* [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len
@ 2020-10-13 11:18 Matthew Auld
2020-10-13 11:58 ` Chris Wilson
` (2 more replies)
0 siblings, 3 replies; 7+ messages in thread
From: Matthew Auld @ 2020-10-13 11:18 UTC (permalink / raw)
To: intel-gfx; +Cc: Chris Wilson
As per the ABI batch_len is u32, however if the batch_len is left unset,
then the kernel will just assume batch_len is the size of the whole
batch object, however since the vma->size is u64, while the batch_len is
just u32 we can end up with batch_len = 0 if we are given too large batch
object(e.g 1ULL << 32), which doesn't look the intended behaviour and
probably leads to explosions on some HW.
Testcase: igt/gem_exec_params/larger-than-life-batch
Fixes: 0b5372727be3 ("drm/i915/cmdparser: Use cached vmappings")
Signed-off-by: Matthew Auld <matthew.auld@intel.com>
Cc: Chris Wilson <chris@chris-wilson.co.uk>
---
drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c
index 4b09bcd70cf4..80c738c72e6e 100644
--- a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c
+++ b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c
@@ -869,8 +869,13 @@ static int eb_lookup_vmas(struct i915_execbuffer *eb)
return -EINVAL;
}
- if (eb->batch_len == 0)
+ if (eb->batch_len == 0) {
eb->batch_len = eb->batch->vma->size - eb->batch_start_offset;
+ if (unlikely(eb->batch_len == 0)) {
+ drm_dbg(&i915->drm, "Attempting to use too large batch\n");
+ return -EINVAL;
+ }
+ }
return 0;
--
2.26.2
_______________________________________________
Intel-gfx mailing list
Intel-gfx@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/intel-gfx
^ permalink raw reply related [flat|nested] 7+ messages in thread* Re: [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len 2020-10-13 11:18 [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len Matthew Auld @ 2020-10-13 11:58 ` Chris Wilson 2020-10-13 12:07 ` Chris Wilson 2020-10-13 14:07 ` Matthew Auld 2020-10-13 13:58 ` [Intel-gfx] ✓ Fi.CI.BAT: success for " Patchwork 2020-10-14 7:18 ` [Intel-gfx] ✗ Fi.CI.IGT: failure " Patchwork 2 siblings, 2 replies; 7+ messages in thread From: Chris Wilson @ 2020-10-13 11:58 UTC (permalink / raw) To: Matthew Auld, intel-gfx Quoting Matthew Auld (2020-10-13 12:18:39) > As per the ABI batch_len is u32, however if the batch_len is left unset, > then the kernel will just assume batch_len is the size of the whole > batch object, however since the vma->size is u64, while the batch_len is > just u32 we can end up with batch_len = 0 if we are given too large batch > object(e.g 1ULL << 32), which doesn't look the intended behaviour and > probably leads to explosions on some HW. > > Testcase: igt/gem_exec_params/larger-than-life-batch > Fixes: 0b5372727be3 ("drm/i915/cmdparser: Use cached vmappings") Nah. That's setting exec_len used for dispatch, not for parsing, which is still using i915_gem_execbuffer_parse(engine, &shadow_exec_entry, params->batch->obj, eb, args->batch_start_offset, args->batch_len, drm_is_current_master(file)); (and args->batch_len is straight from userspace and passed onwards) It's right up until 435e8fc059db ("drm/i915: Allow parsing of unsized batches") where we are using the user value of batch_len for allocating the shadow object and parsing. Fixes: 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > Signed-off-by: Matthew Auld <matthew.auld@intel.com> > Cc: Chris Wilson <chris@chris-wilson.co.uk> > --- > drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 7 ++++++- > 1 file changed, 6 insertions(+), 1 deletion(-) > > diff --git a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > index 4b09bcd70cf4..80c738c72e6e 100644 > --- a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > +++ b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > @@ -869,8 +869,13 @@ static int eb_lookup_vmas(struct i915_execbuffer *eb) > return -EINVAL; > } > > - if (eb->batch_len == 0) > + if (eb->batch_len == 0) { > eb->batch_len = eb->batch->vma->size - eb->batch_start_offset; if (overflows_type(eb->batch->vma->size - eb->batch_start_offset, eb->batch_len)) It should not have caused the cmdparser any trouble though, it should have been quite happy to copy nothing and reject the batch for reaching the end too early (with a very slim chance of a stale MI_BATCH_BUFFER_END to the rescue). intel_gt_get_buffer_pool() looks suspect given a size of 0, it will either give the largest object it has cached or break upon creating/allocating internal pages. In terms of HW fail, only gen2 used the parameter and it has a very limited batch/GTT size. -Chris _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len 2020-10-13 11:58 ` Chris Wilson @ 2020-10-13 12:07 ` Chris Wilson 2020-10-13 14:07 ` Matthew Auld 1 sibling, 0 replies; 7+ messages in thread From: Chris Wilson @ 2020-10-13 12:07 UTC (permalink / raw) To: Matthew Auld, intel-gfx Quoting Chris Wilson (2020-10-13 12:58:31) > Quoting Matthew Auld (2020-10-13 12:18:39) > > As per the ABI batch_len is u32, however if the batch_len is left unset, > > then the kernel will just assume batch_len is the size of the whole > > batch object, however since the vma->size is u64, while the batch_len is > > just u32 we can end up with batch_len = 0 if we are given too large batch > > object(e.g 1ULL << 32), which doesn't look the intended behaviour and > > probably leads to explosions on some HW. > > > > Testcase: igt/gem_exec_params/larger-than-life-batch > > Fixes: 0b5372727be3 ("drm/i915/cmdparser: Use cached vmappings") > > Nah. That's setting exec_len used for dispatch, not for parsing, which > is still using > > i915_gem_execbuffer_parse(engine, &shadow_exec_entry, > params->batch->obj, > eb, > args->batch_start_offset, > args->batch_len, > drm_is_current_master(file)); > (and args->batch_len is straight from userspace and passed onwards) > > It's right up until 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > where we are using the user value of batch_len for allocating the shadow > object and parsing. > > Fixes: 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > > > Signed-off-by: Matthew Auld <matthew.auld@intel.com> > > Cc: Chris Wilson <chris@chris-wilson.co.uk> > > --- > > drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 7 ++++++- > > 1 file changed, 6 insertions(+), 1 deletion(-) > > > > diff --git a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > > index 4b09bcd70cf4..80c738c72e6e 100644 > > --- a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > > +++ b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c > > @@ -869,8 +869,13 @@ static int eb_lookup_vmas(struct i915_execbuffer *eb) > > return -EINVAL; > > } > > > > - if (eb->batch_len == 0) > > + if (eb->batch_len == 0) { > > eb->batch_len = eb->batch->vma->size - eb->batch_start_offset; > > if (overflows_type(eb->batch->vma->size - eb->batch_start_offset, eb->batch_len)) And we shouldn't fail here. So bump to u64, and since the vma->size cannot be larger than the GTT, we will be safe for gen2 where it makes a difference. -Chris _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len 2020-10-13 11:58 ` Chris Wilson 2020-10-13 12:07 ` Chris Wilson @ 2020-10-13 14:07 ` Matthew Auld 2020-10-13 14:11 ` Chris Wilson 1 sibling, 1 reply; 7+ messages in thread From: Matthew Auld @ 2020-10-13 14:07 UTC (permalink / raw) To: Chris Wilson, intel-gfx On 13/10/2020 12:58, Chris Wilson wrote: > Quoting Matthew Auld (2020-10-13 12:18:39) >> As per the ABI batch_len is u32, however if the batch_len is left unset, >> then the kernel will just assume batch_len is the size of the whole >> batch object, however since the vma->size is u64, while the batch_len is >> just u32 we can end up with batch_len = 0 if we are given too large batch >> object(e.g 1ULL << 32), which doesn't look the intended behaviour and >> probably leads to explosions on some HW. >> >> Testcase: igt/gem_exec_params/larger-than-life-batch >> Fixes: 0b5372727be3 ("drm/i915/cmdparser: Use cached vmappings") > > Nah. That's setting exec_len used for dispatch, not for parsing, which > is still using > > i915_gem_execbuffer_parse(engine, &shadow_exec_entry, > params->batch->obj, > eb, > args->batch_start_offset, > args->batch_len, > drm_is_current_master(file)); > (and args->batch_len is straight from userspace and passed onwards) > > It's right up until 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > where we are using the user value of batch_len for allocating the shadow > object and parsing. > > Fixes: 435e8fc059db ("drm/i915: Allow parsing of unsized batches") On the topic of that patch, why is it looking at args->batch_len(might be zero), even though it looks like it is trying to move the eb->batch_len calculation to before we call eb_use_cmdparser(), so it can use it(the commit message seems to suggest that?), but then it only looks at the args version anyway. I don't get it. > >> Signed-off-by: Matthew Auld <matthew.auld@intel.com> >> Cc: Chris Wilson <chris@chris-wilson.co.uk> >> --- >> drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 7 ++++++- >> 1 file changed, 6 insertions(+), 1 deletion(-) >> >> diff --git a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c >> index 4b09bcd70cf4..80c738c72e6e 100644 >> --- a/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c >> +++ b/drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c >> @@ -869,8 +869,13 @@ static int eb_lookup_vmas(struct i915_execbuffer *eb) >> return -EINVAL; >> } >> >> - if (eb->batch_len == 0) >> + if (eb->batch_len == 0) { >> eb->batch_len = eb->batch->vma->size - eb->batch_start_offset; > > if (overflows_type(eb->batch->vma->size - eb->batch_start_offset, eb->batch_len)) > > It should not have caused the cmdparser any trouble though, it should > have been quite happy to copy nothing and reject the batch for reaching > the end too early (with a very slim chance of a stale > MI_BATCH_BUFFER_END to the rescue). > > intel_gt_get_buffer_pool() looks suspect given a size of 0, it will > either give the largest object it has cached or break upon > creating/allocating internal pages. > > In terms of HW fail, only gen2 used the parameter and it has a very > limited batch/GTT size. > -Chris > _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len 2020-10-13 14:07 ` Matthew Auld @ 2020-10-13 14:11 ` Chris Wilson 0 siblings, 0 replies; 7+ messages in thread From: Chris Wilson @ 2020-10-13 14:11 UTC (permalink / raw) To: Matthew Auld, intel-gfx Quoting Matthew Auld (2020-10-13 15:07:46) > On 13/10/2020 12:58, Chris Wilson wrote: > > Quoting Matthew Auld (2020-10-13 12:18:39) > >> As per the ABI batch_len is u32, however if the batch_len is left unset, > >> then the kernel will just assume batch_len is the size of the whole > >> batch object, however since the vma->size is u64, while the batch_len is > >> just u32 we can end up with batch_len = 0 if we are given too large batch > >> object(e.g 1ULL << 32), which doesn't look the intended behaviour and > >> probably leads to explosions on some HW. > >> > >> Testcase: igt/gem_exec_params/larger-than-life-batch > >> Fixes: 0b5372727be3 ("drm/i915/cmdparser: Use cached vmappings") > > > > Nah. That's setting exec_len used for dispatch, not for parsing, which > > is still using > > > > i915_gem_execbuffer_parse(engine, &shadow_exec_entry, > > params->batch->obj, > > eb, > > args->batch_start_offset, > > args->batch_len, > > drm_is_current_master(file)); > > (and args->batch_len is straight from userspace and passed onwards) > > > > It's right up until 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > > where we are using the user value of batch_len for allocating the shadow > > object and parsing. > > > > Fixes: 435e8fc059db ("drm/i915: Allow parsing of unsized batches") > > On the topic of that patch, why is it looking at args->batch_len(might > be zero), even though it looks like it is trying to move the > eb->batch_len calculation to before we call eb_use_cmdparser(), so it > can use it(the commit message seems to suggest that?), but then it only > looks at the args version anyway. I don't get it. iirc, it was so that we could change the order around and later modify eb.batch_len before eb_use_cmdparser() [so eb.batch_len no longer would be zero, defeating the cheat]. -Chris _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
* [Intel-gfx] ✓ Fi.CI.BAT: success for drm/i915/execbuf: don't allow zero batch_len 2020-10-13 11:18 [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len Matthew Auld 2020-10-13 11:58 ` Chris Wilson @ 2020-10-13 13:58 ` Patchwork 2020-10-14 7:18 ` [Intel-gfx] ✗ Fi.CI.IGT: failure " Patchwork 2 siblings, 0 replies; 7+ messages in thread From: Patchwork @ 2020-10-13 13:58 UTC (permalink / raw) To: Matthew Auld; +Cc: intel-gfx [-- Attachment #1.1: Type: text/plain, Size: 5799 bytes --] == Series Details == Series: drm/i915/execbuf: don't allow zero batch_len URL : https://patchwork.freedesktop.org/series/82620/ State : success == Summary == CI Bug Log - changes from CI_DRM_9135 -> Patchwork_18687 ==================================================== Summary ------- **SUCCESS** No regressions found. External URL: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/index.html Known issues ------------ Here are the changes found in Patchwork_18687 that come from known issues: ### IGT changes ### #### Issues hit #### * igt@gem_flink_basic@basic: - fi-tgl-y: [PASS][1] -> [DMESG-WARN][2] ([i915#402]) [1]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-tgl-y/igt@gem_flink_basic@basic.html [2]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-tgl-y/igt@gem_flink_basic@basic.html * igt@i915_pm_rpm@basic-pci-d3-state: - fi-bsw-kefka: [PASS][3] -> [DMESG-WARN][4] ([i915#1982]) [3]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-bsw-kefka/igt@i915_pm_rpm@basic-pci-d3-state.html [4]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-bsw-kefka/igt@i915_pm_rpm@basic-pci-d3-state.html * igt@kms_pipe_crc_basic@compare-crc-sanitycheck-pipe-c: - fi-tgl-y: [PASS][5] -> [DMESG-WARN][6] ([i915#1982]) [5]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-tgl-y/igt@kms_pipe_crc_basic@compare-crc-sanitycheck-pipe-c.html [6]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-tgl-y/igt@kms_pipe_crc_basic@compare-crc-sanitycheck-pipe-c.html * igt@vgem_basic@unload: - fi-skl-guc: [PASS][7] -> [DMESG-WARN][8] ([i915#2203]) [7]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-skl-guc/igt@vgem_basic@unload.html [8]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-skl-guc/igt@vgem_basic@unload.html #### Possible fixes #### * igt@gem_flink_basic@bad-flink: - fi-tgl-y: [DMESG-WARN][9] ([i915#402]) -> [PASS][10] [9]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-tgl-y/igt@gem_flink_basic@bad-flink.html [10]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-tgl-y/igt@gem_flink_basic@bad-flink.html * igt@i915_pm_rpm@basic-pci-d3-state: - fi-byt-j1900: [DMESG-WARN][11] ([i915#1982]) -> [PASS][12] [11]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-byt-j1900/igt@i915_pm_rpm@basic-pci-d3-state.html [12]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-byt-j1900/igt@i915_pm_rpm@basic-pci-d3-state.html - fi-bsw-n3050: [DMESG-WARN][13] ([i915#1982]) -> [PASS][14] [13]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-bsw-n3050/igt@i915_pm_rpm@basic-pci-d3-state.html [14]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-bsw-n3050/igt@i915_pm_rpm@basic-pci-d3-state.html * igt@kms_cursor_legacy@basic-busy-flip-before-cursor-atomic: - fi-icl-u2: [DMESG-WARN][15] ([i915#1982]) -> [PASS][16] [15]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-icl-u2/igt@kms_cursor_legacy@basic-busy-flip-before-cursor-atomic.html [16]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-icl-u2/igt@kms_cursor_legacy@basic-busy-flip-before-cursor-atomic.html - fi-apl-guc: [DMESG-WARN][17] ([i915#1635] / [i915#1982]) -> [PASS][18] [17]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-apl-guc/igt@kms_cursor_legacy@basic-busy-flip-before-cursor-atomic.html [18]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-apl-guc/igt@kms_cursor_legacy@basic-busy-flip-before-cursor-atomic.html * igt@kms_pipe_crc_basic@read-crc-pipe-c: - {fi-tgl-dsi}: [DMESG-WARN][19] ([i915#1982]) -> [PASS][20] [19]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-tgl-dsi/igt@kms_pipe_crc_basic@read-crc-pipe-c.html [20]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-tgl-dsi/igt@kms_pipe_crc_basic@read-crc-pipe-c.html #### Warnings #### * igt@gem_exec_suspend@basic-s3: - fi-tgl-y: [DMESG-WARN][21] ([i915#2411]) -> [DMESG-WARN][22] ([i915#2411] / [i915#402]) [21]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/fi-tgl-y/igt@gem_exec_suspend@basic-s3.html [22]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/fi-tgl-y/igt@gem_exec_suspend@basic-s3.html {name}: This element is suppressed. This means it is ignored when computing the status of the difference (SUCCESS, WARNING, or FAILURE). [i915#1635]: https://gitlab.freedesktop.org/drm/intel/issues/1635 [i915#1982]: https://gitlab.freedesktop.org/drm/intel/issues/1982 [i915#2089]: https://gitlab.freedesktop.org/drm/intel/issues/2089 [i915#2203]: https://gitlab.freedesktop.org/drm/intel/issues/2203 [i915#2268]: https://gitlab.freedesktop.org/drm/intel/issues/2268 [i915#2411]: https://gitlab.freedesktop.org/drm/intel/issues/2411 [i915#402]: https://gitlab.freedesktop.org/drm/intel/issues/402 Participating hosts (47 -> 41) ------------------------------ Missing (6): fi-ilk-m540 fi-hsw-4200u fi-byt-squawks fi-bsw-cyan fi-byt-clapper fi-bdw-samus Build changes ------------- * Linux: CI_DRM_9135 -> Patchwork_18687 CI-20190529: 20190529 CI_DRM_9135: eb70ad33fcc91d3464b07679391fb477927ad4c7 @ git://anongit.freedesktop.org/gfx-ci/linux IGT_5813: d4e6dd955a1dad02271aa41c9389f5097ee17765 @ git://anongit.freedesktop.org/xorg/app/intel-gpu-tools Patchwork_18687: e8e47513fb88d5bd8f0a8c1af1245215358ff1d1 @ git://anongit.freedesktop.org/gfx-ci/linux == Linux commits == e8e47513fb88 drm/i915/execbuf: don't allow zero batch_len == Logs == For more details see: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/index.html [-- Attachment #1.2: Type: text/html, Size: 7135 bytes --] [-- Attachment #2: Type: text/plain, Size: 160 bytes --] _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
* [Intel-gfx] ✗ Fi.CI.IGT: failure for drm/i915/execbuf: don't allow zero batch_len 2020-10-13 11:18 [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len Matthew Auld 2020-10-13 11:58 ` Chris Wilson 2020-10-13 13:58 ` [Intel-gfx] ✓ Fi.CI.BAT: success for " Patchwork @ 2020-10-14 7:18 ` Patchwork 2 siblings, 0 replies; 7+ messages in thread From: Patchwork @ 2020-10-14 7:18 UTC (permalink / raw) To: Matthew Auld; +Cc: intel-gfx [-- Attachment #1.1: Type: text/plain, Size: 17185 bytes --] == Series Details == Series: drm/i915/execbuf: don't allow zero batch_len URL : https://patchwork.freedesktop.org/series/82620/ State : failure == Summary == CI Bug Log - changes from CI_DRM_9135_full -> Patchwork_18687_full ==================================================== Summary ------- **FAILURE** Serious unknown changes coming with Patchwork_18687_full absolutely need to be verified manually. If you think the reported changes have nothing to do with the changes introduced in Patchwork_18687_full, please notify your bug team to allow them to document this new failure mode, which will reduce false positives in CI. Possible new issues ------------------- Here are the unknown changes that may have been introduced in Patchwork_18687_full: ### IGT changes ### #### Possible regressions #### * igt@gem_exec_whisper@basic-fds-priority-all: - shard-glk: [PASS][1] -> [INCOMPLETE][2] [1]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-glk7/igt@gem_exec_whisper@basic-fds-priority-all.html [2]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-glk4/igt@gem_exec_whisper@basic-fds-priority-all.html * igt@kms_frontbuffer_tracking@fbc-1p-primscrn-pri-indfb-draw-render: - shard-tglb: [PASS][3] -> [FAIL][4] [3]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb5/igt@kms_frontbuffer_tracking@fbc-1p-primscrn-pri-indfb-draw-render.html [4]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb1/igt@kms_frontbuffer_tracking@fbc-1p-primscrn-pri-indfb-draw-render.html #### Warnings #### * igt@kms_frontbuffer_tracking@fbcpsr-tiling-y: - shard-tglb: [DMESG-FAIL][5] ([i915#1982]) -> [FAIL][6] [5]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb8/igt@kms_frontbuffer_tracking@fbcpsr-tiling-y.html [6]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb3/igt@kms_frontbuffer_tracking@fbcpsr-tiling-y.html Known issues ------------ Here are the changes found in Patchwork_18687_full that come from known issues: ### IGT changes ### #### Issues hit #### * igt@feature_discovery@psr2: - shard-iclb: [PASS][7] -> [SKIP][8] ([i915#658]) [7]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb2/igt@feature_discovery@psr2.html [8]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb5/igt@feature_discovery@psr2.html * igt@gem_exec_reloc@basic-many-active@vecs0: - shard-glk: [PASS][9] -> [FAIL][10] ([i915#2389]) +1 similar issue [9]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-glk1/igt@gem_exec_reloc@basic-many-active@vecs0.html [10]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-glk7/igt@gem_exec_reloc@basic-many-active@vecs0.html * igt@gem_exec_whisper@basic-queues-all: - shard-glk: [PASS][11] -> [DMESG-WARN][12] ([i915#118] / [i915#95]) [11]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-glk8/igt@gem_exec_whisper@basic-queues-all.html [12]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-glk2/igt@gem_exec_whisper@basic-queues-all.html * igt@gem_fenced_exec_thrash@no-spare-fences: - shard-snb: [PASS][13] -> [INCOMPLETE][14] ([i915#82]) [13]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-snb2/igt@gem_fenced_exec_thrash@no-spare-fences.html [14]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-snb6/igt@gem_fenced_exec_thrash@no-spare-fences.html * igt@gem_userptr_blits@sync-unmap-cycles: - shard-skl: [PASS][15] -> [TIMEOUT][16] ([i915#2424]) [15]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl8/igt@gem_userptr_blits@sync-unmap-cycles.html [16]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl4/igt@gem_userptr_blits@sync-unmap-cycles.html * igt@gen9_exec_parse@allowed-single: - shard-skl: [PASS][17] -> [DMESG-WARN][18] ([i915#1436] / [i915#716]) [17]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl1/igt@gen9_exec_parse@allowed-single.html [18]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl6/igt@gen9_exec_parse@allowed-single.html * igt@kms_cursor_edge_walk@pipe-b-64x64-right-edge: - shard-apl: [PASS][19] -> [INCOMPLETE][20] ([i915#1635] / [i915#2377]) [19]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-apl8/igt@kms_cursor_edge_walk@pipe-b-64x64-right-edge.html [20]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-apl2/igt@kms_cursor_edge_walk@pipe-b-64x64-right-edge.html * igt@kms_flip@flip-vs-expired-vblank-interruptible@c-edp1: - shard-skl: [PASS][21] -> [FAIL][22] ([i915#2122]) [21]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl7/igt@kms_flip@flip-vs-expired-vblank-interruptible@c-edp1.html [22]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl3/igt@kms_flip@flip-vs-expired-vblank-interruptible@c-edp1.html * igt@kms_flip@wf_vblank-ts-check-interruptible@a-edp1: - shard-tglb: [PASS][23] -> [DMESG-WARN][24] ([i915#1982]) +2 similar issues [23]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb5/igt@kms_flip@wf_vblank-ts-check-interruptible@a-edp1.html [24]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb1/igt@kms_flip@wf_vblank-ts-check-interruptible@a-edp1.html * igt@kms_pipe_crc_basic@read-crc-pipe-c-frame-sequence: - shard-skl: [PASS][25] -> [FAIL][26] ([i915#53]) [25]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl7/igt@kms_pipe_crc_basic@read-crc-pipe-c-frame-sequence.html [26]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl8/igt@kms_pipe_crc_basic@read-crc-pipe-c-frame-sequence.html * igt@kms_plane@plane-panning-top-left-pipe-c-planes: - shard-skl: [PASS][27] -> [DMESG-WARN][28] ([i915#1982]) +7 similar issues [27]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl8/igt@kms_plane@plane-panning-top-left-pipe-c-planes.html [28]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl4/igt@kms_plane@plane-panning-top-left-pipe-c-planes.html * igt@kms_plane_alpha_blend@pipe-c-constant-alpha-min: - shard-skl: [PASS][29] -> [FAIL][30] ([fdo#108145] / [i915#265]) [29]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl9/igt@kms_plane_alpha_blend@pipe-c-constant-alpha-min.html [30]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl7/igt@kms_plane_alpha_blend@pipe-c-constant-alpha-min.html * igt@kms_plane_scaling@pipe-b-scaler-with-clipping-clamping: - shard-iclb: [PASS][31] -> [DMESG-WARN][32] ([i915#1982]) [31]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb3/igt@kms_plane_scaling@pipe-b-scaler-with-clipping-clamping.html [32]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb3/igt@kms_plane_scaling@pipe-b-scaler-with-clipping-clamping.html * igt@kms_psr@psr2_primary_render: - shard-iclb: [PASS][33] -> [SKIP][34] ([fdo#109441]) [33]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb2/igt@kms_psr@psr2_primary_render.html [34]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb5/igt@kms_psr@psr2_primary_render.html * igt@kms_setmode@basic: - shard-apl: [PASS][35] -> [FAIL][36] ([i915#1635] / [i915#31]) [35]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-apl6/igt@kms_setmode@basic.html [36]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-apl8/igt@kms_setmode@basic.html #### Possible fixes #### * {igt@kms_async_flips@alternate-sync-async-flip}: - shard-kbl: [FAIL][37] ([i915#2521]) -> [PASS][38] [37]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-kbl7/igt@kms_async_flips@alternate-sync-async-flip.html [38]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-kbl7/igt@kms_async_flips@alternate-sync-async-flip.html * {igt@kms_async_flips@async-flip-with-page-flip-events}: - shard-iclb: [FAIL][39] ([i915#2521]) -> [PASS][40] [39]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb6/igt@kms_async_flips@async-flip-with-page-flip-events.html [40]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb1/igt@kms_async_flips@async-flip-with-page-flip-events.html - shard-tglb: [FAIL][41] ([i915#2521]) -> [PASS][42] [41]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb1/igt@kms_async_flips@async-flip-with-page-flip-events.html [42]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb6/igt@kms_async_flips@async-flip-with-page-flip-events.html * igt@kms_big_fb@y-tiled-16bpp-rotate-0: - shard-skl: [DMESG-WARN][43] ([i915#1982]) -> [PASS][44] +7 similar issues [43]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl6/igt@kms_big_fb@y-tiled-16bpp-rotate-0.html [44]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl2/igt@kms_big_fb@y-tiled-16bpp-rotate-0.html * igt@kms_cursor_legacy@pipe-b-torture-move: - shard-tglb: [DMESG-WARN][45] ([i915#128]) -> [PASS][46] +1 similar issue [45]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb7/igt@kms_cursor_legacy@pipe-b-torture-move.html [46]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb2/igt@kms_cursor_legacy@pipe-b-torture-move.html * igt@kms_fbcon_fbt@fbc-suspend: - shard-glk: [DMESG-FAIL][47] ([i915#118] / [i915#95]) -> [PASS][48] [47]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-glk3/igt@kms_fbcon_fbt@fbc-suspend.html [48]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-glk9/igt@kms_fbcon_fbt@fbc-suspend.html * igt@kms_flip@flip-vs-expired-vblank-interruptible@c-dp1: - shard-apl: [FAIL][49] ([i915#1635] / [i915#79]) -> [PASS][50] [49]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-apl8/igt@kms_flip@flip-vs-expired-vblank-interruptible@c-dp1.html [50]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-apl1/igt@kms_flip@flip-vs-expired-vblank-interruptible@c-dp1.html * igt@kms_flip@flip-vs-suspend-interruptible@c-edp1: - shard-skl: [INCOMPLETE][51] ([i915#198]) -> [PASS][52] +1 similar issue [51]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl7/igt@kms_flip@flip-vs-suspend-interruptible@c-edp1.html [52]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl8/igt@kms_flip@flip-vs-suspend-interruptible@c-edp1.html * igt@kms_flip@plain-flip-fb-recreate-interruptible@a-edp1: - shard-skl: [FAIL][53] ([i915#2122]) -> [PASS][54] +1 similar issue [53]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl8/igt@kms_flip@plain-flip-fb-recreate-interruptible@a-edp1.html [54]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl4/igt@kms_flip@plain-flip-fb-recreate-interruptible@a-edp1.html * igt@kms_frontbuffer_tracking@fbcpsr-1p-primscrn-indfb-plflip-blt: - shard-tglb: [FAIL][55] -> [PASS][56] +1 similar issue [55]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-tglb8/igt@kms_frontbuffer_tracking@fbcpsr-1p-primscrn-indfb-plflip-blt.html [56]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-tglb3/igt@kms_frontbuffer_tracking@fbcpsr-1p-primscrn-indfb-plflip-blt.html * igt@kms_frontbuffer_tracking@psr-shrfb-scaledprimary: - shard-iclb: [DMESG-WARN][57] ([i915#1982]) -> [PASS][58] [57]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb8/igt@kms_frontbuffer_tracking@psr-shrfb-scaledprimary.html [58]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb1/igt@kms_frontbuffer_tracking@psr-shrfb-scaledprimary.html * igt@kms_hdr@bpc-switch-dpms: - shard-skl: [FAIL][59] ([i915#1188]) -> [PASS][60] [59]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl5/igt@kms_hdr@bpc-switch-dpms.html [60]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl1/igt@kms_hdr@bpc-switch-dpms.html * igt@kms_psr@psr2_dpms: - shard-iclb: [SKIP][61] ([fdo#109441]) -> [PASS][62] +1 similar issue [61]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-iclb4/igt@kms_psr@psr2_dpms.html [62]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-iclb2/igt@kms_psr@psr2_dpms.html * igt@kms_setmode@basic: - shard-skl: [FAIL][63] ([i915#31]) -> [PASS][64] [63]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl9/igt@kms_setmode@basic.html [64]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl7/igt@kms_setmode@basic.html * igt@perf@blocking: - shard-skl: [FAIL][65] ([i915#1542]) -> [PASS][66] [65]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl10/igt@perf@blocking.html [66]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl5/igt@perf@blocking.html * igt@sysfs_heartbeat_interval@mixed@vcs1: - shard-kbl: [INCOMPLETE][67] ([i915#1731]) -> [PASS][68] [67]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-kbl4/igt@sysfs_heartbeat_interval@mixed@vcs1.html [68]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-kbl7/igt@sysfs_heartbeat_interval@mixed@vcs1.html #### Warnings #### * igt@kms_content_protection@atomic-dpms: - shard-apl: [FAIL][69] ([fdo#110321] / [fdo#110336] / [i915#1635]) -> [TIMEOUT][70] ([i915#1319] / [i915#1635]) [69]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-apl3/igt@kms_content_protection@atomic-dpms.html [70]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-apl4/igt@kms_content_protection@atomic-dpms.html * igt@kms_cursor_legacy@flip-vs-cursor-atomic-transitions: - shard-skl: [DMESG-WARN][71] ([i915#1982]) -> [DMESG-FAIL][72] ([i915#1982]) [71]: https://intel-gfx-ci.01.org/tree/drm-tip/CI_DRM_9135/shard-skl7/igt@kms_cursor_legacy@flip-vs-cursor-atomic-transitions.html [72]: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/shard-skl3/igt@kms_cursor_legacy@flip-vs-cursor-atomic-transitions.html {name}: This element is suppressed. This means it is ignored when computing the status of the difference (SUCCESS, WARNING, or FAILURE). [fdo#108145]: https://bugs.freedesktop.org/show_bug.cgi?id=108145 [fdo#109441]: https://bugs.freedesktop.org/show_bug.cgi?id=109441 [fdo#110321]: https://bugs.freedesktop.org/show_bug.cgi?id=110321 [fdo#110336]: https://bugs.freedesktop.org/show_bug.cgi?id=110336 [i915#118]: https://gitlab.freedesktop.org/drm/intel/issues/118 [i915#1188]: https://gitlab.freedesktop.org/drm/intel/issues/1188 [i915#128]: https://gitlab.freedesktop.org/drm/intel/issues/128 [i915#1319]: https://gitlab.freedesktop.org/drm/intel/issues/1319 [i915#1436]: https://gitlab.freedesktop.org/drm/intel/issues/1436 [i915#1542]: https://gitlab.freedesktop.org/drm/intel/issues/1542 [i915#1635]: https://gitlab.freedesktop.org/drm/intel/issues/1635 [i915#1731]: https://gitlab.freedesktop.org/drm/intel/issues/1731 [i915#198]: https://gitlab.freedesktop.org/drm/intel/issues/198 [i915#1982]: https://gitlab.freedesktop.org/drm/intel/issues/1982 [i915#2122]: https://gitlab.freedesktop.org/drm/intel/issues/2122 [i915#2377]: https://gitlab.freedesktop.org/drm/intel/issues/2377 [i915#2389]: https://gitlab.freedesktop.org/drm/intel/issues/2389 [i915#2424]: https://gitlab.freedesktop.org/drm/intel/issues/2424 [i915#2521]: https://gitlab.freedesktop.org/drm/intel/issues/2521 [i915#2553]: https://gitlab.freedesktop.org/drm/intel/issues/2553 [i915#265]: https://gitlab.freedesktop.org/drm/intel/issues/265 [i915#31]: https://gitlab.freedesktop.org/drm/intel/issues/31 [i915#53]: https://gitlab.freedesktop.org/drm/intel/issues/53 [i915#658]: https://gitlab.freedesktop.org/drm/intel/issues/658 [i915#716]: https://gitlab.freedesktop.org/drm/intel/issues/716 [i915#79]: https://gitlab.freedesktop.org/drm/intel/issues/79 [i915#82]: https://gitlab.freedesktop.org/drm/intel/issues/82 [i915#95]: https://gitlab.freedesktop.org/drm/intel/issues/95 Participating hosts (11 -> 11) ------------------------------ No changes in participating hosts Build changes ------------- * Linux: CI_DRM_9135 -> Patchwork_18687 CI-20190529: 20190529 CI_DRM_9135: eb70ad33fcc91d3464b07679391fb477927ad4c7 @ git://anongit.freedesktop.org/gfx-ci/linux IGT_5813: d4e6dd955a1dad02271aa41c9389f5097ee17765 @ git://anongit.freedesktop.org/xorg/app/intel-gpu-tools Patchwork_18687: e8e47513fb88d5bd8f0a8c1af1245215358ff1d1 @ git://anongit.freedesktop.org/gfx-ci/linux piglit_4509: fdc5a4ca11124ab8413c7988896eec4c97336694 @ git://anongit.freedesktop.org/piglit == Logs == For more details see: https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_18687/index.html [-- Attachment #1.2: Type: text/html, Size: 19832 bytes --] [-- Attachment #2: Type: text/plain, Size: 160 bytes --] _______________________________________________ Intel-gfx mailing list Intel-gfx@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/intel-gfx ^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2020-10-14 7:18 UTC | newest] Thread overview: 7+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2020-10-13 11:18 [Intel-gfx] [PATCH] drm/i915/execbuf: don't allow zero batch_len Matthew Auld 2020-10-13 11:58 ` Chris Wilson 2020-10-13 12:07 ` Chris Wilson 2020-10-13 14:07 ` Matthew Auld 2020-10-13 14:11 ` Chris Wilson 2020-10-13 13:58 ` [Intel-gfx] ✓ Fi.CI.BAT: success for " Patchwork 2020-10-14 7:18 ` [Intel-gfx] ✗ Fi.CI.IGT: failure " Patchwork
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox