[ 608.829557] BUG: Bad page state in process kms_frontbuffer pfn:1ff512 [ 608.829790] page:ffffe845c7fd4480 count:8 mapcount:0 mapping:0000000000000000 index:0x2 [ 608.829796] flags: 0x8000000000000000() [ 608.829801] raw: 8000000000000000 0000000000000000 0000000000000002 00000008ffffffff [ 608.829805] raw: dead000000000100 dead000000000200 0000000000000000 0000000000000000 [ 608.829808] page dumped because: nonzero _count [ 608.829811] Modules linked in: vgem snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic i915 snd_hda_intel x86_pkg_temp_thermal snd_hda_codec intel_powerclamp snd_hwdep coretemp snd_hda_core crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_pcm e1000e mei_me mei prime_numbers [ 608.829847] CPU: 3 PID: 1545 Comm: kms_frontbuffer Tainted: G U 4.16.0-rc7-gfcaf73c13c14-drmtip_13+ #1 [ 608.829849] Hardware name: Intel Corporation CannonLake Client Platform/CannonLake Y LPDDR4 RVP, BIOS CNLSFWR1.R00.X122.B01.1801151045 01/15/2018 [ 608.829851] Call Trace: [ 608.829856] dump_stack+0x67/0x95 [ 608.829861] bad_page+0xbf/0x120 [ 608.829865] get_page_from_freelist+0xbaa/0x1530 [ 608.829880] __alloc_pages_nodemask+0x100/0x1250 [ 608.829884] ? mark_held_locks+0x50/0x80 [ 608.829894] ? percpu_counter_add_batch+0x7e/0xb0 [ 608.829900] shmem_alloc_and_acct_page+0x83/0x3a0 [ 608.829907] shmem_getpage_gfp.isra.9+0x167/0xc90 [ 608.829917] shmem_read_mapping_page_gfp+0x3e/0x70 [ 608.829953] i915_gem_object_get_pages_gtt+0x13d/0x6d0 [i915] [ 608.829987] ____i915_gem_object_get_pages+0x1d/0xa0 [i915] [ 608.830015] __i915_gem_object_get_pages+0x59/0xb0 [i915] [ 608.830043] i915_gem_fault+0x320/0x860 [i915] [ 608.830051] __do_fault+0x1b/0x80 [ 608.830055] __handle_mm_fault+0x877/0xe20 [ 608.830064] handle_mm_fault+0x196/0x3a0 [ 608.830070] __do_page_fault+0x295/0x590 [ 608.830076] ? page_fault+0x2f/0x50 [ 608.830079] page_fault+0x45/0x50 [ 608.830081] RIP: 6d9ffdc1:0x5623a1d173f5 [ 608.830083] RSP: 40f02390:00007ffc40f02070 EFLAGS: 5623a1d17425 [ 608.830092] Disabling lock debugging due to kernel taint
Forgot the link: https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_13/fi-cnl-y3/igt@kms_frontbuffer_tracking@fbcpsr-2p-scndscrn-pri-shrfb-draw-pwrite.html Increasing the priority of this bug as it is something that should never happen and this platform is not yet out.
https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_33/fi-cnl-y3/igt@gem_exec_schedule@preempt-queue-contexts-chain-vebox.html [ 173.323061] BUG: Bad page state in process gem_exec_schedu pfn:24c467 [ 173.323072] page:ffffd86f493119c0 count:2144993280 mapcount:2145058816 mapping:4fee0000b0130000 index:0x7fea00004fee0000 [ 173.323084] flags: 0x4fe6000090180000(unevictable|mlocked) [ 173.323091] raw: 4fe6000090180000 4fee0000b0130000 7fea00004fee0000 7fda00007fdaffff [ 173.323099] raw: 4fe6d86f6fe51a20 4feed86f4fee19a0 7fea00004fee0000 7fda00007fda0000 [ 173.323107] page dumped because: page still charged to cgroup [ 173.323113] page->mem_cgroup:7fda00007fda0000 [ 173.323118] bad because of flags: 0x180000(unevictable|mlocked) [ 173.323124] Modules linked in: vgem snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic i915 x86_pkg_temp_thermal intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul snd_hda_intel ghash_clmulni_intel snd_hda_codec snd_hwdep snd_hda_core e1000e snd_pcm mei_me mei prime_numbers [ 173.323163] CPU: 1 PID: 1420 Comm: gem_exec_schedu Tainted: G U 4.17.0-rc3-g93d32416ba4b-drmtip_33+ #1 [ 173.323173] Hardware name: Intel Corporation CannonLake Client Platform/CannonLake Y LPDDR4 RVP, BIOS CNLSFWR1.R00.X122.B01.1801151045 01/15/2018 [ 173.323184] Call Trace: [ 173.323192] dump_stack+0x67/0x9b [ 173.323199] bad_page+0xbf/0x120 [ 173.323205] get_page_from_freelist+0x536/0x1530 [ 173.323215] ? _raw_spin_unlock+0x29/0x40 [ 173.323222] __alloc_pages_nodemask+0x100/0x1250 [ 173.323230] ? kasprintf+0x49/0x70 [ 173.323236] ? set_track+0x90/0x140 [ 173.323241] ? init_object+0x66/0x80 [ 173.323247] ? ___slab_alloc.constprop.34+0x232/0x3e0 [ 173.323254] ? kasprintf+0x49/0x70 [ 173.323260] new_slab+0x9b/0x550 [ 173.323266] ___slab_alloc.constprop.34+0x322/0x3e0 [ 173.323307] ? i915_ppgtt_create+0x29/0x1d0 [i915] [ 173.323315] ? vsnprintf+0x1bc/0x4b0 [ 173.323323] ? lock_acquire+0xa6/0x210 [ 173.323329] ? kvasprintf+0x7b/0xc0 [ 173.323359] ? i915_ppgtt_create+0x29/0x1d0 [i915] [ 173.323366] ? __slab_alloc.isra.27.constprop.33+0x3d/0x70 [ 173.323373] __slab_alloc.isra.27.constprop.33+0x3d/0x70 [ 173.323402] ? i915_ppgtt_create+0x29/0x1d0 [i915] [ 173.323409] kmem_cache_alloc_trace+0x246/0x2e0 [ 173.323437] i915_ppgtt_create+0x29/0x1d0 [i915] [ 173.323465] i915_gem_create_context+0x129/0x2b0 [i915] [ 173.323492] i915_gem_context_create_ioctl+0x5f/0x150 [i915] [ 173.323519] ? i915_gem_switch_to_kernel_context+0x1a0/0x1a0 [i915] [ 173.323527] drm_ioctl_kernel+0x7c/0xf0 [ 173.323533] drm_ioctl+0x2e6/0x3a0 [ 173.323558] ? i915_gem_switch_to_kernel_context+0x1a0/0x1a0 [i915] [ 173.323569] do_vfs_ioctl+0xa0/0x6c0 [ 173.323576] ksys_ioctl+0x35/0x60 [ 173.323582] __x64_sys_ioctl+0x11/0x20 [ 173.323588] do_syscall_64+0x55/0x190 [ 173.323594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.323600] RIP: 0033:0x7f4cfa55e5d7 [ 173.323605] RSP: 002b:00007fff2ad03b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.323613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cfa55e5d7 [ 173.323621] RDX: 00007fff2ad03bb0 RSI: 00000000c008646d RDI: 0000000000000003 [ 173.323628] RBP: 00007fff2ad03bb0 R08: 0000000000000000 R09: 0000000000000021 [ 173.323635] R10: 00000000ffffffdf R11: 0000000000000246 R12: 00000000c008646d [ 173.323642] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000
Nothing has shown up in kasan runs afaik.
Not reproduced since drmtip_33 (1 month, 1 week / 33 runs ago), when it used to be reproduced 3 times in 20 runs. Closing!
Now really closing
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.