_page+0x21f/0x236
[ 1399.828522]  [<ffffffff810e0b1f>] ? __free_pages_ok+0xc9/0xd8
[ 1399.828533]  [<ffffffff81495075>] page_fault+0x25/0x30
[ 1399.828540]  [<ffffffff8127f687>] ? bitfill_aligned+0xd9/0x102
[ 1399.828546]  [<ffffffff8127f4c6>] cfb_fillrect+0x1f2/0x2da
[ 1399.828551]  [<ffffffff8127f5ae>] ? cfb_fillrect+0x2da/0x2da
[ 1399.828560]  [<ffffffff8127b57e>] bit_clear_margins+0xbc/0xfa
[ 1399.828566]  [<ffffffff8127144e>] ? fb_set_cmap+0xe6/0xf7
[ 1399.828574]  [<ffffffff81275889>] fbcon_clear_margins+0x4e/0x57
[ 1399.828581]  [<ffffffff8127952e>] fbcon_switch+0x371/0x3d9
[ 1399.828589]  [<ffffffff812d4c19>] redraw_screen+0xef/0x171
[ 1399.828597]  [<ffffffff81276662>] fbcon_modechanged+0x154/0x173
[ 1399.828605]  [<ffffffff8127a419>] fbcon_event_notify+0xbf/0x61e
[ 1399.828612]  [<ffffffff81497d13>] notifier_call_chain+0x37/0x63
[ 1399.828623]  [<ffffffff8107642b>] __blocking_notifier_call_chain+0x4b/0x60
[ 1399.828632]  [<ffffffff81076454>] blocking_notifier_call_chain+0x14/0x16
[ 1399.828638]  [<ffffffff8126cc97>] fb_notifier_call_chain+0x1b/0x1d
[ 1399.828644]  [<ffffffff8126db2d>] fb_set_var+0x2a9/0x2cb
[ 1399.828656]  [<ffffffff8123d5f8>] ? radix_tree_lookup_slot+0xe/0x10
[ 1399.828663]  [<ffffffff810da671>] ? find_get_page+0x48/0x6a
[ 1399.828671]  [<ffffffff810430e3>] ? should_resched+0xe/0x2d
[ 1399.828678]  [<ffffffff812396d7>] ? cpumask_any_but+0x27/0x38
[ 1399.828685]  [<ffffffff814949fc>] ? _raw_spin_unlock_irqrestore+0x17/0x19
[ 1399.828692]  [<ffffffff8126dca8>] do_fb_ioctl+0x159/0x4d4
[ 1399.828703]  [<ffffffff811facc2>] ? avc_has_perm_flags+0x61/0x7a
[ 1399.828711]  [<ffffffff811fbd3c>] ? inode_has_perm+0x32/0x34
[ 1399.828717]  [<ffffffff8126e42c>] fb_ioctl+0x34/0x36
[ 1399.828725]  [<ffffffff81133717>] do_vfs_ioctl+0x452/0x493
[ 1399.828733]  [<ffffffff811337ae>] sys_ioctl+0x56/0x7c
[ 1399.828740]  [<ffffffff8149b142>] system_call_fastpath+0x16/0x1b
[ 1399.828744] Code: 42 38 48 83 c2 40 49 89 38 83 e9 08 83 f9 07 77 d2 89 c2 83 e0 07 c1 ea 03 89 c1 48 c1 e2 06 48 01 d6 48 89 f2 eb 0c 4c 8d 42 08 
[ 1399.828773]  89 3a ff c9 4c 89 c2 85 c9 75 f0 4d 85 e4 48 8d 04 c6 74 0f 
[ 1399.828787] RIP  [<ffffffff8127f687>] bitfill_aligned+0xd9/0x102
[ 1399.828794]  RSP <ffff8801346e3188>
[ 1399.828796] CR2: ffffc90011909540
[ 1399.828801] ---[ end trace e7ec26782dab8f56 ]---
Comment 5 Chris Wilson 2012-03-26 10:54:17 UTC
[   80.586972] clear right margin (1360, 0)x(6, 768)
[   92.299169] clear right margin (1360, 0)x(6, 1536)
[   92.299407] BUG: unable to handle kernel paging request at ffffc90011f09540
[   92.299414] IP: [<ffffffff811eebf7>] bitfill_aligned+0xcf/0xf6
[   92.299429] PGD 13d023067 PUD 13d024067 PMD 136b86067 PTE 0
[   92.299437] Oops: 0002 [#1] SMP 
[   92.299443] CPU 0 
[   92.299445] Modules linked in: cpufreq_conservative cpufreq_powersave cpufreq_userspace cpufreq_stats ppdev lp bnep rfcomm bluetooth binfmt_misc uinput fuse nfsd nfs lockd fscache auth_rpcgss nfs_acl sunrpc loop firewire_sbp2 snd_hda_codec_hdmi snd_hda_codec_idt iwlwifi coretemp snd_hda_intel uvcvideo videobuf2_core videodev crc32c_intel i915 snd_hda_codec snd_hwdep mac80211 ghash_clmulni_intel aesni_intel snd_pcm media v4l2_compat_ioctl32 videobuf2_vmalloc snd_seq cryptd videobuf2_memops drm_kms_helper drm snd_timer snd_seq_device acpi_cpufreq parport_pc tpm_infineon aes_x86_64 hp_wmi sparse_keymap mperf aes_generic tpm_tis tpm joydev cfg80211 processor snd iTCO_wdt rfkill microcode psmouse parport tpm_bios battery ac soundcore snd_page_alloc i2c_algo_bit pcspkr evdev i2c_core video iTCO_vendor_support container wmi hp_accel lis3lv02d power_supply input_polldev serio_raw button ext4 mbcache jbd2 crc16 sr_mod sd_mod cdrom crc_t10dif ahci libahci libata scsi_mod firewire_ohci firewire_core crc_itu_t ehci_hcd usbcore usb_common sdhci_pci sdhci mmc_core e1000e thermal thermal_sys [last unloaded: scsi_wait_scan]
[   92.299554] 
[   92.299559] Pid: 2432, comm: mplayer Not tainted 3.3.0+ #6 Hewlett-Packard HP ProBook 6360b/1620
[   92.299567] RIP: 0010:[<ffffffff811eebf7>]  [<ffffffff811eebf7>] bitfill_aligned+0xcf/0xf6
[   92.299577] RSP: 0018:ffff8801240dd8c0  EFLAGS: 00010206
[   92.299582] RAX: 0000000000000003 RBX: 00000000000000c0 RCX: 0000000000000003
[   92.299586] RDX: ffffc90011f09540 RSI: ffffc90011f09540 RDI: ff000000ff000000
[   92.299591] RBP: 0000000000000000 R08: ffffc90011f09548 R09: 0000000000000040
[   92.299595] R10: 0000000000000000 R11: ffffffffffffffff R12: ff000000ff000000
[   92.299600] R13: ffffc90011f09540 R14: 00000000000002ff R15: ffffffff811eeb28
[   92.299606] FS:  00007f2282e617a0(0000) GS:ffff88013dc00000(0000) knlGS:0000000000000000
[   92.299611] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[   92.299615] CR2: ffffc90011f09540 CR3: 000000011dacb000 CR4: 00000000000407f0
[   92.299620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.299625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   92.299631] Process mplayer (pid: 2432, threadinfo ffff8801240dc000, task ffff88011e2a7850)
[   92.299634] Stack:
[   92.299637]  0000000000000000 ffff880124fd0800 ffffffff811eea35 0000000000000000
[   92.299644]  ffffffff81350f96 ffffffff817e4030 ffffffff00000028 000000c00000aa00
[   92.299651]  ffff880100000006 ffff880124fd0800 ffff880124fd0800 0000000000000550
[   92.299658] Call Trace:
[   92.299668]  [<ffffffff811eea35>] ? cfb_fillrect+0x1f1/0x2e4
[   92.299678]  [<ffffffff81350f96>] ? printk+0x43/0x48
[   92.299686]  [<ffffffff811eafcf>] ? bit_clear_margins+0xcb/0x121
[   92.299693]  [<ffffffff811e8331>] ? fbcon_switch+0x35c/0x3c5
[   92.299704]  [<ffffffff8123dd1c>] ? redraw_screen+0xe5/0x187
[   92.299711]  [<ffffffff811e6e15>] ? fbcon_modechanged+0x148/0x16e
[   92.299718]  [<ffffffff811e9fcb>] ? fbcon_event_notify+0xb4/0x5f9
[   92.299728]  [<ffffffff81359a36>] ? notifier_call_chain+0x2e/0x5b
[   92.299737]  [<ffffffff81058213>] ? should_resched+0x5/0x23
[   92.299744]  [<ffffffff810566c1>] ? __blocking_notifier_call_chain+0x48/0x5e
[   92.299753]  [<ffffffff811dec5b>] ? fb_set_var+0x363/0x385
[   92.299763]  [<ffffffff81061989>] ? check_preempt_wakeup+0x113/0x17a
[   92.299770]  [<ffffffff8106083c>] ? update_curr+0x5c/0xef
[   92.299777]  [<ffffffff8135689c>] ? _raw_spin_lock_irqsave+0x9/0x25
[   92.299785]  [<ffffffff811dedc8>] ? do_fb_ioctl+0x14b/0x4f1
[   92.299794]  [<ffffffff8110ac35>] ? fasync_remove_entry+0x1f/0x8a
[   92.299803]  [<ffffffff8122ebb9>] ? tty_release+0x3cf/0x4aa
[   92.299811]  [<ffffffff810ef9ae>] ? kfree+0x5b/0x6c
[   92.299817]  [<ffffffff8122ec53>] ? tty_release+0x469/0x4aa
[   92.299823]  [<ffffffff8110b652>] ? do_vfs_ioctl+0x45a/0x49b
[   92.299832]  [<ffffffff81098a5b>] ? __call_rcu+0x4e/0x1a1
[   92.299838]  [<ffffffff8110e357>] ? dput+0x26/0xf4
[   92.299844]  [<ffffffff810ff594>] ? fput+0x1ae/0x1d5
[   92.299850]  [<ffffffff8110b6de>] ? sys_ioctl+0x4b/0x71
[   92.299858]  [<ffffffff810fcd11>] ? filp_close+0x62/0x6a
[   92.299865]  [<ffffffff8135b9f9>] ? system_call_fastpath+0x16/0x1b
[   92.299869] Code: 42 38 48 83 c2 40 49 89 38 83 e9 08 83 f9 07 77 d2 89 c2 83 e0 07 c1 ea 03 89 c1 48 c1 e2 06 48 01 d6 48 89 f2 eb 0c 4c 8d 42 08 <48> 89 3a ff c9 4c 89 c2 85 c9 75 f0 48 85 ed 48 8d 04 c6 74 0f 
[   92.299912] RIP  [<ffffffff811eebf7>] bitfill_aligned+0xcf/0xf6
[   92.299920]  RSP <ffff8801240dd8c0>
[   92.299923] CR2: ffffc90011f09540
[   92.299927] ---[ end trace 1e333df8dbe7a8ed ]---
Comment 6 Chris Wilson 2012-03-26 11:20:17 UTC
Created attachment 59083 [details] [review]
Clip the clear of the right-hand margin.
Comment 7 Chris Wilson 2012-03-26 13:13:38 UTC
Created attachment 59090 [details] [review]
Validate requested panning size
Comment 8 Chris Wilson 2012-04-03 03:31:31 UTC
Applied to airlied/drm-fixes:

commit 62fb376e214d3c1bfdf6fbb77dac162f6da04d7e
Author: Chris Wilson <chris@chris-wilson.co.uk>
Date:   Mon Mar 26 21:15:53 2012 +0100

    drm: Validate requested virtual size against allocated fb size
    
    mplayer -vo fbdev tries to create a screen that is twice as tall as the
    allocated framebuffer for "doublebuffering". By default, and all in-tree
    users, only sufficient memory is allocated and mapped to satisfy the
    smallest framebuffer and the virtual size is no larger than the actual.
    For these users, we should therefore reject any userspace request to
    create a screen that requires a buffer larger than the framebuffer
    originally allocated.
    
    References: https://bugs.freedesktop.org/show_bug.cgi?id=38138
    Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
    Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
    Cc: stable@kernel.org
    Signed-off-by: Dave Airlie <airlied@redhat.com>
Comment 9 Guang Yang 2012-04-10 01:31:36 UTC
   Try with the
Kernel:drm-intel-testing)9d0b5b5468650e0ac72a7786cf6625963f926d4d,
the bug doesn't occurs.
Comment 10 Elizabeth 2017-10-06 14:52:33 UTC
Closing old verified.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.