[Virtual-pkg-base-maintainers] Bug#758784: base: kernel BUG in vmwgfx_drv.c:903!

[Oleg Buklanov]

Package: base
Severity: important
Tags:



-- System Information:
Debian Release: 7.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

System crashes when any program is trying to access multiple files in
/dev/char folder.
It may happen during parallel backup or anti-virus scan of entire file system
Here is the script which can be used to reproduce the problem on ESXi
4.1.0 platform:
------- cut here ----
#!/bin/sh
cd /dev/char
for i in `ls`
do
   wc $i &
done
-------- end --------
or
wc /dev/226:0 &
wc /dev/226:64 &

NOTE: files must be opened simultaniously. In certain cases system
freezes, in other - remains live. Syslog contains the following
information:
NOTE2: This bug was reproduced on freshly installed system without any
third party software (vmware-tools wasn't installed either)

Aug 20 17:37:11 debian7p5-32 kernel: [  732.170152] [drm] width 640
Aug 20 17:37:11 debian7p5-32 kernel: [  732.170156] [drm] height 480
Aug 20 17:37:11 debian7p5-32 kernel: [  732.170158] [drm] bpp 32
Aug 20 17:37:11 debian7p5-32 kernel: [  732.172975] [drm] Fifo max
0x00040000 min 0x00001000 cap 0x0000007f
Aug 20 17:37:11 debian7p5-32 kernel: [  732.183717] PM: Marking nosave
pages: 000000000009f000 - 0000000000100000
Aug 20 17:37:11 debian7p5-32 kernel: [  732.183720] PM: Basic memory
bitmaps created
Aug 20 17:37:11 debian7p5-32 kernel: [  737.986119] PM: Basic memory
bitmaps freed
Aug 20 17:37:11 debian7p5-32 kernel: [  738.045046] ------------[ cut
here ]------------
Aug 20 17:37:11 debian7p5-32 kernel: [  738.045230] kernel BUG at
/build/linux-xMFgY8/linux-3.2.57/drivers/gpu/drm/vmwgfx/vmwgfx_drv.c:903!
Aug 20 17:37:11 debian7p5-32 kernel: [  738.045423] invalid opcode:
0000 [#1] SMP
Aug 20 17:37:11 debian7p5-32 kernel: [  738.045569] Modules linked in:
nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc loop snd_pcm vmwgfx
snd_page_alloc ttm snd_timer snd soundcore parport_pc parport coretemp
vmw_balloon drm processor crc32c_intel thermal_sys psmouse ac evdev
pcspkr serio_raw i2c_piix4 power_supply i2c_core shpchp container
button ext4 crc16 jbd2 mbcache sr_mod cdrom sg ata_generic sd_mod
crc_t10dif floppy pcnet32 mii ata_piix mptspi scsi_transport_spi
mptscsih mptbase libata scsi_mod [last unloaded: scsi_wait_scan]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.047473]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.047557] Pid: 2617, comm:
wc Not tainted 3.2.0-4-686-pae #1 Debian 3.2.57-3+deb7u2 VMware, Inc.
VMware Virtual Platform/440BX Desktop Reference Platform
Aug 20 17:37:11 debian7p5-32 kernel: [  738.047944] EIP:
0060:[<f849603b>] EFLAGS: 00010287 CPU: 0
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048116] EIP is at
vmw_master_set+0x81/0x150 [vmwgfx]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048252] EAX: f75526c0 EBX:
f7540000 ECX: 000010d1 EDX: 000010d1
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048397] ESI: f70c36c0 EDI:
f7540420 EBP: f77b4a40 ESP: f73f5de8
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048542]  DS: 007b ES: 007b
FS: 00d8 GS: 00e0 SS: 0068
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048679] Process wc (pid:
2617, ti=f73f4000 task=f73a49e0 task.ti=f73f4000)
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048893] Stack:
Aug 20 17:37:11 debian7p5-32 kernel: [  738.048997]  f7071f80 f77b4940
0102a33d f7253c00 f77b4a40 f7253c14 f8495fba f842e5cf
Aug 20 17:37:11 debian7p5-32 kernel: [  738.049419]  f77b4a54 f72054f8
f71ce800 f72eac00 f843db84 f71ce800 f72054f8 ffffffed
Aug 20 17:37:11 debian7p5-32 kernel: [  738.049845]  f842eda8 f7253c00
f72054f8 f750dd40 f71ce800 00000000 c10d03e3 00000000
Aug 20 17:37:11 debian7p5-32 kernel: [  738.050267] Call Trace:
Aug 20 17:37:11 debian7p5-32 kernel: [  738.050380]  [<f8495fba>] ?
vmw_master_drop+0xec/0xec [vmwgfx]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.050652]  [<f842e5cf>] ?
drm_open+0x22d/0x483 [drm]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.050791]  [<f842eda8>] ?
drm_stub_open+0xbf/0x107 [drm]
Aug 20 17:37:11 debian7p5-32 kernel: [  738.050935]  [<c10d03e3>] ?
chrdev_open+0xf3/0x111
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051067]  [<c10cc0b7>] ?
__dentry_open+0x186/0x25f
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051201]  [<c10cce05>] ?
nameidata_to_filp+0x3a/0x45
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051336]  [<c10d02f0>] ?
cdev_put+0x17/0x17
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051467]  [<c10d6ec5>] ?
do_last+0x4f8/0x513
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051596]  [<c10d731c>] ?
path_openat+0x236/0x28b
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051729]  [<c10d741a>] ?
do_filp_open+0x23/0x5c
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051862]  [<c102a33d>] ?
should_resched+0x5/0x1e
Aug 20 17:37:11 debian7p5-32 kernel: [  738.051995]  [<c12c360a>] ?
_cond_resched+0x5/0x18
Aug 20 17:37:11 debian7p5-32 kernel: [  738.052127]  [<c10cce64>] ?
do_sys_open+0x54/0xcd
Aug 20 17:37:11 debian7p5-32 kernel: [  738.052258]  [<c10ccefb>] ?
sys_open+0x1e/0x23
Aug 20 17:37:11 debian7p5-32 kernel: [  738.052387]  [<c12c8e1f>] ?
sysenter_do_call+0x12/0x28
Aug 20 17:37:11 debian7p5-32 kernel: [  738.052520] Code: f8 e8 37 dc
e2 c8 8b 93 dc 03 00 00 b8 2d 00 00 00 ef 42 30 c0 ef 89 f8 e8 9f db
e2 c8 85 f6 74 57 8d 83 c0 26 01 00 39 c6 74 02 <0f> 0b 8b 04 24 31 d2
8b 48 04 89 f0 e8 61 e6 fb ff 85 c0 89 c7
Aug 20 17:37:11 debian7p5-32 kernel: [  738.054557] EIP: [<f849603b>]
vmw_master_set+0x81/0x150 [vmwgfx] SS:ESP 0068:f73f5de8
Aug 20 17:37:11 debian7p5-32 kernel: [  738.054848] ---[ end trace
9855b7e20797c3d8 ]---
Aug 20 17:37:12 debian7p5-32 kernel: [  739.436092] Program wc tried
to access /dev/mem between ff000->103000.


-- 
Kind Regards
Oleg Buklanov