Alexandre, could you take a look? 0xbad* generally comes from bad mmio reads. <div class="gmail_quote">On Aug 9, 2015 1:08 PM, "Eric Biggers" <<a href="mailto:ebiggers3@gmail.com">ebiggers3@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, I am testing Linux v4.2-rc5 and I am sporadically getting crashes shortly after startup in gk104_fifo_intr_runlist(). What I've found is that the 'mask' value read from offset 0x2a00 comes back as '0xbad0da00'. This causes the 'engn' variable to be assigned the value 9, which is invalid; then wake_up() is called on an uninitialized waitqueue which causes the crash. Reverting commit 1addc12648521d ("drm/nouveau/fifo/gk104: kick channels when deactivating them") seemed to make the problem go away, although I can't be 100% sure because the problem is sporadic. Attached an example of the kernel log up to the crash. Eric _______________________________________________ Nouveau mailing list <a href="mailto:Nouveau@lists.freedesktop.org">Nouveau@lists.freedesktop.org</a> <a href="http://lists.freedesktop.org/mailman/listinfo/nouveau" rel="noreferrer" target="_blank">http://lists.freedesktop.org/mailman/listinfo/nouveau</a> </blockquote></div>