Bug#833128: [src:linux] linux-image-4.6.0-1-amd64: kernel bug in the intel-iommu module
Package: src:linux
Version: 4.6.4-1
Severity: normal
--- Please enter the report below this line. ---
So I have an Intel Z87 based motherboard with i7-4770 CPU installed
and VT-d switched on and I'm tinkering with iommu, virtualisation and stuff,
putting intel_iommu=on as a boot parameter.
I also have a quite old TV-tuner (SAA7134-based Pinnacle PC-TV 110i) installed
in one of PCI slots. (The tuner has an ALSA DMA sound feature, if that
matters). When I use it with iommu on and then close any program which
utilize it, like VLC or tvtime, it segfaults, the device becomes unresponsive
and I get the following in dmesg:
Jul 29 03:32:15 bootes kernel: [171954.099428] kernel BUG at drivers/iommu/intel-iommu.c:3592!
Jul 29 03:32:15 bootes kernel: [171954.099430] invalid opcode: 0000 [#2] PREEMPT SMP
Jul 29 03:32:15 bootes kernel: [171954.099431] Modules linked in: serpent_avx2 serpent_avx_x86_64 serpent_sse2_x86_64 serpent_generic xts snd_usb_audio snd_usbmidi_lib snd_rawmidi snd_seq_device pci_stub vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) xt_multiport l2tp_ppp l2tp_netlink l2tp_core ip6_udp_tunnel udp_tunnel pppox ppp_generic slhc bnep bluetooth rfkill cpufreq_powersave cpufreq_userspace cpufreq_conservative cpufreq_stats binfmt_misc uinput ip6table_filter ip6_tables xt_TARPIT(O) xt_geoip(O) xt_tcpudp iptable_filter ip_tables x_tables nfsd auth_rpcgss nfs_acl nfs lockd grace fscache sunrpc nls_cp866 vfat fat cuse it87 hwmon_vid i2c_dev snd_aloop loop fuse cpuid nls_utf8 parport_pc ppdev lp parport dm_crypt saa7134_alsa rc_pinnacle_color ir_kbd_i2c raid1 nvidia(PO) gspca_zc3xx gspca_main input_leds joydev led_class tda827x tda8290 mxm_wmi tuner snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic evdev saa7134 intel_rapl x86_pkg_temp_thermal intel_powerclamp snd_hda_intel tveeprom coretemp videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_core kvm_intel snd_hda_codec rc_core snd_hda_core v4l2_common drm videodev kvm media snd_hwdep pcspkr snd_pcm irqbypass snd_timer crct10dif_pclmul snd crc32_pclmul ghash_clmulni_intel serio_raw lpc_ich soundcore mei_me mei mfd_core 8250_fintek sg i2c_i801 tpm_infineon wmi tpm_tis battery tpm video processor button overlay hid_microsoft ext4 ecb crc16 jbd2 mbcache hid_generic usbhid hid dm_raid raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx md_mod xor raid6_pq libcrc32c crc32c_generic dm_mod sd_mod crc32c_intel aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd firewire_ohci firewire_core crc_itu_t psmouse ahci libahci libata scsi_mod ehci_pci igb ehci_hcd i2c_algo_bit i2c_core dca xhci_pci xhci_hcd e1000e ptp usbcore pps_core usb_common thermal fan fjes
Jul 29 03:32:15 bootes kernel: [171954.099481] CPU: 2 PID: 11180 Comm: tvtime Tainted: P D O 4.6.4-bootes1 #1
Jul 29 03:32:15 bootes kernel: [171954.099482] Hardware name: Gigabyte Technology Co., Ltd. Z87X-UD5H/Z87X-UD5H-CF, BIOS F9 03/18/2014
Jul 29 03:32:15 bootes kernel: [171954.099483] task: ffff880236dd63c0 ti: ffff8803ea930000 task.ti: ffff8803ea930000
Jul 29 03:32:15 bootes kernel: [171954.099483] RIP: 0010:[<ffffffff81370ae9>] [<ffffffff81370ae9>] intel_unmap+0x1a9/0x220
Jul 29 03:32:15 bootes kernel: [171954.099487] RSP: 0018:ffff8803ea933d38 EFLAGS: 00010246
Jul 29 03:32:15 bootes kernel: [171954.099488] RAX: 0000000000000000 RBX: 00000000000000cb RCX: 0000000000000002
Jul 29 03:32:15 bootes kernel: [171954.099489] RDX: 0000000000000000 RSI: 00000000ffe00000 RDI: ffff88041bc9b098
Jul 29 03:32:15 bootes kernel: [171954.099489] RBP: ffff88041bc9b098 R08: ffff8803ea933d78 R09: 0000000000000000
Jul 29 03:32:15 bootes kernel: [171954.099490] R10: 0000000000000557 R11: 0000000000000246 R12: ffff8800c9bf9800
Jul 29 03:32:15 bootes kernel: [171954.099491] R13: 00000000ffe00000 R14: 0000000000000000 R15: 0000000000000004
Jul 29 03:32:15 bootes kernel: [171954.099492] FS: 00007fa81e0a2780(0000) GS:ffff88042ec80000(0000) knlGS:0000000000000000
Jul 29 03:32:15 bootes kernel: [171954.099492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Jul 29 03:32:15 bootes kernel: [171954.099493] CR2: 00007f3bf52dbfc0 CR3: 000000023b2b4000 CR4: 00000000001406e0
Jul 29 03:32:15 bootes kernel: [171954.099493] Stack:
Jul 29 03:32:15 bootes kernel: [171954.099494] 00007fa817200000 00000000000000cb ffff880077bbda80 ffff8800c9bf9800
Jul 29 03:32:15 bootes kernel: [171954.099495] ffff880418394bd8 0000000000000000 0000000000000004 ffffffffc048464a
Jul 29 03:32:15 bootes kernel: [171954.099497] 0000000000000020 00000000fe18f6d1 ffff8800c9bf9818 0000000000000000
Jul 29 03:32:15 bootes kernel: [171954.099498] Call Trace:
Jul 29 03:32:15 bootes kernel: [171954.099501] [<ffffffffc048464a>] ? vb2_dma_sg_put+0x8a/0x110 [videobuf2_dma_sg]
Jul 29 03:32:15 bootes kernel: [171954.099503] [<ffffffffc072120a>] ? __vb2_buf_mem_free+0x2a/0x70 [videobuf2_core]
Jul 29 03:32:15 bootes kernel: [171954.099504] [<ffffffffc0722134>] ? __vb2_queue_free+0x1a4/0x1f0 [videobuf2_core]
Jul 29 03:32:15 bootes kernel: [171954.099505] [<ffffffffc072411c>] ? vb2_core_queue_release+0x2c/0x40 [videobuf2_core]
Jul 29 03:32:15 bootes kernel: [171954.099507] [<ffffffffc04f5741>] ? _vb2_fop_release+0x61/0x90 [videobuf2_v4l2]
Jul 29 03:32:15 bootes kernel: [171954.099509] [<ffffffffc054dbba>] ? video_release+0x7a/0x290 [saa7134]
Jul 29 03:32:15 bootes kernel: [171954.099512] [<ffffffffc07f33cd>] ? v4l2_release+0x2d/0x70 [videodev]
Jul 29 03:32:15 bootes kernel: [171954.099514] [<ffffffff8117a8e3>] ? __fput+0xb3/0x1c0
Jul 29 03:32:15 bootes kernel: [171954.099516] [<ffffffff8106d9f9>] ? task_work_run+0x79/0x90
Jul 29 03:32:15 bootes kernel: [171954.099518] [<ffffffff81002137>] ? exit_to_usermode_loop+0x97/0xa0
Jul 29 03:32:15 bootes kernel: [171954.099519] [<ffffffff810025bf>] ? syscall_return_slowpath+0x3f/0x50
Jul 29 03:32:15 bootes kernel: [171954.099521] [<ffffffff814dffd9>] ? system_call_fast_compare_end+0x86/0x88
Jul 29 03:32:15 bootes kernel: [171954.099522] Code: 29 f9 45 31 c9 e8 b8 c6 ff ff 4c 89 f7 4c 89 e6 e8 fd 91 ff ff 48 83 c4 08 48 89 ef 5b 5d 41 5c 41 5d 41 5e 41 5f e9 97 c7 ff ff <0f> 0b c6 05 6f d7 51 00 01 48 83 c4 08 4c 89 e9 48 c7 c2 18 82
Jul 29 03:32:15 bootes kernel: [171954.099536] RIP [<ffffffff81370ae9>] intel_unmap+0x1a9/0x220
Jul 29 03:32:15 bootes kernel: [171954.099537] RSP <ffff8803ea933d38>
Jul 29 03:32:15 bootes kernel: [171954.099538] ---[ end trace 1b011d674b7a63ac ]---
Looks like iommu driver can't find a DMAR domain in dev structure or trying
to unmap the domain which isn't mapped or something.
--- System information. ---
Architecture: amd64
Kernel: Linux 4.6.0-1-amd64
Debian Release: stretch/sid
990 stable security.debian.org
990 stable ftp.fi.debian.org
990 stable dl.google.com
990 stable deb.torproject.org
90 unstable deb.i2p2.no
500 testing ftp.fi.debian.org
500 testing deb.torproject.org
--- Package information. ---
Package's Depends field is empty.
Package's Recommends field is empty.
Package's Suggests field is empty.
Reply to: