Bug 200729

Summary: vfio-bind NPE while echo $dev > /sys/bus/pci/devices/$dev/driver/unbind
Product: Drivers Reporter: Mikko Kortelainen (kordex)
Component: OtherAssignee: drivers_other
Status: NEW ---    
Severity: normal    
Priority: P1    
Hardware: x86-64   
OS: Linux   
Kernel Version: 4.17.11-200.fc28.x86_64 Subsystem:
Regression: No Bisected commit-id:

Description Mikko Kortelainen 2018-08-04 11:09:41 UTC 
[   19.608402] BUG: unable to handle kernel NULL pointer dereference at 0000000000000060
[   19.612761] PGD 0 P4D 0 
[   19.612763] Oops: 0000 [#1] SMP NOPTI
[   19.612764] Modules linked in: sunrpc xfs dm_thin_pool dm_persistent_data dm_bio_prison snd_seq_dummy snd_seq_oss snd_emu10k1_synth snd_emux_synth snd_seq_midi_emul snd_seq_virmidi snd_seq_midi snd_seq_midi_event edac_mce_amd kvm_amd wmi_bmof mxm_wmi kvm snd_hda_codec_realtek snd_emu10k1 snd_hda_codec_generic snd_hda_codec_hdmi snd_util_mem snd_ac97_codec snd_hda_intel crct10dif_pclmul snd_hda_codec crc32_pclmul joydev snd_hda_core ghash_clmulni_intel ac97_bus snd_hwdep snd_seq snd_rawmidi snd_seq_device snd_pcm sp5100_tco snd_timer snd k10temp soundcore i2c_piix4 ccp shpchp wmi pinctrl_amd gpio_amdpt pcc_cpufreq gpio_generic acpi_cpufreq raid1 dm_raid raid456 async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq libcrc32c amdgpu radeon chash gpu_sched drm_kms_helper ttm drm igb
[   19.644844]  crc32c_intel dca i2c_algo_bit nvme nvme_core vfio_pci irqbypass vfio_virqfd vfio_iommu_type1 vfio
[   19.644851] CPU: 10 PID: 1686 Comm: vfio-bind Not tainted 4.17.11-200.fc28.x86_64 #1
[   19.644851] Hardware name: Micro-Star International Co., Ltd. MS-7A31/X370 XPOWER GAMING TITANIUM (MS-7A31), BIOS 1.90 09/19/2017
[   19.644857] RIP: 0010:psp_dev_destroy+0x14/0x60 [ccp]
[   19.644858] RSP: 0018:ffffb2d0474fbd60 EFLAGS: 00010286
[   19.644859] RAX: ffffffffc09de1b8 RBX: ffff96147713bf28 RCX: 0000000000000000
[   19.644859] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff96147713bf28
[   19.644860] RBP: ffff961476c02000 R08: 000000000000000a R09: 0000000000000000
[   19.644860] R10: 00000000f2b9d600 R11: 0000000000000000 R12: ffffffffc09e01a0
[   19.644861] R13: ffffffffc09e0210 R14: 0000000000000060 R15: ffff96145f568260
[   19.644862] FS:  00007f23319bd740(0000) GS:ffff96147e880000(0000) knlGS:0000000000000000
[   19.644863] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   19.644863] CR2: 0000000000000060 CR3: 0000000fe9b90000 CR4: 00000000003406e0
[   19.644864] Call Trace:
[   19.644868]  sp_destroy+0x1a/0x70 [ccp]
[   19.644870]  sp_pci_remove+0x1e/0x80 [ccp]
[   19.644873]  pci_device_remove+0x3b/0xb0
[   19.644876]  device_release_driver_internal+0x15a/0x220
[   19.644879]  unbind_store+0xa2/0x140
[   19.644882]  kernfs_fop_write+0x116/0x190
[   19.644885]  __vfs_write+0x36/0x170
[   19.644888]  ? selinux_file_permission+0xf0/0x130
[   19.644889]  vfs_write+0xa5/0x1a0
[   19.644890]  ksys_write+0x4f/0xb0
[   19.644893]  do_syscall_64+0x5b/0x160
[   19.644896]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   19.644898] RIP: 0033:0x7f23310c4164
[   19.644898] RSP: 002b:00007ffe92012ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   19.644899] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f23310c4164
[   19.644900] RDX: 000000000000000d RSI: 000055903a3edad0 RDI: 0000000000000001
[   19.644900] RBP: 000055903a3edad0 R08: 000000000000000a R09: 00007f2331115df0
[   19.644901] R10: 000000000000000a R11: 0000000000000246 R12: 00007f2331393760
[   19.644901] R13: 000000000000000d R14: 00007f233138e760 R15: 000000000000000d
[   19.644902] Code: 41 89 c5 e9 89 fe ff ff 41 bd f4 ff ff ff e9 7e fe ff ff 0f 1f 40 00 0f 1f 44 00 00 53 48 89 fb 48 83 ec 08 48 8b b7 a8 00 00 00 <48> 83 7e 60 00 74 12 48 8b 3d 0e 39 00 00 f0 ff 0f 0f 88 63 01 
[   19.825296] RIP: psp_dev_destroy+0x14/0x60 [ccp] RSP: ffffb2d0474fbd60
[   19.825296] CR2: 0000000000000060
[   19.825298] ---[ end trace 23b94dff9a0eca4b ]---