kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #137205
[Bug 1487085] Re: Ubuntu 14.04.3 LTS Crash in notifier_call_chain after boot
This bug was fixed in the package linux - 3.19.0-30.33
---------------
linux (3.19.0-30.33) vivid; urgency=low
[ Brad Figg ]
* Release Tracking Bug
- LP: #1498065
* Revert "[Config]
MFD_INTEL_LPSS/MFD_INTEL_LPSS_ACPI/MFD_INTEL_LPSS_PCI=m"
- LP: #1498137
* [Config] Disable the MFD_INTEL_LPSS* driver
linux (3.19.0-30.32) vivid; urgency=low
[ Brad Figg ]
* Release Tracking Bug
- LP: #1498065
[ Upstream Kernel Changes ]
* net: Fix skb_set_peeked use-after-free bug
- LP: #1497184
linux (3.19.0-29.31) vivid; urgency=low
[ Luis Henriques ]
* Release Tracking Bug
- LP: #1493902
[ Ander Conselvan de Oliveira ]
* SAUCE: i915_bpo: Set ddi_pll_sel in DP MST path
- LP: #1483320
[ Chris J Arges ]
* [Config] DEFAULT_IOSCHED="deadline" for ppc64el
- LP: #1469829
[ Chris Wilson ]
* SAUCE: i915_bpo: drm/i915: Flag the execlists context object as dirty
after every use
- LP: #1489501
[ Daniel Vetter ]
* SAUCE: i915_bpo: drm/i915: Only dither on 6bpc panels
- LP: #1489501
[ David Henningsson ]
* SAUCE: drm/i915: Add audio pin sense / ELD callback
- LP: #1490895
* SAUCE: drm/i915: Call audio pin/ELD notify function
- LP: #1490895
* SAUCE: ubuntu/i915: Call audio pin/ELD notify function
- LP: #1490895
* SAUCE: ALSA: hda - Add "hdac_acomp" global variable
- LP: #1490895
* SAUCE: ALSA: hda - allow codecs to access the i915 pin/ELD callback
- LP: #1490895
* SAUCE: ALSA: hda - Wake the codec up on pin/ELD notify events
- LP: #1490895
[ Jani Nikula ]
* SAUCE: i915_bpo: Revert "drm/i915: Allow parsing of variable size child
device entries from VBT"
- LP: #1489501
[ Maarten Lankhorst ]
* SAUCE: i915_bpo: drm/i915: calculate primary visibility changes instead
of calling from set_config
- LP: #1489501
* SAUCE: i915_bpo: drm/i915: Commit planes on each crtc separately.
- LP: #1489501
[ Thulasimani,Sivakumar ]
* SAUCE: i915_bpo: Revert "drm/i915: Add eDP intermediate frequencies for
CHV"
- LP: #1489501
* SAUCE: i915_bpo: drm/i915: remove HBR2 from chv supported list
- LP: #1489501
* SAUCE: i915_bpo: drm/i915: Avoid TP3 on CHV
- LP: #1489501
[ Timo Aaltonen ]
* Revert "SAUCE: i915_bpo: drm/i915: Allow parsing of variable size child
device entries from VBT, addendum v2"
- LP: #1489501
* SAUCE: Migrate Broadwell to i915_bpo.
- LP: #1483320
[ Upstream Kernel Changes ]
* tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
- LP: #1486146
* powerpc/powernv: Fix the overflow of OPAL message notifiers head array
- LP: #1487085
* xhci: call BIOS workaround to enable runtime suspend on Intel Braswell
- LP: #1489292
* PM / QoS: Make it possible to expose device latency tolerance to
userspace
- LP: #1488395
* ACPI / PM: Attach ACPI power domain only once
- LP: #1488395
* Driver core: wakeup the parent device before trying probe
- LP: #1488395
* klist: implement klist_prev()
- LP: #1488395
* driver core: implement device_for_each_child_reverse()
- LP: #1488395
* mfd: make mfd_remove_devices() iterate in reverse order
- LP: #1488395
* mfd: Add support for Intel Sunrisepoint LPSS devices
- LP: #1488395
* md: use kzalloc() when bitmap is disabled
- LP: #1493319
* regulator: s2mps11: Fix GPIO suspend enable shift wrapping bug
- LP: #1493319
* iwlwifi: mvm: fix antenna selection when BT is active
- LP: #1493319
* HID: cp2112: fix to force single data-report reply
- LP: #1493319
* ata: pmp: add quirk for Marvell 4140 SATA PMP
- LP: #1493319
* libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk
VB0250EAVER
- LP: #1493319
* efi: Handle memory error structures produced based on old versions of
standard
- LP: #1493319
* phy: berlin-usb: fix divider for BG2CD
- LP: #1493319
* libata: add ATA_HORKAGE_NOTRIM
- LP: #1493319
* libata: force disable trim for SuperSSpeed S238
- LP: #1493319
* libata: add ATA_HORKAGE_MAX_SEC_1024 to revert back to previous
max_sectors limit
- LP: #1493319
* libata: increase the timeout when setting transfer mode
- LP: #1493319
* can: mcp251x: fix resume when device is down
- LP: #1493319
* libata: Do not blacklist M510DC
- LP: #1493319
* mac80211: clear subdir_stations when removing debugfs
- LP: #1493319
* ALSA: pcm: Fix lockdep warning with nonatomic PCM ops
- LP: #1493319
* iio: adc: vf610: fix the adc register read fail issue
- LP: #1493319
* ALSA: hda - Add headset mic support for Acer Aspire V5-573G
- LP: #1493319
* Subject: pinctrl: imx1-core: Fix debug output in .pin_config_set
callback
- LP: #1493319
* ALSA: hda: add new AMD PCI IDs with proper driver caps
- LP: #1493319
* x86/mm: Add parenthesis for TLB tracepoint size calculation
- LP: #1493319
* x86/mpx: Do not set ->vm_ops on MPX VMAs
- LP: #1493319
* net: mvneta: fix refilling for Rx DMA buffers
- LP: #1493319
* ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
- LP: #1493319
* drm/i915: Use two 32bit reads for select 64bit REG_READ ioctls
- LP: #1493319
* md/raid10: always set reshape_safe when initializing reshape_position.
- LP: #1493319
* ALSA: hda - Add headset mic pin quirk for a Dell device
- LP: #1476987, #1493319
* drm: Stop resetting connector state to unknown
- LP: #1493319
* usb: dwc3: Reset the transfer resource index on SET_INTERFACE
- LP: #1493319
* usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
function
- LP: #1493319
* xhci: Calculate old endpoints correctly on device reset
- LP: #1493319
* xhci: report U3 when link is in resume state
- LP: #1493319
* xhci: prevent bus_suspend if SS port resuming in phase 1
- LP: #1493319
* xhci: do not report PLC when link is in internal resume state
- LP: #1493319
* usb: core: lpm: set lpm_capable for root hub device
- LP: #1493319
* USB: OHCI: Fix race between ED unlink and URB submission
- LP: #1493319
* usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
- LP: #1493319
* blkcg: fix gendisk reference leak in blkg_conf_prep()
- LP: #1493319
* mei: prevent unloading mei hw modules while the device is opened.
- LP: #1493319
* iommu/vt-d: Fix VM domain ID leak
- LP: #1493319
* tile: use free_bootmem_late() for initrd
- LP: #1493319
* Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen
- LP: #1493319
* block: Do a full clone when splitting discard bios
- LP: #1493319
* md/raid1: fix test for 'was read error from last working device'.
- LP: #1493319
* mmc: omap_hsmmc: Fix DTO and DCRC handling
- LP: #1493319
* spi: imx: Fix small DMA transfers
- LP: #1493319
* ftrace: Fix breakage of set_ftrace_pid
- LP: #1493319
* isdn/gigaset: reset tty->receive_room when attaching ser_gigaset
- LP: #1493319
* sched: cls_bpf: fix panic on filter replace
- LP: #1493319
* net_sched: fix a use-after-free in sfq
- LP: #1493319
* serial: core: Fix crashes while echoing when closing
- LP: #1493319
* mmc: sdhci-pxav3: fix platform_data is not initialized
- LP: #1493319
* mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()
- LP: #1493319
* mmc: sdhci-esdhc: Make 8BIT bus work
- LP: #1493319
* bonding: correctly handle bonding type change on enslave failure
- LP: #1493319
* mmc: sdhci check parameters before call dma_free_coherent
- LP: #1493319
* net: Clone skb before setting peeked flag
- LP: #1493319
* mtd: nand: Fix NAND_USE_BOUNCE_BUFFER flag conflict
- LP: #1493319
* bridge: mdb: fix double add notification
- LP: #1493319
* usb: gadget: mv_udc_core: fix phy_regs I/O memory leak
- LP: #1493319
* net/xen-netback: off by one in BUG_ON() condition
- LP: #1493319
* sched: cls_flow: fix panic on filter replace
- LP: #1493319
* ipvlan: use rcu_deference_bh() in ipvlan_queue_xmit()
- LP: #1493319
* inet: frags: fix defragmented packet's IP header for af_packet
- LP: #1493319
* bonding: fix destruction of bond with devices different from
arphrd_ether
- LP: #1493319
* fq_codel: fix a use-after-free
- LP: #1493319
* ASoC: dapm: Lock during userspace access
- LP: #1493319
* ASoC: dapm: Don't add prefix to widget stream name
- LP: #1493319
* ASoC: ssm4567: Keep TDM_BCLKS in ssm4567_set_dai_fmt
- LP: #1493319
* ARM: OMAP2+: hwmod: Fix _wait_target_ready() for hwmods without sysc
- LP: #1493319
* ASoC: pcm1681: Fix setting de-emphasis sampling rate selection
- LP: #1493319
* qla2xxx: Fix hardware lock/unlock issue causing kernel panic.
- LP: #1493319
* qla2xxx: release request queue reservation.
- LP: #1493319
* qla2xxx: Remove msleep in qlt_send_term_exchange
- LP: #1493319
* qla2xxx: fix command initialization in target mode.
- LP: #1493319
* qla2xxx: kill sessions/log out initiator on RSCN and port down events
- LP: #1493319
* qla2xxx: cleanup cmd in qla workqueue before processing TMR
- LP: #1493319
* qla2xxx: delay plogi/prli ack until existing sessions are deleted
- LP: #1493319
* qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives
- LP: #1493319
* qla2xxx: added sess generations to detect RSCN update races
- LP: #1493319
* qla2xxx: disable scsi_transport_fc registration in target mode
- LP: #1493319
* qla2xxx: drop cmds/tmrs arrived while session is being deleted
- LP: #1493319
* qla2xxx: terminate exchange when command is aborted by LIO
- LP: #1493319
* iscsi-target: Fix use-after-free during TPG session shutdown
- LP: #1493319
* iscsi-target: Convert iscsi_thread_set usage to kthread.h
- LP: #1493319
* iscsi-target: Fix iscsit_start_kthreads failure OOPs
- LP: #1493319
* iscsi-target: Fix iser explicit logout TX kthread leak
- LP: #1493319
* ARM: dts: i.MX35: Fix can support.
- LP: #1493319
* ALSA: hda - Apply fixup for another Toshiba Satellite S50D
- LP: #1493319
* drm/nouveau/fbcon/nv11-: correctly account for ring space usage
- LP: #1493319
* vhost: actually track log eventfd file
- LP: #1493319
* arm64/efi: map the entire UEFI vendor string before reading it
- LP: #1493319
* xfs: remote attribute headers contain an invalid LSN
- LP: #1493319
* xfs: remote attributes need to be considered data
- LP: #1493319
* ALSA: hda - Apply a fixup to Dell Vostro 5480
- LP: #1493319
* ALSA: usb-audio: add dB range mapping for some devices
- LP: #1493319
* drm/i915: Replace WARN inside I915_READ64_2x32 with retry loop
- LP: #1493319
* drm/radeon/combios: add some validation of lvds values
- LP: #1493319
* drm/i915: Declare the swizzling unknown for L-shaped configurations
- LP: #1493319
* x86/efi: Use all 64 bit of efi_memmap in setup_e820()
- LP: #1493319
* efi: Check for NULL efi kernel parameters
- LP: #1493319
* ipr: Fix locking for unit attention handling
- LP: #1493319
* ipr: Fix incorrect trace indexing
- LP: #1493319
* ipr: Fix invalid array indexing for HRRQ
- LP: #1493319
* scsi: fix memory leak with scsi-mq
- LP: #1493319
* ALSA: hda - Fix MacBook Pro 5,2 quirk
- LP: #1493319
* x86/xen: Probe target addresses in set_aliased_prot() before the
hypercall
- LP: #1493319
* packet: tpacket_snd(): fix signed/unsigned comparison
- LP: #1493319
* inet: frag: don't re-use chainlist for evictor
- LP: #1493319
* bridge: netlink: fix slave_changelink/br_setport race conditions
- LP: #1493319
* netfilter: ctnetlink: put back references to master ct and expect
objects
- LP: #1493319
* NFS: Don't revalidate the mapping if both size and change attr are up
to date
- LP: #1493319
* bridge: mdb: fix delmdb state in the notification
- LP: #1493319
* ipvs: skb_orphan in case of forwarding
- LP: #1493319
* avr32: handle NULL as a valid clock object
- LP: #1493319
* ipvs: fix crash with sync protocol v0 and FTP
- LP: #1493319
* act_pedit: check binding before calling tcf_hash_release()
- LP: #1493319
* netfilter: nf_conntrack: Support expectations in different zones
- LP: #1493319
* ipvs: do not use random local source address for tunnels
- LP: #1493319
* ALSA: hda - fix cs4210_spdif_automute()
- LP: #1493319
* niu: don't count tx error twice in case of headroom realloc fails
- LP: #1493319
* net: sched: fix refcount imbalance in actions
- LP: #1493319
* net/mlx4_core: Fix wrong index in propagating port change event to VFs
- LP: #1493319
* packet: missing dev_put() in packet_do_bind()
- LP: #1493319
* ipvs: fix crash if scheduler is changed
- LP: #1493319
* Linux 3.19.8-ckt6
- LP: #1493319
[ Ville Syrjälä ]
* SAUCE: i915_bpo: drm/i915: Don't use link_bw for PLL setup
- LP: #1483320
* SAUCE: i915_bpo: drm/i915: Split atomic wm update to pre and post
variants
- LP: #1493746
[ Wen Xiong ]
* SAUCE: ipr: Byte swapping for device_id attribute in sysfs
- LP: #1453892
[ Wen-chien Jesse Sung ]
* [Config] MFD_INTEL_LPSS/MFD_INTEL_LPSS_ACPI/MFD_INTEL_LPSS_PCI=m
- LP: #1488395
-- Brad Figg <brad.figg@xxxxxxxxxxxxx> Mon, 21 Sep 2015 11:57:20 -0700
** Changed in: linux (Ubuntu Vivid)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1487085
Title:
Ubuntu 14.04.3 LTS Crash in notifier_call_chain after boot
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Vivid:
Fix Released
Bug description:
SRU Justification:
[Impact]
Users of 3.19 kernel with power8 machines get a kernel crash on boot.
[Test Case]
Boot system.
[Fix]
commit 792f96e9a769b799a2944e9369e4ea1e467135b2 needed to be backported in addition to d7cf83fcaf1b1668201eae4cdd6e6fe7a2448654. Our 3.19 kernel had a partial backport of the first patch.
--
---Problem Description---
Installed Ubuntu 14.04.3 LTS on Palmetto and its crashing after booting to login.
This happens every time I boot Ubuntu 14.04.3 LTS. I've reinstalled Ubuntu and replaced the hard disk as well and re-installed. Still crashing.
---uname output---
Linux paul40 3.19.0-26-generic #28~14.04.1-Ubuntu SMP Wed Aug 12 14:10:52 UTC 2015 ppc64le ppc64le ppc64le GNU/Linux
Machine Type = Palmetto
---System Hang---
Ubuntu OS crashes and cannot access host. Must reboot system
---Steps to Reproduce---
Boot system
Oops output:
[ 33.132376] Unable to handle kernel paging request for data at address 0x200000000000000
[ 33.132565] Faulting instruction address: 0xc0000000000dbc60
[ 33.133422] Oops: Kernel access of bad area, sig: 11 [#1]
[ 33.134410] SMP NR_CPUS=2048 NUMA PowerNV
[ 33.134478] Modules linked in: ast ttm drm_kms_helper joydev mac_hid drm hid_generic usbhid hid syscopyarea sysfillrect sysimgblt i2c_algo_bit ofpart cmdlinepart at24 uio_pdrv_genirq powernv_flash mtd ipmi_powernv powernv_rng opal_prd ipmi_msghandler uio uas usb_storage ahci libahci
[ 33.139112] CPU: 24 PID: 0 Comm: swapper/24 Not tainted 3.19.0-26-generic #28~14.04.1-Ubuntu
[ 33.139943] task: c0000000013cccb0 ti: c000000fff700000 task.ti: c000000001448000
[ 33.141642] NIP: c0000000000dbc60 LR: c0000000000dbd94 CTR: 0000000000000000
[ 33.142605] REGS: c000000fff703980 TRAP: 0300 Not tainted (3.19.0-26-generic)
[ 33.143417] MSR: 9000000000009033 <SF,HV,EE,ME,IR,DR,RI,LE> CR: 28002888 XER: 00000000
[ 33.144244] CFAR: c000000000008468 DAR: 0200000000000000 DSISR: 40000000 SOFTE: 0
GPR00: c0000000000dbd94 c000000fff703c00 c00000000144cc00 c0000000015f03c0
GPR04: 0000000000000007 c0000000015f03b8 ffffffffffffffff 0000000000000000
GPR08: 0000000000000000 0200000000000000 c00000000006c394 9000000000001003
GPR12: 0000000000002200 c00000000fb8d800 0000000000000058 0000000000000000
GPR16: c000000001448000 c000000001448000 c000000001448080 c000000000e9a880
GPR20: c000000001448080 0000000000000001 0000000000000002 0000000000000012
GPR24: c000000f1e432200 0000000000000000 0000000000000000 c0000000015f03b8
GPR28: 0000000000000007 0000000000000000 c0000000015f03c0 ffffffffffffffff
[ 33.157013] NIP [c0000000000dbc60] notifier_call_chain+0x70/0x100
[ 33.157818] LR [c0000000000dbd94] atomic_notifier_call_chain+0x44/0x60
[ 33.162090] Call Trace:
[ 33.162845] [c000000fff703c00] [0000000000000008] 0x8 (unreliable)
[ 33.163644] [c000000fff703c50] [c0000000000dbd94] atomic_notifier_call_chain+0x44/0x60
[ 33.164647] [c000000fff703c90] [c00000000006f2a8] opal_message_notify+0xa8/0x100
[ 33.165476] [c000000fff703d00] [c0000000000dbc88] notifier_call_chain+0x98/0x100
[ 33.167007] [c000000fff703d50] [c0000000000dbd94] atomic_notifier_call_chain+0x44/0x60
[ 33.167816] [c000000fff703d90] [c00000000006f654] opal_do_notifier.part.5+0x74/0xa0
[ 33.172166] [c000000fff703dd0] [c00000000006f6d8] opal_interrupt+0x58/0x70
[ 33.172997] [c000000fff703e10] [c0000000001273d0] handle_irq_event_percpu+0x90/0x2b0
[ 33.174507] [c000000fff703ed0] [c000000000127658] handle_irq_event+0x68/0xd0
[ 33.175312] [c000000fff703f00] [c00000000012baf4] handle_fasteoi_irq+0xe4/0x240
[ 33.176124] [c000000fff703f30] [c0000000001265c8] generic_handle_irq+0x58/0x90
[ 33.176936] [c000000fff703f60] [c000000000010f10] __do_irq+0x80/0x190
[ 33.182406] [c000000fff703f90] [c00000000002476c] call_do_irq+0x14/0x24
[ 33.183258] [c00000000144ba30] [c0000000000110c0] do_IRQ+0xa0/0x120
[ 33.184072] [c00000000144ba90] [c0000000000025d8] hardware_interrupt_common+0x158/0x180
[ 33.184907] --- interrupt: 501 at arch_local_irq_restore+0x5c/0x90
[ 33.184907] LR = arch_local_irq_restore+0x40/0x90
[ 33.186473] [c00000000144bd80] [c000000f2ae19808] 0xc000000f2ae19808 (unreliable)
[ 33.188024] [c00000000144bda0] [c00000000085d5d8] cpuidle_enter_state+0xa8/0x260
[ 33.192695] [c00000000144be00] [c000000000108be8] cpu_startup_entry+0x488/0x4e0
[ 33.193543] [c00000000144bee0] [c00000000000bdb4] rest_init+0xa4/0xc0
[ 33.194327] [c00000000144bf00] [c000000000da3e80] start_kernel+0x53c/0x558
[ 33.195084] [c00000000144bf90] [c000000000008c6c] start_here_common+0x20/0xa8
[ 33.196569] Instruction dump:
[ 33.196619] 7cfd3b78 60000000 60000000 e93e0000 2fa90000 419e00a4 2fbf0000 419e009c
[ 33.197605] 2e3d0000 60000000 60000000 60420000 <e9490000> ebc90008 7d234b78 7f84e378
[ 33.202763] ---[ end trace 71076895a9f126ba ]---
[ 33.202836]
[ 35.203605] Kernel panic - not syncing: Fatal exception in interrupt
[ 35.203727] drm_kms_helper: panic occurred, switching back to text console
[ 35.204692] ---[ end Kernel panic - not syncing: Fatal exception in interrupt
Ah! This is due to notifier chain array overflow while handling opal
message. The upstream commit 792f96e fixes this issue.. But what I see
is the commit 792f96e has been partially applied to ubuntu 14.04.3
kernel sources. And hence you are seeing this issue.
commit 792f96e9a769b799a2944e9369e4ea1e467135b2
Author: Neelesh Gupta <neelegup@xxxxxxxxxxxxxxxxxx>
Date: Wed Feb 11 11:57:06 2015 +0530
powerpc/powernv: Fix the overflow of OPAL message notifiers head
array
Fixes the condition check of incoming message type which can
otherwise shoot beyond the message notifiers head array.
Signed-off-by: Neelesh Gupta <neelegup@xxxxxxxxxxxxxxxxxx>
Reviewed-by: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
Reviewed-by: Anshuman Khandual <khandual@xxxxxxxxxxxxxxxxxx>
Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
Below is the hunk from above commit, which is missing from ubuntu 14.04.3:
------------------------------------------------
@@ -354,7 +350,7 @@ static void opal_handle_message(void)
type = be32_to_cpu(msg.msg_type);
/* Sanity check */
- if (type > OPAL_MSG_TYPE_MAX) {
+ if (type >= OPAL_MSG_TYPE_MAX) {
pr_warning("%s: Unknown message type: %u\n", __func__, type);
return;
}
------------------------------------------------
I just checked. The above hunk can be cleanly applied to ubuntu
14.04.3 kernel sources. We should mirror this bug to ubuntu and ask
them to apply above hunk.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1487085/+subscriptions
