| Summary: | [CI] igt@kms_* - incomplete - softdog - backtrace in dmesg indicates: NULL deref in intel_psr_flush | ||
|---|---|---|---|
| Product: | DRI | Reporter: | Marta Löfstedt <marta.lofstedt> |
| Component: | DRM/Intel | Assignee: | Jose Roberto de Souza <jose.souza> |
| Status: | CLOSED FIXED | QA Contact: | Intel GFX Bugs mailing list <intel-gfx-bugs> |
| Severity: | normal | ||
| Priority: | high | CC: | intel-gfx-bugs |
| Version: | DRI git | ||
| Hardware: | Other | ||
| OS: | All | ||
| Whiteboard: | ReadyForDev | ||
| i915 platform: | CFL, KBL, SKL | i915 features: | display/PSR |
|
Description
Marta Löfstedt
2018-04-09 13:08:27 UTC
*** Bug 106068 has been marked as a duplicate of this bug. *** https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_21/fi-kbl-r/igt@kms_frontbuffer_tracking@fbc-rgb101010-draw-blt.html softdog, but pstore has: <4>[ 340.053536] Modules linked in: vgem snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic i915 asix btusb usbnet btrtl btbcm mii btintel bluetooth snd_hda_intel x86_pkg_temp_thermal intel_powerclamp snd_hda_codec coretemp crct10dif_pclmul crc32_pclmul snd_hwdep ghash_clmulni_intel snd_hda_core e1000e snd_pcm ecdh_generic mei_me mei prime_numbers pinctrl_sunrisepoint pinctrl_intel <4>[ 340.053560] CPU: 4 PID: 142 Comm: kworker/4:3 Tainted: G U 4.16.0-rc7-ga0e39233b887-drmtip_21+ #1 <4>[ 340.053562] Hardware name: Intel Corporation Kabylake Client platform/Kabylake R DDR4 RVP, BIOS KBLSE2R1.R00.X078.P02.1703030515 03/03/2017 <4>[ 340.053584] Workqueue: events i915_clflush_work [i915] <4>[ 340.053612] RIP: 0010:intel_psr_flush+0x61/0x150 [i915] <4>[ 340.053614] RSP: 0018:ffffab8f00537dd0 EFLAGS: 00010286 <4>[ 340.053616] RAX: 0000000000000000 RBX: ffff8d41a385a5b8 RCX: 0000000000000000 <4>[ 340.053618] RDX: 0000000080000001 RSI: ffffffffffffffff RDI: 00000000ffffffff <4>[ 340.053619] RBP: 0000000000000001 R08: ffff8d41b1a7d948 R09: 00000000ad9315fd <4>[ 340.053621] R10: ffffab8f00537dd0 R11: ffff8d41b1a7d040 R12: ffff8d41a3850000 <4>[ 340.053622] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8d41a89e25c8 <4>[ 340.053624] FS: 0000000000000000(0000) GS:ffff8d41bed00000(0000) knlGS:0000000000000000 <4>[ 340.053625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 340.053627] CR2: 00000000000005e0 CR3: 0000000251210006 CR4: 00000000003606e0 <4>[ 340.053628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 <4>[ 340.053630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 <4>[ 340.053631] Call Trace: <4>[ 340.053661] intel_frontbuffer_flush+0x6a/0x80 [i915] <4>[ 340.053684] i915_clflush_work+0x73/0x1c0 [i915] <4>[ 340.053688] process_one_work+0x21a/0x640 <4>[ 340.053691] worker_thread+0x48/0x3a0 <4>[ 340.053695] kthread+0xfb/0x130 <4>[ 340.053697] ? process_one_work+0x640/0x640 <4>[ 340.053699] ? _kthread_create_on_node+0x60/0x60 <4>[ 340.053702] ret_from_fork+0x3a/0x50 <4>[ 340.053706] Code: b8 a5 00 00 89 f5 31 f6 48 89 df e8 aa 75 26 d0 49 8b 84 24 40 a6 00 00 48 85 c0 74 7d 48 8b 80 48 ff ff ff 48 c7 c6 ff ff ff ff <48> 63 90 e0 05 00 00 b8 01 00 00 00 8d 0c d5 00 00 00 00 48 d3 <1>[ 340.053771] RIP: intel_psr_flush+0x61/0x150 [i915] RSP: ffffab8f00537dd0 <4>[ 340.053773] CR2: 00000000000005e0 <4>[ 340.053775] ---[ end trace cc8235f3734af51b ]--- *** Bug 106071 has been marked as a duplicate of this bug. *** Highest due to CFL-u https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_25/fi-kbl-r/igt@kms_cursor_crc@cursor-128x128-onscreen.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_26/fi-cfl-s3/igt@kms_cursor_crc@cursor-128x128-onscreen.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_26/fi-kbl-r/igt@kms_cursor_crc@cursor-128x128-onscreen.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_29/fi-kbl-r/igt@kms_vblank@pipe-c-wait-forked-busy.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_29/fi-cfl-u/igt@kms_vblank@pipe-c-wait-forked-busy.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_28/fi-kbl-r/igt@kms_vblank@pipe-c-wait-forked-busy.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_57/fi-kbl-r/igt@kms_frontbuffer_tracking@fbc-suspend.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_57/fi-cfl-u2/igt@kms_frontbuffer_tracking@fbc-suspend.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_59/fi-cfl-s3/igt@kms_rotation_crc@sprite-rotation-180.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_60/fi-cfl-s3/igt@kms_rotation_crc@sprite-rotation-180.html <0>[ 366.252050] --------------------------------- <4>[ 366.252050] Modules linked in: i2c_dev vgem cdc_ether usbnet r8152 mii x86_pkg_temp_thermal intel_powerclamp i915 coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel e1000e mei_me mei prime_numbers <4>[ 366.252050] CPU: 2 PID: 86 Comm: kworker/2:1 Tainted: G U W 4.17.0-rc7-g104ae0f882a6-drmtip_60+ #1 <4>[ 366.252050] Hardware name: Intel Corporation CoffeeLake Client Platform/CoffeeLake S UDIMM RVP, BIOS CNLSFWR1.R00.X118.B19.1802080131 02/08/2018 <4>[ 366.252050] Workqueue: events i915_clflush_work [i915] <4>[ 366.252050] RIP: 0010:intel_psr_flush+0x4f/0x130 [i915] <4>[ 366.252050] RSP: 0018:ffff9dc700397df0 EFLAGS: 00010282 <4>[ 366.252050] RAX: 0000000000000000 RBX: ffff8dc4bc780000 RCX: 0000000000000001 <4>[ 366.252050] RDX: 0000000080000001 RSI: 0000000000000001 RDI: 0000000000000000 <4>[ 366.252050] RBP: 0000000000000002 R08: 00000000068cf6d4 R09: 0000000000000000 <4>[ 366.252050] R10: ffff9dc700397df0 R11: ffff8dc4bc78a310 R12: ffff8dc4bc78a2b0 <4>[ 366.252050] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000000 <4>[ 366.252050] FS: 0000000000000000(0000) GS:ffff8dc4cd280000(0000) knlGS:0000000000000000 <4>[ 366.252050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 366.252050] CR2: 0000000000000600 CR3: 0000000372210004 CR4: 00000000003606e0 <4>[ 366.252050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 <4>[ 366.252050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 <4>[ 366.252050] Call Trace: <4>[ 366.252050] intel_frontbuffer_flush+0x6a/0x80 [i915] <4>[ 366.252050] i915_clflush_work+0x73/0x1b0 [i915] <4>[ 366.252050] process_one_work+0x229/0x6a0 <4>[ 366.252050] worker_thread+0x35/0x380 <4>[ 366.252050] ? process_one_work+0x6a0/0x6a0 <4>[ 366.252050] kthread+0x119/0x130 <4>[ 366.252050] ? kthread_flush_work_fn+0x10/0x10 <4>[ 366.252050] ret_from_fork+0x3a/0x50 <4>[ 366.252050] Code: 89 f5 48 89 fb 31 f6 4c 89 e7 e8 8d 36 53 e1 48 8b 83 38 a3 00 00 48 85 c0 0f 84 8b 00 00 00 48 8b 80 48 ff ff ff be 01 00 00 00 <48> 63 90 00 06 00 00 48 c7 c0 ff ff ff ff 8d 0c d5 00 00 00 00 <1>[ 366.252050] RIP: intel_psr_flush+0x4f/0x130 [i915] RSP: ffff9dc700397df0 <4>[ 366.252050] CR2: 0000000000000600 <4>[ 366.252050] ---[ end trace 51ca355488b86fa0 ]--- Also seen on SKL: https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_78/fi-skl-6700hq/igt@kms_busy@basic-modeset-b.html <1>[ 83.275386] BUG: unable to handle kernel NULL pointer dereference at 0000000000000600 <6>[ 83.275394] PGD 0 P4D 0 <4>[ 83.275406] Oops: 0000 [#1] PREEMPT SMP PTI <4>[ 83.275414] CPU: 3 PID: 129 Comm: kworker/3:1 Tainted: G U W 4.18.0-rc3-g7bc1be8128e3-drmtip_78+ #1 <4>[ 83.275419] Hardware name: TOSHIBA SATELLITE P50-C/06F4 , BIOS 1.40 03/29/2016 <4>[ 83.275487] Workqueue: events i915_clflush_work [i915] <4>[ 83.275580] RIP: 0010:intel_psr_flush+0x4f/0x120 [i915] <4>[ 83.275585] Code: f5 48 89 fb 31 f6 4c 89 e7 e8 7d 6a 62 f3 48 8b 83 68 a4 00 00 48 85 c0 0f 84 8b 00 00 00 48 8b 80 48 ff ff ff be 01 00 00 00 <48> 63 90 00 06 00 00 48 c7 c0 ff ff ff ff 8d 0c d5 00 00 00 00 48 <4>[ 83.275709] RSP: 0018:ffffa5f2003cfdf0 EFLAGS: 00010282 <4>[ 83.275716] RAX: 0000000000000000 RBX: ffff959768e80000 RCX: 0000000000000001 <4>[ 83.275721] RDX: 0000000080000001 RSI: 0000000000000001 RDI: 0000000000000000 <4>[ 83.275727] RBP: 0000000000000100 R08: 0000000021bcca6d R09: 0000000000000000 <4>[ 83.275732] R10: ffffa5f2003cfdf0 R11: ffff959768e8a440 R12: ffff959768e8a3e0 <4>[ 83.275737] R13: 0000000000000100 R14: 0000000000000001 R15: 0000000000000000 <4>[ 83.275743] FS: 0000000000000000(0000) GS:ffff959781cc0000(0000) knlGS:0000000000000000 <4>[ 83.275748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 83.275754] CR2: 0000000000000600 CR3: 0000000147210004 CR4: 00000000003606e0 <4>[ 83.275759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 <4>[ 83.275764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 <4>[ 83.275768] Call Trace: <4>[ 83.275862] intel_frontbuffer_flush+0x6a/0x80 [i915] <4>[ 83.275934] i915_clflush_work+0x73/0x1b0 [i915] <4>[ 83.275945] process_one_work+0x248/0x6c0 <4>[ 83.275957] worker_thread+0x37/0x380 <4>[ 83.275965] ? process_one_work+0x6c0/0x6c0 <4>[ 83.275973] kthread+0x119/0x130 <4>[ 83.275981] ? kthread_flush_work_fn+0x10/0x10 <4>[ 83.275990] ret_from_fork+0x3a/0x50 <4>[ 83.276002] Modules linked in: snd_hda_codec_hdmi snd_hda_codec_generic i915 x86_pkg_temp_thermal intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul snd_hda_intel ghash_clmulni_intel snd_hda_codec snd_hwdep snd_hda_core snd_pcm mei_me r8169 mei mii prime_numbers <0>[ 83.315412] --------------------------------- <4>[ 83.315414] CR2: 0000000000000600 <4>[ 83.315417] ---[ end trace d699399803d6cb6f ]--- <4>[ 83.657100] RIP: 0010:intel_psr_flush+0x4f/0x120 [i915] <4>[ 83.657105] Code: f5 48 89 fb 31 f6 4c 89 e7 e8 7d 6a 62 f3 48 8b 83 68 a4 00 00 48 85 c0 0f 84 8b 00 00 00 48 8b 80 48 ff ff ff be 01 00 00 00 <48> 63 90 00 06 00 00 48 c7 c0 ff ff ff ff 8d 0c d5 00 00 00 00 48 <4>[ 83.657154] RSP: 0018:ffffa5f2003cfdf0 EFLAGS: 00010282 <4>[ 83.657157] RAX: 0000000000000000 RBX: ffff959768e80000 RCX: 0000000000000001 <4>[ 83.657159] RDX: 0000000080000001 RSI: 0000000000000001 RDI: 0000000000000000 <4>[ 83.657161] RBP: 0000000000000100 R08: 0000000021bcca6d R09: 0000000000000000 <4>[ 83.657163] R10: ffffa5f2003cfdf0 R11: ffff959768e8a440 R12: ffff959768e8a3e0 <4>[ 83.657165] R13: 0000000000000100 R14: 0000000000000001 R15: 0000000000000000 <4>[ 83.657167] FS: 0000000000000000(0000) GS:ffff959781cc0000(0000) knlGS:0000000000000000 <4>[ 83.657169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 83.657171] CR2: 0000000000000600 CR3: 0000000268d52006 CR4: 00000000003606e0 <4>[ 83.657173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 <4>[ 83.657175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 <3>[ 83.657178] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:34 <3>[ 83.657180] in_atomic(): 0, irqs_disabled(): 1, pid: 129, name: kworker/3:1 Does not appear to be occurring any longer. (In reply to James Ausmus from comment #15) > Does not appear to be occurring any longer. The bug doesn't have a 100% reproduction rate (rather 2%). I would recommend using CI Bug Log's history to check if bugs still happen. We have 5 occurrences in the past 3 days: https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_137/fi-kbl-soraka/igt@kms_frontbuffer_tracking@fbc-suspend.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_136/fi-skl-6600u/igt@pm_rpm@legacy-planes.html https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_136/fi-kbl-soraka/igt@kms_frontbuffer_tracking@fbc-suspend.html https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_5081/shard-skl1/igt@pm_rpm@legacy-planes-dpms.html https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_5078/shard-skl1/igt@pm_rpm@legacy-planes-dpms.html Should be fixed with the commit that was just merged: f0ad62a631e040ae4413286a4b46a90c5ce42d07 (drm/i915/psr: Get pipe id following atomic guidelines) Some failures are still matched with this bug, but I'm not sure if they are really the same. E.g.: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_5345/shard-skl7/igt@kms_frontbuffer_tracking@fbc-suspend.html Can someone verify? (In reply to Francesco Balestrieri from comment #18) > Some failures are still matched with this bug, but I'm not sure if they are > really the same. E.g.: > > https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_5345/shard-skl7/ > igt@kms_frontbuffer_tracking@fbc-suspend.html > > Can someone verify? Yeah, this is the same as https://bugs.freedesktop.org/show_bug.cgi?id=107773. Closing! |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.