Bug 48254

Summary: [dinq] BUG_ON(i915_debugfs.c:701)
Product: DRI Reporter: Chris Wilson <chris>
Component: DRM/IntelAssignee: Ben Widawsky <ben>
Status: CLOSED FIXED QA Contact:
Severity: blocker    
Priority: highest CC: ben, chris, daniel, florian, jbarnes
Version: unspecified   
Hardware: Other   
OS: All   
Whiteboard:
i915 platform: i915 features:

Description Chris Wilson 2012-04-03 08:56:00 UTC 
[  235.910916] kernel BUG at drivers/gpu/drm/i915/i915_debugfs.c:701!
[  235.911063] invalid opcode: 0000 [#1] SMP 
[  235.911176] CPU 3 
[  235.911209] Modules linked in: cpufreq_conservative cpufreq_powersave cpufreq_userspace cpufreq_stats ppdev lp bnep rfcomm bluetooth binfmt_misc uinput fuse nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc loop firewire_sbp2 snd_hda_codec_hdmi snd_hda_codec_idt snd_hda_intel snd_hda_codec snd_hwdep iwlwifi mac80211 snd_pcm_oss snd_mixer_oss snd_pcm coretemp i915 snd_page_alloc crc32c_intel ghash_clmulni_intel uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core aesni_intel snd_seq_midi snd_seq_midi_event psmouse hp_wmi sparse_keymap snd_rawmidi joydev videodev media cfg80211 rfkill snd_seq drm_kms_helper aes_x86_64 drm aes_generic i2c_algo_bit i2c_core parport_pc parport acpi_cpufreq tpm_infineon cryptd mperf snd_seq_device hp_accel lis3lv02d snd_timer snd iTCO_wdt iTCO_vendor_support soundcore input_polldev serio_raw evdev tpm_tis tpm tpm_bios pcspkr container battery processor ac wmi power_supply video microcode button ext4 crc16 jbd2 mbcache sr_mod sd_mod cdrom crc_t10dif ahci libahci libata e1000e scsi_mod ehci_hcd usbcore sdhci_pci sdhci thermal thermal_sys firewire_ohci mmc_core firewire_core usb_common crc_itu_t [last unloaded: scsi_wait_scan]
[  235.913233] 
[  235.913262] Pid: 3303, comm: intel_error_dec Not tainted 3.3.0+ #19 Hewlett-Packard HP ProBook 6360b/1620
[  235.913419] RIP: 0010:[<ffffffffa03a6e12>]  [<ffffffffa03a6e12>] i915_ring_error_state+0x1e/0x210 [i915]
[  235.913588] RSP: 0018:ffff880125447da8  EFLAGS: 00010002
[  235.913669] RAX: ffffffffa03d66e6 RBX: ffff88011b08edc0 RCX: 0000000000000002
[  235.913776] RDX: ffff88011d2a1a00 RSI: ffff88011bf9b000 RDI: ffff88011b08edc0
[  235.913882] RBP: ffff88011d2a1a00 R08: 0000000000000001 R09: 00000000fffffffe
[  235.913989] R10: 0000000000000020 R11: 0000000000001000 R12: ffff88011bf9b000
[  235.914094] R13: 0000000000000002 R14: ffff880136a18000 R15: 0000000000000000
[  235.914201] FS:  00007f727d1b8700(0000) GS:ffff88013dcc0000(0000) knlGS:0000000000000000
[  235.914324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.914410] CR2: 00007f727c6d0310 CR3: 000000012ae01000 CR4: 00000000000407e0
[  235.914516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  235.914622] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  235.914730] Process intel_error_dec (pid: 3303, threadinfo ffff880125446000, task ffff88011d8b1060)
[  235.914862] Stack:
[  235.914895]  ffff88011b08edc0 ffff88011d2a1a00 0000000000000011 ffff88011b08edc0
[  235.915024]  ffff88011bf9b000 ffff880136a18000 0000000000000000 ffffffffa03a754b
[  235.915151]  ffff88012ac0fc38 ffff88012ac0fc38 00007f727d1d2000 00007f727d1d1000
[  235.915279] Call Trace:
[  235.915338]  [<ffffffffa03a754b>] ? i915_error_state+0x160/0x513 [i915]
[  235.915443]  [<ffffffff810d8a5c>] ? vma_merge+0x246/0x27d
[  235.915530]  [<ffffffff810f015c>] ? kmem_cache_alloc_trace+0xbe/0xce
[  235.915631]  [<ffffffff81115e9e>] ? seq_read+0x171/0x354
[  235.915717]  [<ffffffff810fdba6>] ? vfs_read+0x9f/0xe6
[  235.915798]  [<ffffffff810da075>] ? sys_mmap_pgoff+0x100/0x13b
[  235.915890]  [<ffffffff810fdc32>] ? sys_read+0x45/0x6b
[  235.915974]  [<ffffffff8135d739>] ? system_call_fastpath+0x16/0x1b
[  235.916066] Code: df e8 b2 01 fb e0 41 5b 5b 31 c0 5d c3 41 57 41 56 41 55 41 89 cd 41 83 fd 01 41 54 55 48 89 d5 53 48 89 fb 41 54 49 89 f4 76 02 <0f> 0b 45 89 ee 48 c7 c6 01 10 3e a0 31 c0 4a 8b 14 f5 c0 75 3d 
[  235.916612] RIP  [<ffffffffa03a6e12>] i915_ring_error_state+0x1e/0x210 [i915]
[  235.916737]  RSP <ffff880125447da8>
[  235.977641] ---[ end trace 28d5c32cc95aac89 ]---
Comment 1 Chris Wilson 2012-04-03 08:58:56 UTC 
Because 2 is greater than 1.
Comment 2 Chris Wilson 2012-04-03 08:59:36 UTC 
commit 1a8c55d37268d8b7ab7797e6d378caa697dbd029
Author: Ben Widawsky <ben@bwidawsk.net>
Date:   Wed Feb 15 14:42:42 2012 +0100

    drm/i915: [dinq] shut up six instances of -Warray-bounds
    
    Introduced in commits c1cd90ed and d27b1e0e
    
    Signed-off-by: Ben Widawsky <ben@bwidawsk.net>
    [danvet: s/fix/shut up in the commit msg and add a comment to the
    BUG_ON.]
    Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Comment 3 Daniel Vetter 2012-04-04 04:09:12 UTC 
commit 9c33f85cf3cc3f8717e56d42fd678573ed1727d3                                                                                      
Author: Ben Widawsky <ben@bwidawsk.net>                                                                                              
Date:   Tue Apr 3 23:03:00 2012 -0700

    drm/i915: VCS is not the last ring
Comment 4 Ben Widawsky 2012-04-16 13:05:56 UTC 
Marking as verified on Chris' behalf
Comment 5 Florian Mickler 2012-07-01 03:37:00 UTC 
A patch referencing this bug report has been merged in Linux v3.5-rc1:

commit ec34a01de31128e5c08e5f05c47f4a787f45a33c
Author: Ben Widawsky <ben@bwidawsk.net>
Date:   Tue Apr 3 23:03:00 2012 -0700

    drm/i915: VCS is not the last ring

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.