Bug 100887

Summary:	Crash in gen8_ppgtt_alloc_page_directories.isra.36+0x115/0x250
Product:	DRI	Reporter:	Dan Aloni <alonid>
Component:	DRM/Intel	Assignee:	Intel GFX Bugs mailing list <intel-gfx-bugs>
Status:	CLOSED DUPLICATE	QA Contact:	Intel GFX Bugs mailing list <intel-gfx-bugs>
Severity:	normal
Priority:	medium	CC:	alonid, intel-gfx-bugs
Version:	unspecified
Hardware:	x86-64 (AMD64)
OS:	Linux (All)
Whiteboard:
i915 platform:	I915G	i915 features:

Description Dan Aloni 2017-04-30 05:36:43 UTC

Fedora 24 with recent stable kernel 4.10.11-100.fc24.x86_64 hard-locked with the following Oops saved, indicating an i915 bug. 

Some details:

* I don't have steps to reproduce this issue.
* Display connector: DP.
* System: ThinkPad X1 Carbon 3rd, PCI device: 00:02.0 VGA compatible controller: Intel Corporation HD Graphics 5500 (rev 09)

dmesg:

Apr 30 08:20:23 nitrogen kernel: BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
Apr 30 08:20:23 nitrogen kernel: IP: gen8_ppgtt_alloc_page_directories.isra.36+0x115/0x250 [i915]
Apr 30 08:20:23 nitrogen kernel: PGD 1b3782067 
Apr 30 08:20:23 nitrogen kernel: PUD 0 
Apr 30 08:20:23 nitrogen kernel: 
Apr 30 08:20:23 nitrogen kernel: Oops: 0002 [#1] SMP
Apr 30 08:20:23 nitrogen kernel: Modules linked in: rfcomm xt_CHECKSUM ipt_MASQUERADE nf_nat_masquerade_ipv4 tun nf_conntrack_netbios_ns nf_conntrack_broadcast xt_CT ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_broute bridge ebtable_nat ip6table_raw ip6table_security ip6table_mangle ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 iptable_raw iptable_security iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack libcrc32c ebtable_filter ebtables ip6table_filter ip6_tables ppdev parport_pc parport fuse vmw_vsock_vmci_transport vsock vmw_vmci cmac bnep vfat fat uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 mei_wdt videobuf2_core iTCO_wdt iTCO_vendor_support arc4 intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel
Apr 30 08:20:23 nitrogen kernel:  videodev kvm iwlmvm btusb irqbypass snd_usb_audio mac80211 media crct10dif_pclmul snd_usbmidi_lib btrtl crc32_pclmul btbcm btintel snd_rawmidi bluetooth ghash_clmulni_intel cdc_acm intel_cstate intel_uncore iwlwifi intel_rapl_perf cfg80211 joydev snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel wmi snd_hda_codec thinkpad_acpi snd_hda_core snd_hwdep rfkill snd_seq snd_seq_device snd_pcm mei_me intel_pch_thermal snd_timer mei snd i2c_i801 tpm_tis tpm_tis_core shpchp soundcore lpc_ich tpm binfmt_misc vboxpci(OE) vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) cdc_mbim hid_multitouch cdc_ncm cdc_wdm ax88179_178a usbnet mii 8021q garp stp llc mrp i915 i2c_algo_bit drm_kms_helper e1000e crc32c_intel drm serio_raw ptp pps_core fjes video
Apr 30 08:20:23 nitrogen kernel: CPU: 1 PID: 2688 Comm: chrome Tainted: G           OE   4.10.11-100.fc24.x86_64 #1
Apr 30 08:20:23 nitrogen kernel: Hardware name: LENOVO 20BS003PIV/20BS003PIV, BIOS N14ET38W (1.16 ) 12/07/2016
Apr 30 08:20:23 nitrogen kernel: task: ffff904273708000 task.stack: ffffab0d88910000
Apr 30 08:20:23 nitrogen kernel: RIP: 0010:gen8_ppgtt_alloc_page_directories.isra.36+0x115/0x250 [i915]
Apr 30 08:20:23 nitrogen kernel: RSP: 0018:ffffab0d88913858 EFLAGS: 00010246
Apr 30 08:20:23 nitrogen kernel: RAX: ffff9042c1dc6600 RBX: 0000000000000003 RCX: 0000000000000003
Apr 30 08:20:23 nitrogen kernel: RDX: 0000000000000000 RSI: ffff9042a8680000 RDI: ffff9042df330000
Apr 30 08:20:23 nitrogen kernel: RBP: ffffab0d889138b0 R08: 0000000000000000 R09: 0000000000000000
Apr 30 08:20:23 nitrogen kernel: R10: 0000000000000000 R11: 0000000000000040 R12: ffff904189a0e000
Apr 30 08:20:23 nitrogen kernel: R13: ffff9041e6e7c910 R14: 00000000fffef000 R15: 0000000000008000
Apr 30 08:20:23 nitrogen kernel: FS:  00007f6dbed43a80(0000) GS:ffff9042edc40000(0000) knlGS:0000000000000000
Apr 30 08:20:23 nitrogen kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Apr 30 08:20:23 nitrogen kernel: CR2: 0000000000000018 CR3: 00000001bd02a000 CR4: 00000000003426e0
Apr 30 08:20:23 nitrogen kernel: Call Trace:
Apr 30 08:20:23 nitrogen kernel:  gen8_alloc_va_range_3lvl+0xfb/0x9e0 [i915]
Apr 30 08:20:23 nitrogen kernel:  ? unmap_page_range+0x781/0x8e0
Apr 30 08:20:23 nitrogen kernel:  ? __alloc_pages_nodemask+0x256/0x2c0
Apr 30 08:20:23 nitrogen kernel:  gen8_alloc_va_range+0x23d/0x470 [i915]
Apr 30 08:20:23 nitrogen kernel:  i915_vma_bind+0x7e/0x170 [i915]
Apr 30 08:20:23 nitrogen kernel:  __i915_vma_do_pin+0x2f1/0x4a0 [i915]
Apr 30 08:20:23 nitrogen kernel:  i915_gem_execbuffer_reserve_vma.isra.30+0x144/0x1b0 [i915]
Apr 30 08:20:23 nitrogen kernel:  i915_gem_execbuffer_reserve.isra.31+0x44a/0x480 [i915]
Apr 30 08:20:23 nitrogen kernel:  i915_gem_do_execbuffer.isra.37+0x652/0x16c0 [i915]
Apr 30 08:20:23 nitrogen kernel:  ? radix_tree_lookup_slot+0x22/0x50
Apr 30 08:20:23 nitrogen kernel:  ? shmem_getpage_gfp+0xdd/0xc90
Apr 30 08:20:23 nitrogen kernel:  i915_gem_execbuffer2+0xc5/0x240 [i915]
Apr 30 08:20:23 nitrogen kernel:  drm_ioctl+0x21b/0x4c0 [drm]
Apr 30 08:20:23 nitrogen kernel:  ? file_update_time+0xc8/0x110
Apr 30 08:20:23 nitrogen kernel:  ? i915_gem_execbuffer+0x310/0x310 [i915]
Apr 30 08:20:23 nitrogen kernel:  ? __seccomp_filter+0x67/0x270
Apr 30 08:20:23 nitrogen kernel:  do_vfs_ioctl+0xa3/0x5f0
Apr 30 08:20:23 nitrogen kernel:  ? __secure_computing+0x3b/0xc0
Apr 30 08:20:23 nitrogen kernel:  ? syscall_trace_enter+0x11f/0x2d0
Apr 30 08:20:23 nitrogen kernel:  SyS_ioctl+0x79/0x90
Apr 30 08:20:23 nitrogen kernel:  do_syscall_64+0x67/0x180
Apr 30 08:20:23 nitrogen kernel:  entry_SYSCALL64_slow_path+0x25/0x25
Apr 30 08:20:23 nitrogen kernel: RIP: 0033:0x7f6db83e8ce7
Apr 30 08:20:23 nitrogen kernel: RSP: 002b:00007ffc58d7c978 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
Apr 30 08:20:23 nitrogen kernel: RAX: ffffffffffffffda RBX: 000000407b351800 RCX: 00007f6db83e8ce7
Apr 30 08:20:23 nitrogen kernel: RDX: 00007ffc58d7c9c0 RSI: 00000000c0406469 RDI: 000000000000000f
Apr 30 08:20:23 nitrogen kernel: RBP: 00007ffc58d7c9c0 R08: 0000000000000000 R09: 0000000000000000
Apr 30 08:20:23 nitrogen kernel: R10: 0000000000000038 R11: 0000000000000246 R12: 00000000c0406469
Apr 30 08:20:23 nitrogen kernel: R13: 000000000000000f R14: 0000000000000000 R15: 0000000000000000
Apr 30 08:20:23 nitrogen kernel: Code: e6 48 8b 90 20 03 00 00 48 8b b8 d8 02 00 00 48 8b 52 08 48 83 ca 03 e8 8a cc ff ff 48 8b 45 b0 48 8b 4d c8 48 8b 10 48 8b 45 d0 <4c> 89 24 ca 48 0f ab 08 0f 1f 44 00 00 e9 53 ff ff ff 65 8b 05 
Apr 30 08:20:23 nitrogen kernel: RIP: gen8_ppgtt_alloc_page_directories.isra.36+0x115/0x250 [i915] RSP: ffffab0d88913858
Apr 30 08:20:23 nitrogen kernel: CR2: 0000000000000018
Apr 30 08:20:23 nitrogen kernel: ---[ end trace f6945b0c2b001f0a ]---

Comment 1 Chris Wilson 2017-05-03 13:24:50 UTC


*** This bug has been marked as a duplicate of bug 99295 ***

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.