Bug 106089 - [CI] igt@* - dmesg-warn/fail - BUG: Bad page state in process kms_frontbuffer pfn:1ff512
Summary: [CI] igt@* - dmesg-warn/fail - BUG: Bad page state in process kms_frontbuffer...
Status: CLOSED WORKSFORME
Alias: None
Product: DRI
Classification: Unclassified
Component: DRM/Intel (show other bugs)
Version: XOrg git
Hardware: Other All
: high normal
Assignee: Francesco Balestrieri
QA Contact: Intel GFX Bugs mailing list
URL:
Whiteboard: ReadyForDev
Keywords:
Depends on:
Blocks:
 
Reported: 2018-04-16 18:52 UTC by Martin Peres
Modified: 2018-07-02 06:38 UTC (History)
1 user (show)

See Also:
i915 platform: CNL
i915 features: display/FBC


Attachments

Description Martin Peres 2018-04-16 18:52:12 UTC
[ 608.829557] BUG: Bad page state in process kms_frontbuffer pfn:1ff512
[ 608.829790] page:ffffe845c7fd4480 count:8 mapcount:0 mapping:0000000000000000 index:0x2
[ 608.829796] flags: 0x8000000000000000()
[ 608.829801] raw: 8000000000000000 0000000000000000 0000000000000002 00000008ffffffff
[ 608.829805] raw: dead000000000100 dead000000000200 0000000000000000 0000000000000000
[ 608.829808] page dumped because: nonzero _count
[ 608.829811] Modules linked in: vgem snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic i915 snd_hda_intel x86_pkg_temp_thermal snd_hda_codec intel_powerclamp snd_hwdep coretemp snd_hda_core crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_pcm e1000e mei_me mei prime_numbers
[ 608.829847] CPU: 3 PID: 1545 Comm: kms_frontbuffer Tainted: G U 4.16.0-rc7-gfcaf73c13c14-drmtip_13+ #1
[ 608.829849] Hardware name: Intel Corporation CannonLake Client Platform/CannonLake Y LPDDR4 RVP, BIOS CNLSFWR1.R00.X122.B01.1801151045 01/15/2018
[ 608.829851] Call Trace:
[ 608.829856] dump_stack+0x67/0x95
[ 608.829861] bad_page+0xbf/0x120
[ 608.829865] get_page_from_freelist+0xbaa/0x1530
[ 608.829880] __alloc_pages_nodemask+0x100/0x1250
[ 608.829884] ? mark_held_locks+0x50/0x80
[ 608.829894] ? percpu_counter_add_batch+0x7e/0xb0
[ 608.829900] shmem_alloc_and_acct_page+0x83/0x3a0
[ 608.829907] shmem_getpage_gfp.isra.9+0x167/0xc90
[ 608.829917] shmem_read_mapping_page_gfp+0x3e/0x70
[ 608.829953] i915_gem_object_get_pages_gtt+0x13d/0x6d0 [i915]
[ 608.829987] ____i915_gem_object_get_pages+0x1d/0xa0 [i915]
[ 608.830015] __i915_gem_object_get_pages+0x59/0xb0 [i915]
[ 608.830043] i915_gem_fault+0x320/0x860 [i915]
[ 608.830051] __do_fault+0x1b/0x80
[ 608.830055] __handle_mm_fault+0x877/0xe20
[ 608.830064] handle_mm_fault+0x196/0x3a0
[ 608.830070] __do_page_fault+0x295/0x590
[ 608.830076] ? page_fault+0x2f/0x50
[ 608.830079] page_fault+0x45/0x50
[ 608.830081] RIP: 6d9ffdc1:0x5623a1d173f5
[ 608.830083] RSP: 40f02390:00007ffc40f02070 EFLAGS: 5623a1d17425
[ 608.830092] Disabling lock debugging due to kernel taint
Comment 1 Martin Peres 2018-04-16 18:54:54 UTC
Forgot the link: https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_13/fi-cnl-y3/igt@kms_frontbuffer_tracking@fbcpsr-2p-scndscrn-pri-shrfb-draw-pwrite.html

Increasing the priority of this bug as it is something that should never happen and this platform is not yet out.
Comment 2 Martin Peres 2018-05-22 07:26:59 UTC
https://intel-gfx-ci.01.org/tree/drm-tip/drmtip_33/fi-cnl-y3/igt@gem_exec_schedule@preempt-queue-contexts-chain-vebox.html

[  173.323061] BUG: Bad page state in process gem_exec_schedu  pfn:24c467
[  173.323072] page:ffffd86f493119c0 count:2144993280 mapcount:2145058816 mapping:4fee0000b0130000 index:0x7fea00004fee0000
[  173.323084] flags: 0x4fe6000090180000(unevictable|mlocked)
[  173.323091] raw: 4fe6000090180000 4fee0000b0130000 7fea00004fee0000 7fda00007fdaffff
[  173.323099] raw: 4fe6d86f6fe51a20 4feed86f4fee19a0 7fea00004fee0000 7fda00007fda0000
[  173.323107] page dumped because: page still charged to cgroup
[  173.323113] page->mem_cgroup:7fda00007fda0000
[  173.323118] bad because of flags: 0x180000(unevictable|mlocked)
[  173.323124] Modules linked in: vgem snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic i915 x86_pkg_temp_thermal intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul snd_hda_intel ghash_clmulni_intel snd_hda_codec snd_hwdep snd_hda_core e1000e snd_pcm mei_me mei prime_numbers
[  173.323163] CPU: 1 PID: 1420 Comm: gem_exec_schedu Tainted: G     U            4.17.0-rc3-g93d32416ba4b-drmtip_33+ #1
[  173.323173] Hardware name: Intel Corporation CannonLake Client Platform/CannonLake Y LPDDR4 RVP, BIOS CNLSFWR1.R00.X122.B01.1801151045 01/15/2018
[  173.323184] Call Trace:
[  173.323192]  dump_stack+0x67/0x9b
[  173.323199]  bad_page+0xbf/0x120
[  173.323205]  get_page_from_freelist+0x536/0x1530
[  173.323215]  ? _raw_spin_unlock+0x29/0x40
[  173.323222]  __alloc_pages_nodemask+0x100/0x1250
[  173.323230]  ? kasprintf+0x49/0x70
[  173.323236]  ? set_track+0x90/0x140
[  173.323241]  ? init_object+0x66/0x80
[  173.323247]  ? ___slab_alloc.constprop.34+0x232/0x3e0
[  173.323254]  ? kasprintf+0x49/0x70
[  173.323260]  new_slab+0x9b/0x550
[  173.323266]  ___slab_alloc.constprop.34+0x322/0x3e0
[  173.323307]  ? i915_ppgtt_create+0x29/0x1d0 [i915]
[  173.323315]  ? vsnprintf+0x1bc/0x4b0
[  173.323323]  ? lock_acquire+0xa6/0x210
[  173.323329]  ? kvasprintf+0x7b/0xc0
[  173.323359]  ? i915_ppgtt_create+0x29/0x1d0 [i915]
[  173.323366]  ? __slab_alloc.isra.27.constprop.33+0x3d/0x70
[  173.323373]  __slab_alloc.isra.27.constprop.33+0x3d/0x70
[  173.323402]  ? i915_ppgtt_create+0x29/0x1d0 [i915]
[  173.323409]  kmem_cache_alloc_trace+0x246/0x2e0
[  173.323437]  i915_ppgtt_create+0x29/0x1d0 [i915]
[  173.323465]  i915_gem_create_context+0x129/0x2b0 [i915]
[  173.323492]  i915_gem_context_create_ioctl+0x5f/0x150 [i915]
[  173.323519]  ? i915_gem_switch_to_kernel_context+0x1a0/0x1a0 [i915]
[  173.323527]  drm_ioctl_kernel+0x7c/0xf0
[  173.323533]  drm_ioctl+0x2e6/0x3a0
[  173.323558]  ? i915_gem_switch_to_kernel_context+0x1a0/0x1a0 [i915]
[  173.323569]  do_vfs_ioctl+0xa0/0x6c0
[  173.323576]  ksys_ioctl+0x35/0x60
[  173.323582]  __x64_sys_ioctl+0x11/0x20
[  173.323588]  do_syscall_64+0x55/0x190
[  173.323594]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  173.323600] RIP: 0033:0x7f4cfa55e5d7
[  173.323605] RSP: 002b:00007fff2ad03b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.323613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cfa55e5d7
[  173.323621] RDX: 00007fff2ad03bb0 RSI: 00000000c008646d RDI: 0000000000000003
[  173.323628] RBP: 00007fff2ad03bb0 R08: 0000000000000000 R09: 0000000000000021
[  173.323635] R10: 00000000ffffffdf R11: 0000000000000246 R12: 00000000c008646d
[  173.323642] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000
Comment 3 Chris Wilson 2018-05-25 11:08:04 UTC
Nothing has shown up in kasan runs afaik.
Comment 4 Martin Peres 2018-06-19 22:31:27 UTC
Not reproduced since drmtip_33 (1 month, 1 week / 33 runs ago), when it used to be reproduced 3 times in 20 runs. Closing!
Comment 5 Francesco Balestrieri 2018-07-02 06:38:35 UTC
Now really closing


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.