linux-media.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: "Mani, Rajmohan" <rajmohan.mani@intel.com>
To: Jacopo Mondi <jacopo@jmondi.org>
Cc: Tomasz Figa <tfiga@chromium.org>,
	"Zhi, Yong" <yong.zhi@intel.com>,
	"Qiu, Tian Shu" <tian.shu.qiu@intel.com>,
	"Cao, Bingbu" <bingbu.cao@intel.com>,
	Laurent Pinchart <laurent.pinchart@ideasonboard.com>,
	"Linux Media Mailing List" <linux-media@vger.kernel.org>,
	Sakari Ailus <sakari.ailus@linux.intel.com>,
	Mauro Carvalho Chehab <mchehab@kernel.org>,
	Hans Verkuil <hans.verkuil@cisco.com>,
	"Hu, Jerry W" <jerry.w.hu@intel.com>,
	"Toivonen, Tuukka" <tuukka.toivonen@intel.com>
Subject: RE: [PATCH v7 00/16] Intel IPU3 ImgU patchset
Date: Sat, 12 Jan 2019 02:30:49 +0000	[thread overview]
Message-ID: <6F87890CF0F5204F892DEA1EF0D77A599B322D80@fmsmsx122.amr.corp.intel.com> (raw)
In-Reply-To: 20190109182028.l6dopz5k75w3u3t4@uno.localdomain

Hi Laurent et al,

> Subject: RE: [PATCH v7 00/16] Intel IPU3 ImgU patchset
> 
> Hi Jacopo,
> 
> > Subject: Re: [PATCH v7 00/16] Intel IPU3 ImgU patchset
> >
> > Hi Raj,
> >
> > On Wed, Jan 09, 2019 at 06:01:39PM +0000, Mani, Rajmohan wrote:
> > > Hi Jacopo,
> > >
> > > > Subject: Re: [PATCH v7 00/16] Intel IPU3 ImgU patchset
> > > >
> > > > Hello Raj,
> > > >
> > > > On Wed, Jan 09, 2019 at 05:00:21PM +0000, Mani, Rajmohan wrote:
> > > > > Hi Laurent, Tomasz, Jacopo,
> > > > >
> > > > > > Subject: Re: [PATCH v7 00/16] Intel IPU3 ImgU patchset
> > > > > >
> > > > > > Hello,
> > > > > >
> > > > > > On Tue, Jan 08, 2019 at 03:54:34PM +0900, Tomasz Figa wrote:
> > > > > > > Hi Raj, Yong, Bingbu, Tianshu,
> > > > > > >
> > > > > > > On Fri, Dec 21, 2018 at 12:04 PM Tomasz Figa
> > > > > > > <tfiga@chromium.org>
> > > > wrote:
> > > > > > > >
> > > > > > > > On Fri, Dec 21, 2018 at 7:24 AM Laurent Pinchart
> > > > > > > > <laurent.pinchart@ideasonboard.com> wrote:
> > > > > > > > >
> > > > > > > > > Hellon
> > > > > > > > >
> > > > > > > > > On Sunday, 16 December 2018 09:26:18 EET Laurent
> > > > > > > > > Pinchart
> > wrote:
> > > > > > > > > > Hello Yong,
> > > > > > > > > >
> > > > > > > > > > Could you please have a look at the crash reported below ?
> > > > > > > > >
> > > > > > > > > A bit more information to help you debugging this. I've
> > > > > > > > > enabled KASAN in the kernel configuration, and get the
> > > > > > > > > following use-after-free
> > > > > > reports.
> > > > > >
> > > > > > I tested as well using the ipu-process.sh script shared by
> > > > > > Laurent, with the following command line:
> > > > > > ./ipu3-process.sh --out 2560x1920 --vf 1920x1080
> > > > > > frame-2592x1944.cio2
> > > > > >
> > > > > > and I got a very similar trace available at:
> > > > > > https://paste.debian.net/hidden/5855e15a/
> > > > > >
> > > > > > Please note I have been able to process a set of images (with
> > > > > > KASAN enabled the machine does not freeze) but the kernel log
> > > > > > gets flooded and it is not possible to process any other frame after
> this.
> > > > > >
> > > > > > The issue is currently quite annoying and it's a blocker for
> > > > > > libcamera development on IPU3. Please let me know if I can
> > > > > > support with
> > > > more testing.
> > > > > >
> > > > > > Thanks
> > > > > >    j
> > > > > >
> > > > > > > > >
> > > > > > > > > [  166.332920]
> > > > > > > > >
> > > > > >
> > > >
> >
> ================================================================
> > > > > > ==
> > > > > > > > > [  166.332937] BUG: KASAN: use-after-free in
> > > > > > > > > __cached_rbnode_delete_update+0x36/0x202
> > > > > > > > > [  166.332944] Read of size 8 at addr ffff888133823718
> > > > > > > > > by task
> > > > > > > > > yavta/1305
> > > > > > > > >
> > > > > > > > > [  166.332955] CPU: 3 PID: 1305 Comm: yavta Tainted: G         C
> > > > 4.20.0-
> > > > > > rc6+ #3
> > > > > > > > > [  166.332958] Hardware name: HP Soraka/Soraka, BIOS
> > > > > > > > > 08/30/2018 [ 166.332959] Call Trace:
> > > > > > > > > [  166.332967]  dump_stack+0x5b/0x81 [  166.332974]
> > > > > > > > > print_address_description+0x65/0x227
> > > > > > > > > [  166.332979]  ?
> > > > > > > > > __cached_rbnode_delete_update+0x36/0x202
> > > > > > > > > [  166.332983]  kasan_report+0x247/0x285 [  166.332989]
> > > > > > > > > __cached_rbnode_delete_update+0x36/0x202
> > > > > > > > > [  166.332995]  private_free_iova+0x57/0x6d [
> > > > > > > > > 166.332999]
> > > > > > > > > __free_iova+0x23/0x31 [  166.333011]
> > > > > > > > > ipu3_dmamap_free+0x118/0x1d6 [ipu3_imgu]
> > > > > > > >
> > > > > > > > Thanks Laurent, I think this is a very good hint. It looks
> > > > > > > > like we're basically freeing and already freed IOVA and
> > > > > > > > corrupting some allocator state?
> > > > > > >
> > > > > > > Did you have any luck in reproducing and fixing this double
> > > > > > > free
> > issue?
> > > > > > >
> > > > >
> > > > > This issue is either hard to reproduce or comes with different
> > > > > signatures with the updated yavta (that now supports meta
> > > > > output) with the 4.4 kernel that I have been using.
> > > > > I am switching to 4.20-rc6 for better reproducibility.
> > > > > Enabling KASAN also results in storage space issues on my Chrome
> > device.
> > > > > Will enable this just for ImgU to get ahead and get back with
> > > > > more
> > updates.
> > > > >
> > > >
> > > > Thanks for testing this.
> > > >
> > > > For your informations I'm using the following branch, from
> > > > Sakari's
> > > > tree: git://linuxtv.org/sailus/media_tree.git ipu3
> > > >
> > > > Although it appears that the media tree master branch has
> > > > everything that is there, with a few additional patches on top. I
> > > > should move to use media tree master as well...
> > > >
> > > > I have here attached 2 configuration files for v4.20-rc5 I am
> > > > using on Soraka, in case they might help you. One has KASAN
> > > > enabled with an increased kernel log size, the other one is the
> > > > one we use for daily
> > development.
> > >
> > > I think I am missing a trick here to override the default chrome os
> > > kernel config with the one that you supplied.
> > >
> > > In particular I am looking for steps to build the upstream kernel
> > > within chrome os build environment using your config, so I can
> > > update my
> > Soraka device.
> >
> > I'm sorry I can not help much building 'withing chrome os build
> environment'.
> > Care to explain what you mean?
> >
> 
> This is part of the Chromium OS build environment and development
> workflow.
> https://chromium.googlesource.com/chromiumos/docs/+/master/kernel_faq.
> md
> 
> No worries.
> I will sync up with Tomasz, as he managed to get this working with 4.20 kernel.
> 

I finally managed to reproduce the issue with 4.20-rc6, with KASAN enabled and
with CONFIG_SLUB_DEBUG_ON with SLAB_STORE_USER.

The following line indicates the crash happens when yavta PID 10289 tries to free the memory.

[  452.437844] BUG: KASAN: use-after-free in ipu3_dmamap_free+0x50/0x9c [ipu3_imgu]
[  452.446123] Read of size 8 at addr ffff8881503481a0 by task yavta/10289

The above looks to be normal, since it's the same task that allocated this memory.
[  452.685731] Allocated by task 10289:

Before the above happened, yavta/10187 came in and freed this memory per KASAN.
[  452.787656] Freed by task 10187:

Is this (one instance of yavta freeing the memory allocated by another instance of yavta) expected?
Or does it indicate that mmap giving the same address across these 2 instances of yavta?
I need to debug / confirm the latter case.

With the help of local application that operates these pipes in a serial fashion, I do not see
this issue.

I have pasted the relevant parts of the dmesg.

[  452.038082] WARNING: CPU: 1 PID: 10289 at /mnt/host/source/src/third_party/kernel/v4.4/drivers/staging/media/ipu3/ipu3-dmamap.c:172 ipu3_dmamap_unmap+0xf6/0x107 [ipu3_imgu]
[  452.055293] Modules linked in: cmac rfcomm uinput snd_soc_kbl_rt5663_max98927 snd_soc_skl_ssp_clk snd_soc_hdac_hdmi snd_soc_dmic btusb btrtl btbcm asix usbnet btintel bluetooth snd_soc_skl snd_soc_skl_ipc ecdh_generic snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_hda_core ipu3_imgu(C) ipu3_cio2 iova videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_common snd_soc_rt5663 snd_soc_max98927 at24 snd_soc_rl6231 ov13858 ov5670 v4l2_fwnode dw9714 bridge stp llc acpi_als kfifo_buf industrialio ipt_MASQUERADE lzo lzo_compress zram xt_mark fuse snd_seq_dummy snd_seq snd_seq_device cfg80211 ip6table_filter r8152 mii joydev
[  452.117513] CPU: 1 PID: 10289 Comm: yavta Tainted: G        WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  452.128705] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  452.137476] RIP: 0010:ipu3_dmamap_unmap+0xf6/0x107 [ipu3_imgu]
[  452.144007] Code: e1 48 d3 e2 48 8b 7d c8 48 89 de e8 7b f5 ff ff 48 8b 7d d0 4c 89 fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b2 f5 ee ff <0f> 0b 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00
[  452.165007] RSP: 0018:ffff88814ef67a20 EFLAGS: 00010246
[  452.170857] RAX: 0000000000000000 RBX: 00000000000e527e RCX: 0000000000000001
[  452.178842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881179076b8
[  452.186828] RBP: ffff88814ef67a68 R08: 0000000000000000 R09: ffffed1022f20ed8
[  452.194812] R10: ffff8881179076bb R11: dffffc0000000000 R12: ffff8881179076e8
[  452.202799] R13: ffff888117900028 R14: ffff8881179076b8 R15: 0000000000000000
[  452.210784] FS:  00007a5d6524a700(0000) GS:ffff88815b680000(0000) knlGS:0000000000000000
[  452.219837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  452.226271] CR2: 00005ba49b474078 CR3: 0000000129e1e002 CR4: 00000000003606e0
[  452.234251] Call Trace:
[  452.237003]  ipu3_dmamap_free+0x41/0x9c [ipu3_imgu]
[  452.242473]  ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu]
[  452.248431]  ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu]
[  452.254772]  ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu]
[  452.261119]  imgu_s_stream+0x94/0x443 [ipu3_imgu]
[  452.266392]  ? ipu3_vb2_buf_queue+0x280/0x280 [ipu3_imgu]
[  452.272438]  ? vb2_dma_sg_unmap_dmabuf+0x16/0x6f [videobuf2_dma_sg]
[  452.279456]  ? vb2_buffer_in_use+0x36/0x58 [videobuf2_common]
[  452.285894]  ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu]
[  452.292137]  __vb2_queue_cancel+0x35/0x215 [videobuf2_common]
[  452.298576]  vb2_core_streamoff+0x19/0x73 [videobuf2_common]
[  452.304920]  __video_do_ioctl+0x34e/0x450
[  452.309414]  video_usercopy+0x25e/0x597
[  452.313718]  ? video_ioctl2+0x16/0x16
[  452.317823]  ? __switch_to_asm+0x34/0x70
[  452.322215]  v4l2_ioctl+0x45/0x49
[  452.325932]  vfs_ioctl+0x1b/0x30
[  452.329551]  do_vfs_ioctl+0x479/0x6d0
[  452.333660]  ksys_ioctl+0x53/0x79
[  452.337375]  __se_sys_ioctl+0xe/0x12
[  452.341379]  do_syscall_64+0x52/0x60
[  452.345384]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  452.351035] RIP: 0033:0x7a5d64b73967
[  452.355042] Code: 8a 66 90 48 8b 05 29 55 2b 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f9 54 2b 00 f7 d8 64 89 01 48
[  452.376041] RSP: 002b:00007fff3483aca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  452.384515] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007a5d64b73967
[  452.392501] RDX: 00007fff3483acb4 RSI: 0000000040045613 RDI: 0000000000000003
[  452.400484] RBP: 0000000000404c48 R08: fffffffffed7c030 R09: fffffffffed7c020
[  452.408467] R10: fffffffffed7c010 R11: 0000000000000246 R12: 0000000000404c56
[  452.416450] R13: 0000000000000001 R14: 00007fff3483c75c R15: 000000000062b800
[  452.424432] ---[ end trace ed0895d0744ba932 ]---
[  452.429752] ==================================================================
[  452.437844] BUG: KASAN: use-after-free in ipu3_dmamap_free+0x50/0x9c [ipu3_imgu]
[  452.446123] Read of size 8 at addr ffff8881503481a0 by task yavta/10289

[  452.455191] CPU: 1 PID: 10289 Comm: yavta Tainted: G        WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  452.466380] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  452.475133] Call Trace:
[  452.477880]  dump_stack+0x6a/0xb1
[  452.481600]  print_address_description+0x8e/0x279
[  452.486873]  ? ipu3_dmamap_free+0x50/0x9c [ipu3_imgu]
[  452.492530]  kasan_report+0x260/0x28a
[  452.496637]  ipu3_dmamap_free+0x50/0x9c [ipu3_imgu]
[  452.502103]  ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu]
[  452.508056]  ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu]
[  452.514395]  ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu]
[  452.520737]  imgu_s_stream+0x94/0x443 [ipu3_imgu]
[  452.526010]  ? ipu3_vb2_buf_queue+0x280/0x280 [ipu3_imgu]
[  452.532058]  ? vb2_dma_sg_unmap_dmabuf+0x16/0x6f [videobuf2_dma_sg]
[  452.539076]  ? vb2_buffer_in_use+0x36/0x58 [videobuf2_common]
[  452.545513]  ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu]
[  452.551762]  __vb2_queue_cancel+0x35/0x215 [videobuf2_common]
[  452.558203]  vb2_core_streamoff+0x19/0x73 [videobuf2_common]
[  452.564542]  __video_do_ioctl+0x34e/0x450
[  452.569039]  video_usercopy+0x25e/0x597
[  452.573341]  ? video_ioctl2+0x16/0x16
[  452.577443]  ? __switch_to_asm+0x34/0x70
[  452.581838]  v4l2_ioctl+0x45/0x49
[  452.585559]  vfs_ioctl+0x1b/0x30
[  452.589178]  do_vfs_ioctl+0x479/0x6d0
[  452.593277]  ksys_ioctl+0x53/0x79
[  452.596991]  __se_sys_ioctl+0xe/0x12
[  452.601000]  do_syscall_64+0x52/0x60
[  452.605010]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  452.610668] RIP: 0033:0x7a5d64b73967
[  452.614677] Code: 8a 66 90 48 8b 05 29 55 2b 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f9 54 2b 00 f7 d8 64 89 01 48
[  452.635676] RSP: 002b:00007fff3483aca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  452.644149] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007a5d64b73967
[  452.652125] RDX: 00007fff3483acb4 RSI: 0000000040045613 RDI: 0000000000000003
[  452.660109] RBP: 0000000000404c48 R08: fffffffffed7c030 R09: fffffffffed7c020
[  452.668092] R10: fffffffffed7c010 R11: 0000000000000246 R12: 0000000000404c56
[  452.676076] R13: 0000000000000001 R14: 00007fff3483c75c R15: 000000000062b800

[  452.685731] Allocated by task 10289:
[  452.689736]  set_track+0x64/0xfb
[  452.693354]  __kmalloc+0x94/0x1af
[  452.697066]  __get_vm_area_node+0x9e/0x103
[  452.701654]  __get_vm_area+0x26/0x29
[  452.705653]  ipu3_dmamap_alloc+0x333/0x503 [ipu3_imgu]
[  452.711408]  ipu3_css_pool_init+0x43/0x99 [ipu3_imgu]
[  452.717070]  ipu3_css_start_streaming+0x25cf/0x29a7 [ipu3_imgu]
[  452.723697]  imgu_s_stream+0x133/0x443 [ipu3_imgu]
[  452.729055]  ipu3_vb2_start_streaming+0x1a3/0x1f1 [ipu3_imgu]
[  452.735492]  vb2_start_streaming+0x71/0x11c [videobuf2_common]
[  452.742027]  vb2_core_streamon+0xf8/0x118 [videobuf2_common]
[  452.748371]  __video_do_ioctl+0x34e/0x450
[  452.752857]  video_usercopy+0x25e/0x597
[  452.757155]  v4l2_ioctl+0x45/0x49
[  452.760869]  vfs_ioctl+0x1b/0x30
[  452.764497]  do_vfs_ioctl+0x479/0x6d0
[  452.768602]  ksys_ioctl+0x53/0x79
[  452.772318]  __se_sys_ioctl+0xe/0x12
[  452.776322]  do_syscall_64+0x52/0x60
[  452.780330]  entry_SYSCALL_64_after_hwframe+0x44/0xa9

[  452.787656] Freed by task 10187:
[  452.791274]  set_track+0x64/0xfb
[  452.794897]  __kasan_slab_free+0xde/0x101
[  452.799393]  slab_free_freelist_hook+0x4d/0x9e
[  452.804373]  kfree+0x8b/0x4d7
[  452.807703]  ipu3_dmamap_free+0x7e/0x9c [ipu3_imgu]
[  452.813167]  ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu]
[  452.819117]  ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu]
[  452.825454]  ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu]
[  452.831796]  imgu_s_stream+0x94/0x443 [ipu3_imgu]
[  452.837066]  ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu]
[  452.843308]  __vb2_queue_cancel+0x35/0x215 [videobuf2_common]
[  452.849747]  vb2_core_streamoff+0x19/0x73 [videobuf2_common]
[  452.856086]  __video_do_ioctl+0x34e/0x450
[  452.860610]  video_usercopy+0x25e/0x597
[  452.864913]  v4l2_ioctl+0x45/0x49
[  452.868630]  vfs_ioctl+0x1b/0x30
[  452.872245]  do_vfs_ioctl+0x479/0x6d0
[  452.876349]  ksys_ioctl+0x53/0x79
[  452.880059]  __se_sys_ioctl+0xe/0x12
[  452.884068]  do_syscall_64+0x52/0x60
[  452.888075]  entry_SYSCALL_64_after_hwframe+0x44/0xa9

[  452.895396] The buggy address belongs to the object at ffff888150348180
                which belongs to the cache kmalloc-64 of size 64
[  452.909203] The buggy address is located 32 bytes inside of
                64-byte region [ffff888150348180, ffff8881503481c0)
[  452.922142] The buggy address belongs to the page:
[  452.927506] page:ffffea000540d200 count:1 mapcount:0 mapping:ffff88815ac0f840 index:0x0 compound_mapcount: 0
[  452.938503] flags: 0x8000000000010200(slab|head)
[  452.943675] raw: 8000000000010200 ffffea00055d1d08 ffffea0005345e08 ffff88815ac0f840
[  452.952342] raw: 0000000000000000 0000000000150015 00000001ffffffff 0000000000000000
[  452.961008] page dumped because: kasan: bad access detected

[  452.968915] Memory state around the buggy address:
[  452.974277]  ffff888150348080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  452.982361]  ffff888150348100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  452.990435] >ffff888150348180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  452.998518]                                ^
[  453.003291]  ffff888150348200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  453.011376]  ffff888150348280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  453.019457] ==================================================================
[  453.027537] Disabling lock debugging due to kernel taint
[  453.034645] ==================================================================
[  453.042736] BUG: KASAN: double-free or invalid-free in kfree+0x8b/0x4d7

[  453.051817] CPU: 1 PID: 10289 Comm: yavta Tainted: G    B   WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  453.063006] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  453.071767] Call Trace:
[  453.074513]  dump_stack+0x6a/0xb1
[  453.078233]  ? kfree+0x8b/0x4d7
[  453.081757]  ? kfree+0x8b/0x4d7
[  453.085284]  print_address_description+0x8e/0x279
[  453.090556]  ? kfree+0x8b/0x4d7
[  453.094082]  ? kfree+0x8b/0x4d7
[  453.097608]  kasan_report_invalid_free+0x58/0x95
[  453.102787]  __kasan_slab_free+0x9f/0x101
[  453.107286]  slab_free_freelist_hook+0x4d/0x9e
[  453.112266]  ? ipu3_dmamap_free+0x6d/0x9c [ipu3_imgu]
[  453.117930]  kfree+0x8b/0x4d7
[  453.121262]  ? __free_pages+0x2f/0x71
[  453.125368]  ipu3_dmamap_free+0x6d/0x9c [ipu3_imgu]
[  453.130833]  ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu]
[  453.136786]  ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu]
[  453.143131]  ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu]
[  453.149476]  imgu_s_stream+0x94/0x443 [ipu3_imgu]
[  453.154750]  ? ipu3_vb2_buf_queue+0x280/0x280 [ipu3_imgu]
[  453.160798]  ? vb2_dma_sg_unmap_dmabuf+0x16/0x6f [videobuf2_dma_sg]
[  453.167821]  ? vb2_buffer_in_use+0x36/0x58 [videobuf2_common]
[  453.174263]  ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu]
[  453.180500]  __vb2_queue_cancel+0x35/0x215 [videobuf2_common]
[  453.186938]  vb2_core_streamoff+0x19/0x73 [videobuf2_common]
[  453.193276]  __video_do_ioctl+0x34e/0x450
[  453.197789]  video_usercopy+0x25e/0x597
[  453.202088]  ? video_ioctl2+0x16/0x16
[  453.206193]  ? __switch_to_asm+0x34/0x70
[  453.210587]  v4l2_ioctl+0x45/0x49
[  453.214302]  vfs_ioctl+0x1b/0x30
[  453.217923]  do_vfs_ioctl+0x479/0x6d0
[  453.222033]  ksys_ioctl+0x53/0x79
[  453.225750]  __se_sys_ioctl+0xe/0x12
[  453.229757]  do_syscall_64+0x52/0x60
[  453.233765]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  453.239423] RIP: 0033:0x7a5d64b73967
[  453.243429] Code: 8a 66 90 48 8b 05 29 55 2b 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f9 54 2b 00 f7 d8 64 89 01 48
[  453.264428] RSP: 002b:00007fff3483aca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  453.272904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007a5d64b73967
[  453.280892] RDX: 00007fff3483acb4 RSI: 0000000040045613 RDI: 0000000000000003
[  453.288877] RBP: 0000000000404c48 R08: fffffffffed7c030 R09: fffffffffed7c020
[  453.296861] R10: fffffffffed7c010 R11: 0000000000000246 R12: 0000000000404c56
[  453.304842] R13: 0000000000000001 R14: 00007fff3483c75c R15: 000000000062b800

[  453.314500] Allocated by task 10289:
[  453.318507]  set_track+0x64/0xfb
[  453.322120]  __kmalloc+0x94/0x1af
[  453.325832]  kvmalloc_node+0x4e/0x84
[  453.329839]  ipu3_dmamap_alloc+0xec/0x503 [ipu3_imgu]
[  453.335488]  ipu3_css_pool_init+0x43/0x99 [ipu3_imgu]
[  453.341144]  ipu3_css_start_streaming+0x25cf/0x29a7 [ipu3_imgu]
[  453.347775]  imgu_s_stream+0x133/0x443 [ipu3_imgu]
[  453.353144]  ipu3_vb2_start_streaming+0x1a3/0x1f1 [ipu3_imgu]
[  453.359579]  vb2_start_streaming+0x71/0x11c [videobuf2_common]
[  453.366111]  vb2_core_streamon+0xf8/0x118 [videobuf2_common]
[  453.372449]  __video_do_ioctl+0x34e/0x450
[  453.376935]  video_usercopy+0x25e/0x597
[  453.381230]  v4l2_ioctl+0x45/0x49
[  453.384945]  vfs_ioctl+0x1b/0x30
[  453.388568]  do_vfs_ioctl+0x479/0x6d0
[  453.392672]  ksys_ioctl+0x53/0x79
[  453.396387]  __se_sys_ioctl+0xe/0x12
[  453.400393]  do_syscall_64+0x52/0x60
[  453.404395]  entry_SYSCALL_64_after_hwframe+0x44/0xa9

[  453.411716] Freed by task 10187:
[  453.415340]  set_track+0x64/0xfb
[  453.418960]  __kasan_slab_free+0xde/0x101
[  453.423452]  slab_free_freelist_hook+0x4d/0x9e
[  453.428430]  kfree+0x8b/0x4d7
[  453.431766]  ipu3_dmamap_free+0x6d/0x9c [ipu3_imgu]
[  453.437231]  ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu]
[  453.443183]  ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu]
[  453.449522]  ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu]
[  453.455864]  imgu_s_stream+0x94/0x443 [ipu3_imgu]
[  453.461133]  ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu]
[  453.467375]  __vb2_queue_cancel+0x35/0x215 [videobuf2_common]
[  453.473810]  vb2_core_streamoff+0x19/0x73 [videobuf2_common]
[  453.480154]  __video_do_ioctl+0x34e/0x450
[  453.484650]  video_usercopy+0x25e/0x597
[  453.488946]  v4l2_ioctl+0x45/0x49
[  453.492652]  vfs_ioctl+0x1b/0x30
[  453.496271]  do_vfs_ioctl+0x479/0x6d0
[  453.500376]  ksys_ioctl+0x53/0x79
[  453.504091]  __se_sys_ioctl+0xe/0x12
[  453.508094]  do_syscall_64+0x52/0x60
[  453.512099]  entry_SYSCALL_64_after_hwframe+0x44/0xa9

[  453.519424] The buggy address belongs to the object at ffff888153eaf380
                which belongs to the cache kmalloc-1k of size 1024
[  453.533431] The buggy address is located 0 bytes inside of
                1024-byte region [ffff888153eaf380, ffff888153eaf780)
[  453.546466] The buggy address belongs to the page:
[  453.551828] page:ffffea00054faa00 count:1 mapcount:0 mapping:ffff88815ac0f180 index:0x0 compound_mapcount: 0
[  453.562829] flags: 0x8000000000010200(slab|head)
[  453.568002] raw: 8000000000010200 ffffea0004b88a08 ffffea000565e808 ffff88815ac0f180
[  453.576670] raw: 0000000000000000 0000000000180018 00000001ffffffff 0000000000000000
[  453.585337] page dumped because: kasan: bad access detected

[  453.593239] Memory state around the buggy address:
[  453.598596]  ffff888153eaf280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  453.606680]  ffff888153eaf300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  453.614765] >ffff888153eaf380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  453.622846]                    ^
[  453.626467]  ffff888153eaf400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  453.634550]  ffff888153eaf480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  453.642624] ==================================================================
[  453.653315] ------------[ cut here ]------------
[  453.658485] kernel BUG at /mnt/host/source/src/third_party/kernel/v4.4/mm/slub.c:3940!
[  453.667369] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  453.673604] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G    B   WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  453.684990] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  453.693762] RIP: 0010:kfree+0x4d3/0x4d7
[  453.698049] Code: 7d b0 48 8b 75 a0 e8 38 e6 6e 00 4c 89 ff 4c 89 f6 e8 3f a9 ff ff e9 22 fc ff ff 4c 89 ff 4c 89 f6 e8 1d b6 ff ff eb d6 0f 0b <0f> 0b 0f 0b 0f 1f 44 00 00 55 48 89 e5 48 8b 07 48 8b 4f 08 48 89
[  453.719051] RSP: 0018:ffff88815af17d20 EFLAGS: 00010246
[  453.724904] RAX: ffffea0001d9a288 RBX: ffff88807644d860 RCX: ffffea0001d91300
[  453.732891] RDX: ffffea0001d91340 RSI: 0000000000000004 RDI: 0000000001d91361
[  453.740866] RBP: ffff88815af17da8 R08: 0000000000000000 R09: fffffbfff6521ca7
[  453.748852] R10: ffffffffb290e533 R11: dffffc0000000000 R12: ffffffffb16dec02
[  453.751044] ipu3-imgu 0000:00:05.0: wait cio gate idle timeout
[  453.756835] R13: ffff88815b62ab70 R14: ffffea0001d91300 R15: ffff88815af08000
[  453.756839] FS:  0000000000000000(0000) GS:ffff88815b600000(0000) knlGS:0000000000000000
[  453.756841] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.756843] CR2: 00007a8ac018f000 CR3: 00000000744ba006 CR4: 00000000003606f0
[  453.756845] Call Trace:
[  453.756855]  rcu_process_callbacks+0x20a/0x437
[  453.769422] BUG: Bad page state in process yavta  pfn:74756
[  453.771362]  __do_softirq+0x16c/0x33e
[  453.780406] page:ffffea0001d1d580 count:0 mapcount:0 mapping:ffff88815ae4c6c0 index:0x0
[  453.786839]  run_ksoftirqd+0x1d/0x34
[  453.794809] flags: 0x4000000000000000()
[  453.797551]  smpboot_thread_fn+0x1bb/0x291
[  453.802503] raw: 4000000000000000 dead000000000100 dead000000000200 ffff88815ae4c6c0
[  453.808736]  ? cpu_report_death+0x84/0x84
[  453.812829] raw: 0000000000000000 0000000000100010 00000000ffffffff 0000000000000000
[  453.821781]  kthread+0xfd/0x10d
[  453.825773] page dumped because: non-NULL mapping
[  453.830072]  ? cpu_report_death+0x84/0x84
[  453.834649] Modules linked in: cmac rfcomm uinput snd_soc_kbl_rt5663_max98927 snd_soc_skl_ssp_clk snd_soc_hdac_hdmi snd_soc_dmic btusb btrtl btbcm asix usbnet btintel bluetooth snd_soc_skl snd_soc_skl_ipc ecdh_generic snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_hda_core ipu3_imgu(C) ipu3_cio2 iova videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_common snd_soc_rt5663 snd_soc_max98927 at24 snd_soc_rl6231 ov13858 ov5670 v4l2_fwnode dw9714 bridge stp llc acpi_als kfifo_buf industrialio ipt_MASQUERADE lzo lzo_compress zram xt_mark fuse snd_seq_dummy snd_seq snd_seq_device cfg80211 ip6table_filter r8152 mii joydev
[  453.843306]  ? kthread_destroy_worker+0x49/0x49
[  453.847795] CPU: 1 PID: 10289 Comm: yavta Tainted: G    B   WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  453.856449]  ret_from_fork+0x35/0x40
[  453.859956] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  453.865208] Modules linked in: cmac rfcomm uinput snd_soc_kbl_rt5663_max98927 snd_soc_skl_ssp_clk snd_soc_hdac_hdmi snd_soc_dmic btusb btrtl btbcm asix usbnet btintel bluetooth snd_soc_skl snd_soc_skl_ipc ecdh_generic snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_hda_core ipu3_imgu(C) ipu3_cio2 iova videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_common snd_soc_rt5663 snd_soc_max98927 at24 snd_soc_rl6231 ov13858 ov5670 v4l2_fwnode dw9714 bridge stp llc acpi_als kfifo_buf industrialio ipt_MASQUERADE lzo lzo_compress zram xt_mark fuse snd_seq_dummy snd_seq snd_seq_device cfg80211 ip6table_filter r8152 mii joydev
[  453.869692] Call Trace:
[  453.933872] gsmi: Log Shutdown Reason 0x03
[  453.938939]  dump_stack+0x6a/0xb1
[  453.950359] ---[ end trace ed0895d0744ba933 ]---
[  453.954123]  bad_page+0x140/0x14a
[  453.954128]  free_pages_check+0x87/0x95
[  453.954132]  free_pcppages_bulk+0xbd/0x218
[  453.954137]  free_unref_page+0x49/0x6e
[  453.954142]  __free_pages+0x4a/0x71
[  453.962932] RIP: 0010:kfree+0x4d3/0x4d7
[  454.025068]  vb2_dma_sg_put+0x8f/0xec [videobuf2_dma_sg]
[  454.025074]  __vb2_buf_mem_free+0x39/0x75 [videobuf2_common]
[  454.025079]  __vb2_queue_free+0xb3/0x19f [videobuf2_common]
[  454.025084]  vb2_core_reqbufs+0x12a/0x312 [videobuf2_common]
[  454.025090]  vb2_ioctl_reqbufs+0x81/0xa8 [videobuf2_v4l2]
[  454.025098]  __video_do_ioctl+0x34e/0x450
[  454.025105]  video_usercopy+0x25e/0x597
[  454.025109]  ? video_ioctl2+0x16/0x16
[  454.025116]  v4l2_ioctl+0x45/0x49
[  454.025121]  vfs_ioctl+0x1b/0x30
[  454.025125]  do_vfs_ioctl+0x479/0x6d0
[  454.025131]  ksys_ioctl+0x53/0x79
[  454.025136]  __se_sys_ioctl+0xe/0x12
[  454.027896] Code: 7d b0 48 8b 75 a0 e8 38 e6 6e 00 4c 89 ff 4c 89 f6 e8 3f a9 ff ff e9 22 fc ff ff 4c 89 ff 4c 89 f6 e8 1d b6 ff ff eb d6 0f 0b <0f> 0b 0f 0b 0f 1f 44 00 00 55 48 89 e5 48 8b 07 48 8b 4f 08 48 89
[  454.032459]  do_syscall_64+0x52/0x60
[  454.032465]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  454.032469] RIP: 0033:0x7a5d64b73967
[  454.032473] Code: 8a 66 90 48 8b 05 29 55 2b 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f9 54 2b 00 f7 d8 64 89 01 48
[  454.032475] RSP: 002b:00007fff3483acd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  454.032479] RAX: ffffffffffffffda RBX: 00000000023d97a0 RCX: 00007a5d64b73967
[  454.036194] RSP: 0018:ffff88815af17d20 EFLAGS: 00010246
[  454.041352] RDX: 00007fff3483ade0 RSI: 00000000c0145608 RDI: 0000000000000003
[  454.041355] RBP: 0000000000000007 R08: 00007a5d64e287c0 R09: 0000000000000045
[  454.041356] R10: fffffffffffff88f R11: 0000000000000246 R12: 0000000000000001
[  454.041358] R13: 00000000023d9778 R14: 00000000023d9750 R15: 000000000062b800
[  454.041364] BUG: Bad page state in process yavta  pfn:7671e
[  454.041368] page:ffffea0001d9c780 count:0 mapcount:0 mapping:ffff88815ae4c6c0 index:0x0
[  454.041370] flags: 0x4000000000000000()
[  454.041375] raw: 4000000000000000 dead000000000100 dead000000000200 ffff88815ae4c6c0
[  454.041378] raw: 0000000000000000 0000000000100010 00000000ffffffff 0000000000000000
[  454.041379] page dumped because: non-NULL mapping
[  454.041380] Modules linked in: cmac rfcomm uinput snd_soc_kbl_rt5663_max98927 snd_soc_skl_ssp_clk snd_soc_hdac_hdmi snd_soc_dmic btusb btrtl btbcm asix usbnet btintel bluetooth snd_soc_skl snd_soc_skl_ipc ecdh_generic snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_hda_core ipu3_imgu(C) ipu3_cio2 iova videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_common snd_soc_rt5663 snd_soc_max98927 at24 snd_soc_rl6231 ov13858 ov5670 v4l2_fwnode dw9714 bridge stp llc acpi_als kfifo_buf industrialio ipt_MASQUERADE lzo lzo_compress zram xt_mark fuse snd_seq_dummy snd_seq snd_seq_device cfg80211 ip6table_filter r8152 mii joydev
[  454.045094] RAX: ffffea0001d9a288 RBX: ffff88807644d860 RCX: ffffea0001d91300
[  454.049378] CPU: 1 PID: 10289 Comm: yavta Tainted: G    B D WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  454.049380] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  454.049381] Call Trace:
[  454.049389]  dump_stack+0x6a/0xb1
[  454.049395]  bad_page+0x140/0x14a
[  454.049399]  free_pages_check+0x87/0x95
[  454.049403]  free_pcppages_bulk+0xbd/0x218
[  454.049408]  free_unref_page+0x49/0x6e
[  454.049412]  __free_pages+0x4a/0x71
[  454.049420]  vb2_dma_sg_put+0x8f/0xec [videobuf2_dma_sg]
[  454.049433]  __vb2_buf_mem_free+0x39/0x75 [videobuf2_common]
[  454.049438]  __vb2_queue_free+0xb3/0x19f [videobuf2_common]
[  454.049444]  vb2_core_reqbufs+0x12a/0x312 [videobuf2_common]
[  454.049450]  vb2_ioctl_reqbufs+0x81/0xa8 [videobuf2_v4l2]
[  454.049455]  __video_do_ioctl+0x34e/0x450
[  454.054060] RDX: ffffea0001d91340 RSI: 0000000000000004 RDI: 0000000001d91361
[  454.058234]  video_usercopy+0x25e/0x597
[  454.058238]  ? video_ioctl2+0x16/0x16
[  454.058243]  v4l2_ioctl+0x45/0x49
[  454.062148] RBP: ffff88815af17da8 R08: 0000000000000000 R09: fffffbfff6521ca7
[  454.066440]  vfs_ioctl+0x1b/0x30
[  454.066444]  do_vfs_ioctl+0x479/0x6d0
[  454.066448]  ksys_ioctl+0x53/0x79
[  454.066452]  __se_sys_ioctl+0xe/0x12
[  454.066456]  do_syscall_64+0x52/0x60
[  454.066461]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  454.066464] RIP: 0033:0x7a5d64b73967
[  454.066468] Code: 8a 66 90 48 8b 05 29 55 2b 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f9 54 2b 00 f7 d8 64 89 01 48
[  454.066469] RSP: 002b:00007fff3483acd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  454.066476] RAX: ffffffffffffffda RBX: 00000000023d97a0 RCX: 00007a5d64b73967
[  454.072423] R10: ffffffffb290e533 R11: dffffc0000000000 R12: ffffffffb16dec02
[  454.078745] RDX: 00007fff3483ade0 RSI: 00000000c0145608 RDI: 0000000000000003
[  454.078747] RBP: 0000000000000007 R08: 00007a5d64e287c0 R09: 0000000000000045
[  454.078749] R10: fffffffffffff88f R11: 0000000000000246 R12: 0000000000000001
[  454.078750] R13: 00000000023d9778 R14: 00000000023d9750 R15: 000000000062b800
[  454.078758] BUG: Bad page state in process yavta  pfn:746a6
[  454.085002] R13: ffff88815b62ab70 R14: ffffea0001d91300 R15: ffff88815af08000
[  454.091322] page:ffffea0001d1a980 count:0 mapcount:0 mapping:ffff88815ae4c6c0 index:0x0
[  454.091325] flags: 0x4000000000000000()
[  454.091329] raw: 4000000000000000 dead000000000100 dead000000000200 ffff88815ae4c6c0
[  454.091331] raw: 0000000000000000 0000000000100010 00000000ffffffff 0000000000000000
[  454.097378] FS:  0000000000000000(0000) GS:ffff88815b600000(0000) knlGS:0000000000000000
[  454.101841] page dumped because: non-NULL mapping
[  454.101843] Modules linked in: cmac rfcomm uinput snd_soc_kbl_rt5663_max98927 snd_soc_skl_ssp_clk snd_soc_hdac_hdmi snd_soc_dmic btusb btrtl btbcm asix usbnet btintel bluetooth snd_soc_skl snd_soc_skl_ipc ecdh_generic snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_hda_core ipu3_imgu(C) ipu3_cio2 iova videobuf2_dma_sg videobuf2_memops videobuf2_v4l2 videobuf2_common snd_soc_rt5663 snd_soc_max98927 at24 snd_soc_rl6231 ov13858 ov5670 v4l2_fwnode dw9714 bridge stp llc acpi_als kfifo_buf industrialio ipt_MASQUERADE lzo lzo_compress zram xt_mark fuse snd_seq_dummy snd_seq snd_seq_device cfg80211 ip6table_filter r8152 mii joydev
[  454.106153] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  454.110240] CPU: 1 PID: 10289 Comm: yavta Tainted: G    B D WC        4.20.0-rc6-00031-g3b32400169db-dirty #37
[  454.110242] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018
[  454.110243] Call Trace:
[  454.110250]  dump_stack+0x6a/0xb1
[  454.110265]  bad_page+0x140/0x14a
[  454.113968] CR2: 00007a8ac018f000 CR3: 00000000744ba006 CR4: 00000000003606f0
[  454.117574]  free_pages_check+0x87/0x95
[  454.117579]  free_pcppages_bulk+0xbd/0x218
[  454.117583]  free_unref_page+0x49/0x6e
[  454.121691] Kernel panic - not syncing: Fatal exception in interrupt
[  454.125400]  __free_pages+0x4a/0x71

[snip]

  parent reply	other threads:[~2019-01-12  2:30 UTC|newest]

Thread overview: 123+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-10-29 22:22 [PATCH v7 00/16] Intel IPU3 ImgU patchset Yong Zhi
2018-10-29 22:22 ` [PATCH v7 01/16] v4l: Add Intel IPU3 meta buffer formats Yong Zhi
2018-11-02 12:59   ` Mauro Carvalho Chehab
2018-11-02 13:05     ` Mauro Carvalho Chehab
2018-11-29 19:16   ` Laurent Pinchart
2018-11-29 23:12     ` Zhi, Yong
2018-10-29 22:22 ` [PATCH v7 02/16] doc-rst: Add Intel IPU3 documentation Yong Zhi
2018-11-29 22:50   ` Laurent Pinchart
2018-12-13  9:38     ` Sakari Ailus
2018-12-13 10:41       ` Laurent Pinchart
2018-12-13 10:50         ` Sakari Ailus
2018-12-13  9:38     ` [PATCH 1/1] staging/ipu3-imgu: Address documentation comments Sakari Ailus
2018-10-29 22:22 ` [PATCH v7 03/16] v4l: Add Intel IPU3 meta data uAPI Yong Zhi
2018-11-02 13:02   ` Sakari Ailus
2018-11-16 22:37     ` Zhi, Yong
     [not found]       ` <20181129224548.qwbkau6suipt2veq@kekkonen.localdomain>
2018-11-29 23:06         ` Zhi, Yong
2018-11-29 23:06           ` Zhi, Yong
2018-12-01 20:57           ` Sakari Ailus
2018-12-01 20:57             ` Sakari Ailus
2018-11-02 13:49   ` Mauro Carvalho Chehab
2018-11-02 14:04     ` Tomasz Figa
2018-11-06 23:27       ` Mani, Rajmohan
2018-11-15 10:52         ` Hans Verkuil
2018-11-29  0:41           ` Mani, Rajmohan
2018-11-06 18:25     ` Zhi, Yong
2018-11-15 12:51   ` Hans Verkuil
2018-11-21 18:45     ` Zhi, Yong
2018-10-29 22:22 ` [PATCH v7 04/16] intel-ipu3: abi: Add register definitions and enum Yong Zhi
2018-10-29 22:22 ` [PATCH v7 05/16] intel-ipu3: abi: Add structs Yong Zhi
2018-11-05  8:27   ` Sakari Ailus
2018-11-05 19:05     ` Mani, Rajmohan
2018-11-06  8:04       ` Sakari Ailus
2018-11-06 23:31         ` Mani, Rajmohan
2018-10-29 22:23 ` [PATCH v7 06/16] intel-ipu3: mmu: Implement driver Yong Zhi
2018-11-05 11:55   ` Sakari Ailus
2018-11-06  5:50     ` Zhi, Yong
2018-11-06  5:56       ` Tomasz Figa
2018-10-29 22:23 ` [PATCH v7 07/16] intel-ipu3: Implement DMA mapping functions Yong Zhi
2018-10-29 22:23 ` [PATCH v7 08/16] intel-ipu3: css: Add dma buff pool utility functions Yong Zhi
2018-11-08 15:36   ` Sakari Ailus
2018-11-09 23:16     ` Zhi, Yong
2018-11-12  9:21       ` Sakari Ailus
2018-10-29 22:23 ` [PATCH v7 09/16] intel-ipu3: css: Add support for firmware management Yong Zhi
2018-11-28 22:22   ` Sakari Ailus
2018-10-29 22:23 ` [PATCH v7 11/16] intel-ipu3: css: Compute and program ccs Yong Zhi
2018-10-29 22:23 ` [PATCH v7 12/16] intel-ipu3: css: Initialize css hardware Yong Zhi
2018-11-09 12:06   ` Sakari Ailus
2018-10-29 22:23 ` [PATCH v7 13/16] intel-ipu3: Add css pipeline programming Yong Zhi
2018-10-29 22:23 ` [PATCH v7 14/16] intel-ipu3: Add v4l2 driver based on media framework Yong Zhi
2018-11-09 12:36   ` Sakari Ailus
2018-11-09 23:26     ` Zhi, Yong
2018-11-15 12:51   ` Hans Verkuil
2018-11-15 16:09     ` Zhi, Yong
2018-10-29 22:23 ` [PATCH v7 15/16] intel-ipu3: Add imgu top level pci device driver Yong Zhi
2018-11-09 12:54   ` Sakari Ailus
2018-11-12 22:16     ` Zhi, Yong
2018-10-29 22:23 ` [PATCH v7 16/16] intel-ipu3: Add dual pipe support Yong Zhi
2018-11-01 12:03 ` [PATCH v7 00/16] Intel IPU3 ImgU patchset Sakari Ailus
2018-11-07  4:16   ` Bing Bu Cao
2018-11-09  1:28     ` Zhi, Yong
2018-11-09 11:28       ` Sakari Ailus
2018-11-09 10:09     ` Sakari Ailus
2018-11-12  4:31       ` Bing Bu Cao
2018-11-13 10:31         ` Sakari Ailus
2018-11-13 11:04           ` Bing Bu Cao
2018-11-13 21:58             ` Sakari Ailus
2018-11-14  7:02               ` Bing Bu Cao
2018-11-29 23:09       ` Laurent Pinchart
2018-11-30 13:37         ` Sakari Ailus
2018-11-29 23:07     ` Laurent Pinchart
2018-12-03  9:51       ` Sakari Ailus
2018-12-03 12:34         ` Laurent Pinchart
2018-11-14  0:25 ` jacopo mondi
2018-11-14  7:40   ` Sakari Ailus
2018-11-18  0:12     ` jacopo mondi
2018-11-29 14:43 ` Laurent Pinchart
2018-11-29 19:51   ` Tomasz Figa
2018-11-29 22:54     ` Laurent Pinchart
2018-11-29 22:58       ` Mani, Rajmohan
2018-12-04 16:07       ` Mani, Rajmohan
2018-12-04 16:42         ` Laurent Pinchart
2018-12-04 16:53           ` Mani, Rajmohan
2018-12-05  0:30           ` Mani, Rajmohan
2018-12-11 13:34             ` Laurent Pinchart
2018-12-11 13:43               ` Laurent Pinchart
2018-12-11 14:20                 ` Laurent Pinchart
2018-12-16  7:26                   ` Laurent Pinchart
2018-12-20 22:25                     ` Laurent Pinchart
2018-12-21  3:04                       ` Tomasz Figa
2019-01-08  6:54                         ` Tomasz Figa
2019-01-09 16:40                           ` Jacopo Mondi
2019-01-09 17:00                             ` Mani, Rajmohan
2019-01-09 17:25                               ` Jacopo Mondi
2019-01-09 18:01                                 ` Mani, Rajmohan
2019-01-09 18:20                                   ` Jacopo Mondi
2019-01-09 18:36                                     ` Mani, Rajmohan
2019-01-10  8:19                                       ` Jacopo Mondi
2019-01-12  2:06                                         ` Mani, Rajmohan
2019-01-12  2:30                                     ` Mani, Rajmohan [this message]
2019-01-12 15:10                                       ` Laurent Pinchart
     [not found]                                         ` <6F87890CF0F5204F892DEA1EF0D77A599B323499@fmsmsx122.amr.corp.intel.com>
2019-01-21  5:41                                           ` Tomasz Figa
2019-01-21  8:07                                             ` Laurent Pinchart
2019-01-22 16:21                                               ` Mani, Rajmohan
     [not found]                   ` <6F87890CF0F5204F892DEA1EF0D77A599B31FAF4@fmsmsx122.amr.corp.intel.com>
2019-01-08 23:34                     ` Laurent Pinchart
2018-12-12  4:55                 ` Bingbu Cao
2018-12-13 22:24                   ` Laurent Pinchart
2018-12-14  2:53                     ` Bingbu Cao
2018-12-17  3:14                     ` Bingbu Cao
2018-12-26 11:03                       ` Laurent Pinchart
2019-01-02  2:38                         ` Bingbu Cao
2019-01-02  8:20                           ` Laurent Pinchart
2019-01-02 20:26                             ` Sakari Ailus
2019-01-28 10:09                               ` Jacopo Mondi
2019-01-29  8:56                                 ` Tomasz Figa
2019-02-01 10:04                                   ` Jacopo Mondi
2019-02-05  6:01                                     ` Tomasz Figa
2019-03-23 13:02                           ` Jacopo Mondi
2019-03-25  3:45                             ` Bingbu Cao
2019-03-25  4:06                               ` Laurent Pinchart
2019-03-25  8:11                                 ` Jacopo Mondi
2019-03-25 10:07                                   ` Bingbu Cao
2019-03-26 11:16                                     ` Jacopo Mondi
2019-04-08  6:35                                       ` Bingbu Cao

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=6F87890CF0F5204F892DEA1EF0D77A599B322D80@fmsmsx122.amr.corp.intel.com \
    --to=rajmohan.mani@intel.com \
    --cc=bingbu.cao@intel.com \
    --cc=hans.verkuil@cisco.com \
    --cc=jacopo@jmondi.org \
    --cc=jerry.w.hu@intel.com \
    --cc=laurent.pinchart@ideasonboard.com \
    --cc=linux-media@vger.kernel.org \
    --cc=mchehab@kernel.org \
    --cc=sakari.ailus@linux.intel.com \
    --cc=tfiga@chromium.org \
    --cc=tian.shu.qiu@intel.com \
    --cc=tuukka.toivonen@intel.com \
    --cc=yong.zhi@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).