Bug 109040

Summary: [CI][DRMTIP] igt@gem_exec_create@madvise - dmesg-warn - BUG i915_vma (Tainted: ...): Redzone overwritten
Product: DRI Reporter: Martin Peres <martin.peres>
Component: DRM/IntelAssignee: Intel GFX Bugs mailing list <intel-gfx-bugs>
Status: RESOLVED WORKSFORME QA Contact: Intel GFX Bugs mailing list <intel-gfx-bugs>
Severity: normal    
Priority: medium CC: intel-gfx-bugs, lakshminarayana.vudum
Version: XOrg git   
Hardware: Other   
OS: All   
Whiteboard: ReadyForDev
i915 platform: I915G i915 features:

Description Martin Peres 2018-12-12 15:53:46 UTC 
https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_159/fi-gdg-551/igt@gem_exec_create@madvise.html

<3> [247.099132] =============================================================================
<3> [247.099374] BUG i915_vma (Tainted: G     U           ): Redzone overwritten
<3> [247.099411] -----------------------------------------------------------------------------\x0a
<4> [247.099459] Disabling lock debugging due to kernel taint
<3> [247.099464] INFO: 0x000000009e570753-0x000000009676326e. First byte 0x0 instead of 0xbb
<3> [247.099484] INFO: Slab 0x00000000a98754f5 objects=16 used=16 fp=0x          (null) flags=0x4000000000010200
<3> [247.099504] INFO: Object 0x0000000015c0e245 @offset=8320 fp=0x          (null)\x0a
<3> [247.099526] Redzone 000000009e570753: 00 00 00 00 bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099545] Redzone 000000008a98dd0f: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099565] Redzone 000000005f125fbf: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099585] Redzone 000000002b3cdb59: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099604] Redzone 00000000a4ce6887: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099626] Redzone 00000000d32063e9: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099647] Redzone 00000000a50c0ea8: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099668] Redzone 000000001f26d810: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [247.099689] Object 0000000015c0e245: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099710] Object 000000004df6c4db: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099731] Object 000000004d3aef1e: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099751] Object 00000000132dee30: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099772] Object 000000000c210b0a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099793] Object 000000000ecb6ec8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099814] Object 000000002818329a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099835] Object 00000000ad6fbe67: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099856] Object 00000000aca94cb6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099876] Object 000000008697bb53: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099897] Object 000000006cdcefc3: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099918] Object 00000000a8965c64: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099939] Object 0000000097b2b5d1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099960] Object 00000000ac89833c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.099980] Object 00000000a3878c45: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100001] Object 000000008672f46d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100022] Object 0000000029440e87: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100043] Object 00000000972d92cc: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100064] Object 000000002edc2b84: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100085] Object 00000000d8cccc03: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100106] Object 000000001ff5c179: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100126] Object 00000000488dabd7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100147] Object 0000000001406ade: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100168] Object 00000000e40fce83: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100189] Object 00000000a3b5815f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100209] Object 00000000c256f10c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100230] Object 00000000bcc8bdbe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100251] Object 000000002c1987ee: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100272] Object 0000000029b6f5b6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100293] Object 000000007ab7a2b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100314] Object 00000000dec7c6e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100335] Object 0000000001f6e69c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100355] Object 0000000075fffdb9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100376] Object 000000002ae84705: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [247.100397] Object 00000000f35a917f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5  kkkkkkkkkkkkkkk.
<3> [247.100418] Redzone 0000000006a8ac3b: bb bb bb bb bb bb bb bb                          ........
<3> [247.100438] Padding 000000001c8c7e9b: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
<4> [247.100462] CPU: 0 PID: 1080 Comm: gem_exec_create Tainted: G    BU            4.20.0-rc5-gec6b8cacbc87-drmtip_159+ #1
<4> [247.100464] Hardware name: Dell Inc.                 OptiPlex GX280               /0G8310, BIOS A04 02/09/2005
<4> [247.100466] Call Trace:
<4> [247.100477]  dump_stack+0x67/0x9b
<4> [247.100484]  check_bytes_and_report+0xbd/0x100
<4> [247.100490]  check_object+0x177/0x270
<4> [247.100665]  ? i915_vma_instance+0x11c/0x8a0 [i915]
<4> [247.100670]  alloc_debug_processing+0x17a/0x190
<4> [247.100674]  ___slab_alloc.constprop.34+0x355/0x380
<4> [247.100747]  ? i915_vma_instance+0x11c/0x8a0 [i915]
<4> [247.100754]  ? lock_acquire+0xa6/0x1c0
<4> [247.100828]  ? i915_vma_instance+0x11c/0x8a0 [i915]
<4> [247.100832]  ? __slab_alloc.isra.27.constprop.33+0x3d/0x70
<4> [247.100835]  __slab_alloc.isra.27.constprop.33+0x3d/0x70
<4> [247.100908]  ? i915_vma_instance+0x11c/0x8a0 [i915]
<4> [247.100912]  kmem_cache_alloc+0x21c/0x280
<4> [247.100986]  i915_vma_instance+0x11c/0x8a0 [i915]
<4> [247.101053]  eb_lookup_vmas+0x772/0x1270 [i915]
<4> [247.101124]  ? i915_mutex_lock_interruptible+0x57/0x120 [i915]
<4> [247.101191]  i915_gem_do_execbuffer+0x515/0x1820 [i915]
<4> [247.101202]  ? ___slab_alloc.constprop.34+0x21c/0x380
<4> [247.101205]  ? ___slab_alloc.constprop.34+0x21c/0x380
<4> [247.101269]  ? i915_gem_execbuffer2_ioctl+0xc4/0x3f0 [i915]
<4> [247.101275]  ? lock_acquire+0xa6/0x1c0
<4> [247.101280]  ? __might_fault+0x38/0x90
<4> [247.101349]  ? i915_gem_execbuffer_ioctl+0x300/0x300 [i915]
<4> [247.101414]  i915_gem_execbuffer2_ioctl+0x21b/0x3f0 [i915]
<4> [247.101481]  ? i915_gem_execbuffer_ioctl+0x300/0x300 [i915]
<4> [247.101487]  drm_ioctl_kernel+0x81/0xf0
<4> [247.101493]  drm_ioctl+0x2de/0x390
<4> [247.101559]  ? i915_gem_execbuffer_ioctl+0x300/0x300 [i915]
<4> [247.101565]  ? trace_hardirqs_on_thunk+0x1a/0x1c
<4> [247.101569]  ? lockdep_hardirqs_on+0xe0/0x1b0
<4> [247.101572]  ? trace_hardirqs_on_thunk+0x1a/0x1c
<4> [247.101578]  do_vfs_ioctl+0xa0/0x6e0
<4> [247.101582]  ? retint_kernel+0x2d/0x2d
<4> [247.101588]  ksys_ioctl+0x35/0x60
<4> [247.101593]  __x64_sys_ioctl+0x11/0x20
<4> [247.101595]  do_syscall_64+0x55/0x190
<4> [247.101599]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
<4> [247.101602] RIP: 0033:0x7fe79a3075d7
<4> [247.101606] Code: b3 66 90 48 8b 05 b1 48 2d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 48 2d 00 f7 d8 64 89 01 48
<4> [247.101609] RSP: 002b:00007ffccc7ac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
<4> [247.101612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe79a3075d7
<4> [247.101614] RDX: 00007ffccc7ac620 RSI: 0000000040406469 RDI: 0000000000000005
<4> [247.101616] RBP: 00007ffccc7ac620 R08: 0000000000000004 R09: 00007ffccc7c4080
<4> [247.101618] R10: 000000000007057c R11: 0000000000000246 R12: 0000000040406469
<4> [247.101620] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000
<3> [247.101630] FIX i915_vma: Restoring 0x000000009e570753-0x000000009676326e=0xbb\x0a
<3> [247.101652] FIX i915_vma: Marking all objects used
<7> [253.883504] [drm:intel_sdvo_detect [i915]] [CONNECTOR:43:DVI-D-1]
<7> [253.883604] [drm:intel_sdvo_debug_write [i915]] SDVOB: W: 0B                         (SDVO_CMD_GET_ATTACHED_DISPLAYS)
<7> [253.890552] [drm:intel_sdvo_read_response [i915]] SDVOB: R: (Success) 00 00
<7> [253.890634] [drm:intel_sdvo_detect [i915]] SDVO response 0 0 [1]
<6> [260.393290] gem_exec_create (1080) used greatest stack depth: 12376 bytes left
<6> [262.931123] [IGT] gem_exec_create: exiting, ret=0
Comment 1 Chris Wilson 2018-12-13 07:41:14 UTC 
*** Bug 109041 has been marked as a duplicate of this bug. ***
Comment 2 Chris Wilson 2018-12-13 07:42:32 UTC 
*** Bug 109042 has been marked as a duplicate of this bug. ***
Comment 3 Chris Wilson 2018-12-13 07:43:31 UTC 
3 different reports of a 32b write of 0 into stray locations.
Comment 4 Chris Wilson 2018-12-19 19:21:03 UTC 
*** Bug 109106 has been marked as a duplicate of this bug. ***
Comment 5 CI Bug Log 2018-12-31 10:12:14 UTC 
A CI Bug Log filter associated to this bug has been updated:

{- GDG: igt@gem_exec_create@madvise - dmesg-warn - BUG i915_vma (Tainted: ...): Redzone overwritten -}
{+ GDG: igt@gem_exec_create@madvise - dmesg-warn - (Redzone overwritten|Poison overwritten) +}

New failures caught by the filter:

* https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_170/fi-gdg-551/igt@gem_exec_create@madvise.html
* https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_171/fi-gdg-551/igt@gem_exec_create@madvise.html
* https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_168/fi-gdg-551/igt@gem_exec_create@madvise.html
* https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_168/fi-gdg-551/igt@gem_exec_reuse@baggage.html
* https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_173/fi-gdg-551/igt@gem_exec_create@madvise.html
Comment 6 CI Bug Log 2018-12-31 10:12:37 UTC 
A CI Bug Log filter associated to this bug has been updated:

{- GDG: igt@gem_exec_create@madvise - dmesg-warn - (Redzone overwritten|Poison overwritten) -}
{+ GDG: igt@gem_exec_create@(baggage|madvise) - dmesg-warn - (Redzone overwritten|Poison overwritten) +}

 No new failures caught with the new filter
Comment 7 CI Bug Log 2019-01-02 13:41:28 UTC 
A CI Bug Log filter associated to this bug has been updated:

{- GDG: igt@runner@aborted - fail - Previous test: gem_exec_create (madvise) -}
{+ GDG: igt@runner@aborted - fail - Previous test: gem_exec_create (madvise) | i915_selftest (live_sanitycheck) +}

New failures caught by the filter:

* https://intel-gfx-ci.01.org/tree/drm-tip/Trybot_3428/fi-gdg-551/igt@runner@aborted.html
* https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_5353/fi-gdg-551/igt@runner@aborted.html
Comment 8 CI Bug Log 2019-03-08 10:58:06 UTC 
A CI Bug Log filter associated to this bug has been updated:

{- GDG: igt@runner@aborted - fail - Previous test: gem_exec_create (madvise) | i915_selftest (live_sanitycheck) -}
{+ GDG: igt@runner@aborted - fail - Previous test: gem_exec_create (madvise) | i915_selftest (live_sanitycheck) | kms_ccs | kms_flip_tiling +}

 No new failures caught with the new filter
Comment 9 Martin Peres 2019-03-08 14:12:55 UTC 
This seems to have been fixed in drmtip_174 (64 drmtip runs ago). So closing!
Comment 10 CI Bug Log 2019-03-08 14:13:08 UTC 
The CI Bug Log issue associated to this bug has been archived.

New failures matching the above filters will not be associated to this bug anymore.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.