* ✓ CI.KUnit: success for Fix UAF on dma-buf import attach failure
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
@ 2026-07-08 8:46 ` Patchwork
2026-07-08 9:15 ` [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs Nitin Gote
` (4 subsequent siblings)
5 siblings, 0 replies; 11+ messages in thread
From: Patchwork @ 2026-07-08 8:46 UTC (permalink / raw)
To: Nitin Gote; +Cc: intel-xe
== Series Details ==
Series: Fix UAF on dma-buf import attach failure
URL : https://patchwork.freedesktop.org/series/169984/
State : success
== Summary ==
+ trap cleanup EXIT
+ /kernel/tools/testing/kunit/kunit.py run --kunitconfig /kernel/drivers/gpu/drm/xe/.kunitconfig
[08:45:22] Configuring KUnit Kernel ...
Generating .config ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
[08:45:27] Building KUnit Kernel ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
Building with:
$ make all compile_commands.json scripts_gdb ARCH=um O=.kunit --jobs=48
../drivers/gpu/drm/xe/xe_pt.c:1430:13: warning: ‘xe_pt_svm_userptr_notifier_lock’ defined but not used [-Wunused-function]
1430 | static void xe_pt_svm_userptr_notifier_lock(struct xe_vm *vm)
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[08:45:58] Starting KUnit Kernel (1/1)...
[08:45:58] ============================================================
Running tests with:
$ .kunit/linux kunit.enable=1 mem=1G console=tty kunit_shutdown=halt
[08:45:58] ================== guc_buf (11 subtests) ===================
[08:45:58] [PASSED] test_smallest
[08:45:58] [PASSED] test_largest
[08:45:58] [PASSED] test_granular
[08:45:58] [PASSED] test_unique
[08:45:58] [PASSED] test_overlap
[08:45:58] [PASSED] test_reusable
[08:45:58] [PASSED] test_too_big
[08:45:58] [PASSED] test_flush
[08:45:58] [PASSED] test_lookup
[08:45:58] [PASSED] test_data
[08:45:58] [PASSED] test_class
[08:45:58] ===================== [PASSED] guc_buf =====================
[08:45:58] =================== guc_dbm (7 subtests) ===================
[08:45:58] [PASSED] test_empty
[08:45:58] [PASSED] test_default
[08:45:58] ======================== test_size ========================
[08:45:58] [PASSED] 4
[08:45:58] [PASSED] 8
[08:45:58] [PASSED] 32
[08:45:58] [PASSED] 256
[08:45:58] ==================== [PASSED] test_size ====================
[08:45:58] ======================= test_reuse ========================
[08:45:58] [PASSED] 4
[08:45:58] [PASSED] 8
[08:45:58] [PASSED] 32
[08:45:58] [PASSED] 256
[08:45:58] =================== [PASSED] test_reuse ====================
[08:45:58] =================== test_range_overlap ====================
[08:45:58] [PASSED] 4
[08:45:58] [PASSED] 8
[08:45:58] [PASSED] 32
[08:45:58] [PASSED] 256
[08:45:58] =============== [PASSED] test_range_overlap ================
[08:45:58] =================== test_range_compact ====================
[08:45:58] [PASSED] 4
[08:45:58] [PASSED] 8
[08:45:58] [PASSED] 32
[08:45:58] [PASSED] 256
[08:45:58] =============== [PASSED] test_range_compact ================
[08:45:58] ==================== test_range_spare =====================
[08:45:58] [PASSED] 4
[08:45:58] [PASSED] 8
[08:45:58] [PASSED] 32
[08:45:58] [PASSED] 256
[08:45:58] ================ [PASSED] test_range_spare =================
[08:45:58] ===================== [PASSED] guc_dbm =====================
[08:45:58] =================== guc_idm (6 subtests) ===================
[08:45:58] [PASSED] bad_init
[08:45:58] [PASSED] no_init
[08:45:58] [PASSED] init_fini
[08:45:58] [PASSED] check_used
[08:45:58] [PASSED] check_quota
[08:45:58] [PASSED] check_all
[08:45:58] ===================== [PASSED] guc_idm =====================
[08:45:58] ================== no_relay (3 subtests) ===================
[08:45:58] [PASSED] xe_drops_guc2pf_if_not_ready
[08:45:58] [PASSED] xe_drops_guc2vf_if_not_ready
[08:45:58] [PASSED] xe_rejects_send_if_not_ready
[08:45:58] ==================== [PASSED] no_relay =====================
[08:45:58] ================== pf_relay (14 subtests) ==================
[08:45:58] [PASSED] pf_rejects_guc2pf_too_short
[08:45:58] [PASSED] pf_rejects_guc2pf_too_long
[08:45:58] [PASSED] pf_rejects_guc2pf_no_payload
[08:45:58] [PASSED] pf_fails_no_payload
[08:45:58] [PASSED] pf_fails_bad_origin
[08:45:58] [PASSED] pf_fails_bad_type
[08:45:58] [PASSED] pf_txn_reports_error
[08:45:58] [PASSED] pf_txn_sends_pf2guc
[08:45:58] [PASSED] pf_sends_pf2guc
[08:45:58] [SKIPPED] pf_loopback_nop (requires CONFIG_DRM_XE_DEBUG_SRIOV)
[08:45:58] [SKIPPED] pf_loopback_echo (requires CONFIG_DRM_XE_DEBUG_SRIOV)
[08:45:58] [SKIPPED] pf_loopback_fail (requires CONFIG_DRM_XE_DEBUG_SRIOV)
[08:45:58] [SKIPPED] pf_loopback_busy (requires CONFIG_DRM_XE_DEBUG_SRIOV)
[08:45:58] [SKIPPED] pf_loopback_retry (requires CONFIG_DRM_XE_DEBUG_SRIOV)
[08:45:58] ==================== [PASSED] pf_relay =====================
[08:45:58] ================== vf_relay (3 subtests) ===================
[08:45:58] [PASSED] vf_rejects_guc2vf_too_short
[08:45:58] [PASSED] vf_rejects_guc2vf_too_long
[08:45:58] [PASSED] vf_rejects_guc2vf_no_payload
[08:45:58] ==================== [PASSED] vf_relay =====================
[08:45:58] ================ pf_gt_config (9 subtests) =================
[08:45:58] [PASSED] fair_contexts_1vf
[08:45:58] [PASSED] fair_doorbells_1vf
[08:45:58] [PASSED] fair_ggtt_1vf
[08:45:58] ====================== fair_vram_1vf ======================
[08:45:58] [PASSED] 3.50 GiB
[08:45:58] [PASSED] 11.5 GiB
[08:45:58] [PASSED] 15.5 GiB
[08:45:58] [PASSED] 31.5 GiB
[08:45:58] [PASSED] 63.5 GiB
[08:45:58] [PASSED] 1.91 GiB
[08:45:58] ================== [PASSED] fair_vram_1vf ==================
[08:45:58] ================ fair_vram_1vf_admin_only =================
[08:45:58] [PASSED] 3.50 GiB
[08:45:58] [PASSED] 11.5 GiB
[08:45:58] [PASSED] 15.5 GiB
[08:45:58] [PASSED] 31.5 GiB
[08:45:58] [PASSED] 63.5 GiB
[08:45:58] [PASSED] 1.91 GiB
[08:45:58] ============ [PASSED] fair_vram_1vf_admin_only =============
[08:45:58] ====================== fair_contexts ======================
[08:45:58] [PASSED] 1 VF
[08:45:58] [PASSED] 2 VFs
[08:45:58] [PASSED] 3 VFs
[08:45:58] [PASSED] 4 VFs
[08:45:58] [PASSED] 5 VFs
[08:45:58] [PASSED] 6 VFs
[08:45:58] [PASSED] 7 VFs
[08:45:58] [PASSED] 8 VFs
[08:45:58] [PASSED] 9 VFs
[08:45:58] [PASSED] 10 VFs
[08:45:58] [PASSED] 11 VFs
[08:45:58] [PASSED] 12 VFs
[08:45:58] [PASSED] 13 VFs
[08:45:58] [PASSED] 14 VFs
[08:45:58] [PASSED] 15 VFs
[08:45:58] [PASSED] 16 VFs
[08:45:58] [PASSED] 17 VFs
[08:45:58] [PASSED] 18 VFs
[08:45:58] [PASSED] 19 VFs
[08:45:58] [PASSED] 20 VFs
[08:45:58] [PASSED] 21 VFs
[08:45:58] [PASSED] 22 VFs
[08:45:58] [PASSED] 23 VFs
[08:45:58] [PASSED] 24 VFs
[08:45:58] [PASSED] 25 VFs
[08:45:58] [PASSED] 26 VFs
[08:45:58] [PASSED] 27 VFs
[08:45:58] [PASSED] 28 VFs
[08:45:58] [PASSED] 29 VFs
[08:45:58] [PASSED] 30 VFs
[08:45:58] [PASSED] 31 VFs
[08:45:58] [PASSED] 32 VFs
[08:45:58] [PASSED] 33 VFs
[08:45:58] [PASSED] 34 VFs
[08:45:58] [PASSED] 35 VFs
[08:45:58] [PASSED] 36 VFs
[08:45:58] [PASSED] 37 VFs
[08:45:58] [PASSED] 38 VFs
[08:45:58] [PASSED] 39 VFs
[08:45:58] [PASSED] 40 VFs
[08:45:58] [PASSED] 41 VFs
[08:45:58] [PASSED] 42 VFs
[08:45:58] [PASSED] 43 VFs
[08:45:58] [PASSED] 44 VFs
[08:45:58] [PASSED] 45 VFs
[08:45:58] [PASSED] 46 VFs
[08:45:58] [PASSED] 47 VFs
[08:45:58] [PASSED] 48 VFs
[08:45:58] [PASSED] 49 VFs
[08:45:58] [PASSED] 50 VFs
[08:45:58] [PASSED] 51 VFs
[08:45:58] [PASSED] 52 VFs
[08:45:58] [PASSED] 53 VFs
[08:45:58] [PASSED] 54 VFs
[08:45:58] [PASSED] 55 VFs
[08:45:58] [PASSED] 56 VFs
[08:45:58] [PASSED] 57 VFs
[08:45:58] [PASSED] 58 VFs
[08:45:58] [PASSED] 59 VFs
[08:45:58] [PASSED] 60 VFs
[08:45:58] [PASSED] 61 VFs
[08:45:58] [PASSED] 62 VFs
[08:45:58] [PASSED] 63 VFs
[08:45:58] ================== [PASSED] fair_contexts ==================
[08:45:58] ===================== fair_doorbells ======================
[08:45:58] [PASSED] 1 VF
[08:45:58] [PASSED] 2 VFs
[08:45:58] [PASSED] 3 VFs
[08:45:58] [PASSED] 4 VFs
[08:45:58] [PASSED] 5 VFs
[08:45:58] [PASSED] 6 VFs
[08:45:58] [PASSED] 7 VFs
[08:45:58] [PASSED] 8 VFs
[08:45:58] [PASSED] 9 VFs
[08:45:58] [PASSED] 10 VFs
[08:45:59] [PASSED] 11 VFs
[08:45:59] [PASSED] 12 VFs
[08:45:59] [PASSED] 13 VFs
[08:45:59] [PASSED] 14 VFs
[08:45:59] [PASSED] 15 VFs
[08:45:59] [PASSED] 16 VFs
[08:45:59] [PASSED] 17 VFs
[08:45:59] [PASSED] 18 VFs
[08:45:59] [PASSED] 19 VFs
[08:45:59] [PASSED] 20 VFs
[08:45:59] [PASSED] 21 VFs
[08:45:59] [PASSED] 22 VFs
[08:45:59] [PASSED] 23 VFs
[08:45:59] [PASSED] 24 VFs
[08:45:59] [PASSED] 25 VFs
[08:45:59] [PASSED] 26 VFs
[08:45:59] [PASSED] 27 VFs
[08:45:59] [PASSED] 28 VFs
[08:45:59] [PASSED] 29 VFs
[08:45:59] [PASSED] 30 VFs
[08:45:59] [PASSED] 31 VFs
[08:45:59] [PASSED] 32 VFs
[08:45:59] [PASSED] 33 VFs
[08:45:59] [PASSED] 34 VFs
[08:45:59] [PASSED] 35 VFs
[08:45:59] [PASSED] 36 VFs
[08:45:59] [PASSED] 37 VFs
[08:45:59] [PASSED] 38 VFs
[08:45:59] [PASSED] 39 VFs
[08:45:59] [PASSED] 40 VFs
[08:45:59] [PASSED] 41 VFs
[08:45:59] [PASSED] 42 VFs
[08:45:59] [PASSED] 43 VFs
[08:45:59] [PASSED] 44 VFs
[08:45:59] [PASSED] 45 VFs
[08:45:59] [PASSED] 46 VFs
[08:45:59] [PASSED] 47 VFs
[08:45:59] [PASSED] 48 VFs
[08:45:59] [PASSED] 49 VFs
[08:45:59] [PASSED] 50 VFs
[08:45:59] [PASSED] 51 VFs
[08:45:59] [PASSED] 52 VFs
[08:45:59] [PASSED] 53 VFs
[08:45:59] [PASSED] 54 VFs
[08:45:59] [PASSED] 55 VFs
[08:45:59] [PASSED] 56 VFs
[08:45:59] [PASSED] 57 VFs
[08:45:59] [PASSED] 58 VFs
[08:45:59] [PASSED] 59 VFs
[08:45:59] [PASSED] 60 VFs
[08:45:59] [PASSED] 61 VFs
[08:45:59] [PASSED] 62 VFs
[08:45:59] [PASSED] 63 VFs
[08:45:59] ================= [PASSED] fair_doorbells ==================
[08:45:59] ======================== fair_ggtt ========================
[08:45:59] [PASSED] 1 VF
[08:45:59] [PASSED] 2 VFs
[08:45:59] [PASSED] 3 VFs
[08:45:59] [PASSED] 4 VFs
[08:45:59] [PASSED] 5 VFs
[08:45:59] [PASSED] 6 VFs
[08:45:59] [PASSED] 7 VFs
[08:45:59] [PASSED] 8 VFs
[08:45:59] [PASSED] 9 VFs
[08:45:59] [PASSED] 10 VFs
[08:45:59] [PASSED] 11 VFs
[08:45:59] [PASSED] 12 VFs
[08:45:59] [PASSED] 13 VFs
[08:45:59] [PASSED] 14 VFs
[08:45:59] [PASSED] 15 VFs
[08:45:59] [PASSED] 16 VFs
[08:45:59] [PASSED] 17 VFs
[08:45:59] [PASSED] 18 VFs
[08:45:59] [PASSED] 19 VFs
[08:45:59] [PASSED] 20 VFs
[08:45:59] [PASSED] 21 VFs
[08:45:59] [PASSED] 22 VFs
[08:45:59] [PASSED] 23 VFs
[08:45:59] [PASSED] 24 VFs
[08:45:59] [PASSED] 25 VFs
[08:45:59] [PASSED] 26 VFs
[08:45:59] [PASSED] 27 VFs
[08:45:59] [PASSED] 28 VFs
[08:45:59] [PASSED] 29 VFs
[08:45:59] [PASSED] 30 VFs
[08:45:59] [PASSED] 31 VFs
[08:45:59] [PASSED] 32 VFs
[08:45:59] [PASSED] 33 VFs
[08:45:59] [PASSED] 34 VFs
[08:45:59] [PASSED] 35 VFs
[08:45:59] [PASSED] 36 VFs
[08:45:59] [PASSED] 37 VFs
[08:45:59] [PASSED] 38 VFs
[08:45:59] [PASSED] 39 VFs
[08:45:59] [PASSED] 40 VFs
[08:45:59] [PASSED] 41 VFs
[08:45:59] [PASSED] 42 VFs
[08:45:59] [PASSED] 43 VFs
[08:45:59] [PASSED] 44 VFs
[08:45:59] [PASSED] 45 VFs
[08:45:59] [PASSED] 46 VFs
[08:45:59] [PASSED] 47 VFs
[08:45:59] [PASSED] 48 VFs
[08:45:59] [PASSED] 49 VFs
[08:45:59] [PASSED] 50 VFs
[08:45:59] [PASSED] 51 VFs
[08:45:59] [PASSED] 52 VFs
[08:45:59] [PASSED] 53 VFs
[08:45:59] [PASSED] 54 VFs
[08:45:59] [PASSED] 55 VFs
[08:45:59] [PASSED] 56 VFs
[08:45:59] [PASSED] 57 VFs
[08:45:59] [PASSED] 58 VFs
[08:45:59] [PASSED] 59 VFs
[08:45:59] [PASSED] 60 VFs
[08:45:59] [PASSED] 61 VFs
[08:45:59] [PASSED] 62 VFs
[08:45:59] [PASSED] 63 VFs
[08:45:59] ==================== [PASSED] fair_ggtt ====================
[08:45:59] ======================== fair_vram ========================
[08:45:59] [PASSED] 1 VF
[08:45:59] [PASSED] 2 VFs
[08:45:59] [PASSED] 3 VFs
[08:45:59] [PASSED] 4 VFs
[08:45:59] [PASSED] 5 VFs
[08:45:59] [PASSED] 6 VFs
[08:45:59] [PASSED] 7 VFs
[08:45:59] [PASSED] 8 VFs
[08:45:59] [PASSED] 9 VFs
[08:45:59] [PASSED] 10 VFs
[08:45:59] [PASSED] 11 VFs
[08:45:59] [PASSED] 12 VFs
[08:45:59] [PASSED] 13 VFs
[08:45:59] [PASSED] 14 VFs
[08:45:59] [PASSED] 15 VFs
[08:45:59] [PASSED] 16 VFs
[08:45:59] [PASSED] 17 VFs
[08:45:59] [PASSED] 18 VFs
[08:45:59] [PASSED] 19 VFs
[08:45:59] [PASSED] 20 VFs
[08:45:59] [PASSED] 21 VFs
[08:45:59] [PASSED] 22 VFs
[08:45:59] [PASSED] 23 VFs
[08:45:59] [PASSED] 24 VFs
[08:45:59] [PASSED] 25 VFs
[08:45:59] [PASSED] 26 VFs
[08:45:59] [PASSED] 27 VFs
[08:45:59] [PASSED] 28 VFs
[08:45:59] [PASSED] 29 VFs
[08:45:59] [PASSED] 30 VFs
[08:45:59] [PASSED] 31 VFs
[08:45:59] [PASSED] 32 VFs
[08:45:59] [PASSED] 33 VFs
[08:45:59] [PASSED] 34 VFs
[08:45:59] [PASSED] 35 VFs
[08:45:59] [PASSED] 36 VFs
[08:45:59] [PASSED] 37 VFs
[08:45:59] [PASSED] 38 VFs
[08:45:59] [PASSED] 39 VFs
[08:45:59] [PASSED] 40 VFs
[08:45:59] [PASSED] 41 VFs
[08:45:59] [PASSED] 42 VFs
[08:45:59] [PASSED] 43 VFs
[08:45:59] [PASSED] 44 VFs
[08:45:59] [PASSED] 45 VFs
[08:45:59] [PASSED] 46 VFs
[08:45:59] [PASSED] 47 VFs
[08:45:59] [PASSED] 48 VFs
[08:45:59] [PASSED] 49 VFs
[08:45:59] [PASSED] 50 VFs
[08:45:59] [PASSED] 51 VFs
[08:45:59] [PASSED] 52 VFs
[08:45:59] [PASSED] 53 VFs
[08:45:59] [PASSED] 54 VFs
[08:45:59] [PASSED] 55 VFs
[08:45:59] [PASSED] 56 VFs
[08:45:59] [PASSED] 57 VFs
[08:45:59] [PASSED] 58 VFs
[08:45:59] [PASSED] 59 VFs
[08:45:59] [PASSED] 60 VFs
[08:45:59] [PASSED] 61 VFs
[08:45:59] [PASSED] 62 VFs
[08:45:59] [PASSED] 63 VFs
[08:45:59] ==================== [PASSED] fair_vram ====================
[08:45:59] ================== [PASSED] pf_gt_config ===================
[08:45:59] ===================== lmtt (1 subtest) =====================
[08:45:59] ======================== test_ops =========================
[08:45:59] [PASSED] 2-level
[08:45:59] [PASSED] multi-level
[08:45:59] ==================== [PASSED] test_ops =====================
[08:45:59] ====================== [PASSED] lmtt =======================
[08:45:59] ================= pf_service (11 subtests) =================
[08:45:59] [PASSED] pf_negotiate_any
[08:45:59] [PASSED] pf_negotiate_base_match
[08:45:59] [PASSED] pf_negotiate_base_newer
[08:45:59] [PASSED] pf_negotiate_base_next
[08:45:59] [SKIPPED] pf_negotiate_base_older (no older minor)
[08:45:59] [PASSED] pf_negotiate_base_prev
[08:45:59] [PASSED] pf_negotiate_latest_match
[08:45:59] [PASSED] pf_negotiate_latest_newer
[08:45:59] [PASSED] pf_negotiate_latest_next
[08:45:59] [SKIPPED] pf_negotiate_latest_older (no older minor)
[08:45:59] [SKIPPED] pf_negotiate_latest_prev (no prev major)
[08:45:59] =================== [PASSED] pf_service ====================
[08:45:59] ================= xe_guc_g2g (2 subtests) ==================
[08:45:59] ============== xe_live_guc_g2g_kunit_default ==============
[08:45:59] ========= [SKIPPED] xe_live_guc_g2g_kunit_default ==========
[08:45:59] ============== xe_live_guc_g2g_kunit_allmem ===============
[08:45:59] ========== [SKIPPED] xe_live_guc_g2g_kunit_allmem ==========
[08:45:59] =================== [SKIPPED] xe_guc_g2g ===================
[08:45:59] =================== xe_mocs (2 subtests) ===================
[08:45:59] ================ xe_live_mocs_kernel_kunit ================
[08:45:59] =========== [SKIPPED] xe_live_mocs_kernel_kunit ============
[08:45:59] ================ xe_live_mocs_reset_kunit =================
[08:45:59] ============ [SKIPPED] xe_live_mocs_reset_kunit ============
[08:45:59] ==================== [SKIPPED] xe_mocs =====================
[08:45:59] ================= xe_migrate (2 subtests) ==================
[08:45:59] ================= xe_migrate_sanity_kunit =================
[08:45:59] ============ [SKIPPED] xe_migrate_sanity_kunit =============
[08:45:59] ================== xe_validate_ccs_kunit ==================
[08:45:59] ============= [SKIPPED] xe_validate_ccs_kunit ==============
[08:45:59] =================== [SKIPPED] xe_migrate ===================
[08:45:59] ================== xe_dma_buf (1 subtest) ==================
[08:45:59] ==================== xe_dma_buf_kunit =====================
[08:45:59] ================ [SKIPPED] xe_dma_buf_kunit ================
[08:45:59] =================== [SKIPPED] xe_dma_buf ===================
[08:45:59] ================= xe_bo_shrink (1 subtest) =================
[08:45:59] =================== xe_bo_shrink_kunit ====================
[08:45:59] =============== [SKIPPED] xe_bo_shrink_kunit ===============
[08:45:59] ================== [SKIPPED] xe_bo_shrink ==================
[08:45:59] ==================== xe_bo (2 subtests) ====================
[08:45:59] ================== xe_ccs_migrate_kunit ===================
[08:45:59] ============== [SKIPPED] xe_ccs_migrate_kunit ==============
[08:45:59] ==================== xe_bo_evict_kunit ====================
[08:45:59] =============== [SKIPPED] xe_bo_evict_kunit ================
[08:45:59] ===================== [SKIPPED] xe_bo ======================
[08:45:59] ==================== args (13 subtests) ====================
[08:45:59] [PASSED] count_args_test
[08:45:59] [PASSED] call_args_example
[08:45:59] [PASSED] call_args_test
[08:45:59] [PASSED] drop_first_arg_example
[08:45:59] [PASSED] drop_first_arg_test
[08:45:59] [PASSED] first_arg_example
[08:45:59] [PASSED] first_arg_test
[08:45:59] [PASSED] last_arg_example
[08:45:59] [PASSED] last_arg_test
[08:45:59] [PASSED] pick_arg_example
[08:45:59] [PASSED] if_args_example
[08:45:59] [PASSED] if_args_test
[08:45:59] [PASSED] sep_comma_example
[08:45:59] ====================== [PASSED] args =======================
[08:45:59] =================== xe_pci (3 subtests) ====================
[08:45:59] ==================== check_graphics_ip ====================
[08:45:59] [PASSED] 12.00 Xe_LP
[08:45:59] [PASSED] 12.10 Xe_LP+
[08:45:59] [PASSED] 12.55 Xe_HPG
[08:45:59] [PASSED] 12.60 Xe_HPC
[08:45:59] [PASSED] 12.70 Xe_LPG
[08:45:59] [PASSED] 12.71 Xe_LPG
[08:45:59] [PASSED] 12.74 Xe_LPG+
[08:45:59] [PASSED] 20.01 Xe2_HPG
[08:45:59] [PASSED] 20.02 Xe2_HPG
[08:45:59] [PASSED] 20.04 Xe2_LPG
[08:45:59] [PASSED] 30.00 Xe3_LPG
[08:45:59] [PASSED] 30.01 Xe3_LPG
[08:45:59] [PASSED] 30.03 Xe3_LPG
[08:45:59] [PASSED] 30.04 Xe3_LPG
[08:45:59] [PASSED] 30.05 Xe3_LPG
[08:45:59] [PASSED] 35.10 Xe3p_LPG
[08:45:59] [PASSED] 35.11 Xe3p_XPC
[08:45:59] ================ [PASSED] check_graphics_ip ================
[08:45:59] ===================== check_media_ip ======================
[08:45:59] [PASSED] 12.00 Xe_M
[08:45:59] [PASSED] 12.55 Xe_HPM
[08:45:59] [PASSED] 13.00 Xe_LPM+
[08:45:59] [PASSED] 13.01 Xe2_HPM
[08:45:59] [PASSED] 20.00 Xe2_LPM
[08:45:59] [PASSED] 30.00 Xe3_LPM
[08:45:59] [PASSED] 30.02 Xe3_LPM
[08:45:59] [PASSED] 35.00 Xe3p_LPM
[08:45:59] [PASSED] 35.03 Xe3p_HPM
[08:45:59] ================= [PASSED] check_media_ip ==================
[08:45:59] =================== check_platform_desc ===================
[08:45:59] [PASSED] 0x9A60 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A68 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A70 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A40 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A49 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A59 (TIGERLAKE)
[08:45:59] [PASSED] 0x9A78 (TIGERLAKE)
[08:45:59] [PASSED] 0x9AC0 (TIGERLAKE)
[08:45:59] [PASSED] 0x9AC9 (TIGERLAKE)
[08:45:59] [PASSED] 0x9AD9 (TIGERLAKE)
[08:45:59] [PASSED] 0x9AF8 (TIGERLAKE)
[08:45:59] [PASSED] 0x4C80 (ROCKETLAKE)
[08:45:59] [PASSED] 0x4C8A (ROCKETLAKE)
[08:45:59] [PASSED] 0x4C8B (ROCKETLAKE)
[08:45:59] [PASSED] 0x4C8C (ROCKETLAKE)
[08:45:59] [PASSED] 0x4C90 (ROCKETLAKE)
[08:45:59] [PASSED] 0x4C9A (ROCKETLAKE)
[08:45:59] [PASSED] 0x4680 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4682 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4688 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x468A (ALDERLAKE_S)
[08:45:59] [PASSED] 0x468B (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4690 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4692 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4693 (ALDERLAKE_S)
[08:45:59] [PASSED] 0x46A0 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46A1 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46A2 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46A3 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46A6 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46A8 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46AA (ALDERLAKE_P)
[08:45:59] [PASSED] 0x462A (ALDERLAKE_P)
[08:45:59] [PASSED] 0x4626 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x4628 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46B0 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46B1 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46B2 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46B3 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46C0 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46C1 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46C2 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46C3 (ALDERLAKE_P)
[08:45:59] [PASSED] 0x46D0 (ALDERLAKE_N)
[08:45:59] [PASSED] 0x46D1 (ALDERLAKE_N)
[08:45:59] [PASSED] 0x46D2 (ALDERLAKE_N)
[08:45:59] [PASSED] 0x46D3 (ALDERLAKE_N)
[08:45:59] [PASSED] 0x46D4 (ALDERLAKE_N)
[08:45:59] [PASSED] 0xA721 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7A1 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7A9 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7AC (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7AD (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA720 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7A0 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7A8 (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7AA (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA7AB (ALDERLAKE_P)
[08:45:59] [PASSED] 0xA780 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA781 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA782 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA783 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA788 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA789 (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA78A (ALDERLAKE_S)
[08:45:59] [PASSED] 0xA78B (ALDERLAKE_S)
[08:45:59] [PASSED] 0x4905 (DG1)
[08:45:59] [PASSED] 0x4906 (DG1)
[08:45:59] [PASSED] 0x4907 (DG1)
[08:45:59] [PASSED] 0x4908 (DG1)
[08:45:59] [PASSED] 0x4909 (DG1)
[08:45:59] [PASSED] 0x56C0 (DG2)
[08:45:59] [PASSED] 0x56C2 (DG2)
[08:45:59] [PASSED] 0x56C1 (DG2)
[08:45:59] [PASSED] 0x7D51 (METEORLAKE)
[08:45:59] [PASSED] 0x7DD1 (METEORLAKE)
[08:45:59] [PASSED] 0x7D41 (METEORLAKE)
[08:45:59] [PASSED] 0x7D67 (METEORLAKE)
[08:45:59] [PASSED] 0xB640 (METEORLAKE)
[08:45:59] [PASSED] 0x56A0 (DG2)
[08:45:59] [PASSED] 0x56A1 (DG2)
[08:45:59] [PASSED] 0x56A2 (DG2)
[08:45:59] [PASSED] 0x56BE (DG2)
[08:45:59] [PASSED] 0x56BF (DG2)
[08:45:59] [PASSED] 0x5690 (DG2)
[08:45:59] [PASSED] 0x5691 (DG2)
[08:45:59] [PASSED] 0x5692 (DG2)
[08:45:59] [PASSED] 0x56A5 (DG2)
[08:45:59] [PASSED] 0x56A6 (DG2)
[08:45:59] [PASSED] 0x56B0 (DG2)
[08:45:59] [PASSED] 0x56B1 (DG2)
[08:45:59] [PASSED] 0x56BA (DG2)
[08:45:59] [PASSED] 0x56BB (DG2)
[08:45:59] [PASSED] 0x56BC (DG2)
[08:45:59] [PASSED] 0x56BD (DG2)
[08:45:59] [PASSED] 0x5693 (DG2)
[08:45:59] [PASSED] 0x5694 (DG2)
[08:45:59] [PASSED] 0x5695 (DG2)
[08:45:59] [PASSED] 0x56A3 (DG2)
[08:45:59] [PASSED] 0x56A4 (DG2)
[08:45:59] [PASSED] 0x56B2 (DG2)
[08:45:59] [PASSED] 0x56B3 (DG2)
[08:45:59] [PASSED] 0x5696 (DG2)
[08:45:59] [PASSED] 0x5697 (DG2)
[08:45:59] [PASSED] 0xB69 (PVC)
[08:45:59] [PASSED] 0xB6E (PVC)
[08:45:59] [PASSED] 0xBD4 (PVC)
[08:45:59] [PASSED] 0xBD5 (PVC)
[08:45:59] [PASSED] 0xBD6 (PVC)
[08:45:59] [PASSED] 0xBD7 (PVC)
[08:45:59] [PASSED] 0xBD8 (PVC)
[08:45:59] [PASSED] 0xBD9 (PVC)
[08:45:59] [PASSED] 0xBDA (PVC)
[08:45:59] [PASSED] 0xBDB (PVC)
[08:45:59] [PASSED] 0xBE0 (PVC)
[08:45:59] [PASSED] 0xBE1 (PVC)
[08:45:59] [PASSED] 0xBE5 (PVC)
[08:45:59] [PASSED] 0x7D40 (METEORLAKE)
[08:45:59] [PASSED] 0x7D45 (METEORLAKE)
[08:45:59] [PASSED] 0x7D55 (METEORLAKE)
[08:45:59] [PASSED] 0x7D60 (METEORLAKE)
[08:45:59] [PASSED] 0x7DD5 (METEORLAKE)
[08:45:59] [PASSED] 0x6420 (LUNARLAKE)
[08:45:59] [PASSED] 0x64A0 (LUNARLAKE)
[08:45:59] [PASSED] 0x64B0 (LUNARLAKE)
[08:45:59] [PASSED] 0xE202 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE209 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE20B (BATTLEMAGE)
[08:45:59] [PASSED] 0xE20C (BATTLEMAGE)
[08:45:59] [PASSED] 0xE20D (BATTLEMAGE)
[08:45:59] [PASSED] 0xE210 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE211 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE212 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE216 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE220 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE221 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE222 (BATTLEMAGE)
[08:45:59] [PASSED] 0xE223 (BATTLEMAGE)
[08:45:59] [PASSED] 0xB080 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB081 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB082 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB083 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB084 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB085 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB086 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB087 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB08F (PANTHERLAKE)
[08:45:59] [PASSED] 0xB090 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB0A0 (PANTHERLAKE)
[08:45:59] [PASSED] 0xB0B0 (PANTHERLAKE)
[08:45:59] [PASSED] 0xFD80 (PANTHERLAKE)
[08:45:59] [PASSED] 0xFD81 (PANTHERLAKE)
[08:45:59] [PASSED] 0xD740 (NOVALAKE_S)
[08:45:59] [PASSED] 0xD741 (NOVALAKE_S)
[08:45:59] [PASSED] 0xD742 (NOVALAKE_S)
[08:45:59] [PASSED] 0xD743 (NOVALAKE_S)
[08:45:59] [PASSED] 0xD745 (NOVALAKE_S)
[08:45:59] [PASSED] 0xD74A (NOVALAKE_S)
[08:45:59] [PASSED] 0xD74B (NOVALAKE_S)
[08:45:59] [PASSED] 0x674C (CRESCENTISLAND)
[08:45:59] [PASSED] 0x674D (CRESCENTISLAND)
[08:45:59] [PASSED] 0x674E (CRESCENTISLAND)
[08:45:59] [PASSED] 0x674F (CRESCENTISLAND)
[08:45:59] [PASSED] 0x6750 (CRESCENTISLAND)
[08:45:59] [PASSED] 0xD750 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD751 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD752 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD753 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD754 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD755 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD756 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD757 (NOVALAKE_P)
[08:45:59] [PASSED] 0xD75F (NOVALAKE_P)
[08:45:59] =============== [PASSED] check_platform_desc ===============
[08:45:59] ===================== [PASSED] xe_pci ======================
[08:45:59] ============= xe_rtp_tables_test (5 subtests) ==============
[08:45:59] ================== xe_rtp_table_gt_test ===================
[08:45:59] [PASSED] gt_was/14011060649
[08:45:59] [PASSED] gt_was/14011059788
[08:45:59] [PASSED] gt_was/14015795083
[08:45:59] [PASSED] gt_was/16021867713
[08:45:59] [PASSED] gt_was/14019449301
[08:45:59] [PASSED] gt_was/16028005424
[08:45:59] [PASSED] gt_was/14026578760
[08:45:59] [PASSED] gt_was/1409420604
[08:45:59] [PASSED] gt_was/1408615072
[08:45:59] [PASSED] gt_was/22010523718
[08:45:59] [PASSED] gt_was/14011006942
[08:45:59] [PASSED] gt_was/14014830051
[08:45:59] [PASSED] gt_was/18018781329
[08:45:59] [PASSED] gt_was/1509235366
[08:45:59] [PASSED] gt_was/18018781329
[08:45:59] [PASSED] gt_was/16016694945
[08:45:59] [PASSED] gt_was/14018575942
[08:45:59] [PASSED] gt_was/22016670082
[08:45:59] [PASSED] gt_was/22016670082
[08:45:59] [PASSED] gt_was/14017421178
[08:45:59] [PASSED] gt_was/16025250150
[08:45:59] [PASSED] gt_was/14021871409
[08:45:59] [PASSED] gt_was/16021865536
[08:45:59] [PASSED] gt_was/14021486841
[08:45:59] [PASSED] gt_was/14025160223
[08:45:59] [PASSED] gt_was/14026144927, 16029437861, 14026127056
[08:45:59] [PASSED] gt_was/14025635424
[08:45:59] [PASSED] gt_was/16028005424
[08:45:59] ============== [PASSED] xe_rtp_table_gt_test ===============
[08:45:59] ================== xe_rtp_table_gt_test ===================
[08:45:59] [PASSED] gt_tunings/Tuning: Blend Fill Caching Optimization Disable
[08:45:59] [PASSED] gt_tunings/Tuning: 32B Access Enable
[08:45:59] [PASSED] gt_tunings/Tuning: L3 cache
[08:45:59] [PASSED] gt_tunings/Tuning: L3 cache - media
[08:45:59] [PASSED] gt_tunings/Tuning: Compression Overfetch
[08:45:59] [PASSED] gt_tunings/Tuning: Compression Overfetch - media
[08:45:59] [PASSED] gt_tunings/Tuning: Enable compressible partial write overfetch in L3
[08:45:59] [PASSED] gt_tunings/Tuning: Enable compressible partial write overfetch in L3 - media
[08:45:59] [PASSED] gt_tunings/Tuning: L2 Overfetch Compressible Only
[08:45:59] [PASSED] gt_tunings/Tuning: L2 Overfetch Compressible Only - media
[08:45:59] [PASSED] gt_tunings/Tuning: Stateless compression control
[08:45:59] [PASSED] gt_tunings/Tuning: Stateless compression control - media
[08:45:59] [PASSED] gt_tunings/Tuning: L3 RW flush all Cache
[08:45:59] [PASSED] gt_tunings/Tuning: L3 RW flush all cache - media
[08:45:59] [PASSED] gt_tunings/Tuning: Set STLB Bank Hash Mode to 4KB
[08:45:59] ============== [PASSED] xe_rtp_table_gt_test ===============
[08:45:59] ================== xe_rtp_table_oob_test ==================
[08:45:59] [PASSED] oob_was/1607983814
[08:45:59] [PASSED] oob_was/16010904313
[08:45:59] [PASSED] oob_was/18022495364
[08:45:59] [PASSED] oob_was/22012773006
[08:45:59] [PASSED] oob_was/14014475959
[08:45:59] [PASSED] oob_was/22011391025
[08:45:59] [PASSED] oob_was/22012727170
[08:45:59] [PASSED] oob_was/22012727685
[08:45:59] [PASSED] oob_was/22016596838
[08:45:59] [PASSED] oob_was/18020744125
[08:45:59] [PASSED] oob_was/1409600907
[08:45:59] [PASSED] oob_was/22014953428
[08:45:59] [PASSED] oob_was/16017236439
[08:45:59] [PASSED] oob_was/14019821291
[08:45:59] [PASSED] oob_was/14015076503
[08:45:59] [PASSED] oob_was/14018913170
[08:45:59] [PASSED] oob_was/14018094691
[08:45:59] [PASSED] oob_was/18024947630
[08:45:59] [PASSED] oob_was/16022287689
[08:45:59] [PASSED] oob_was/13011645652
[08:45:59] [PASSED] oob_was/14022293748
[08:45:59] [PASSED] oob_was/22019794406
[08:45:59] [PASSED] oob_was/22019338487
[08:45:59] [PASSED] oob_was/16023588340
[08:45:59] [PASSED] oob_was/14019789679
[08:45:59] [PASSED] oob_was/14022866841
[08:45:59] [PASSED] oob_was/16021333562
[08:45:59] [PASSED] oob_was/14016712196
[08:45:59] [PASSED] oob_was/14015568240
[08:45:59] [PASSED] oob_was/18013179988
[08:45:59] [PASSED] oob_was/1508761755
[08:45:59] [PASSED] oob_was/16023105232
[08:45:59] [PASSED] oob_was/16026508708
[08:45:59] [PASSED] oob_was/14020001231
[08:45:59] [PASSED] oob_was/16023683509
[08:45:59] [PASSED] oob_was/14025515070
[08:45:59] [PASSED] oob_was/15015404425_disable
[08:45:59] [PASSED] oob_was/16026007364
[08:45:59] [PASSED] oob_was/14020316580
[08:45:59] [PASSED] oob_was/14025883347
[08:45:59] [PASSED] oob_was/16029380221
[08:45:59] ============== [PASSED] xe_rtp_table_oob_test ==============
[08:45:59] ================ xe_rtp_table_dev_oob_test ================
[08:45:59] [PASSED] device_oob_was/22010954014
[08:45:59] [PASSED] device_oob_was/15015404425
[08:45:59] [PASSED] device_oob_was/22019338487_display
[08:45:59] [PASSED] device_oob_was/14022085890
[08:45:59] [PASSED] device_oob_was/14026539277
[08:45:59] [PASSED] device_oob_was/14026633728
[08:45:59] [PASSED] device_oob_was/14026746987
[08:45:59] [PASSED] device_oob_was/14026779378
[08:45:59] ============ [PASSED] xe_rtp_table_dev_oob_test ============
[08:45:59] ========== xe_rtp_table_missing_upper_bound_test ==========
[08:45:59] [PASSED] register_whitelist/WaAllowPMDepthAndInvocationCountAccessFromUMD, 1408556865
[08:45:59] [PASSED] register_whitelist/1508744258, 14012131227, 1808121037
[08:45:59] [PASSED] register_whitelist/1806527549
[08:45:59] [PASSED] register_whitelist/allow_read_ctx_timestamp
[08:45:59] [PASSED] register_whitelist/allow_read_queue_timestamp
[08:45:59] [PASSED] register_whitelist/16014440446
[08:45:59] [PASSED] register_whitelist/16017236439
[08:45:59] [PASSED] register_whitelist/16020183090
[08:45:59] [PASSED] register_whitelist/14024997852
[08:45:59] [PASSED] register_whitelist/14024997852
[08:45:59] ====== [PASSED] xe_rtp_table_missing_upper_bound_test ======
[08:45:59] =============== [PASSED] xe_rtp_tables_test ================
[08:45:59] =================== xe_rtp (3 subtests) ====================
[08:45:59] =================== xe_rtp_rules_tests ====================
[08:45:59] [PASSED] no
[08:45:59] [PASSED] yes
[08:45:59] [PASSED] no-and-no
[08:45:59] [PASSED] no-and-yes
[08:45:59] [PASSED] yes-and-no
[08:45:59] [PASSED] yes-and-yes
[08:45:59] [PASSED] no-or-no
[08:45:59] [PASSED] no-or-yes
[08:45:59] [PASSED] yes-or-no
[08:45:59] [PASSED] yes-or-yes
[08:45:59] [PASSED] no-yes-or-yes-no
[08:45:59] [PASSED] no-yes-or-yes-yes
[08:45:59] [PASSED] yes-yes-or-no-yes
[08:45:59] [PASSED] yes-yes-or-yes-yes
[08:45:59] [PASSED] no-no-or-yes-or-no
[08:45:59] [PASSED] or
[08:45:59] [PASSED] or-yes
[08:45:59] [PASSED] or-no
[08:45:59] [PASSED] yes-or
[08:45:59] [PASSED] no-or
[08:45:59] [PASSED] no-or-or-yes
[08:45:59] [PASSED] yes-or-or-no
[08:45:59] [PASSED] no-or-or-no
[08:45:59] [PASSED] missing-context-engine-class
[08:45:59] [PASSED] missing-context-engine-class-or-yes
[08:45:59] [PASSED] missing-context-engine-class-or-or-yes
[08:45:59] =============== [PASSED] xe_rtp_rules_tests ================
[08:45:59] =============== xe_rtp_process_to_sr_tests ================
[08:45:59] [PASSED] coalesce-same-reg
[08:45:59] [PASSED] coalesce-same-reg-literal-and-func
[08:45:59] [PASSED] no-match-no-add
[08:45:59] [PASSED] two-regs-two-entries
[08:45:59] [PASSED] clr-one-set-other
[08:45:59] [PASSED] set-field
[08:45:59] [PASSED] conflict-duplicate
[08:45:59] [PASSED] conflict-not-disjoint
[08:45:59] [PASSED] conflict-not-disjoint-literal-and-func
[08:45:59] [PASSED] conflict-reg-type
[08:45:59] [PASSED] bad-mcr-reg-forced-to-regular
[08:45:59] [PASSED] bad-regular-reg-forced-to-mcr
[08:45:59] =========== [PASSED] xe_rtp_process_to_sr_tests ============
[08:45:59] ================== xe_rtp_process_tests ===================
[08:45:59] [PASSED] active1
[08:45:59] [PASSED] active2
[08:45:59] [PASSED] active-inactive
[08:45:59] [PASSED] inactive-active
[08:45:59] [PASSED] inactive-active-inactive
[08:45:59] [PASSED] inactive-inactive-inactive
[08:45:59] ============== [PASSED] xe_rtp_process_tests ===============
[08:45:59] ===================== [PASSED] xe_rtp ======================
[08:45:59] ==================== xe_wa (1 subtest) =====================
[08:45:59] ======================== xe_wa_gt =========================
[08:45:59] [PASSED] TIGERLAKE B0
[08:45:59] [PASSED] DG1 A0
[08:45:59] [PASSED] DG1 B0
[08:45:59] [PASSED] ALDERLAKE_S A0
[08:45:59] [PASSED] ALDERLAKE_S B0
[08:45:59] [PASSED] ALDERLAKE_S C0
[08:45:59] [PASSED] ALDERLAKE_S D0
[08:45:59] [PASSED] ALDERLAKE_P A0
[08:45:59] [PASSED] ALDERLAKE_P B0
[08:45:59] [PASSED] ALDERLAKE_P C0
[08:45:59] [PASSED] ALDERLAKE_S RPLS D0
[08:45:59] [PASSED] ALDERLAKE_P RPLU E0
[08:45:59] [PASSED] DG2 G10 C0
[08:45:59] [PASSED] DG2 G11 B1
[08:45:59] [PASSED] DG2 G12 A1
[08:45:59] [PASSED] METEORLAKE 12.70(Xe_LPG) A0 13.00(Xe_LPM+) A0
[08:45:59] [PASSED] METEORLAKE 12.71(Xe_LPG) A0 13.00(Xe_LPM+) A0
[08:45:59] [PASSED] METEORLAKE 12.74(Xe_LPG+) A0 13.00(Xe_LPM+) A0
[08:45:59] [PASSED] LUNARLAKE 20.04(Xe2_LPG) A0 20.00(Xe2_LPM) A0
[08:45:59] [PASSED] LUNARLAKE 20.04(Xe2_LPG) B0 20.00(Xe2_LPM) A0
[08:45:59] [PASSED] BATTLEMAGE 20.01(Xe2_HPG) A0 13.01(Xe2_HPM) A1
[08:45:59] [PASSED] PANTHERLAKE 30.00(Xe3_LPG) A0 30.00(Xe3_LPM) A0
[08:45:59] ==================== [PASSED] xe_wa_gt =====================
[08:45:59] ====================== [PASSED] xe_wa ======================
[08:45:59] ============================================================
[08:45:59] Testing complete. Ran 729 tests: passed: 711, skipped: 18
[08:45:59] Elapsed time: 36.726s total, 4.468s configuring, 31.592s building, 0.639s running
+ /kernel/tools/testing/kunit/kunit.py run --kunitconfig /kernel/drivers/gpu/drm/tests/.kunitconfig
[08:45:59] Configuring KUnit Kernel ...
Regenerating .config ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
[08:46:01] Building KUnit Kernel ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
Building with:
$ make all compile_commands.json scripts_gdb ARCH=um O=.kunit --jobs=48
[08:46:25] Starting KUnit Kernel (1/1)...
[08:46:25] ============================================================
Running tests with:
$ .kunit/linux kunit.enable=1 mem=1G console=tty kunit_shutdown=halt
[08:46:26] ============ drm_test_pick_cmdline (2 subtests) ============
[08:46:26] [PASSED] drm_test_pick_cmdline_res_1920_1080_60
[08:46:26] =============== drm_test_pick_cmdline_named ===============
[08:46:26] [PASSED] NTSC
[08:46:26] [PASSED] NTSC-J
[08:46:26] [PASSED] PAL
[08:46:26] [PASSED] PAL-M
[08:46:26] =========== [PASSED] drm_test_pick_cmdline_named ===========
[08:46:26] ============== [PASSED] drm_test_pick_cmdline ==============
[08:46:26] == drm_test_atomic_get_connector_for_encoder (1 subtest) ===
[08:46:26] [PASSED] drm_test_drm_atomic_get_connector_for_encoder
[08:46:26] ==== [PASSED] drm_test_atomic_get_connector_for_encoder ====
[08:46:26] =========== drm_validate_clone_mode (2 subtests) ===========
[08:46:26] ============== drm_test_check_in_clone_mode ===============
[08:46:26] [PASSED] in_clone_mode
[08:46:26] [PASSED] not_in_clone_mode
[08:46:26] ========== [PASSED] drm_test_check_in_clone_mode ===========
[08:46:26] =============== drm_test_check_valid_clones ===============
[08:46:26] [PASSED] not_in_clone_mode
[08:46:26] [PASSED] valid_clone
[08:46:26] [PASSED] invalid_clone
[08:46:26] =========== [PASSED] drm_test_check_valid_clones ===========
[08:46:26] ============= [PASSED] drm_validate_clone_mode =============
[08:46:26] ============= drm_validate_modeset (1 subtest) =============
[08:46:26] [PASSED] drm_test_check_connector_changed_modeset
[08:46:26] ============== [PASSED] drm_validate_modeset ===============
[08:46:26] ====== drm_test_bridge_get_current_state (2 subtests) ======
[08:46:26] [PASSED] drm_test_drm_bridge_get_current_state_atomic
[08:46:26] [PASSED] drm_test_drm_bridge_get_current_state_legacy
[08:46:26] ======== [PASSED] drm_test_bridge_get_current_state ========
[08:46:26] ====== drm_test_bridge_helper_reset_crtc (4 subtests) ======
[08:46:26] [PASSED] drm_test_drm_bridge_helper_reset_crtc_atomic
[08:46:26] [PASSED] drm_test_drm_bridge_helper_reset_crtc_atomic_disabled
[08:46:26] [PASSED] drm_test_drm_bridge_helper_reset_crtc_legacy
[08:46:26] [PASSED] drm_test_drm_bridge_helper_hdmi_output_bus_fmts
[08:46:26] ======== [PASSED] drm_test_bridge_helper_reset_crtc ========
[08:46:26] ============== drm_bridge_alloc (2 subtests) ===============
[08:46:26] [PASSED] drm_test_drm_bridge_alloc_basic
[08:46:26] [PASSED] drm_test_drm_bridge_alloc_get_put
[08:46:26] ================ [PASSED] drm_bridge_alloc =================
[08:46:26] ============= drm_bridge_bus_fmt (5 subtests) ==============
[08:46:26] [PASSED] drm_test_bridge_rgb_yuv_rgb
[08:46:26] [PASSED] drm_test_bridge_must_convert_to_yuv444
[08:46:26] [PASSED] drm_test_bridge_hdmi_auto_rgb
[08:46:26] [PASSED] drm_test_bridge_auto_first
[08:46:26] [PASSED] drm_test_bridge_rgb_yuv_no_path
[08:46:26] =============== [PASSED] drm_bridge_bus_fmt ================
[08:46:26] ============= drm_cmdline_parser (40 subtests) =============
[08:46:26] [PASSED] drm_test_cmdline_force_d_only
[08:46:26] [PASSED] drm_test_cmdline_force_D_only_dvi
[08:46:26] [PASSED] drm_test_cmdline_force_D_only_hdmi
[08:46:26] [PASSED] drm_test_cmdline_force_D_only_not_digital
[08:46:26] [PASSED] drm_test_cmdline_force_e_only
[08:46:26] [PASSED] drm_test_cmdline_res
[08:46:26] [PASSED] drm_test_cmdline_res_vesa
[08:46:26] [PASSED] drm_test_cmdline_res_vesa_rblank
[08:46:26] [PASSED] drm_test_cmdline_res_rblank
[08:46:26] [PASSED] drm_test_cmdline_res_bpp
[08:46:26] [PASSED] drm_test_cmdline_res_refresh
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_interlaced
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_margins
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_force_off
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_force_on
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_force_on_analog
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_force_on_digital
[08:46:26] [PASSED] drm_test_cmdline_res_bpp_refresh_interlaced_margins_force_on
[08:46:26] [PASSED] drm_test_cmdline_res_margins_force_on
[08:46:26] [PASSED] drm_test_cmdline_res_vesa_margins
[08:46:26] [PASSED] drm_test_cmdline_name
[08:46:26] [PASSED] drm_test_cmdline_name_bpp
[08:46:26] [PASSED] drm_test_cmdline_name_option
[08:46:26] [PASSED] drm_test_cmdline_name_bpp_option
[08:46:26] [PASSED] drm_test_cmdline_rotate_0
[08:46:26] [PASSED] drm_test_cmdline_rotate_90
[08:46:26] [PASSED] drm_test_cmdline_rotate_180
[08:46:26] [PASSED] drm_test_cmdline_rotate_270
[08:46:26] [PASSED] drm_test_cmdline_hmirror
[08:46:26] [PASSED] drm_test_cmdline_vmirror
[08:46:26] [PASSED] drm_test_cmdline_margin_options
[08:46:26] [PASSED] drm_test_cmdline_multiple_options
[08:46:26] [PASSED] drm_test_cmdline_bpp_extra_and_option
[08:46:26] [PASSED] drm_test_cmdline_extra_and_option
[08:46:26] [PASSED] drm_test_cmdline_freestanding_options
[08:46:26] [PASSED] drm_test_cmdline_freestanding_force_e_and_options
[08:46:26] [PASSED] drm_test_cmdline_panel_orientation
[08:46:26] ================ drm_test_cmdline_invalid =================
[08:46:26] [PASSED] margin_only
[08:46:26] [PASSED] interlace_only
[08:46:26] [PASSED] res_missing_x
[08:46:26] [PASSED] res_missing_y
[08:46:26] [PASSED] res_bad_y
[08:46:26] [PASSED] res_missing_y_bpp
[08:46:26] [PASSED] res_bad_bpp
[08:46:26] [PASSED] res_bad_refresh
[08:46:26] [PASSED] res_bpp_refresh_force_on_off
[08:46:26] [PASSED] res_invalid_mode
[08:46:26] [PASSED] res_bpp_wrong_place_mode
[08:46:26] [PASSED] name_bpp_refresh
[08:46:26] [PASSED] name_refresh
[08:46:26] [PASSED] name_refresh_wrong_mode
[08:46:26] [PASSED] name_refresh_invalid_mode
[08:46:26] [PASSED] rotate_multiple
[08:46:26] [PASSED] rotate_invalid_val
[08:46:26] [PASSED] rotate_truncated
[08:46:26] [PASSED] invalid_option
[08:46:26] [PASSED] invalid_tv_option
[08:46:26] [PASSED] truncated_tv_option
[08:46:26] ============ [PASSED] drm_test_cmdline_invalid =============
[08:46:26] =============== drm_test_cmdline_tv_options ===============
[08:46:26] [PASSED] NTSC
[08:46:26] [PASSED] NTSC_443
[08:46:26] [PASSED] NTSC_J
[08:46:26] [PASSED] PAL
[08:46:26] [PASSED] PAL_M
[08:46:26] [PASSED] PAL_N
[08:46:26] [PASSED] SECAM
[08:46:26] [PASSED] MONO_525
[08:46:26] [PASSED] MONO_625
[08:46:26] =========== [PASSED] drm_test_cmdline_tv_options ===========
[08:46:26] =============== [PASSED] drm_cmdline_parser ================
[08:46:26] ========== drmm_connector_hdmi_init (20 subtests) ==========
[08:46:26] [PASSED] drm_test_connector_hdmi_init_valid
[08:46:26] [PASSED] drm_test_connector_hdmi_init_bpc_8
[08:46:26] [PASSED] drm_test_connector_hdmi_init_bpc_10
[08:46:26] [PASSED] drm_test_connector_hdmi_init_bpc_12
[08:46:26] [PASSED] drm_test_connector_hdmi_init_bpc_invalid
[08:46:26] [PASSED] drm_test_connector_hdmi_init_bpc_null
[08:46:26] [PASSED] drm_test_connector_hdmi_init_formats_empty
[08:46:26] [PASSED] drm_test_connector_hdmi_init_formats_no_rgb
[08:46:26] === drm_test_connector_hdmi_init_formats_yuv420_allowed ===
[08:46:26] [PASSED] supported_formats=0x9 yuv420_allowed=1
[08:46:26] [PASSED] supported_formats=0x9 yuv420_allowed=0
[08:46:26] [PASSED] supported_formats=0x5 yuv420_allowed=1
[08:46:26] [PASSED] supported_formats=0x5 yuv420_allowed=0
[08:46:26] === [PASSED] drm_test_connector_hdmi_init_formats_yuv420_allowed ===
[08:46:26] [PASSED] drm_test_connector_hdmi_init_null_ddc
[08:46:26] [PASSED] drm_test_connector_hdmi_init_null_product
[08:46:26] [PASSED] drm_test_connector_hdmi_init_null_vendor
[08:46:26] [PASSED] drm_test_connector_hdmi_init_product_length_exact
[08:46:26] [PASSED] drm_test_connector_hdmi_init_product_length_too_long
[08:46:26] [PASSED] drm_test_connector_hdmi_init_product_valid
[08:46:26] [PASSED] drm_test_connector_hdmi_init_vendor_length_exact
[08:46:26] [PASSED] drm_test_connector_hdmi_init_vendor_length_too_long
[08:46:26] [PASSED] drm_test_connector_hdmi_init_vendor_valid
[08:46:26] ========= drm_test_connector_hdmi_init_type_valid =========
[08:46:26] [PASSED] HDMI-A
[08:46:26] [PASSED] HDMI-B
[08:46:26] ===== [PASSED] drm_test_connector_hdmi_init_type_valid =====
[08:46:26] ======== drm_test_connector_hdmi_init_type_invalid ========
[08:46:26] [PASSED] Unknown
[08:46:26] [PASSED] VGA
[08:46:26] [PASSED] DVI-I
[08:46:26] [PASSED] DVI-D
[08:46:26] [PASSED] DVI-A
[08:46:26] [PASSED] Composite
[08:46:26] [PASSED] SVIDEO
[08:46:26] [PASSED] LVDS
[08:46:26] [PASSED] Component
[08:46:26] [PASSED] DIN
[08:46:26] [PASSED] DP
[08:46:26] [PASSED] TV
[08:46:26] [PASSED] eDP
[08:46:26] [PASSED] Virtual
[08:46:26] [PASSED] DSI
[08:46:26] [PASSED] DPI
[08:46:26] [PASSED] Writeback
[08:46:26] [PASSED] SPI
[08:46:26] [PASSED] USB
[08:46:26] ==== [PASSED] drm_test_connector_hdmi_init_type_invalid ====
[08:46:26] ============ [PASSED] drmm_connector_hdmi_init =============
[08:46:26] ============= drmm_connector_init (3 subtests) =============
[08:46:26] [PASSED] drm_test_drmm_connector_init
[08:46:26] [PASSED] drm_test_drmm_connector_init_null_ddc
[08:46:26] ========= drm_test_drmm_connector_init_type_valid =========
[08:46:26] [PASSED] Unknown
[08:46:26] [PASSED] VGA
[08:46:26] [PASSED] DVI-I
[08:46:26] [PASSED] DVI-D
[08:46:26] [PASSED] DVI-A
[08:46:26] [PASSED] Composite
[08:46:26] [PASSED] SVIDEO
[08:46:26] [PASSED] LVDS
[08:46:26] [PASSED] Component
[08:46:26] [PASSED] DIN
[08:46:26] [PASSED] DP
[08:46:26] [PASSED] HDMI-A
[08:46:26] [PASSED] HDMI-B
[08:46:26] [PASSED] TV
[08:46:26] [PASSED] eDP
[08:46:26] [PASSED] Virtual
[08:46:26] [PASSED] DSI
[08:46:26] [PASSED] DPI
[08:46:26] [PASSED] Writeback
[08:46:26] [PASSED] SPI
[08:46:26] [PASSED] USB
[08:46:26] ===== [PASSED] drm_test_drmm_connector_init_type_valid =====
[08:46:26] =============== [PASSED] drmm_connector_init ===============
[08:46:26] ========= drm_connector_dynamic_init (6 subtests) ==========
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_init
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_init_null_ddc
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_init_not_added
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_init_properties
[08:46:26] ===== drm_test_drm_connector_dynamic_init_type_valid ======
[08:46:26] [PASSED] Unknown
[08:46:26] [PASSED] VGA
[08:46:26] [PASSED] DVI-I
[08:46:26] [PASSED] DVI-D
[08:46:26] [PASSED] DVI-A
[08:46:26] [PASSED] Composite
[08:46:26] [PASSED] SVIDEO
[08:46:26] [PASSED] LVDS
[08:46:26] [PASSED] Component
[08:46:26] [PASSED] DIN
[08:46:26] [PASSED] DP
[08:46:26] [PASSED] HDMI-A
[08:46:26] [PASSED] HDMI-B
[08:46:26] [PASSED] TV
[08:46:26] [PASSED] eDP
[08:46:26] [PASSED] Virtual
[08:46:26] [PASSED] DSI
[08:46:26] [PASSED] DPI
[08:46:26] [PASSED] Writeback
[08:46:26] [PASSED] SPI
[08:46:26] [PASSED] USB
[08:46:26] = [PASSED] drm_test_drm_connector_dynamic_init_type_valid ==
[08:46:26] ======== drm_test_drm_connector_dynamic_init_name =========
[08:46:26] [PASSED] Unknown
[08:46:26] [PASSED] VGA
[08:46:26] [PASSED] DVI-I
[08:46:26] [PASSED] DVI-D
[08:46:26] [PASSED] DVI-A
[08:46:26] [PASSED] Composite
[08:46:26] [PASSED] SVIDEO
[08:46:26] [PASSED] LVDS
[08:46:26] [PASSED] Component
[08:46:26] [PASSED] DIN
[08:46:26] [PASSED] DP
[08:46:26] [PASSED] HDMI-A
[08:46:26] [PASSED] HDMI-B
[08:46:26] [PASSED] TV
[08:46:26] [PASSED] eDP
[08:46:26] [PASSED] Virtual
[08:46:26] [PASSED] DSI
[08:46:26] [PASSED] DPI
[08:46:26] [PASSED] Writeback
[08:46:26] [PASSED] SPI
[08:46:26] [PASSED] USB
[08:46:26] ==== [PASSED] drm_test_drm_connector_dynamic_init_name =====
[08:46:26] =========== [PASSED] drm_connector_dynamic_init ============
[08:46:26] ==== drm_connector_dynamic_register_early (4 subtests) =====
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_early_on_list
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_early_defer
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_early_no_init
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_early_no_mode_object
[08:46:26] ====== [PASSED] drm_connector_dynamic_register_early =======
[08:46:26] ======= drm_connector_dynamic_register (7 subtests) ========
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_on_list
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_no_defer
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_no_init
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_mode_object
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_sysfs
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_sysfs_name
[08:46:26] [PASSED] drm_test_drm_connector_dynamic_register_debugfs
[08:46:26] ========= [PASSED] drm_connector_dynamic_register ==========
[08:46:26] = drm_connector_attach_broadcast_rgb_property (2 subtests) =
[08:46:26] [PASSED] drm_test_drm_connector_attach_broadcast_rgb_property
[08:46:26] [PASSED] drm_test_drm_connector_attach_broadcast_rgb_property_hdmi_connector
[08:46:26] === [PASSED] drm_connector_attach_broadcast_rgb_property ===
[08:46:26] ========== drm_get_tv_mode_from_name (2 subtests) ==========
[08:46:26] ========== drm_test_get_tv_mode_from_name_valid ===========
[08:46:26] [PASSED] NTSC
[08:46:26] [PASSED] NTSC-443
[08:46:26] [PASSED] NTSC-J
[08:46:26] [PASSED] PAL
[08:46:26] [PASSED] PAL-M
[08:46:26] [PASSED] PAL-N
[08:46:26] [PASSED] SECAM
[08:46:26] [PASSED] Mono
[08:46:26] ====== [PASSED] drm_test_get_tv_mode_from_name_valid =======
[08:46:26] [PASSED] drm_test_get_tv_mode_from_name_truncated
[08:46:26] ============ [PASSED] drm_get_tv_mode_from_name ============
[08:46:26] = drm_test_connector_hdmi_compute_mode_clock (12 subtests) =
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb_10bpc
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb_10bpc_vic_1
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb_12bpc
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb_12bpc_vic_1
[08:46:26] [PASSED] drm_test_drm_hdmi_compute_mode_clock_rgb_double
[08:46:26] = drm_test_connector_hdmi_compute_mode_clock_yuv420_valid =
[08:46:26] [PASSED] VIC 96
[08:46:26] [PASSED] VIC 97
[08:46:26] [PASSED] VIC 101
[08:46:26] [PASSED] VIC 102
[08:46:26] [PASSED] VIC 106
[08:46:26] [PASSED] VIC 107
[08:46:26] === [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv420_valid ===
[08:46:26] [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv420_10_bpc
[08:46:26] [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv420_12_bpc
[08:46:26] [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv422_8_bpc
[08:46:26] [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv422_10_bpc
[08:46:26] [PASSED] drm_test_connector_hdmi_compute_mode_clock_yuv422_12_bpc
[08:46:26] === [PASSED] drm_test_connector_hdmi_compute_mode_clock ====
[08:46:26] == drm_hdmi_connector_get_broadcast_rgb_name (2 subtests) ==
[08:46:26] === drm_test_drm_hdmi_connector_get_broadcast_rgb_name ====
[08:46:26] [PASSED] Automatic
[08:46:26] [PASSED] Full
[08:46:26] [PASSED] Limited 16:235
[08:46:26] === [PASSED] drm_test_drm_hdmi_connector_get_broadcast_rgb_name ===
[08:46:26] [PASSED] drm_test_drm_hdmi_connector_get_broadcast_rgb_name_invalid
[08:46:26] ==== [PASSED] drm_hdmi_connector_get_broadcast_rgb_name ====
[08:46:26] == drm_hdmi_connector_get_output_format_name (2 subtests) ==
[08:46:26] === drm_test_drm_hdmi_connector_get_output_format_name ====
[08:46:26] [PASSED] RGB
[08:46:26] [PASSED] YUV 4:2:0
[08:46:26] [PASSED] YUV 4:2:2
[08:46:26] [PASSED] YUV 4:4:4
[08:46:26] === [PASSED] drm_test_drm_hdmi_connector_get_output_format_name ===
[08:46:26] [PASSED] drm_test_drm_hdmi_connector_get_output_format_name_invalid
[08:46:26] ==== [PASSED] drm_hdmi_connector_get_output_format_name ====
[08:46:26] ============= drm_damage_helper (21 subtests) ==============
[08:46:26] [PASSED] drm_test_damage_iter_no_damage
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_fractional_src
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_src_moved
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_fractional_src_moved
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_not_visible
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_no_crtc
[08:46:26] [PASSED] drm_test_damage_iter_no_damage_no_fb
[08:46:26] [PASSED] drm_test_damage_iter_simple_damage
[08:46:26] [PASSED] drm_test_damage_iter_single_damage
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_intersect_src
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_outside_src
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_fractional_src
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_intersect_fractional_src
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_outside_fractional_src
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_src_moved
[08:46:26] [PASSED] drm_test_damage_iter_single_damage_fractional_src_moved
[08:46:26] [PASSED] drm_test_damage_iter_damage
[08:46:26] [PASSED] drm_test_damage_iter_damage_one_intersect
[08:46:26] [PASSED] drm_test_damage_iter_damage_one_outside
[08:46:26] [PASSED] drm_test_damage_iter_damage_src_moved
[08:46:26] [PASSED] drm_test_damage_iter_damage_not_visible
[08:46:26] ================ [PASSED] drm_damage_helper ================
[08:46:26] ============== drm_dp_mst_helper (3 subtests) ==============
[08:46:26] ============== drm_test_dp_mst_calc_pbn_mode ==============
[08:46:26] [PASSED] Clock 154000 BPP 30 DSC disabled
[08:46:26] [PASSED] Clock 234000 BPP 30 DSC disabled
[08:46:26] [PASSED] Clock 297000 BPP 24 DSC disabled
[08:46:26] [PASSED] Clock 332880 BPP 24 DSC enabled
[08:46:26] [PASSED] Clock 324540 BPP 24 DSC enabled
[08:46:26] ========== [PASSED] drm_test_dp_mst_calc_pbn_mode ==========
[08:46:26] ============== drm_test_dp_mst_calc_pbn_div ===============
[08:46:26] [PASSED] Link rate 2000000 lane count 4
[08:46:26] [PASSED] Link rate 2000000 lane count 2
[08:46:26] [PASSED] Link rate 2000000 lane count 1
[08:46:26] [PASSED] Link rate 1350000 lane count 4
[08:46:26] [PASSED] Link rate 1350000 lane count 2
[08:46:26] [PASSED] Link rate 1350000 lane count 1
[08:46:26] [PASSED] Link rate 1000000 lane count 4
[08:46:26] [PASSED] Link rate 1000000 lane count 2
[08:46:26] [PASSED] Link rate 1000000 lane count 1
[08:46:26] [PASSED] Link rate 810000 lane count 4
[08:46:26] [PASSED] Link rate 810000 lane count 2
[08:46:26] [PASSED] Link rate 810000 lane count 1
[08:46:26] [PASSED] Link rate 540000 lane count 4
[08:46:26] [PASSED] Link rate 540000 lane count 2
[08:46:26] [PASSED] Link rate 540000 lane count 1
[08:46:26] [PASSED] Link rate 270000 lane count 4
[08:46:26] [PASSED] Link rate 270000 lane count 2
[08:46:26] [PASSED] Link rate 270000 lane count 1
[08:46:26] [PASSED] Link rate 162000 lane count 4
[08:46:26] [PASSED] Link rate 162000 lane count 2
[08:46:26] [PASSED] Link rate 162000 lane count 1
[08:46:26] ========== [PASSED] drm_test_dp_mst_calc_pbn_div ===========
[08:46:26] ========= drm_test_dp_mst_sideband_msg_req_decode =========
[08:46:26] [PASSED] DP_ENUM_PATH_RESOURCES with port number
[08:46:26] [PASSED] DP_POWER_UP_PHY with port number
[08:46:26] [PASSED] DP_POWER_DOWN_PHY with port number
[08:46:26] [PASSED] DP_ALLOCATE_PAYLOAD with SDP stream sinks
[08:46:26] [PASSED] DP_ALLOCATE_PAYLOAD with port number
[08:46:26] [PASSED] DP_ALLOCATE_PAYLOAD with VCPI
[08:46:26] [PASSED] DP_ALLOCATE_PAYLOAD with PBN
[08:46:26] [PASSED] DP_QUERY_PAYLOAD with port number
[08:46:26] [PASSED] DP_QUERY_PAYLOAD with VCPI
[08:46:26] [PASSED] DP_REMOTE_DPCD_READ with port number
[08:46:26] [PASSED] DP_REMOTE_DPCD_READ with DPCD address
[08:46:26] [PASSED] DP_REMOTE_DPCD_READ with max number of bytes
[08:46:26] [PASSED] DP_REMOTE_DPCD_WRITE with port number
[08:46:26] [PASSED] DP_REMOTE_DPCD_WRITE with DPCD address
[08:46:26] [PASSED] DP_REMOTE_DPCD_WRITE with data array
[08:46:26] [PASSED] DP_REMOTE_I2C_READ with port number
[08:46:26] [PASSED] DP_REMOTE_I2C_READ with I2C device ID
[08:46:26] [PASSED] DP_REMOTE_I2C_READ with transactions array
[08:46:26] [PASSED] DP_REMOTE_I2C_WRITE with port number
[08:46:26] [PASSED] DP_REMOTE_I2C_WRITE with I2C device ID
[08:46:26] [PASSED] DP_REMOTE_I2C_WRITE with data array
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with stream ID
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with client ID
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with stream event
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with valid stream event
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with stream behavior
[08:46:26] [PASSED] DP_QUERY_STREAM_ENC_STATUS with a valid stream behavior
[08:46:26] ===== [PASSED] drm_test_dp_mst_sideband_msg_req_decode =====
[08:46:26] ================ [PASSED] drm_dp_mst_helper ================
[08:46:26] ================== drm_exec (7 subtests) ===================
[08:46:26] [PASSED] sanitycheck
[08:46:26] [PASSED] test_lock
[08:46:26] [PASSED] test_lock_unlock
[08:46:26] [PASSED] test_duplicates
[08:46:26] [PASSED] test_prepare
[08:46:26] [PASSED] test_prepare_array
[08:46:26] [PASSED] test_multiple_loops
[08:46:26] ==================== [PASSED] drm_exec =====================
[08:46:26] =========== drm_format_helper_test (17 subtests) ===========
[08:46:26] ============== drm_test_fb_xrgb8888_to_gray8 ==============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========== [PASSED] drm_test_fb_xrgb8888_to_gray8 ==========
[08:46:26] ============= drm_test_fb_xrgb8888_to_rgb332 ==============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========= [PASSED] drm_test_fb_xrgb8888_to_rgb332 ==========
[08:46:26] ============= drm_test_fb_xrgb8888_to_rgb565 ==============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========= [PASSED] drm_test_fb_xrgb8888_to_rgb565 ==========
[08:46:26] ============ drm_test_fb_xrgb8888_to_xrgb1555 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_xrgb1555 =========
[08:46:26] ============ drm_test_fb_xrgb8888_to_argb1555 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_argb1555 =========
[08:46:26] ============ drm_test_fb_xrgb8888_to_rgba5551 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_rgba5551 =========
[08:46:26] ============= drm_test_fb_xrgb8888_to_rgb888 ==============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========= [PASSED] drm_test_fb_xrgb8888_to_rgb888 ==========
[08:46:26] ============= drm_test_fb_xrgb8888_to_bgr888 ==============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========= [PASSED] drm_test_fb_xrgb8888_to_bgr888 ==========
[08:46:26] ============ drm_test_fb_xrgb8888_to_argb8888 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_argb8888 =========
[08:46:26] =========== drm_test_fb_xrgb8888_to_xrgb2101010 ===========
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======= [PASSED] drm_test_fb_xrgb8888_to_xrgb2101010 =======
[08:46:26] =========== drm_test_fb_xrgb8888_to_argb2101010 ===========
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======= [PASSED] drm_test_fb_xrgb8888_to_argb2101010 =======
[08:46:26] ============== drm_test_fb_xrgb8888_to_mono ===============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ========== [PASSED] drm_test_fb_xrgb8888_to_mono ===========
[08:46:26] ==================== drm_test_fb_swab =====================
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ================ [PASSED] drm_test_fb_swab =================
[08:46:26] ============ drm_test_fb_xrgb8888_to_xbgr8888 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_xbgr8888 =========
[08:46:26] ============ drm_test_fb_xrgb8888_to_abgr8888 =============
[08:46:26] [PASSED] single_pixel_source_buffer
[08:46:26] [PASSED] single_pixel_clip_rectangle
[08:46:26] [PASSED] well_known_colors
[08:46:26] [PASSED] destination_pitch
[08:46:26] ======== [PASSED] drm_test_fb_xrgb8888_to_abgr8888 =========
[08:46:26] ================= drm_test_fb_clip_offset =================
[08:46:26] [PASSED] pass through
[08:46:26] [PASSED] horizontal offset
[08:46:26] [PASSED] vertical offset
[08:46:26] [PASSED] horizontal and vertical offset
[08:46:26] [PASSED] horizontal offset (custom pitch)
[08:46:26] [PASSED] vertical offset (custom pitch)
[08:46:26] [PASSED] horizontal and vertical offset (custom pitch)
[08:46:26] ============= [PASSED] drm_test_fb_clip_offset =============
[08:46:26] =================== drm_test_fb_memcpy ====================
[08:46:26] [PASSED] single_pixel_source_buffer: XR24 little-endian (0x34325258)
[08:46:26] [PASSED] single_pixel_source_buffer: XRA8 little-endian (0x38415258)
[08:46:26] [PASSED] single_pixel_source_buffer: YU24 little-endian (0x34325559)
[08:46:26] [PASSED] single_pixel_clip_rectangle: XB24 little-endian (0x34324258)
[08:46:26] [PASSED] single_pixel_clip_rectangle: XRA8 little-endian (0x38415258)
[08:46:26] [PASSED] single_pixel_clip_rectangle: YU24 little-endian (0x34325559)
[08:46:26] [PASSED] well_known_colors: XB24 little-endian (0x34324258)
[08:46:26] [PASSED] well_known_colors: XRA8 little-endian (0x38415258)
[08:46:26] [PASSED] well_known_colors: YU24 little-endian (0x34325559)
[08:46:26] [PASSED] destination_pitch: XB24 little-endian (0x34324258)
[08:46:26] [PASSED] destination_pitch: XRA8 little-endian (0x38415258)
[08:46:26] [PASSED] destination_pitch: YU24 little-endian (0x34325559)
[08:46:26] =============== [PASSED] drm_test_fb_memcpy ================
[08:46:26] ============= [PASSED] drm_format_helper_test ==============
[08:46:26] ================= drm_format (18 subtests) =================
[08:46:26] [PASSED] drm_test_format_block_width_invalid
[08:46:26] [PASSED] drm_test_format_block_width_one_plane
[08:46:26] [PASSED] drm_test_format_block_width_two_plane
[08:46:26] [PASSED] drm_test_format_block_width_three_plane
[08:46:26] [PASSED] drm_test_format_block_width_tiled
[08:46:26] [PASSED] drm_test_format_block_height_invalid
[08:46:26] [PASSED] drm_test_format_block_height_one_plane
[08:46:26] [PASSED] drm_test_format_block_height_two_plane
[08:46:26] [PASSED] drm_test_format_block_height_three_plane
[08:46:26] [PASSED] drm_test_format_block_height_tiled
[08:46:26] [PASSED] drm_test_format_min_pitch_invalid
[08:46:26] [PASSED] drm_test_format_min_pitch_one_plane_8bpp
[08:46:26] [PASSED] drm_test_format_min_pitch_one_plane_16bpp
[08:46:26] [PASSED] drm_test_format_min_pitch_one_plane_24bpp
[08:46:26] [PASSED] drm_test_format_min_pitch_one_plane_32bpp
[08:46:26] [PASSED] drm_test_format_min_pitch_two_plane
[08:46:26] [PASSED] drm_test_format_min_pitch_three_plane_8bpp
[08:46:26] [PASSED] drm_test_format_min_pitch_tiled
[08:46:26] =================== [PASSED] drm_format ====================
[08:46:26] ============== drm_framebuffer (10 subtests) ===============
[08:46:26] ========== drm_test_framebuffer_check_src_coords ==========
[08:46:26] [PASSED] Success: source fits into fb
[08:46:26] [PASSED] Fail: overflowing fb with x-axis coordinate
[08:46:26] [PASSED] Fail: overflowing fb with y-axis coordinate
[08:46:26] [PASSED] Fail: overflowing fb with source width
[08:46:26] [PASSED] Fail: overflowing fb with source height
[08:46:26] ====== [PASSED] drm_test_framebuffer_check_src_coords ======
[08:46:26] [PASSED] drm_test_framebuffer_cleanup
[08:46:26] =============== drm_test_framebuffer_create ===============
[08:46:26] [PASSED] ABGR8888 normal sizes
[08:46:26] [PASSED] ABGR8888 max sizes
[08:46:26] [PASSED] ABGR8888 pitch greater than min required
[08:46:26] [PASSED] ABGR8888 pitch less than min required
[08:46:26] [PASSED] ABGR8888 Invalid width
[08:46:26] [PASSED] ABGR8888 Invalid buffer handle
[08:46:26] [PASSED] No pixel format
[08:46:26] [PASSED] ABGR8888 Width 0
[08:46:26] [PASSED] ABGR8888 Height 0
[08:46:26] [PASSED] ABGR8888 Out of bound height * pitch combination
[08:46:26] [PASSED] ABGR8888 Large buffer offset
[08:46:26] [PASSED] ABGR8888 Buffer offset for inexistent plane
[08:46:26] [PASSED] ABGR8888 Invalid flag
[08:46:26] [PASSED] ABGR8888 Set DRM_MODE_FB_MODIFIERS without modifiers
[08:46:26] [PASSED] ABGR8888 Valid buffer modifier
[08:46:26] [PASSED] ABGR8888 Invalid buffer modifier(DRM_FORMAT_MOD_SAMSUNG_64_32_TILE)
[08:46:26] [PASSED] ABGR8888 Extra pitches without DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] ABGR8888 Extra pitches with DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] NV12 Normal sizes
[08:46:26] [PASSED] NV12 Max sizes
[08:46:26] [PASSED] NV12 Invalid pitch
[08:46:26] [PASSED] NV12 Invalid modifier/missing DRM_MODE_FB_MODIFIERS flag
[08:46:26] [PASSED] NV12 different modifier per-plane
[08:46:26] [PASSED] NV12 with DRM_FORMAT_MOD_SAMSUNG_64_32_TILE
[08:46:26] [PASSED] NV12 Valid modifiers without DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] NV12 Modifier for inexistent plane
[08:46:26] [PASSED] NV12 Handle for inexistent plane
[08:46:26] [PASSED] NV12 Handle for inexistent plane without DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] YVU420 DRM_MODE_FB_MODIFIERS set without modifier
[08:46:26] [PASSED] YVU420 Normal sizes
[08:46:26] [PASSED] YVU420 Max sizes
[08:46:26] [PASSED] YVU420 Invalid pitch
[08:46:26] [PASSED] YVU420 Different pitches
[08:46:26] [PASSED] YVU420 Different buffer offsets/pitches
[08:46:26] [PASSED] YVU420 Modifier set just for plane 0, without DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] YVU420 Modifier set just for planes 0, 1, without DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] YVU420 Modifier set just for plane 0, 1, with DRM_MODE_FB_MODIFIERS
[08:46:26] [PASSED] YVU420 Valid modifier
[08:46:26] [PASSED] YVU420 Different modifiers per plane
[08:46:26] [PASSED] YVU420 Modifier for inexistent plane
[08:46:26] [PASSED] YUV420_10BIT Invalid modifier(DRM_FORMAT_MOD_LINEAR)
[08:46:26] [PASSED] X0L2 Normal sizes
[08:46:26] [PASSED] X0L2 Max sizes
[08:46:26] [PASSED] X0L2 Invalid pitch
[08:46:26] [PASSED] X0L2 Pitch greater than minimum required
[08:46:26] [PASSED] X0L2 Handle for inexistent plane
[08:46:26] [PASSED] X0L2 Offset for inexistent plane, without DRM_MODE_FB_MODIFIERS set
[08:46:26] [PASSED] X0L2 Modifier without DRM_MODE_FB_MODIFIERS set
[08:46:26] [PASSED] X0L2 Valid modifier
[08:46:26] [PASSED] X0L2 Modifier for inexistent plane
[08:46:26] =========== [PASSED] drm_test_framebuffer_create ===========
[08:46:26] [PASSED] drm_test_framebuffer_free
[08:46:26] [PASSED] drm_test_framebuffer_init
[08:46:26] [PASSED] drm_test_framebuffer_init_bad_format
[08:46:26] [PASSED] drm_test_framebuffer_init_dev_mismatch
[08:46:26] [PASSED] drm_test_framebuffer_lookup
[08:46:26] [PASSED] drm_test_framebuffer_lookup_inexistent
[08:46:26] [PASSED] drm_test_framebuffer_modifiers_not_supported
[08:46:26] ================= [PASSED] drm_framebuffer =================
[08:46:26] ================ drm_gem_shmem (8 subtests) ================
[08:46:26] [PASSED] drm_gem_shmem_test_obj_create
[08:46:26] [PASSED] drm_gem_shmem_test_obj_create_private
[08:46:26] [PASSED] drm_gem_shmem_test_pin_pages
[08:46:26] [PASSED] drm_gem_shmem_test_vmap
[08:46:26] [PASSED] drm_gem_shmem_test_get_sg_table
[08:46:26] [PASSED] drm_gem_shmem_test_get_pages_sgt
[08:46:26] [PASSED] drm_gem_shmem_test_madvise
[08:46:26] [PASSED] drm_gem_shmem_test_purge
[08:46:26] ================== [PASSED] drm_gem_shmem ==================
[08:46:26] === drm_atomic_helper_connector_hdmi_check (29 subtests) ===
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_auto_cea_mode
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_auto_cea_mode_vic_1
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_full_cea_mode
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_full_cea_mode_vic_1
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_limited_cea_mode
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_limited_cea_mode_vic_1
[08:46:26] ====== drm_test_check_broadcast_rgb_cea_mode_yuv420 =======
[08:46:26] [PASSED] Automatic
[08:46:26] [PASSED] Full
[08:46:26] [PASSED] Limited 16:235
[08:46:26] == [PASSED] drm_test_check_broadcast_rgb_cea_mode_yuv420 ===
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_crtc_mode_changed
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_crtc_mode_not_changed
[08:46:26] [PASSED] drm_test_check_disable_connector
[08:46:26] [PASSED] drm_test_check_hdmi_funcs_reject_rate
[08:46:26] [PASSED] drm_test_check_max_tmds_rate_bpc_fallback_rgb
[08:46:26] [PASSED] drm_test_check_max_tmds_rate_bpc_fallback_yuv420
[08:46:26] [PASSED] drm_test_check_max_tmds_rate_bpc_fallback_ignore_yuv422
[08:46:26] [PASSED] drm_test_check_max_tmds_rate_bpc_fallback_ignore_yuv420
[08:46:26] [PASSED] drm_test_check_driver_unsupported_fallback_yuv420
[08:46:26] [PASSED] drm_test_check_output_bpc_crtc_mode_changed
[08:46:26] [PASSED] drm_test_check_output_bpc_crtc_mode_not_changed
[08:46:26] [PASSED] drm_test_check_output_bpc_dvi
[08:46:26] [PASSED] drm_test_check_output_bpc_format_vic_1
[08:46:26] [PASSED] drm_test_check_output_bpc_format_display_8bpc_only
[08:46:26] [PASSED] drm_test_check_output_bpc_format_display_rgb_only
[08:46:26] [PASSED] drm_test_check_output_bpc_format_driver_8bpc_only
[08:46:26] [PASSED] drm_test_check_output_bpc_format_driver_rgb_only
[08:46:26] [PASSED] drm_test_check_tmds_char_rate_rgb_8bpc
[08:46:26] [PASSED] drm_test_check_tmds_char_rate_rgb_10bpc
[08:46:26] [PASSED] drm_test_check_tmds_char_rate_rgb_12bpc
[08:46:26] ============ drm_test_check_hdmi_color_format =============
[08:46:26] [PASSED] AUTO -> RGB
[08:46:26] [PASSED] YCBCR422 -> YUV422
[08:46:26] [PASSED] YCBCR420 -> YUV420
[08:46:26] [PASSED] YCBCR444 -> YUV444
[08:46:26] [PASSED] RGB -> RGB
[08:46:26] ======== [PASSED] drm_test_check_hdmi_color_format =========
[08:46:26] ======== drm_test_check_hdmi_color_format_420_only ========
[08:46:26] [PASSED] RGB should fail
[08:46:26] [PASSED] YUV444 should fail
[08:46:26] [PASSED] YUV422 should fail
[08:46:26] [PASSED] YUV420 should work
[08:46:26] ==== [PASSED] drm_test_check_hdmi_color_format_420_only ====
[08:46:26] ===== [PASSED] drm_atomic_helper_connector_hdmi_check ======
[08:46:26] === drm_atomic_helper_connector_hdmi_reset (6 subtests) ====
[08:46:26] [PASSED] drm_test_check_broadcast_rgb_value
[08:46:26] [PASSED] drm_test_check_bpc_8_value
[08:46:26] [PASSED] drm_test_check_bpc_10_value
[08:46:26] [PASSED] drm_test_check_bpc_12_value
[08:46:26] [PASSED] drm_test_check_format_value
[08:46:26] [PASSED] drm_test_check_tmds_char_value
[08:46:26] ===== [PASSED] drm_atomic_helper_connector_hdmi_reset ======
[08:46:26] = drm_atomic_helper_connector_hdmi_mode_valid (7 subtests) =
[08:46:26] [PASSED] drm_test_check_mode_valid
[08:46:26] [PASSED] drm_test_check_mode_valid_reject
[08:46:26] [PASSED] drm_test_check_mode_valid_reject_rate
[08:46:26] [PASSED] drm_test_check_mode_valid_reject_max_clock
[08:46:26] [PASSED] drm_test_check_mode_valid_yuv420_only_max_clock
[08:46:26] [PASSED] drm_test_check_mode_valid_reject_yuv420_only_connector
[08:46:26] [PASSED] drm_test_check_mode_valid_accept_yuv420_also_connector_rgb
[08:46:26] === [PASSED] drm_atomic_helper_connector_hdmi_mode_valid ===
[08:46:26] = drm_atomic_helper_connector_hdmi_infoframes (5 subtests) =
[08:46:26] [PASSED] drm_test_check_infoframes
[08:46:26] [PASSED] drm_test_check_reject_avi_infoframe
[08:46:26] [PASSED] drm_test_check_reject_hdr_infoframe_bpc_8
[08:46:26] [PASSED] drm_test_check_reject_hdr_infoframe_bpc_10
[08:46:26] [PASSED] drm_test_check_reject_audio_infoframe
[08:46:26] === [PASSED] drm_atomic_helper_connector_hdmi_infoframes ===
[08:46:26] ================= drm_managed (2 subtests) =================
[08:46:26] [PASSED] drm_test_managed_release_action
[08:46:26] [PASSED] drm_test_managed_run_action
[08:46:26] =================== [PASSED] drm_managed ===================
[08:46:26] =================== drm_mm (6 subtests) ====================
[08:46:26] [PASSED] drm_test_mm_init
[08:46:26] [PASSED] drm_test_mm_debug
[08:46:26] [PASSED] drm_test_mm_align32
[08:46:26] [PASSED] drm_test_mm_align64
[08:46:26] [PASSED] drm_test_mm_lowest
[08:46:26] [PASSED] drm_test_mm_highest
[08:46:26] ===================== [PASSED] drm_mm ======================
[08:46:26] ============= drm_modes_analog_tv (5 subtests) =============
[08:46:26] [PASSED] drm_test_modes_analog_tv_mono_576i
[08:46:26] [PASSED] drm_test_modes_analog_tv_ntsc_480i
[08:46:26] [PASSED] drm_test_modes_analog_tv_ntsc_480i_inlined
[08:46:26] [PASSED] drm_test_modes_analog_tv_pal_576i
[08:46:26] [PASSED] drm_test_modes_analog_tv_pal_576i_inlined
[08:46:26] =============== [PASSED] drm_modes_analog_tv ===============
[08:46:26] ============== drm_plane_helper (2 subtests) ===============
[08:46:26] =============== drm_test_check_plane_state ================
[08:46:26] [PASSED] clipping_simple
[08:46:26] [PASSED] clipping_rotate_reflect
[08:46:26] [PASSED] positioning_simple
[08:46:26] [PASSED] upscaling
[08:46:26] [PASSED] downscaling
[08:46:26] [PASSED] rounding1
[08:46:26] [PASSED] rounding2
[08:46:26] [PASSED] rounding3
[08:46:26] [PASSED] rounding4
[08:46:26] =========== [PASSED] drm_test_check_plane_state ============
[08:46:26] =========== drm_test_check_invalid_plane_state ============
[08:46:26] [PASSED] positioning_invalid
[08:46:26] [PASSED] upscaling_invalid
[08:46:26] [PASSED] downscaling_invalid
[08:46:26] ======= [PASSED] drm_test_check_invalid_plane_state ========
[08:46:26] ================ [PASSED] drm_plane_helper =================
[08:46:26] ====== drm_connector_helper_tv_get_modes (1 subtest) =======
[08:46:26] ====== drm_test_connector_helper_tv_get_modes_check =======
[08:46:26] [PASSED] None
[08:46:26] [PASSED] PAL
[08:46:26] [PASSED] NTSC
[08:46:26] [PASSED] Both, NTSC Default
[08:46:26] [PASSED] Both, PAL Default
[08:46:26] [PASSED] Both, NTSC Default, with PAL on command-line
[08:46:26] [PASSED] Both, PAL Default, with NTSC on command-line
[08:46:26] == [PASSED] drm_test_connector_helper_tv_get_modes_check ===
[08:46:26] ======== [PASSED] drm_connector_helper_tv_get_modes ========
[08:46:26] ================== drm_rect (9 subtests) ===================
[08:46:26] [PASSED] drm_test_rect_clip_scaled_div_by_zero
[08:46:26] [PASSED] drm_test_rect_clip_scaled_not_clipped
[08:46:26] [PASSED] drm_test_rect_clip_scaled_clipped
[08:46:26] [PASSED] drm_test_rect_clip_scaled_signed_vs_unsigned
[08:46:26] ================= drm_test_rect_intersect =================
[08:46:26] [PASSED] top-left x bottom-right: 2x2+1+1 x 2x2+0+0
[08:46:26] [PASSED] top-right x bottom-left: 2x2+0+0 x 2x2+1-1
[08:46:26] [PASSED] bottom-left x top-right: 2x2+1-1 x 2x2+0+0
[08:46:26] [PASSED] bottom-right x top-left: 2x2+0+0 x 2x2+1+1
[08:46:26] [PASSED] right x left: 2x1+0+0 x 3x1+1+0
[08:46:26] [PASSED] left x right: 3x1+1+0 x 2x1+0+0
[08:46:26] [PASSED] up x bottom: 1x2+0+0 x 1x3+0-1
[08:46:26] [PASSED] bottom x up: 1x3+0-1 x 1x2+0+0
[08:46:26] [PASSED] touching corner: 1x1+0+0 x 2x2+1+1
[08:46:26] [PASSED] touching side: 1x1+0+0 x 1x1+1+0
[08:46:26] [PASSED] equal rects: 2x2+0+0 x 2x2+0+0
[08:46:26] [PASSED] inside another: 2x2+0+0 x 1x1+1+1
[08:46:26] [PASSED] far away: 1x1+0+0 x 1x1+3+6
[08:46:26] [PASSED] points intersecting: 0x0+5+10 x 0x0+5+10
[08:46:26] [PASSED] points not intersecting: 0x0+0+0 x 0x0+5+10
[08:46:26] ============= [PASSED] drm_test_rect_intersect =============
[08:46:26] ================ drm_test_rect_calc_hscale ================
[08:46:26] [PASSED] normal use
[08:46:26] [PASSED] out of max range
[08:46:26] [PASSED] out of min range
[08:46:26] [PASSED] zero dst
[08:46:26] [PASSED] negative src
[08:46:26] [PASSED] negative dst
[08:46:26] ============ [PASSED] drm_test_rect_calc_hscale ============
[08:46:26] ================ drm_test_rect_calc_vscale ================
[08:46:26] [PASSED] normal use
[08:46:26] [PASSED] out of max range
[08:46:26] [PASSED] out of min range
[08:46:26] [PASSED] zero dst
[08:46:26] [PASSED] negative src
[08:46:26] [PASSED] negative dst
[08:46:26] ============ [PASSED] drm_test_rect_calc_vscale ============
[08:46:26] ================== drm_test_rect_rotate ===================
[08:46:26] [PASSED] reflect-x
[08:46:26] [PASSED] reflect-y
[08:46:26] [PASSED] rotate-0
[08:46:26] [PASSED] rotate-90
[08:46:26] [PASSED] rotate-180
[08:46:26] [PASSED] rotate-270
[08:46:26] ============== [PASSED] drm_test_rect_rotate ===============
[08:46:26] ================ drm_test_rect_rotate_inv =================
[08:46:26] [PASSED] reflect-x
[08:46:26] [PASSED] reflect-y
[08:46:26] [PASSED] rotate-0
[08:46:26] [PASSED] rotate-90
[08:46:26] [PASSED] rotate-180
[08:46:26] [PASSED] rotate-270
[08:46:26] ============ [PASSED] drm_test_rect_rotate_inv =============
[08:46:26] ==================== [PASSED] drm_rect =====================
[08:46:26] ============ drm_sysfb_modeset_test (1 subtest) ============
[08:46:26] ============ drm_test_sysfb_build_fourcc_list =============
[08:46:26] [PASSED] no native formats
[08:46:26] [PASSED] XRGB8888 as native format
[08:46:26] [PASSED] remove duplicates
[08:46:26] [PASSED] convert alpha formats
[08:46:26] [PASSED] random formats
[08:46:26] ======== [PASSED] drm_test_sysfb_build_fourcc_list =========
[08:46:26] ============= [PASSED] drm_sysfb_modeset_test ==============
[08:46:26] ================== drm_fixp (2 subtests) ===================
[08:46:26] [PASSED] drm_test_int2fixp
[08:46:26] [PASSED] drm_test_sm2fixp
[08:46:26] ==================== [PASSED] drm_fixp =====================
[08:46:26] ============================================================
[08:46:26] Testing complete. Ran 639 tests: passed: 639
[08:46:26] Elapsed time: 26.776s total, 1.773s configuring, 24.788s building, 0.192s running
+ /kernel/tools/testing/kunit/kunit.py run --kunitconfig /kernel/drivers/gpu/drm/ttm/tests/.kunitconfig
[08:46:26] Configuring KUnit Kernel ...
Regenerating .config ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
[08:46:28] Building KUnit Kernel ...
Populating config with:
$ make ARCH=um O=.kunit olddefconfig
Building with:
$ make all compile_commands.json scripts_gdb ARCH=um O=.kunit --jobs=48
[08:46:37] Starting KUnit Kernel (1/1)...
[08:46:37] ============================================================
Running tests with:
$ .kunit/linux kunit.enable=1 mem=1G console=tty kunit_shutdown=halt
[08:46:37] ================= ttm_device (5 subtests) ==================
[08:46:37] [PASSED] ttm_device_init_basic
[08:46:37] [PASSED] ttm_device_init_multiple
[08:46:37] [PASSED] ttm_device_fini_basic
[08:46:37] [PASSED] ttm_device_init_no_vma_man
[08:46:37] ================== ttm_device_init_pools ==================
[08:46:37] [PASSED] No DMA allocations, no DMA32 required
[08:46:37] [PASSED] DMA allocations, DMA32 required
[08:46:37] [PASSED] No DMA allocations, DMA32 required
[08:46:37] [PASSED] DMA allocations, no DMA32 required
[08:46:37] ============== [PASSED] ttm_device_init_pools ==============
[08:46:37] =================== [PASSED] ttm_device ====================
[08:46:37] ================== ttm_pool (8 subtests) ===================
[08:46:37] ================== ttm_pool_alloc_basic ===================
[08:46:37] [PASSED] One page
[08:46:37] [PASSED] More than one page
[08:46:37] [PASSED] Above the allocation limit
[08:46:37] [PASSED] One page, with coherent DMA mappings enabled
[08:46:37] [PASSED] Above the allocation limit, with coherent DMA mappings enabled
[08:46:37] ============== [PASSED] ttm_pool_alloc_basic ===============
[08:46:37] ============== ttm_pool_alloc_basic_dma_addr ==============
[08:46:37] [PASSED] One page
[08:46:37] [PASSED] More than one page
[08:46:37] [PASSED] Above the allocation limit
[08:46:37] [PASSED] One page, with coherent DMA mappings enabled
[08:46:37] [PASSED] Above the allocation limit, with coherent DMA mappings enabled
[08:46:37] ========== [PASSED] ttm_pool_alloc_basic_dma_addr ==========
[08:46:37] [PASSED] ttm_pool_alloc_order_caching_match
[08:46:37] [PASSED] ttm_pool_alloc_caching_mismatch
[08:46:37] [PASSED] ttm_pool_alloc_order_mismatch
[08:46:37] [PASSED] ttm_pool_free_dma_alloc
[08:46:37] [PASSED] ttm_pool_free_no_dma_alloc
[08:46:37] [PASSED] ttm_pool_fini_basic
[08:46:37] ==================== [PASSED] ttm_pool =====================
[08:46:37] ================ ttm_resource (8 subtests) =================
[08:46:37] ================= ttm_resource_init_basic =================
[08:46:37] [PASSED] Init resource in TTM_PL_SYSTEM
[08:46:37] [PASSED] Init resource in TTM_PL_VRAM
[08:46:37] [PASSED] Init resource in a private placement
[08:46:37] [PASSED] Init resource in TTM_PL_SYSTEM, set placement flags
[08:46:37] ============= [PASSED] ttm_resource_init_basic =============
[08:46:37] [PASSED] ttm_resource_init_pinned
[08:46:37] [PASSED] ttm_resource_fini_basic
[08:46:37] [PASSED] ttm_resource_manager_init_basic
[08:46:37] [PASSED] ttm_resource_manager_usage_basic
[08:46:37] [PASSED] ttm_resource_manager_set_used_basic
[08:46:37] [PASSED] ttm_sys_man_alloc_basic
[08:46:37] [PASSED] ttm_sys_man_free_basic
[08:46:37] ================== [PASSED] ttm_resource ===================
[08:46:37] =================== ttm_tt (15 subtests) ===================
[08:46:37] ==================== ttm_tt_init_basic ====================
[08:46:37] [PASSED] Page-aligned size
[08:46:37] [PASSED] Extra pages requested
[08:46:37] ================ [PASSED] ttm_tt_init_basic ================
[08:46:37] [PASSED] ttm_tt_init_misaligned
[08:46:37] [PASSED] ttm_tt_fini_basic
[08:46:37] [PASSED] ttm_tt_fini_sg
[08:46:37] [PASSED] ttm_tt_fini_shmem
[08:46:37] [PASSED] ttm_tt_create_basic
[08:46:37] [PASSED] ttm_tt_create_invalid_bo_type
[08:46:37] [PASSED] ttm_tt_create_ttm_exists
[08:46:37] [PASSED] ttm_tt_create_failed
[08:46:37] [PASSED] ttm_tt_destroy_basic
[08:46:37] [PASSED] ttm_tt_populate_null_ttm
[08:46:37] [PASSED] ttm_tt_populate_populated_ttm
[08:46:37] [PASSED] ttm_tt_unpopulate_basic
[08:46:37] [PASSED] ttm_tt_unpopulate_empty_ttm
[08:46:37] [PASSED] ttm_tt_swapin_basic
[08:46:37] ===================== [PASSED] ttm_tt ======================
[08:46:37] =================== ttm_bo (14 subtests) ===================
[08:46:37] =========== ttm_bo_reserve_optimistic_no_ticket ===========
[08:46:37] [PASSED] Cannot be interrupted and sleeps
[08:46:37] [PASSED] Cannot be interrupted, locks straight away
[08:46:37] [PASSED] Can be interrupted, sleeps
[08:46:37] ======= [PASSED] ttm_bo_reserve_optimistic_no_ticket =======
[08:46:37] [PASSED] ttm_bo_reserve_locked_no_sleep
[08:46:37] [PASSED] ttm_bo_reserve_no_wait_ticket
[08:46:37] [PASSED] ttm_bo_reserve_double_resv
[08:46:37] [PASSED] ttm_bo_reserve_interrupted
[08:46:37] [PASSED] ttm_bo_reserve_deadlock
[08:46:37] [PASSED] ttm_bo_unreserve_basic
[08:46:37] [PASSED] ttm_bo_unreserve_pinned
[08:46:37] [PASSED] ttm_bo_unreserve_bulk
[08:46:37] [PASSED] ttm_bo_fini_basic
[08:46:37] [PASSED] ttm_bo_fini_shared_resv
[08:46:37] [PASSED] ttm_bo_pin_basic
[08:46:37] [PASSED] ttm_bo_pin_unpin_resource
[08:46:37] [PASSED] ttm_bo_multiple_pin_one_unpin
[08:46:37] ===================== [PASSED] ttm_bo ======================
[08:46:37] ============== ttm_bo_validate (22 subtests) ===============
[08:46:37] ============== ttm_bo_init_reserved_sys_man ===============
[08:46:37] [PASSED] Buffer object for userspace
[08:46:37] [PASSED] Kernel buffer object
[08:46:37] [PASSED] Shared buffer object
[08:46:37] ========== [PASSED] ttm_bo_init_reserved_sys_man ===========
[08:46:37] ============== ttm_bo_init_reserved_mock_man ==============
[08:46:37] [PASSED] Buffer object for userspace
[08:46:37] [PASSED] Kernel buffer object
[08:46:37] [PASSED] Shared buffer object
[08:46:37] ========== [PASSED] ttm_bo_init_reserved_mock_man ==========
[08:46:37] [PASSED] ttm_bo_init_reserved_resv
[08:46:37] ================== ttm_bo_validate_basic ==================
[08:46:37] [PASSED] Buffer object for userspace
[08:46:37] [PASSED] Kernel buffer object
[08:46:37] [PASSED] Shared buffer object
[08:46:37] ============== [PASSED] ttm_bo_validate_basic ==============
[08:46:37] [PASSED] ttm_bo_validate_invalid_placement
[08:46:37] ============= ttm_bo_validate_same_placement ==============
[08:46:37] [PASSED] System manager
[08:46:37] [PASSED] VRAM manager
[08:46:37] ========= [PASSED] ttm_bo_validate_same_placement ==========
[08:46:37] [PASSED] ttm_bo_validate_failed_alloc
[08:46:37] [PASSED] ttm_bo_validate_pinned
[08:46:37] [PASSED] ttm_bo_validate_busy_placement
[08:46:37] ================ ttm_bo_validate_multihop =================
[08:46:37] [PASSED] Buffer object for userspace
[08:46:37] [PASSED] Kernel buffer object
[08:46:37] [PASSED] Shared buffer object
[08:46:37] ============ [PASSED] ttm_bo_validate_multihop =============
[08:46:37] ========== ttm_bo_validate_no_placement_signaled ==========
[08:46:37] [PASSED] Buffer object in system domain, no page vector
[08:46:37] [PASSED] Buffer object in system domain with an existing page vector
[08:46:37] ====== [PASSED] ttm_bo_validate_no_placement_signaled ======
[08:46:37] ======== ttm_bo_validate_no_placement_not_signaled ========
[08:46:37] [PASSED] Buffer object for userspace
[08:46:37] [PASSED] Kernel buffer object
[08:46:37] [PASSED] Shared buffer object
[08:46:37] ==== [PASSED] ttm_bo_validate_no_placement_not_signaled ====
[08:46:37] [PASSED] ttm_bo_validate_move_fence_signaled
[08:46:38] ========= ttm_bo_validate_move_fence_not_signaled =========
[08:46:38] [PASSED] Waits for GPU
[08:46:38] [PASSED] Tries to lock straight away
[08:46:38] ===== [PASSED] ttm_bo_validate_move_fence_not_signaled =====
[08:46:38] [PASSED] ttm_bo_validate_swapout
[08:46:38] [PASSED] ttm_bo_validate_happy_evict
[08:46:38] [PASSED] ttm_bo_validate_all_pinned_evict
[08:46:38] [PASSED] ttm_bo_validate_allowed_only_evict
[08:46:38] [PASSED] ttm_bo_validate_deleted_evict
[08:46:38] [PASSED] ttm_bo_validate_busy_domain_evict
[08:46:38] [PASSED] ttm_bo_validate_evict_gutting
[08:46:38] [PASSED] ttm_bo_validate_recrusive_evict
[08:46:38] ================= [PASSED] ttm_bo_validate =================
[08:46:38] ============================================================
[08:46:38] Testing complete. Ran 102 tests: passed: 102
[08:46:38] Elapsed time: 11.753s total, 1.813s configuring, 9.725s building, 0.180s running
+ cleanup
++ stat -c %u:%g /kernel
+ chown -R 1003:1003 /kernel
^ permalink raw reply [flat|nested] 11+ messages in thread
* [PATCH v5 0/2] Fix UAF on dma-buf import attach failure
@ 2026-07-08 9:15 Nitin Gote
2026-07-08 8:46 ` ✓ CI.KUnit: success for " Patchwork
` (5 more replies)
0 siblings, 6 replies; 11+ messages in thread
From: Nitin Gote @ 2026-07-08 9:15 UTC (permalink / raw)
To: intel-xe; +Cc: Nitin Gote
This series fixes a use-after-free that can happen when importing a
dma-buf and dma_buf_dynamic_attach() fails.
The imported BO is created as ttm_bo_type_sg with bo->base.resv pointing
at the exporter's dma_buf->resv before the attach is attempted. If the
attach fails, the importer holds no attachment and no dma-buf reference,
yet the BO still points at the exporter's resv. Once the exporter is
freed, a later dma_resv_lock(bo->base.resv) can hit freed memory:
Oops: general protection fault, probably for non-canonical address
0x6b6b6b6b6b6b6b9c
Workqueue: ttm ttm_bo_delayed_delete [ttm]
RIP: 0010:mutex_can_spin_on_owner+0x3f/0xc0
There are two places where the stale resv can be reached:
Patch 1 fixes the TTM delayed-delete path. Failed sg imports now
individualize bo->base.resv to the private _resv, keyed on
import_attach, while successful imports keep the shared exporter resv for
normal dma-buf cleanup.
Patch 2 fixes the xe LRU-walker path raised during review. xe was
creating imported sg BOs with a ttm_resource before attach succeeded,
making them visible to LRU walkers. An LRU walker could then take a BO
reference and lock bo->base.resv before the TTM release path could
individualize it. xe now creates imported sg BOs with empty initial
placement, keeping bo->resource NULL and off the LRU until after a
successful attach.
v5:
- Add drm/xe patch to keep imported sg BOs off the LRU before attach
succeeds; the TTM fix alone is not sufficient for xe if the BO is
already LRU-visible. (Thomas)
v4 patch:
https://patchwork.freedesktop.org/patch/736663/?series=169129&rev=2
- Patch 1 (drm/ttm) carries Christian's Reviewed-by from v4.
v4:
- Moved import_attach check to after dma_resv_copy_fences() so fences
are copied before returning for successful imports (Thomas).
- Removed exporter-alive claim from commit message (Thomas).
v3:
- Dropped the xe-side reordering approach since importer_priv must be
valid when dma_buf_dynamic_attach() publishes the attachment.
- Per Christian's suggestion on the v1 thread, keyed the check on
import_attach rather than removing the sg guard entirely.
- Fixes both xe and amdgpu in a single TTM patch.
Nitin Gote (2):
drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds
drivers/gpu/drm/ttm/ttm_bo.c | 24 ++++++++++------
drivers/gpu/drm/xe/xe_bo.c | 53 ++++++++++++++++++++++++++----------
2 files changed, 54 insertions(+), 23 deletions(-)
--
2.50.1
^ permalink raw reply [flat|nested] 11+ messages in thread
* [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
2026-07-08 8:46 ` ✓ CI.KUnit: success for " Patchwork
@ 2026-07-08 9:15 ` Nitin Gote
2026-07-08 12:37 ` Thomas Hellström
2026-07-08 9:15 ` [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds Nitin Gote
` (3 subsequent siblings)
5 siblings, 1 reply; 11+ messages in thread
From: Nitin Gote @ 2026-07-08 9:15 UTC (permalink / raw)
To: intel-xe
Cc: Nitin Gote, stable, Thomas Hellstrom, Christian Konig,
Matthew Auld
When a dma-buf importer creates a ttm_bo_type_sg BO with bo->base.resv
pointing at the exporter's dma_buf->resv and dma_buf_dynamic_attach()
fails, no dma_buf reference is held. The exporter can be freed before
the delayed_delete worker calls dma_resv_lock(bo->base.resv), causing a
use-after-free:
Oops: general protection fault, probably for non-canonical address
0x6b6b6b6b6b6b6b9c
Workqueue: ttm ttm_bo_delayed_delete [ttm]
RIP: 0010:mutex_can_spin_on_owner+0x3f/0xc0
ttm_bo_individualize_resv() skips the resv swap for all sg BOs to keep
the shared resv available for delayed_delete to release the dma-buf
mapping. A BO whose attach never succeeded has no mapping to release,
yet it keeps bo->base.resv pointing at the exporter resv that
delayed_delete later locks once the exporter is gone.
Fix this by checking bo->base.import_attach, which is set only after a
successful attach. The check is placed after dma_resv_copy_fences() so
successful imports still copy fences to _resv before returning, keeping
the shared resv for delayed_delete. Failed imports fall through to swap
resv to _resv, so delayed_delete never locks the stale exporter resv.
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/work_items/8023
Fixes: d99fbd9aab62 ("drm/ttm: Always take the bo delayed cleanup path for imported bos")
Cc: stable@vger.kernel.org # v6.8+
Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
Cc: Christian Konig <christian.koenig@amd.com>
Cc: Matthew Auld <matthew.auld@intel.com>
Assisted-by: GitHub_Copilot:claude-sonnet-4.6
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
---
drivers/gpu/drm/ttm/ttm_bo.c | 24 +++++++++++++++---------
1 file changed, 15 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/ttm/ttm_bo.c b/drivers/gpu/drm/ttm/ttm_bo.c
index 3980f376e3ba..f157e259dd5f 100644
--- a/drivers/gpu/drm/ttm/ttm_bo.c
+++ b/drivers/gpu/drm/ttm/ttm_bo.c
@@ -203,15 +203,21 @@ static int ttm_bo_individualize_resv(struct ttm_buffer_object *bo)
if (r)
return r;
- if (bo->type != ttm_bo_type_sg) {
- /* This works because the BO is about to be destroyed and nobody
- * reference it any more. The only tricky case is the trylock on
- * the resv object while holding the lru_lock.
- */
- spin_lock(&bo->bdev->lru_lock);
- bo->base.resv = &bo->base._resv;
- spin_unlock(&bo->bdev->lru_lock);
- }
+ /*
+ * Successfully imported sg BOs need the shared resv for dma-buf
+ * cleanup. Failed imports have no attachment or mapping and can
+ * use the private _resv.
+ */
+ if (bo->type == ttm_bo_type_sg && bo->base.import_attach)
+ return 0;
+
+ /* This works because the BO is about to be destroyed and nobody
+ * references it any more. The only tricky case is the trylock on
+ * the resv object while holding the lru_lock.
+ */
+ spin_lock(&bo->bdev->lru_lock);
+ bo->base.resv = &bo->base._resv;
+ spin_unlock(&bo->bdev->lru_lock);
return r;
}
--
2.50.1
^ permalink raw reply related [flat|nested] 11+ messages in thread
* [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
2026-07-08 8:46 ` ✓ CI.KUnit: success for " Patchwork
2026-07-08 9:15 ` [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs Nitin Gote
@ 2026-07-08 9:15 ` Nitin Gote
2026-07-08 12:52 ` Thomas Hellström
2026-07-08 9:22 ` ✓ Xe.CI.BAT: success for Fix UAF on dma-buf import attach failure Patchwork
` (2 subsequent siblings)
5 siblings, 1 reply; 11+ messages in thread
From: Nitin Gote @ 2026-07-08 9:15 UTC (permalink / raw)
To: intel-xe; +Cc: Nitin Gote, Thomas Hellstrom, Christian Koenig, Matthew Auld
Imported dma-buf BOs are created as ttm_bo_type_sg with bo->base.resv
pointing at the exporter's resv. They are initialized with system
placement, which allocates a ttm_resource and makes the BO visible to
TTM LRU walkers before dma_buf_dynamic_attach() has succeeded.
If attach fails, xe holds no dma-buf reference, but an LRU walker may
already have referenced the BO and locked bo->base.resv (the exporter
resv). If the exporter is then freed, this is a use-after-free.
Use an empty initial placement for imported sg BOs so bo->resource
stays NULL and the BO is never added to an LRU before attach succeeds.
As a result sg BOs now start without a resource, so their first move
has old_mem == NULL. Check ttm_bo_type_sg before the creation path in
xe_bo_move() so imports always use the dma-buf move path, and handle
resource-less sg BOs in xe_evict_flags() before dereferencing
tbo->resource.
Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
Cc: Christian Koenig <christian.koenig@amd.com>
Cc: Matthew Auld <matthew.auld@intel.com>
Assisted-by: GitHub_Copilot:claude-sonnet-4.6
Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
---
drivers/gpu/drm/xe/xe_bo.c | 53 ++++++++++++++++++++++++++++----------
1 file changed, 39 insertions(+), 14 deletions(-)
diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
index 85e6d9a0f575..050de0f13232 100644
--- a/drivers/gpu/drm/xe/xe_bo.c
+++ b/drivers/gpu/drm/xe/xe_bo.c
@@ -63,6 +63,12 @@ static struct ttm_placement sys_placement = {
static struct ttm_placement purge_placement;
+/* Initial placement: keeps imported sg BOs resource-less (off the LRU)
+ * until dma_buf_dynamic_attach() succeeds so they are not visible to LRU
+ * walkers while bo->base.resv still points at the exporter.
+ */
+static struct ttm_placement sg_init_placement;
+
static const struct ttm_place tt_placement_flags[] = {
{
.fpfn = 0,
@@ -342,9 +348,14 @@ static void xe_evict_flags(struct ttm_buffer_object *tbo,
}
/*
- * For xe, sg bos that are evicted to system just triggers a
- * rebind of the sg list upon subsequent validation to XE_PL_TT.
+ * sg BOs (dma-buf imports) evict to system and may have no
+ * resource yet, so handle them before dereferencing tbo->resource.
*/
+ if (tbo->type == ttm_bo_type_sg) {
+ *placement = sys_placement;
+ return;
+ }
+
switch (tbo->resource->mem_type) {
case XE_PL_VRAM0:
case XE_PL_VRAM1:
@@ -980,6 +991,22 @@ static int xe_bo_move(struct ttm_buffer_object *ttm_bo, bool evict,
return 0;
}
+ /*
+ * sg BOs (dma-buf imports) must always be moved via the dmabuf path,
+ * regardless of whether they have an existing resource. This check must
+ * come before the creation-path check below: sg BOs start with no
+ * resource (sg_init_placement), so their first move to XE_PL_TT has
+ * old_mem == NULL, which would otherwise incorrectly trigger the
+ * creation path and call xe_tt_map_sg() instead of xe_bo_move_dmabuf().
+ */
+ if (ttm_bo->type == ttm_bo_type_sg) {
+ if (new_mem->mem_type == XE_PL_SYSTEM)
+ ret = xe_bo_move_notify(bo, ctx);
+ if (!ret)
+ ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
+ return ret;
+ }
+
/* Bo creation path, moving to system or TT. */
if ((!old_mem && ttm) && !handle_system_ccs) {
if (new_mem->mem_type == XE_PL_TT)
@@ -989,14 +1016,6 @@ static int xe_bo_move(struct ttm_buffer_object *ttm_bo, bool evict,
goto out;
}
- if (ttm_bo->type == ttm_bo_type_sg) {
- if (new_mem->mem_type == XE_PL_SYSTEM)
- ret = xe_bo_move_notify(bo, ctx);
- if (!ret)
- ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
- return ret;
- }
-
tt_has_data = ttm && (ttm_tt_is_populated(ttm) || ttm_tt_is_swapped(ttm));
move_lacks_source = !old_mem || (handle_system_ccs ? (!bo->ccs_cleared) :
@@ -2379,10 +2398,16 @@ struct xe_bo *xe_bo_init_locked(struct xe_device *xe, struct xe_bo *bo,
}
}
- /* Defer populating type_sg bos */
- placement = (type == ttm_bo_type_sg ||
- bo->flags & XE_BO_FLAG_DEFER_BACKING) ? &sys_placement :
- &bo->placement;
+ /*
+ * For sg BOs (dma-buf imports) use sg_init_placement (num_placement=0)
+ * so that ttm_bo_validate() leaves bo->resource = NULL. The BO is then
+ * not on any LRU list before dma_buf_dynamic_attach() succeeds, which
+ * prevents the LRU-walker UAF when attach fails.
+ * For other BOs that request deferred backing, use sys_placement.
+ */
+ placement = (type == ttm_bo_type_sg) ? &sg_init_placement :
+ (bo->flags & XE_BO_FLAG_DEFER_BACKING) ? &sys_placement :
+ &bo->placement;
err = ttm_bo_init_reserved(&xe->ttm, &bo->ttm, type,
placement, alignment,
&ctx, NULL, resv, xe_ttm_bo_destroy);
--
2.50.1
^ permalink raw reply related [flat|nested] 11+ messages in thread
* ✓ Xe.CI.BAT: success for Fix UAF on dma-buf import attach failure
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
` (2 preceding siblings ...)
2026-07-08 9:15 ` [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds Nitin Gote
@ 2026-07-08 9:22 ` Patchwork
2026-07-08 10:53 ` ✓ Xe.CI.FULL: " Patchwork
2026-07-10 8:00 ` [PATCH v5 0/2] " Gote, Nitin R
5 siblings, 0 replies; 11+ messages in thread
From: Patchwork @ 2026-07-08 9:22 UTC (permalink / raw)
To: Nitin Gote; +Cc: intel-xe
[-- Attachment #1: Type: text/plain, Size: 1662 bytes --]
== Series Details ==
Series: Fix UAF on dma-buf import attach failure
URL : https://patchwork.freedesktop.org/series/169984/
State : success
== Summary ==
CI Bug Log - changes from xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c_BAT -> xe-pw-169984v1_BAT
====================================================
Summary
-------
**SUCCESS**
No regressions found.
Participating hosts (13 -> 13)
------------------------------
No changes in participating hosts
Known issues
------------
Here are the changes found in xe-pw-169984v1_BAT that come from known issues:
### IGT changes ###
#### Issues hit ####
* igt@xe_live_ktest@xe_dma_buf:
- bat-bmg-vm: [PASS][1] -> [ABORT][2] ([Intel XE#8007]) +1 other test abort
[1]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/bat-bmg-vm/igt@xe_live_ktest@xe_dma_buf.html
[2]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/bat-bmg-vm/igt@xe_live_ktest@xe_dma_buf.html
[Intel XE#8007]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8007
Build changes
-------------
* IGT: IGT_8991 -> IGT_8992
* Linux: xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c -> xe-pw-169984v1
IGT_8991: c5721520bb6611ab8fcbe27db0c120b72d25b99e @ https://gitlab.freedesktop.org/drm/igt-gpu-tools.git
IGT_8992: 1e912fa143a35c4238a1fbcf94443175d8ce1d60 @ https://gitlab.freedesktop.org/drm/igt-gpu-tools.git
xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c: 331949b3b9225375d72a6402cf94b5d6c6621d1c
xe-pw-169984v1: 169984v1
== Logs ==
For more details see: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/index.html
[-- Attachment #2: Type: text/html, Size: 2241 bytes --]
^ permalink raw reply [flat|nested] 11+ messages in thread
* ✓ Xe.CI.FULL: success for Fix UAF on dma-buf import attach failure
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
` (3 preceding siblings ...)
2026-07-08 9:22 ` ✓ Xe.CI.BAT: success for Fix UAF on dma-buf import attach failure Patchwork
@ 2026-07-08 10:53 ` Patchwork
2026-07-10 8:00 ` [PATCH v5 0/2] " Gote, Nitin R
5 siblings, 0 replies; 11+ messages in thread
From: Patchwork @ 2026-07-08 10:53 UTC (permalink / raw)
To: Nitin Gote; +Cc: intel-xe
[-- Attachment #1: Type: text/plain, Size: 33512 bytes --]
== Series Details ==
Series: Fix UAF on dma-buf import attach failure
URL : https://patchwork.freedesktop.org/series/169984/
State : success
== Summary ==
CI Bug Log - changes from xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c_FULL -> xe-pw-169984v1_FULL
====================================================
Summary
-------
**SUCCESS**
No regressions found.
Participating hosts (2 -> 2)
------------------------------
No changes in participating hosts
Known issues
------------
Here are the changes found in xe-pw-169984v1_FULL that come from known issues:
### IGT changes ###
#### Issues hit ####
* igt@kms_big_fb@4-tiled-8bpp-rotate-270:
- shard-bmg: NOTRUN -> [SKIP][1] ([Intel XE#2327])
[1]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_big_fb@4-tiled-8bpp-rotate-270.html
* igt@kms_big_fb@y-tiled-max-hw-stride-32bpp-rotate-180-async-flip:
- shard-bmg: NOTRUN -> [SKIP][2] ([Intel XE#1124]) +3 other tests skip
[2]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_big_fb@y-tiled-max-hw-stride-32bpp-rotate-180-async-flip.html
* igt@kms_big_fb@yf-tiled-addfb:
- shard-bmg: NOTRUN -> [SKIP][3] ([Intel XE#2328] / [Intel XE#7367])
[3]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-10/igt@kms_big_fb@yf-tiled-addfb.html
* igt@kms_big_fb@yf-tiled-addfb-size-offset-overflow:
- shard-bmg: NOTRUN -> [SKIP][4] ([Intel XE#607] / [Intel XE#7361])
[4]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@kms_big_fb@yf-tiled-addfb-size-offset-overflow.html
* igt@kms_big_fb@yf-tiled-max-hw-stride-32bpp-rotate-0-async-flip:
- shard-lnl: NOTRUN -> [SKIP][5] ([Intel XE#1124])
[5]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-7/igt@kms_big_fb@yf-tiled-max-hw-stride-32bpp-rotate-0-async-flip.html
* igt@kms_bw@linear-tiling-2-displays-target-3840x2160p:
- shard-bmg: NOTRUN -> [SKIP][6] ([Intel XE#367]) +2 other tests skip
[6]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-7/igt@kms_bw@linear-tiling-2-displays-target-3840x2160p.html
* igt@kms_ccs@bad-rotation-90-4-tiled-lnl-ccs@pipe-c-dp-2:
- shard-bmg: NOTRUN -> [SKIP][7] ([Intel XE#2652]) +8 other tests skip
[7]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@kms_ccs@bad-rotation-90-4-tiled-lnl-ccs@pipe-c-dp-2.html
* igt@kms_ccs@crc-primary-suspend-y-tiled-ccs:
- shard-bmg: NOTRUN -> [SKIP][8] ([Intel XE#3432])
[8]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_ccs@crc-primary-suspend-y-tiled-ccs.html
* igt@kms_ccs@crc-sprite-planes-basic-4-tiled-dg2-rc-ccs-cc:
- shard-bmg: NOTRUN -> [SKIP][9] ([Intel XE#2887]) +7 other tests skip
[9]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_ccs@crc-sprite-planes-basic-4-tiled-dg2-rc-ccs-cc.html
* igt@kms_chamelium_color@gamma:
- shard-bmg: NOTRUN -> [SKIP][10] ([Intel XE#2325] / [Intel XE#7358])
[10]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-10/igt@kms_chamelium_color@gamma.html
* igt@kms_chamelium_color_pipeline@plane-lut1d-lut1d:
- shard-bmg: NOTRUN -> [SKIP][11] ([Intel XE#7358]) +2 other tests skip
[11]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_chamelium_color_pipeline@plane-lut1d-lut1d.html
* igt@kms_chamelium_color_pipeline@plane-lut1d-pre-ctm3x4:
- shard-lnl: NOTRUN -> [SKIP][12] ([Intel XE#7358])
[12]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-6/igt@kms_chamelium_color_pipeline@plane-lut1d-pre-ctm3x4.html
* igt@kms_chamelium_hpd@dp-hpd-storm-disable:
- shard-bmg: NOTRUN -> [SKIP][13] ([Intel XE#2252]) +2 other tests skip
[13]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_chamelium_hpd@dp-hpd-storm-disable.html
* igt@kms_content_protection@lic-type-0-hdcp14@pipe-a-dp-2:
- shard-bmg: NOTRUN -> [FAIL][14] ([Intel XE#1178] / [Intel XE#3304] / [Intel XE#7374]) +3 other tests fail
[14]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-9/igt@kms_content_protection@lic-type-0-hdcp14@pipe-a-dp-2.html
* igt@kms_cursor_crc@cursor-sliding-256x85:
- shard-bmg: NOTRUN -> [SKIP][15] ([Intel XE#2320]) +2 other tests skip
[15]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@kms_cursor_crc@cursor-sliding-256x85.html
* igt@kms_cursor_legacy@cursorb-vs-flipb-varying-size:
- shard-lnl: NOTRUN -> [SKIP][16] ([Intel XE#309] / [Intel XE#7343])
[16]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_cursor_legacy@cursorb-vs-flipb-varying-size.html
* igt@kms_cursor_legacy@flip-vs-cursor-atomic:
- shard-bmg: NOTRUN -> [FAIL][17] ([Intel XE#7571])
[17]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_cursor_legacy@flip-vs-cursor-atomic.html
* igt@kms_cursor_legacy@single-bo:
- shard-bmg: [PASS][18] -> [ABORT][19] ([Intel XE#8007]) +2 other tests abort
[18]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-5/igt@kms_cursor_legacy@single-bo.html
[19]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@kms_cursor_legacy@single-bo.html
- shard-lnl: [PASS][20] -> [ABORT][21] ([Intel XE#8007]) +1 other test abort
[20]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-lnl-4/igt@kms_cursor_legacy@single-bo.html
[21]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_cursor_legacy@single-bo.html
* igt@kms_dither@fb-8bpc-vs-panel-6bpc@pipe-a-hdmi-a-3:
- shard-bmg: NOTRUN -> [SKIP][22] ([Intel XE#1340] / [Intel XE#7435])
[22]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@kms_dither@fb-8bpc-vs-panel-6bpc@pipe-a-hdmi-a-3.html
* igt@kms_dsc@dsc-with-output-formats-with-bpc:
- shard-bmg: NOTRUN -> [SKIP][23] ([Intel XE#8265])
[23]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_dsc@dsc-with-output-formats-with-bpc.html
* igt@kms_fbcon_fbt@psr:
- shard-bmg: NOTRUN -> [SKIP][24] ([Intel XE#6126] / [Intel XE#776])
[24]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@kms_fbcon_fbt@psr.html
* igt@kms_flip@2x-plain-flip-ts-check-interruptible:
- shard-lnl: NOTRUN -> [SKIP][25] ([Intel XE#1421])
[25]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-8/igt@kms_flip@2x-plain-flip-ts-check-interruptible.html
* igt@kms_flip@2x-wf_vblank-ts-check:
- shard-bmg: [PASS][26] -> [FAIL][27] ([Intel XE#6266]) +1 other test fail
[26]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-6/igt@kms_flip@2x-wf_vblank-ts-check.html
[27]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_flip@2x-wf_vblank-ts-check.html
* igt@kms_flip@flip-vs-expired-vblank@a-edp1:
- shard-lnl: [PASS][28] -> [FAIL][29] ([Intel XE#301]) +1 other test fail
[28]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-lnl-1/igt@kms_flip@flip-vs-expired-vblank@a-edp1.html
[29]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_flip@flip-vs-expired-vblank@a-edp1.html
* igt@kms_flip_scaled_crc@flip-32bpp-ytile-to-32bpp-ytilegen12rcccs-upscaling:
- shard-bmg: NOTRUN -> [SKIP][30] ([Intel XE#7178] / [Intel XE#7351]) +2 other tests skip
[30]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_flip_scaled_crc@flip-32bpp-ytile-to-32bpp-ytilegen12rcccs-upscaling.html
* igt@kms_flip_scaled_crc@flip-64bpp-4tile-to-32bpp-4tile-downscaling@pipe-a-default-mode:
- shard-lnl: NOTRUN -> [SKIP][31] ([Intel XE#1397] / [Intel XE#7385]) +1 other test skip
[31]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-2/igt@kms_flip_scaled_crc@flip-64bpp-4tile-to-32bpp-4tile-downscaling@pipe-a-default-mode.html
* igt@kms_flip_scaled_crc@flip-64bpp-linear-to-16bpp-linear-downscaling:
- shard-lnl: NOTRUN -> [SKIP][32] ([Intel XE#1397] / [Intel XE#1745] / [Intel XE#7385]) +1 other test skip
[32]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-4/igt@kms_flip_scaled_crc@flip-64bpp-linear-to-16bpp-linear-downscaling.html
* igt@kms_frontbuffer_tracking@drrs-1p-primscrn-pri-shrfb-draw-render:
- shard-lnl: NOTRUN -> [SKIP][33] ([Intel XE#6312] / [Intel XE#651]) +1 other test skip
[33]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_frontbuffer_tracking@drrs-1p-primscrn-pri-shrfb-draw-render.html
* igt@kms_frontbuffer_tracking@drrshdr-1p-primscrn-indfb-pgflip-blt:
- shard-lnl: NOTRUN -> [SKIP][34] ([Intel XE#6312])
[34]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-5/igt@kms_frontbuffer_tracking@drrshdr-1p-primscrn-indfb-pgflip-blt.html
* igt@kms_frontbuffer_tracking@fbc-2p-primscrn-pri-indfb-draw-render:
- shard-lnl: NOTRUN -> [SKIP][35] ([Intel XE#656] / [Intel XE#7905]) +8 other tests skip
[35]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_frontbuffer_tracking@fbc-2p-primscrn-pri-indfb-draw-render.html
* igt@kms_frontbuffer_tracking@fbc-argb161616f-draw-mmap-wc:
- shard-lnl: NOTRUN -> [SKIP][36] ([Intel XE#7061] / [Intel XE#7356])
[36]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-8/igt@kms_frontbuffer_tracking@fbc-argb161616f-draw-mmap-wc.html
* igt@kms_frontbuffer_tracking@fbc-argb161616f-draw-render:
- shard-bmg: NOTRUN -> [SKIP][37] ([Intel XE#7061] / [Intel XE#7356]) +2 other tests skip
[37]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_frontbuffer_tracking@fbc-argb161616f-draw-render.html
* igt@kms_frontbuffer_tracking@fbc-tiling-linear:
- shard-bmg: NOTRUN -> [SKIP][38] ([Intel XE#4141]) +7 other tests skip
[38]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@kms_frontbuffer_tracking@fbc-tiling-linear.html
* igt@kms_frontbuffer_tracking@fbcdrrs-tiling-y:
- shard-bmg: NOTRUN -> [SKIP][39] ([Intel XE#2352] / [Intel XE#7399])
[39]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_frontbuffer_tracking@fbcdrrs-tiling-y.html
* igt@kms_frontbuffer_tracking@fbcdrrshdr-rgb565-draw-blt:
- shard-bmg: NOTRUN -> [SKIP][40] ([Intel XE#2311]) +30 other tests skip
[40]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_frontbuffer_tracking@fbcdrrshdr-rgb565-draw-blt.html
* igt@kms_frontbuffer_tracking@fbcpsrhdr-modesetfrombusy:
- shard-lnl: NOTRUN -> [SKIP][41] ([Intel XE#7865]) +7 other tests skip
[41]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-1/igt@kms_frontbuffer_tracking@fbcpsrhdr-modesetfrombusy.html
* igt@kms_frontbuffer_tracking@hdr-argb161616f-draw-blt:
- shard-bmg: NOTRUN -> [SKIP][42] ([Intel XE#7061]) +2 other tests skip
[42]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-9/igt@kms_frontbuffer_tracking@hdr-argb161616f-draw-blt.html
* igt@kms_frontbuffer_tracking@psrhdr-1p-primscrn-pri-shrfb-draw-render:
- shard-bmg: NOTRUN -> [SKIP][43] ([Intel XE#2313]) +39 other tests skip
[43]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-5/igt@kms_frontbuffer_tracking@psrhdr-1p-primscrn-pri-shrfb-draw-render.html
* igt@kms_frontbuffer_tracking@psrhdr-2p-primscrn-cur-indfb-draw-render:
- shard-lnl: NOTRUN -> [SKIP][44] ([Intel XE#7905]) +5 other tests skip
[44]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-4/igt@kms_frontbuffer_tracking@psrhdr-2p-primscrn-cur-indfb-draw-render.html
* igt@kms_joiner@invalid-modeset-ultra-joiner:
- shard-bmg: NOTRUN -> [SKIP][45] ([Intel XE#6911] / [Intel XE#7378])
[45]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-10/igt@kms_joiner@invalid-modeset-ultra-joiner.html
* igt@kms_plane@pixel-format-y-tiled-gen12-rc-ccs-cc-modifier:
- shard-bmg: NOTRUN -> [SKIP][46] ([Intel XE#7283]) +2 other tests skip
[46]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-7/igt@kms_plane@pixel-format-y-tiled-gen12-rc-ccs-cc-modifier.html
- shard-lnl: NOTRUN -> [SKIP][47] ([Intel XE#7283])
[47]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-5/igt@kms_plane@pixel-format-y-tiled-gen12-rc-ccs-cc-modifier.html
* igt@kms_plane_scaling@plane-scaler-with-clipping-clamping-pixel-formats@pipe-b:
- shard-lnl: NOTRUN -> [SKIP][48] ([Intel XE#2763] / [Intel XE#6886]) +1 other test skip
[48]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-2/igt@kms_plane_scaling@plane-scaler-with-clipping-clamping-pixel-formats@pipe-b.html
* igt@kms_pm_dc@dc5-dpms:
- shard-lnl: [PASS][49] -> [FAIL][50] ([Intel XE#8399])
[49]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-lnl-3/igt@kms_pm_dc@dc5-dpms.html
[50]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-7/igt@kms_pm_dc@dc5-dpms.html
* igt@kms_pm_dc@dc6-psr:
- shard-bmg: NOTRUN -> [SKIP][51] ([Intel XE#7794])
[51]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@kms_pm_dc@dc6-psr.html
* igt@kms_pm_lpsp@kms-lpsp:
- shard-bmg: NOTRUN -> [SKIP][52] ([Intel XE#2499])
[52]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@kms_pm_lpsp@kms-lpsp.html
* igt@kms_psr2_sf@psr2-cursor-plane-move-continuous-exceed-fully-sf:
- shard-bmg: NOTRUN -> [SKIP][53] ([Intel XE#1489]) +3 other tests skip
[53]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@kms_psr2_sf@psr2-cursor-plane-move-continuous-exceed-fully-sf.html
* igt@kms_psr@fbc-pr-primary-blt:
- shard-bmg: NOTRUN -> [SKIP][54] ([Intel XE#2234] / [Intel XE#2850]) +5 other tests skip
[54]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-5/igt@kms_psr@fbc-pr-primary-blt.html
* igt@kms_rotation_crc@primary-rotation-270:
- shard-bmg: NOTRUN -> [SKIP][55] ([Intel XE#3904] / [Intel XE#7342])
[55]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-9/igt@kms_rotation_crc@primary-rotation-270.html
* igt@kms_scaling_modes@scaling-mode-full:
- shard-bmg: NOTRUN -> [SKIP][56] ([Intel XE#2413])
[56]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_scaling_modes@scaling-mode-full.html
* igt@kms_sharpness_filter@invalid-filter-with-scaling-mode:
- shard-bmg: NOTRUN -> [SKIP][57] ([Intel XE#6503]) +1 other test skip
[57]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-5/igt@kms_sharpness_filter@invalid-filter-with-scaling-mode.html
* igt@kms_vrr@lobf:
- shard-bmg: NOTRUN -> [SKIP][58] ([Intel XE#2168] / [Intel XE#7444])
[58]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@kms_vrr@lobf.html
* igt@xe_compute@ccs-mode-basic:
- shard-bmg: NOTRUN -> [SKIP][59] ([Intel XE#6599])
[59]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@xe_compute@ccs-mode-basic.html
* igt@xe_evict@evict-mixed-threads-large-multi-vm:
- shard-lnl: NOTRUN -> [SKIP][60] ([Intel XE#6540] / [Intel XE#688]) +1 other test skip
[60]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-7/igt@xe_evict@evict-mixed-threads-large-multi-vm.html
* igt@xe_evict@evict-small-external-multi-queue:
- shard-bmg: NOTRUN -> [SKIP][61] ([Intel XE#8370])
[61]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@xe_evict@evict-small-external-multi-queue.html
* igt@xe_exec_balancer@once-virtual-basic:
- shard-lnl: NOTRUN -> [SKIP][62] ([Intel XE#7482]) +1 other test skip
[62]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-4/igt@xe_exec_balancer@once-virtual-basic.html
* igt@xe_exec_basic@multigpu-no-exec-null-defer-mmap:
- shard-lnl: NOTRUN -> [SKIP][63] ([Intel XE#1392])
[63]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-1/igt@xe_exec_basic@multigpu-no-exec-null-defer-mmap.html
* igt@xe_exec_basic@multigpu-once-bindexecqueue-userptr-rebind:
- shard-bmg: NOTRUN -> [SKIP][64] ([Intel XE#2322] / [Intel XE#7372]) +4 other tests skip
[64]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@xe_exec_basic@multigpu-once-bindexecqueue-userptr-rebind.html
* igt@xe_exec_fault_mode@many-execqueues-multi-queue-userptr:
- shard-lnl: NOTRUN -> [SKIP][65] ([Intel XE#8374]) +1 other test skip
[65]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@xe_exec_fault_mode@many-execqueues-multi-queue-userptr.html
* igt@xe_exec_fault_mode@twice-multi-queue-userptr-rebind-prefetch:
- shard-bmg: NOTRUN -> [SKIP][66] ([Intel XE#8374]) +5 other tests skip
[66]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-5/igt@xe_exec_fault_mode@twice-multi-queue-userptr-rebind-prefetch.html
* igt@xe_exec_multi_queue@many-queues-preempt-mode-fault-dyn-priority-smem:
- shard-lnl: NOTRUN -> [SKIP][67] ([Intel XE#8364]) +3 other tests skip
[67]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-6/igt@xe_exec_multi_queue@many-queues-preempt-mode-fault-dyn-priority-smem.html
* igt@xe_exec_multi_queue@two-queues-preempt-mode-basic-smem:
- shard-bmg: NOTRUN -> [SKIP][68] ([Intel XE#8364]) +18 other tests skip
[68]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@xe_exec_multi_queue@two-queues-preempt-mode-basic-smem.html
* igt@xe_exec_reset@cm-multi-queue-cat-error:
- shard-bmg: NOTRUN -> [SKIP][69] ([Intel XE#8369]) +1 other test skip
[69]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@xe_exec_reset@cm-multi-queue-cat-error.html
* igt@xe_exec_system_allocator@pat-index-madvise-pat-idx-wt-multi-vma:
- shard-lnl: NOTRUN -> [SKIP][70] ([Intel XE#6196])
[70]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-1/igt@xe_exec_system_allocator@pat-index-madvise-pat-idx-wt-multi-vma.html
* igt@xe_exec_threads@threads-multi-queue-rebind-err:
- shard-bmg: NOTRUN -> [SKIP][71] ([Intel XE#8378]) +3 other tests skip
[71]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@xe_exec_threads@threads-multi-queue-rebind-err.html
* igt@xe_exec_threads@threads-multi-queue-shared-vm-userptr-invalidate-race:
- shard-lnl: NOTRUN -> [SKIP][72] ([Intel XE#8378])
[72]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-2/igt@xe_exec_threads@threads-multi-queue-shared-vm-userptr-invalidate-race.html
* igt@xe_media_fill@media-fill:
- shard-bmg: NOTRUN -> [SKIP][73] ([Intel XE#2459] / [Intel XE#2596] / [Intel XE#7321] / [Intel XE#7453])
[73]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@xe_media_fill@media-fill.html
* igt@xe_multigpu_svm@mgpu-atomic-op-conflict:
- shard-bmg: NOTRUN -> [SKIP][74] ([Intel XE#6964]) +1 other test skip
[74]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-7/igt@xe_multigpu_svm@mgpu-atomic-op-conflict.html
* igt@xe_page_reclaim@pat-index-xd:
- shard-bmg: NOTRUN -> [SKIP][75] ([Intel XE#7793]) +1 other test skip
[75]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-6/igt@xe_page_reclaim@pat-index-xd.html
* igt@xe_pat@pat-sw-hw-suspend:
- shard-bmg: NOTRUN -> [FAIL][76] ([Intel XE#7695])
[76]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@xe_pat@pat-sw-hw-suspend.html
* igt@xe_pm@s3-exec-after:
- shard-lnl: NOTRUN -> [SKIP][77] ([Intel XE#584] / [Intel XE#7369])
[77]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-6/igt@xe_pm@s3-exec-after.html
* igt@xe_query@multigpu-query-cs-cycles:
- shard-bmg: NOTRUN -> [SKIP][78] ([Intel XE#944])
[78]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-7/igt@xe_query@multigpu-query-cs-cycles.html
* igt@xe_sriov_admin@bulk-preempt-timeout-vfs-disabled:
- shard-lnl: NOTRUN -> [SKIP][79] ([Intel XE#7174])
[79]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-8/igt@xe_sriov_admin@bulk-preempt-timeout-vfs-disabled.html
* igt@xe_sriov_auto_provisioning@selfconfig-basic:
- shard-lnl: NOTRUN -> [SKIP][80] ([Intel XE#4130] / [Intel XE#7366])
[80]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-5/igt@xe_sriov_auto_provisioning@selfconfig-basic.html
* igt@xe_sriov_flr@flr-twice:
- shard-bmg: [PASS][81] -> [FAIL][82] ([Intel XE#6569])
[81]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-4/igt@xe_sriov_flr@flr-twice.html
[82]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@xe_sriov_flr@flr-twice.html
* igt@xe_sriov_vfio@bind-unbind-vfs@numvfs-16:
- shard-bmg: [PASS][83] -> [FAIL][84] ([Intel XE#7992]) +24 other tests fail
[83]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-3/igt@xe_sriov_vfio@bind-unbind-vfs@numvfs-16.html
[84]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@xe_sriov_vfio@bind-unbind-vfs@numvfs-16.html
#### Possible fixes ####
* igt@kms_flip@flip-vs-expired-vblank-interruptible:
- shard-bmg: [FAIL][85] ([Intel XE#3321]) -> [PASS][86] +1 other test pass
[85]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-7/igt@kms_flip@flip-vs-expired-vblank-interruptible.html
[86]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-1/igt@kms_flip@flip-vs-expired-vblank-interruptible.html
* igt@xe_evict@evict-mixed-many-threads-small:
- shard-bmg: [INCOMPLETE][87] ([Intel XE#6321] / [Intel XE#8355]) -> [PASS][88]
[87]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-8/igt@xe_evict@evict-mixed-many-threads-small.html
[88]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-8/igt@xe_evict@evict-mixed-many-threads-small.html
* igt@xe_exec_system_allocator@fault-benchmark:
- shard-bmg: [FAIL][89] ([Intel XE#8020]) -> [PASS][90]
[89]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-7/igt@xe_exec_system_allocator@fault-benchmark.html
[90]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-10/igt@xe_exec_system_allocator@fault-benchmark.html
* igt@xe_fault_injection@inject-fault-probe-function-xe_device_probe_early:
- shard-bmg: [ABORT][91] ([Intel XE#8007]) -> [PASS][92] +1 other test pass
[91]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-3/igt@xe_fault_injection@inject-fault-probe-function-xe_device_probe_early.html
[92]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@xe_fault_injection@inject-fault-probe-function-xe_device_probe_early.html
#### Warnings ####
* igt@kms_chamelium_edid@hdmi-edid-stress-resolution-non-4k:
- shard-bmg: [ABORT][93] ([Intel XE#8007]) -> [SKIP][94] ([Intel XE#2252])
[93]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-5/igt@kms_chamelium_edid@hdmi-edid-stress-resolution-non-4k.html
[94]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-4/igt@kms_chamelium_edid@hdmi-edid-stress-resolution-non-4k.html
- shard-lnl: [ABORT][95] ([Intel XE#8007]) -> [SKIP][96] ([Intel XE#373])
[95]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-lnl-5/igt@kms_chamelium_edid@hdmi-edid-stress-resolution-non-4k.html
[96]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-lnl-3/igt@kms_chamelium_edid@hdmi-edid-stress-resolution-non-4k.html
* igt@kms_hdr@brightness-with-hdr:
- shard-bmg: [SKIP][97] ([Intel XE#3544]) -> [SKIP][98] ([Intel XE#3374] / [Intel XE#3544])
[97]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c/shard-bmg-4/igt@kms_hdr@brightness-with-hdr.html
[98]: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/shard-bmg-2/igt@kms_hdr@brightness-with-hdr.html
[Intel XE#1124]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1124
[Intel XE#1178]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1178
[Intel XE#1340]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1340
[Intel XE#1392]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1392
[Intel XE#1397]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1397
[Intel XE#1421]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1421
[Intel XE#1489]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1489
[Intel XE#1745]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1745
[Intel XE#2168]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2168
[Intel XE#2234]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2234
[Intel XE#2252]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2252
[Intel XE#2311]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2311
[Intel XE#2313]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2313
[Intel XE#2320]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2320
[Intel XE#2322]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2322
[Intel XE#2325]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2325
[Intel XE#2327]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2327
[Intel XE#2328]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2328
[Intel XE#2352]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2352
[Intel XE#2413]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2413
[Intel XE#2459]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2459
[Intel XE#2499]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2499
[Intel XE#2596]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2596
[Intel XE#2652]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2652
[Intel XE#2763]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2763
[Intel XE#2850]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2850
[Intel XE#2887]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/2887
[Intel XE#301]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/301
[Intel XE#309]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/309
[Intel XE#3304]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3304
[Intel XE#3321]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3321
[Intel XE#3374]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3374
[Intel XE#3432]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3432
[Intel XE#3544]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3544
[Intel XE#367]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/367
[Intel XE#373]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/373
[Intel XE#3904]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/3904
[Intel XE#4130]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/4130
[Intel XE#4141]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/4141
[Intel XE#584]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/584
[Intel XE#607]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/607
[Intel XE#6126]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6126
[Intel XE#6196]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6196
[Intel XE#6266]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6266
[Intel XE#6312]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6312
[Intel XE#6321]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6321
[Intel XE#6503]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6503
[Intel XE#651]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/651
[Intel XE#6540]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6540
[Intel XE#656]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/656
[Intel XE#6569]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6569
[Intel XE#6599]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6599
[Intel XE#688]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/688
[Intel XE#6886]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6886
[Intel XE#6911]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6911
[Intel XE#6964]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/6964
[Intel XE#7061]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7061
[Intel XE#7174]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7174
[Intel XE#7178]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7178
[Intel XE#7283]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7283
[Intel XE#7321]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7321
[Intel XE#7342]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7342
[Intel XE#7343]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7343
[Intel XE#7351]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7351
[Intel XE#7356]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7356
[Intel XE#7358]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7358
[Intel XE#7361]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7361
[Intel XE#7366]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7366
[Intel XE#7367]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7367
[Intel XE#7369]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7369
[Intel XE#7372]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7372
[Intel XE#7374]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7374
[Intel XE#7378]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7378
[Intel XE#7385]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7385
[Intel XE#7399]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7399
[Intel XE#7435]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7435
[Intel XE#7444]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7444
[Intel XE#7453]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7453
[Intel XE#7482]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7482
[Intel XE#7571]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7571
[Intel XE#7695]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7695
[Intel XE#776]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/776
[Intel XE#7793]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7793
[Intel XE#7794]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7794
[Intel XE#7865]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7865
[Intel XE#7905]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7905
[Intel XE#7992]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/7992
[Intel XE#8007]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8007
[Intel XE#8020]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8020
[Intel XE#8265]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8265
[Intel XE#8355]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8355
[Intel XE#8364]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8364
[Intel XE#8369]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8369
[Intel XE#8370]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8370
[Intel XE#8374]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8374
[Intel XE#8378]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8378
[Intel XE#8399]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/8399
[Intel XE#944]: https://gitlab.freedesktop.org/drm/xe/kernel/issues/944
Build changes
-------------
* IGT: IGT_8991 -> IGT_8992
* Linux: xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c -> xe-pw-169984v1
IGT_8991: c5721520bb6611ab8fcbe27db0c120b72d25b99e @ https://gitlab.freedesktop.org/drm/igt-gpu-tools.git
IGT_8992: 1e912fa143a35c4238a1fbcf94443175d8ce1d60 @ https://gitlab.freedesktop.org/drm/igt-gpu-tools.git
xe-5364-331949b3b9225375d72a6402cf94b5d6c6621d1c: 331949b3b9225375d72a6402cf94b5d6c6621d1c
xe-pw-169984v1: 169984v1
== Logs ==
For more details see: https://intel-gfx-ci.01.org/tree/intel-xe/xe-pw-169984v1/index.html
[-- Attachment #2: Type: text/html, Size: 37160 bytes --]
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
2026-07-08 9:15 ` [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs Nitin Gote
@ 2026-07-08 12:37 ` Thomas Hellström
2026-07-09 10:13 ` Gote, Nitin R
0 siblings, 1 reply; 11+ messages in thread
From: Thomas Hellström @ 2026-07-08 12:37 UTC (permalink / raw)
To: Nitin Gote, intel-xe; +Cc: stable, Christian Konig, Matthew Auld
Hi, Nitin,
On Wed, 2026-07-08 at 14:45 +0530, Nitin Gote wrote:
> When a dma-buf importer creates a ttm_bo_type_sg BO with bo-
> >base.resv
> pointing at the exporter's dma_buf->resv and dma_buf_dynamic_attach()
> fails, no dma_buf reference is held. The exporter can be freed before
> the delayed_delete worker calls dma_resv_lock(bo->base.resv), causing
> a
> use-after-free:
>
> Oops: general protection fault, probably for non-canonical address
> 0x6b6b6b6b6b6b6b9c
> Workqueue: ttm ttm_bo_delayed_delete [ttm]
> RIP: 0010:mutex_can_spin_on_owner+0x3f/0xc0
>
> ttm_bo_individualize_resv() skips the resv swap for all sg BOs to
> keep
> the shared resv available for delayed_delete to release the dma-buf
> mapping. A BO whose attach never succeeded has no mapping to release,
> yet it keeps bo->base.resv pointing at the exporter resv that
> delayed_delete later locks once the exporter is gone.
>
> Fix this by checking bo->base.import_attach, which is set only after
> a
> successful attach. The check is placed after dma_resv_copy_fences()
> so
> successful imports still copy fences to _resv before returning,
> keeping
> the shared resv for delayed_delete. Failed imports fall through to
> swap
> resv to _resv, so delayed_delete never locks the stale exporter resv.
>
> Closes:
> https://gitlab.freedesktop.org/drm/xe/kernel/-/work_items/8023
> Fixes: d99fbd9aab62 ("drm/ttm: Always take the bo delayed cleanup
> path for imported bos")
> Cc: stable@vger.kernel.org # v6.8+
> Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
> Cc: Christian Konig <christian.koenig@amd.com>
> Cc: Matthew Auld <matthew.auld@intel.com>
> Assisted-by: GitHub_Copilot:claude-sonnet-4.6
> Reviewed-by: Christian König <christian.koenig@amd.com>
> Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
It seems you dropped the patch changelog?
Also the WARN_ON_ONCE() we discussed for last version?
/Thomas
> ---
> drivers/gpu/drm/ttm/ttm_bo.c | 24 +++++++++++++++---------
> 1 file changed, 15 insertions(+), 9 deletions(-)
>
> diff --git a/drivers/gpu/drm/ttm/ttm_bo.c
> b/drivers/gpu/drm/ttm/ttm_bo.c
> index 3980f376e3ba..f157e259dd5f 100644
> --- a/drivers/gpu/drm/ttm/ttm_bo.c
> +++ b/drivers/gpu/drm/ttm/ttm_bo.c
> @@ -203,15 +203,21 @@ static int ttm_bo_individualize_resv(struct
> ttm_buffer_object *bo)
> if (r)
> return r;
>
> - if (bo->type != ttm_bo_type_sg) {
> - /* This works because the BO is about to be
> destroyed and nobody
> - * reference it any more. The only tricky case is
> the trylock on
> - * the resv object while holding the lru_lock.
> - */
> - spin_lock(&bo->bdev->lru_lock);
> - bo->base.resv = &bo->base._resv;
> - spin_unlock(&bo->bdev->lru_lock);
> - }
> + /*
> + * Successfully imported sg BOs need the shared resv for
> dma-buf
> + * cleanup. Failed imports have no attachment or mapping and
> can
> + * use the private _resv.
> + */
> + if (bo->type == ttm_bo_type_sg && bo->base.import_attach)
> + return 0;
> +
> + /* This works because the BO is about to be destroyed and
> nobody
> + * references it any more. The only tricky case is the
> trylock on
> + * the resv object while holding the lru_lock.
> + */
> + spin_lock(&bo->bdev->lru_lock);
> + bo->base.resv = &bo->base._resv;
> + spin_unlock(&bo->bdev->lru_lock);
>
> return r;
> }
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds
2026-07-08 9:15 ` [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds Nitin Gote
@ 2026-07-08 12:52 ` Thomas Hellström
2026-07-09 10:14 ` Gote, Nitin R
0 siblings, 1 reply; 11+ messages in thread
From: Thomas Hellström @ 2026-07-08 12:52 UTC (permalink / raw)
To: Nitin Gote, intel-xe; +Cc: Christian Koenig, Matthew Auld
On Wed, 2026-07-08 at 14:45 +0530, Nitin Gote wrote:
> Imported dma-buf BOs are created as ttm_bo_type_sg with bo->base.resv
> pointing at the exporter's resv. They are initialized with system
> placement, which allocates a ttm_resource and makes the BO visible to
> TTM LRU walkers before dma_buf_dynamic_attach() has succeeded.
>
> If attach fails, xe holds no dma-buf reference, but an LRU walker may
> already have referenced the BO and locked bo->base.resv (the exporter
> resv). If the exporter is then freed, this is a use-after-free.
>
> Use an empty initial placement for imported sg BOs so bo->resource
> stays NULL and the BO is never added to an LRU before attach
> succeeds.
>
> As a result sg BOs now start without a resource, so their first move
> has old_mem == NULL. Check ttm_bo_type_sg before the creation path in
> xe_bo_move() so imports always use the dma-buf move path,
> and handle
> resource-less sg BOs in xe_evict_flags() before dereferencing
> tbo->resource.
Better if evict is not called on them at all. Could we have the dma-buf
move_notify immediately return 0 if the bo has no resource?
>
> Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
> Cc: Christian Koenig <christian.koenig@amd.com>
> Cc: Matthew Auld <matthew.auld@intel.com>
> Assisted-by: GitHub_Copilot:claude-sonnet-4.6
> Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
> ---
> drivers/gpu/drm/xe/xe_bo.c | 53 ++++++++++++++++++++++++++++--------
> --
> 1 file changed, 39 insertions(+), 14 deletions(-)
>
> diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
> index 85e6d9a0f575..050de0f13232 100644
> --- a/drivers/gpu/drm/xe/xe_bo.c
> +++ b/drivers/gpu/drm/xe/xe_bo.c
> @@ -63,6 +63,12 @@ static struct ttm_placement sys_placement = {
>
> static struct ttm_placement purge_placement;
>
> +/* Initial placement: keeps imported sg BOs resource-less (off the
> LRU)
> + * until dma_buf_dynamic_attach() succeeds so they are not visible
> to LRU
> + * walkers while bo->base.resv still points at the exporter.
> + */
> +static struct ttm_placement sg_init_placement;
> +
> static const struct ttm_place tt_placement_flags[] = {
> {
> .fpfn = 0,
> @@ -342,9 +348,14 @@ static void xe_evict_flags(struct
> ttm_buffer_object *tbo,
> }
>
> /*
> - * For xe, sg bos that are evicted to system just triggers a
> - * rebind of the sg list upon subsequent validation to
> XE_PL_TT.
> + * sg BOs (dma-buf imports) evict to system and may have no
> + * resource yet, so handle them before dereferencing tbo-
> >resource.
> */
> + if (tbo->type == ttm_bo_type_sg) {
> + *placement = sys_placement;
> + return;
> + }
> +
.. and then if possible skip the above changes?
Thanks,
Thomas
> switch (tbo->resource->mem_type) {
> case XE_PL_VRAM0:
> case XE_PL_VRAM1:
> @@ -980,6 +991,22 @@ static int xe_bo_move(struct ttm_buffer_object
> *ttm_bo, bool evict,
> return 0;
> }
>
> + /*
> + * sg BOs (dma-buf imports) must always be moved via the
> dmabuf path,
> + * regardless of whether they have an existing resource.
> This check must
> + * come before the creation-path check below: sg BOs start
> with no
> + * resource (sg_init_placement), so their first move to
> XE_PL_TT has
> + * old_mem == NULL, which would otherwise incorrectly
> trigger the
> + * creation path and call xe_tt_map_sg() instead of
> xe_bo_move_dmabuf().
> + */
> + if (ttm_bo->type == ttm_bo_type_sg) {
> + if (new_mem->mem_type == XE_PL_SYSTEM)
> + ret = xe_bo_move_notify(bo, ctx);
> + if (!ret)
> + ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
> + return ret;
> + }
> +
> /* Bo creation path, moving to system or TT. */
> if ((!old_mem && ttm) && !handle_system_ccs) {
> if (new_mem->mem_type == XE_PL_TT)
> @@ -989,14 +1016,6 @@ static int xe_bo_move(struct ttm_buffer_object
> *ttm_bo, bool evict,
> goto out;
> }
>
> - if (ttm_bo->type == ttm_bo_type_sg) {
> - if (new_mem->mem_type == XE_PL_SYSTEM)
> - ret = xe_bo_move_notify(bo, ctx);
> - if (!ret)
> - ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
> - return ret;
> - }
> -
> tt_has_data = ttm && (ttm_tt_is_populated(ttm) ||
> ttm_tt_is_swapped(ttm));
>
> move_lacks_source = !old_mem || (handle_system_ccs ? (!bo-
> >ccs_cleared) :
> @@ -2379,10 +2398,16 @@ struct xe_bo *xe_bo_init_locked(struct
> xe_device *xe, struct xe_bo *bo,
> }
> }
>
> - /* Defer populating type_sg bos */
> - placement = (type == ttm_bo_type_sg ||
> - bo->flags & XE_BO_FLAG_DEFER_BACKING) ?
> &sys_placement :
> - &bo->placement;
> + /*
> + * For sg BOs (dma-buf imports) use sg_init_placement
> (num_placement=0)
> + * so that ttm_bo_validate() leaves bo->resource = NULL. The
> BO is then
> + * not on any LRU list before dma_buf_dynamic_attach()
> succeeds, which
> + * prevents the LRU-walker UAF when attach fails.
> + * For other BOs that request deferred backing, use
> sys_placement.
> + */
> + placement = (type == ttm_bo_type_sg) ? &sg_init_placement :
> + (bo->flags & XE_BO_FLAG_DEFER_BACKING) ?
> &sys_placement :
> + &bo->placement;
> err = ttm_bo_init_reserved(&xe->ttm, &bo->ttm, type,
> placement, alignment,
> &ctx, NULL, resv,
> xe_ttm_bo_destroy);
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
2026-07-08 12:37 ` Thomas Hellström
@ 2026-07-09 10:13 ` Gote, Nitin R
0 siblings, 0 replies; 11+ messages in thread
From: Gote, Nitin R @ 2026-07-09 10:13 UTC (permalink / raw)
To: Thomas Hellström, intel-xe@lists.freedesktop.org
Cc: stable@vger.kernel.org, Christian Konig, Auld, Matthew
> -----Original Message-----
> From: Thomas Hellström <thomas.hellstrom@linux.intel.com>
> Sent: Wednesday, July 8, 2026 6:08 PM
> To: Gote, Nitin R <nitin.r.gote@intel.com>; intel-xe@lists.freedesktop.org
> Cc: stable@vger.kernel.org; Christian Konig <christian.koenig@amd.com>; Auld,
> Matthew <matthew.auld@intel.com>
> Subject: Re: [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
>
> Hi, Nitin,
>
> On Wed, 2026-07-08 at 14:45 +0530, Nitin Gote wrote:
> > When a dma-buf importer creates a ttm_bo_type_sg BO with bo-
> > >base.resv
> > pointing at the exporter's dma_buf->resv and dma_buf_dynamic_attach()
> > fails, no dma_buf reference is held. The exporter can be freed before
> > the delayed_delete worker calls dma_resv_lock(bo->base.resv), causing
> > a
> > use-after-free:
> >
> > Oops: general protection fault, probably for non-canonical address
> > 0x6b6b6b6b6b6b6b9c
> > Workqueue: ttm ttm_bo_delayed_delete [ttm]
> > RIP: 0010:mutex_can_spin_on_owner+0x3f/0xc0
> >
> > ttm_bo_individualize_resv() skips the resv swap for all sg BOs to keep
> > the shared resv available for delayed_delete to release the dma-buf
> > mapping. A BO whose attach never succeeded has no mapping to release,
> > yet it keeps bo->base.resv pointing at the exporter resv that
> > delayed_delete later locks once the exporter is gone.
> >
> > Fix this by checking bo->base.import_attach, which is set only after a
> > successful attach. The check is placed after dma_resv_copy_fences() so
> > successful imports still copy fences to _resv before returning,
> > keeping the shared resv for delayed_delete. Failed imports fall
> > through to swap resv to _resv, so delayed_delete never locks the stale
> > exporter resv.
> >
> > Closes:
> > https://gitlab.freedesktop.org/drm/xe/kernel/-/work_items/8023
> > Fixes: d99fbd9aab62 ("drm/ttm: Always take the bo delayed cleanup path
> > for imported bos")
> > Cc: stable@vger.kernel.org # v6.8+
> > Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
> > Cc: Christian Konig <christian.koenig@amd.com>
> > Cc: Matthew Auld <matthew.auld@intel.com>
> > Assisted-by: GitHub_Copilot:claude-sonnet-4.6
> > Reviewed-by: Christian König <christian.koenig@amd.com>
> > Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
>
> It seems you dropped the patch changelog?
>
> Also the WARN_ON_ONCE() we discussed for last version?
>
Sorry about both.
I had added the changelog in the cover letter only; I'll add it below the --- in the patch as well.
Also, I should have kept it. Will add it back: WARN_ON_ONCE(bo->type == ttm_bo_type_sg && bo->resource);
With the xe patch (patch 2)applied, this should not hit for xe anymore, but yes it will help to catch other driver that makes a failed sg import LRU-visible before attach succeeds.
I will update this in v6.
Thank you,
Nitin
> /Thomas
>
>
>
> > ---
> > drivers/gpu/drm/ttm/ttm_bo.c | 24 +++++++++++++++---------
> > 1 file changed, 15 insertions(+), 9 deletions(-)
> >
> > diff --git a/drivers/gpu/drm/ttm/ttm_bo.c
> > b/drivers/gpu/drm/ttm/ttm_bo.c index 3980f376e3ba..f157e259dd5f 100644
> > --- a/drivers/gpu/drm/ttm/ttm_bo.c
> > +++ b/drivers/gpu/drm/ttm/ttm_bo.c
> > @@ -203,15 +203,21 @@ static int ttm_bo_individualize_resv(struct
> > ttm_buffer_object *bo)
> > if (r)
> > return r;
> >
> > - if (bo->type != ttm_bo_type_sg) {
> > - /* This works because the BO is about to be
> > destroyed and nobody
> > - * reference it any more. The only tricky case is
> > the trylock on
> > - * the resv object while holding the lru_lock.
> > - */
> > - spin_lock(&bo->bdev->lru_lock);
> > - bo->base.resv = &bo->base._resv;
> > - spin_unlock(&bo->bdev->lru_lock);
> > - }
> > + /*
> > + * Successfully imported sg BOs need the shared resv for
> > dma-buf
> > + * cleanup. Failed imports have no attachment or mapping and
> > can
> > + * use the private _resv.
> > + */
> > + if (bo->type == ttm_bo_type_sg && bo->base.import_attach)
> > + return 0;
> > +
> > + /* This works because the BO is about to be destroyed and
> > nobody
> > + * references it any more. The only tricky case is the
> > trylock on
> > + * the resv object while holding the lru_lock.
> > + */
> > + spin_lock(&bo->bdev->lru_lock);
> > + bo->base.resv = &bo->base._resv;
> > + spin_unlock(&bo->bdev->lru_lock);
> >
> > return r;
> > }
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds
2026-07-08 12:52 ` Thomas Hellström
@ 2026-07-09 10:14 ` Gote, Nitin R
0 siblings, 0 replies; 11+ messages in thread
From: Gote, Nitin R @ 2026-07-09 10:14 UTC (permalink / raw)
To: Thomas Hellström, intel-xe@lists.freedesktop.org
Cc: Christian Koenig, Auld, Matthew
> -----Original Message-----
> From: Thomas Hellström <thomas.hellstrom@linux.intel.com>
> Sent: Wednesday, July 8, 2026 6:22 PM
> To: Gote, Nitin R <nitin.r.gote@intel.com>; intel-xe@lists.freedesktop.org
> Cc: Christian Koenig <christian.koenig@amd.com>; Auld, Matthew
> <matthew.auld@intel.com>
> Subject: Re: [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf
> attach succeeds
>
> On Wed, 2026-07-08 at 14:45 +0530, Nitin Gote wrote:
> > Imported dma-buf BOs are created as ttm_bo_type_sg with bo->base.resv
> > pointing at the exporter's resv. They are initialized with system
> > placement, which allocates a ttm_resource and makes the BO visible to
> > TTM LRU walkers before dma_buf_dynamic_attach() has succeeded.
> >
> > If attach fails, xe holds no dma-buf reference, but an LRU walker may
> > already have referenced the BO and locked bo->base.resv (the exporter
> > resv). If the exporter is then freed, this is a use-after-free.
> >
> > Use an empty initial placement for imported sg BOs so bo->resource
> > stays NULL and the BO is never added to an LRU before attach succeeds.
> >
> > As a result sg BOs now start without a resource, so their first move
> > has old_mem == NULL. Check ttm_bo_type_sg before the creation path in
> > xe_bo_move() so imports always use the dma-buf move path,
>
>
> > and handle
> > resource-less sg BOs in xe_evict_flags() before dereferencing
> > tbo->resource.
>
> Better if evict is not called on them at all. Could we have the dma-buf
> move_notify immediately return 0 if the bo has no resource?
>
Agreed, will add an early return in xe_dma_buf_move_notify() for !bo->ttm.resource.
> >
> > Cc: Thomas Hellstrom <thomas.hellstrom@linux.intel.com>
> > Cc: Christian Koenig <christian.koenig@amd.com>
> > Cc: Matthew Auld <matthew.auld@intel.com>
> > Assisted-by: GitHub_Copilot:claude-sonnet-4.6
> > Signed-off-by: Nitin Gote <nitin.r.gote@intel.com>
> > ---
> > drivers/gpu/drm/xe/xe_bo.c | 53 ++++++++++++++++++++++++++++--------
> > --
> > 1 file changed, 39 insertions(+), 14 deletions(-)
> >
> > diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
> > index 85e6d9a0f575..050de0f13232 100644
> > --- a/drivers/gpu/drm/xe/xe_bo.c
> > +++ b/drivers/gpu/drm/xe/xe_bo.c
> > @@ -63,6 +63,12 @@ static struct ttm_placement sys_placement = {
> >
> > static struct ttm_placement purge_placement;
> >
> > +/* Initial placement: keeps imported sg BOs resource-less (off the
> > LRU)
> > + * until dma_buf_dynamic_attach() succeeds so they are not visible
> > to LRU
> > + * walkers while bo->base.resv still points at the exporter.
> > + */
> > +static struct ttm_placement sg_init_placement;
> > +
> > static const struct ttm_place tt_placement_flags[] = {
> > {
> > .fpfn = 0,
> > @@ -342,9 +348,14 @@ static void xe_evict_flags(struct
> > ttm_buffer_object *tbo,
> > }
> >
> > /*
> > - * For xe, sg bos that are evicted to system just triggers a
> > - * rebind of the sg list upon subsequent validation to
> > XE_PL_TT.
> > + * sg BOs (dma-buf imports) evict to system and may have no
> > + * resource yet, so handle them before dereferencing tbo-
> > >resource.
> > */
> > + if (tbo->type == ttm_bo_type_sg) {
> > + *placement = sys_placement;
> > + return;
> > + }
> > +
>
> .. and then if possible skip the above changes?
>
Yes, will drop the xe_evict_flags() change.
However, CI showed another issue with the empty-placement (num_placement=0) approach,
which seen only on BMG-VM devices and not reproduced on bare-metal BMG.
num_placement=0 keeps the BO off the LRU, but it can make ttm_bo_validate() go through ttm_bo_pipeline_gutting() and create a
transfer/ghost BO when the exporter resv has unsignaled fences. That object can outlive the exporter and we still hit the UAF in
dma_resv_copy_fences() from delayed_delete.
I'm further checking on this approach.
> Thanks,
> Thomas
>
>
>
> > switch (tbo->resource->mem_type) {
> > case XE_PL_VRAM0:
> > case XE_PL_VRAM1:
> > @@ -980,6 +991,22 @@ static int xe_bo_move(struct ttm_buffer_object
> > *ttm_bo, bool evict,
> > return 0;
> > }
> >
> > + /*
> > + * sg BOs (dma-buf imports) must always be moved via the
> > dmabuf path,
> > + * regardless of whether they have an existing resource.
> > This check must
> > + * come before the creation-path check below: sg BOs start
> > with no
> > + * resource (sg_init_placement), so their first move to
> > XE_PL_TT has
> > + * old_mem == NULL, which would otherwise incorrectly
> > trigger the
> > + * creation path and call xe_tt_map_sg() instead of
> > xe_bo_move_dmabuf().
> > + */
> > + if (ttm_bo->type == ttm_bo_type_sg) {
> > + if (new_mem->mem_type == XE_PL_SYSTEM)
> > + ret = xe_bo_move_notify(bo, ctx);
> > + if (!ret)
> > + ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
> > + return ret;
> > + }
> > +
> > /* Bo creation path, moving to system or TT. */
> > if ((!old_mem && ttm) && !handle_system_ccs) {
> > if (new_mem->mem_type == XE_PL_TT)
> > @@ -989,14 +1016,6 @@ static int xe_bo_move(struct ttm_buffer_object
> > *ttm_bo, bool evict,
> > goto out;
> > }
> >
> > - if (ttm_bo->type == ttm_bo_type_sg) {
> > - if (new_mem->mem_type == XE_PL_SYSTEM)
> > - ret = xe_bo_move_notify(bo, ctx);
> > - if (!ret)
> > - ret = xe_bo_move_dmabuf(ttm_bo, new_mem);
> > - return ret;
> > - }
> > -
> > tt_has_data = ttm && (ttm_tt_is_populated(ttm) ||
> > ttm_tt_is_swapped(ttm));
> >
> > move_lacks_source = !old_mem || (handle_system_ccs ? (!bo-
> > >ccs_cleared) :
> > @@ -2379,10 +2398,16 @@ struct xe_bo *xe_bo_init_locked(struct
> > xe_device *xe, struct xe_bo *bo,
> > }
> > }
> >
> > - /* Defer populating type_sg bos */
> > - placement = (type == ttm_bo_type_sg ||
> > - bo->flags & XE_BO_FLAG_DEFER_BACKING) ?
> > &sys_placement :
> > - &bo->placement;
> > + /*
> > + * For sg BOs (dma-buf imports) use sg_init_placement
> > (num_placement=0)
> > + * so that ttm_bo_validate() leaves bo->resource = NULL. The
> > BO is then
> > + * not on any LRU list before dma_buf_dynamic_attach()
> > succeeds, which
> > + * prevents the LRU-walker UAF when attach fails.
> > + * For other BOs that request deferred backing, use
> > sys_placement.
> > + */
> > + placement = (type == ttm_bo_type_sg) ? &sg_init_placement :
> > + (bo->flags & XE_BO_FLAG_DEFER_BACKING) ?
> > &sys_placement :
> > + &bo->placement;
> > err = ttm_bo_init_reserved(&xe->ttm, &bo->ttm, type,
> > placement, alignment,
> > &ctx, NULL, resv,
> > xe_ttm_bo_destroy);
^ permalink raw reply [flat|nested] 11+ messages in thread
* RE: [PATCH v5 0/2] Fix UAF on dma-buf import attach failure
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
` (4 preceding siblings ...)
2026-07-08 10:53 ` ✓ Xe.CI.FULL: " Patchwork
@ 2026-07-10 8:00 ` Gote, Nitin R
5 siblings, 0 replies; 11+ messages in thread
From: Gote, Nitin R @ 2026-07-10 8:00 UTC (permalink / raw)
To: intel-xe@lists.freedesktop.org
Cc: Thomas Hellström, Auld, Matthew, Christian Koenig
Hi,
Please drop this series - both patches:
[PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
[PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf
attach succeeds
These addressed the UAFs (patch 1 the TTM delayed-delete path,
patch 2 the xe LRU-walker path) and were getting increasingly complex.
Patch 2 also regressed in CI BAT: the empty placement (num_placement=0) took the ttm_bo_pipeline_gutting() path,
which creates a ghost BO that outlives the exporter and hit the same UAF in dma_resv_copy_fences() during delayed delete.
Following Thomas' review and the approach he suggested (discussed offline), we're going with
a simpler root-cause fix in xe instead: hold a dma-buf reference for the
whole lifetime of the imported BO, so the shared resv can never be freed
while the BO still references it. This closes all the paths at once and
drops the need for the TTM change and the LRU/placement handling.
I'll send the replacement as a separate patch:
drm/xe: Hold a dma-buf reference for imported Bos
Thank you,
Nitin
> -----Original Message-----
> From: Gote, Nitin R <nitin.r.gote@intel.com>
> Sent: Wednesday, July 8, 2026 2:45 PM
> To: intel-xe@lists.freedesktop.org
> Cc: Gote, Nitin R <nitin.r.gote@intel.com>
> Subject: [PATCH v5 0/2] Fix UAF on dma-buf import attach failure
>
> This series fixes a use-after-free that can happen when importing a dma-buf and
> dma_buf_dynamic_attach() fails.
>
> The imported BO is created as ttm_bo_type_sg with bo->base.resv pointing at the
> exporter's dma_buf->resv before the attach is attempted. If the attach fails, the
> importer holds no attachment and no dma-buf reference, yet the BO still points at
> the exporter's resv. Once the exporter is freed, a later dma_resv_lock(bo-
> >base.resv) can hit freed memory:
>
> Oops: general protection fault, probably for non-canonical address
> 0x6b6b6b6b6b6b6b9c
> Workqueue: ttm ttm_bo_delayed_delete [ttm]
> RIP: 0010:mutex_can_spin_on_owner+0x3f/0xc0
>
> There are two places where the stale resv can be reached:
>
> Patch 1 fixes the TTM delayed-delete path. Failed sg imports now individualize
> bo->base.resv to the private _resv, keyed on import_attach, while successful
> imports keep the shared exporter resv for normal dma-buf cleanup.
>
> Patch 2 fixes the xe LRU-walker path raised during review. xe was creating
> imported sg BOs with a ttm_resource before attach succeeded, making them
> visible to LRU walkers. An LRU walker could then take a BO reference and lock
> bo->base.resv before the TTM release path could individualize it. xe now creates
> imported sg BOs with empty initial placement, keeping bo->resource NULL and
> off the LRU until after a successful attach.
>
> v5:
> - Add drm/xe patch to keep imported sg BOs off the LRU before attach
> succeeds; the TTM fix alone is not sufficient for xe if the BO is
> already LRU-visible. (Thomas)
> v4 patch:
> https://patchwork.freedesktop.org/patch/736663/?series=169129&rev=2
> - Patch 1 (drm/ttm) carries Christian's Reviewed-by from v4.
>
> v4:
> - Moved import_attach check to after dma_resv_copy_fences() so fences
> are copied before returning for successful imports (Thomas).
> - Removed exporter-alive claim from commit message (Thomas).
>
> v3:
> - Dropped the xe-side reordering approach since importer_priv must be
> valid when dma_buf_dynamic_attach() publishes the attachment.
> - Per Christian's suggestion on the v1 thread, keyed the check on
> import_attach rather than removing the sg guard entirely.
> - Fixes both xe and amdgpu in a single TTM patch.
>
> Nitin Gote (2):
> drm/ttm: Fix UAF on dma-buf attach failure for sg BOs
> drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds
>
> drivers/gpu/drm/ttm/ttm_bo.c | 24 ++++++++++------
> drivers/gpu/drm/xe/xe_bo.c | 53 ++++++++++++++++++++++++++----------
> 2 files changed, 54 insertions(+), 23 deletions(-)
>
> --
> 2.50.1
^ permalink raw reply [flat|nested] 11+ messages in thread
end of thread, other threads:[~2026-07-10 8:00 UTC | newest]
Thread overview: 11+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-08 9:15 [PATCH v5 0/2] Fix UAF on dma-buf import attach failure Nitin Gote
2026-07-08 8:46 ` ✓ CI.KUnit: success for " Patchwork
2026-07-08 9:15 ` [PATCH v5 1/2] drm/ttm: Fix UAF on dma-buf attach failure for sg BOs Nitin Gote
2026-07-08 12:37 ` Thomas Hellström
2026-07-09 10:13 ` Gote, Nitin R
2026-07-08 9:15 ` [PATCH v5 2/2] drm/xe: Keep imported sg BOs off LRU until dma-buf attach succeeds Nitin Gote
2026-07-08 12:52 ` Thomas Hellström
2026-07-09 10:14 ` Gote, Nitin R
2026-07-08 9:22 ` ✓ Xe.CI.BAT: success for Fix UAF on dma-buf import attach failure Patchwork
2026-07-08 10:53 ` ✓ Xe.CI.FULL: " Patchwork
2026-07-10 8:00 ` [PATCH v5 0/2] " Gote, Nitin R
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox