From mboxrd@z Thu Jan  1 00:00:00 1970
From: bugzilla-daemon@freedesktop.org
Subject: [Bug 103138] [regression] BUG: Bad page state in process gnome-shell
 pfn:77cc33
Date: Sat, 07 Oct 2017 18:32:23 +0000
Message-ID: <bug-103138-502@http.bugs.freedesktop.org/>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0068539945=="
Return-path: <dri-devel-bounces@lists.freedesktop.org>
Received: from culpepper.freedesktop.org (culpepper.freedesktop.org
 [131.252.210.165])
 by gabe.freedesktop.org (Postfix) with ESMTP id 0AC9F8910B
 for <dri-devel@lists.freedesktop.org>; Sat,  7 Oct 2017 18:32:23 +0000 (UTC)
List-Unsubscribe: <https://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <https://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <https://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: dri-devel@lists.freedesktop.org
List-Id: dri-devel@lists.freedesktop.org


--===============0068539945==
Content-Type: multipart/alternative; boundary="15074011420.c17EA53e.22704";
 charset="UTF-8"


--15074011420.c17EA53e.22704
Date: Sat, 7 Oct 2017 18:32:22 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://bugs.freedesktop.org/
Auto-Submitted: auto-generated

https://bugs.freedesktop.org/show_bug.cgi?id=3D103138

            Bug ID: 103138
           Summary: [regression] BUG: Bad page state in process
                    gnome-shell  pfn:77cc33
           Product: Mesa
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: critical
          Priority: medium
         Component: Drivers/Gallium/radeonsi
          Assignee: dri-devel@lists.freedesktop.org
          Reporter: vedran@miletic.net
        QA Contact: dri-devel@lists.freedesktop.org

With amd-staging-drm-next revision e5f6a57e350a7921e4edc30874679bdff11b13f4=
 I
get:

Lis 07 19:44:22 jaffa kernel: BUG: Bad page state in process gnome-shell=20
pfn:77cc33
Lis 07 19:44:22 jaffa kernel: page:ffffe3c5ddf30cc0 count:0 mapcount:0 mapp=
ing:
         (null) index:0x33 compound_mapcount: 1
Lis 07 19:44:22 jaffa kernel: flags: 0x17ffffc0000000()
Lis 07 19:44:22 jaffa kernel: raw: 0017ffffc0000000 0000000000000000
0000000000000000 00000000ffffffff
Lis 07 19:44:22 jaffa kernel: raw: ffffe3c5ddf30001 ffffe3c5ddf30ce0
0000000000000000 0000000000000000
Lis 07 19:44:22 jaffa kernel: page dumped because: corrupted mapping in tail
page
Lis 07 19:44:22 jaffa kernel: Modules linked in: bnep fuse xt_CHECKSUM
ipt_MASQUERADE nf_nat_masquerade_ipv4 tun nf_conntrack_netbios_ns
nf_conntrack_broadcast xt_CT ip6t_rpfilter ip6t_REJECT nf_reject_ipv6
xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc
ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle
ip6table_raw ip6table_securi
Lis 07 19:44:22 jaffa kernel:  iTCO_vendor_support intel_uncore ppdev mxm_w=
mi
snd_hda_core intel_rapl_perf snd_hwdep snd_seq snd_seq_device pcspkr hci_ua=
rt
snd_pcm i2c_i801 snd_timer joydev snd btbcm btqca btintel mei_me soundcore =
mei
tpm_tis bluetooth shpchp tpm_tis_core intel_pch_thermal tpm parport_pc
pinctrl_sunrisepoint parport ecdh_generic wmi video acpi_als pinctrl_intel=
=20
Lis 07 19:44:22 jaffa kernel: CPU: 2 PID: 2093 Comm: gnome-shell Tainted: G=
=20=20=20
B   W       4.13.0-rc5+ #15
Lis 07 19:44:22 jaffa kernel: Hardware name: MSI MS-7971/Z170-A PRO (MS-797=
1),
BIOS 1.I0 05/02/2017
Lis 07 19:44:22 jaffa kernel: Call Trace:
Lis 07 19:44:22 jaffa kernel:  dump_stack+0x63/0x8b
Lis 07 19:44:22 jaffa kernel:  bad_page+0xcb/0x120
Lis 07 19:44:22 jaffa kernel:  __free_pages_ok+0x2f7/0x400
Lis 07 19:44:22 jaffa kernel:  __free_pages+0x1f/0x40
Lis 07 19:44:22 jaffa kernel:  free_pages+0x54/0x70
Lis 07 19:44:22 jaffa kernel:  dma_generic_free_coherent+0x25/0x30
Lis 07 19:44:22 jaffa kernel:  x86_swiotlb_free_coherent+0x41/0x70
Lis 07 19:44:22 jaffa kernel:  __ttm_dma_free_page.isra.6+0x52/0x70 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_dma_page_put+0xb0/0xf0 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_dma_unpopulate+0xcc/0x3d0 [ttm]
Lis 07 19:44:22 jaffa kernel:  amdgpu_ttm_tt_unpopulate+0x7a/0x80 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_unpopulate.part.6+0x48/0x50 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_destroy.part.7+0x49/0x50 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_destroy+0x13/0x20 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_bo_cleanup_memtype_use+0x30/0x70 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_bo_unref+0x318/0x350 [ttm]
Lis 07 19:44:22 jaffa kernel:  amdgpu_bo_unref+0x39/0x70 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  amdgpu_gem_object_free+0x57/0x70 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_free+0x1f/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_put_unlocked+0x3a/0x70 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_handle_put_unlocked+0x6a/0xb0
[drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_release_handle+0x53/0x90 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_handle_delete+0x58/0x80 [drm]
Lis 07 19:44:22 jaffa kernel:  ? drm_gem_handle_create+0x40/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_close_ioctl+0x20/0x30 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_ioctl_kernel+0x5d/0xb0 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_ioctl+0x31b/0x3d0 [drm]
Lis 07 19:44:22 jaffa kernel:  ? drm_gem_handle_create+0x40/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  ? unmap_region+0xf7/0x130
Lis 07 19:44:22 jaffa kernel:  amdgpu_drm_ioctl+0x4f/0x90 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  do_vfs_ioctl+0xa5/0x600
Lis 07 19:44:22 jaffa kernel:  SyS_ioctl+0x79/0x90
Lis 07 19:44:22 jaffa kernel:  entry_SYSCALL_64_fastpath+0x1a/0xa5
Lis 07 19:44:22 jaffa kernel: RIP: 0033:0x7f99749b00d7
Lis 07 19:44:22 jaffa kernel: RSP: 002b:00007ffc28602968 EFLAGS: 00000246
ORIG_RAX: 0000000000000010
Lis 07 19:44:22 jaffa kernel: RAX: ffffffffffffffda RBX: 0000000000000000 R=
CX:
00007f99749b00d7
Lis 07 19:44:22 jaffa kernel: RDX: 00007ffc286029a8 RSI: 0000000040086409 R=
DI:
000000000000000c
Lis 07 19:44:22 jaffa kernel: RBP: 00007ffc28603d90 R08: 0000000000000000 R=
09:
000000000000000e
Lis 07 19:44:22 jaffa kernel: R10: 0000000000000053 R11: 0000000000000246 R=
12:
00007ffc28603e20
Lis 07 19:44:22 jaffa kernel: R13: 00007ffc28603e18 R14: 000000007fffffff R=
15:
00007f996eab47d0

This is repeated many times and fills up dmesg. The same does not happen wi=
th
ea0eda9a882b5df33808dbd85bd64376ed187618.

I have not tried bisecting since, IIRC, some revisions between those two ha=
ng
my machine. I can try if that would be useful.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

--15074011420.c17EA53e.22704
Date: Sat, 7 Oct 2017 18:32:22 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://bugs.freedesktop.org/
Auto-Submitted: auto-generated

<html>
    <head>
      <base href=3D"https://bugs.freedesktop.org/">
    </head>
    <body><table border=3D"1" cellspacing=3D"0" cellpadding=3D"8">
        <tr>
          <th>Bug ID</th>
          <td><a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - [regression] BUG: Bad page state in process gnome-shell p=
fn:77cc33"
   href=3D"https://bugs.freedesktop.org/show_bug.cgi?id=3D103138">103138</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>[regression] BUG: Bad page state in process gnome-shell  pfn:=
77cc33
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>Mesa
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>critical
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Drivers/Gallium/radeonsi
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>dri-devel&#64;lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>vedran&#64;miletic.net
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>dri-devel&#64;lists.freedesktop.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>With amd-staging-drm-next revision e5f6a57e350a7921e4edc308746=
79bdff11b13f4 I
get:

Lis 07 19:44:22 jaffa kernel: BUG: Bad page state in process gnome-shell=20
pfn:77cc33
Lis 07 19:44:22 jaffa kernel: page:ffffe3c5ddf30cc0 count:0 mapcount:0 mapp=
ing:
         (null) index:0x33 compound_mapcount: 1
Lis 07 19:44:22 jaffa kernel: flags: 0x17ffffc0000000()
Lis 07 19:44:22 jaffa kernel: raw: 0017ffffc0000000 0000000000000000
0000000000000000 00000000ffffffff
Lis 07 19:44:22 jaffa kernel: raw: ffffe3c5ddf30001 ffffe3c5ddf30ce0
0000000000000000 0000000000000000
Lis 07 19:44:22 jaffa kernel: page dumped because: corrupted mapping in tail
page
Lis 07 19:44:22 jaffa kernel: Modules linked in: bnep fuse xt_CHECKSUM
ipt_MASQUERADE nf_nat_masquerade_ipv4 tun nf_conntrack_netbios_ns
nf_conntrack_broadcast xt_CT ip6t_rpfilter ip6t_REJECT nf_reject_ipv6
xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc
ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle
ip6table_raw ip6table_securi
Lis 07 19:44:22 jaffa kernel:  iTCO_vendor_support intel_uncore ppdev mxm_w=
mi
snd_hda_core intel_rapl_perf snd_hwdep snd_seq snd_seq_device pcspkr hci_ua=
rt
snd_pcm i2c_i801 snd_timer joydev snd btbcm btqca btintel mei_me soundcore =
mei
tpm_tis bluetooth shpchp tpm_tis_core intel_pch_thermal tpm parport_pc
pinctrl_sunrisepoint parport ecdh_generic wmi video acpi_als pinctrl_intel=
=20
Lis 07 19:44:22 jaffa kernel: CPU: 2 PID: 2093 Comm: gnome-shell Tainted: G=
=20=20=20
B   W       4.13.0-rc5+ #15
Lis 07 19:44:22 jaffa kernel: Hardware name: MSI MS-7971/Z170-A PRO (MS-797=
1),
BIOS 1.I0 05/02/2017
Lis 07 19:44:22 jaffa kernel: Call Trace:
Lis 07 19:44:22 jaffa kernel:  dump_stack+0x63/0x8b
Lis 07 19:44:22 jaffa kernel:  bad_page+0xcb/0x120
Lis 07 19:44:22 jaffa kernel:  __free_pages_ok+0x2f7/0x400
Lis 07 19:44:22 jaffa kernel:  __free_pages+0x1f/0x40
Lis 07 19:44:22 jaffa kernel:  free_pages+0x54/0x70
Lis 07 19:44:22 jaffa kernel:  dma_generic_free_coherent+0x25/0x30
Lis 07 19:44:22 jaffa kernel:  x86_swiotlb_free_coherent+0x41/0x70
Lis 07 19:44:22 jaffa kernel:  __ttm_dma_free_page.isra.6+0x52/0x70 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_dma_page_put+0xb0/0xf0 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_dma_unpopulate+0xcc/0x3d0 [ttm]
Lis 07 19:44:22 jaffa kernel:  amdgpu_ttm_tt_unpopulate+0x7a/0x80 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_unpopulate.part.6+0x48/0x50 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_destroy.part.7+0x49/0x50 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_tt_destroy+0x13/0x20 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_bo_cleanup_memtype_use+0x30/0x70 [ttm]
Lis 07 19:44:22 jaffa kernel:  ttm_bo_unref+0x318/0x350 [ttm]
Lis 07 19:44:22 jaffa kernel:  amdgpu_bo_unref+0x39/0x70 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  amdgpu_gem_object_free+0x57/0x70 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_free+0x1f/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_put_unlocked+0x3a/0x70 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_handle_put_unlocked+0x6a/0xb0
[drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_object_release_handle+0x53/0x90 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_handle_delete+0x58/0x80 [drm]
Lis 07 19:44:22 jaffa kernel:  ? drm_gem_handle_create+0x40/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_gem_close_ioctl+0x20/0x30 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_ioctl_kernel+0x5d/0xb0 [drm]
Lis 07 19:44:22 jaffa kernel:  drm_ioctl+0x31b/0x3d0 [drm]
Lis 07 19:44:22 jaffa kernel:  ? drm_gem_handle_create+0x40/0x40 [drm]
Lis 07 19:44:22 jaffa kernel:  ? unmap_region+0xf7/0x130
Lis 07 19:44:22 jaffa kernel:  amdgpu_drm_ioctl+0x4f/0x90 [amdgpu]
Lis 07 19:44:22 jaffa kernel:  do_vfs_ioctl+0xa5/0x600
Lis 07 19:44:22 jaffa kernel:  SyS_ioctl+0x79/0x90
Lis 07 19:44:22 jaffa kernel:  entry_SYSCALL_64_fastpath+0x1a/0xa5
Lis 07 19:44:22 jaffa kernel: RIP: 0033:0x7f99749b00d7
Lis 07 19:44:22 jaffa kernel: RSP: 002b:00007ffc28602968 EFLAGS: 00000246
ORIG_RAX: 0000000000000010
Lis 07 19:44:22 jaffa kernel: RAX: ffffffffffffffda RBX: 0000000000000000 R=
CX:
00007f99749b00d7
Lis 07 19:44:22 jaffa kernel: RDX: 00007ffc286029a8 RSI: 0000000040086409 R=
DI:
000000000000000c
Lis 07 19:44:22 jaffa kernel: RBP: 00007ffc28603d90 R08: 0000000000000000 R=
09:
000000000000000e
Lis 07 19:44:22 jaffa kernel: R10: 0000000000000053 R11: 0000000000000246 R=
12:
00007ffc28603e20
Lis 07 19:44:22 jaffa kernel: R13: 00007ffc28603e18 R14: 000000007fffffff R=
15:
00007f996eab47d0

This is repeated many times and fills up dmesg. The same does not happen wi=
th
ea0eda9a882b5df33808dbd85bd64376ed187618.

I have not tried bisecting since, IIRC, some revisions between those two ha=
ng
my machine. I can try if that would be useful.</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>=

--15074011420.c17EA53e.22704--

--===============0068539945==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KZHJpLWRldmVs
IG1haWxpbmcgbGlzdApkcmktZGV2ZWxAbGlzdHMuZnJlZWRlc2t0b3Aub3JnCmh0dHBzOi8vbGlz
dHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8vZHJpLWRldmVsCg==

--===============0068539945==--