Memory corruption starting in i915 code, in 3.2-rc5

Sun Dec 11 10:36:30 PST 2011

My system is a Fedora 16 x86_64 running self-compiled vanilla kernel 
(.config attached for -rc5). I am getting an apparent memory corruption 
that starts since linux 3.2-rc5. No such corruption was noticed in 
3.2-rc4. On the first instance, I eventually got a NULL pointer 
dereference and the screen went black, the keyboard was unresponsive, 
and I had to hard-reboot the machine. On the second instance, I managed 
to reboot the machine normally. The full message log is attached. An 
extract of the first WARNING:

Dec 11 00:38:47 karlalex kernel: [ 2016.175191] ------------[ cut here 
]------------
Dec 11 00:38:47 karlalex kernel: [ 2016.175200] WARNING: at 
lib/list_debug.c:30 __list_add+0x66/0x7f()
Dec 11 00:38:47 karlalex kernel: [ 2016.175202] Hardware name: OEM
Dec 11 00:38:47 karlalex kernel: [ 2016.175204] list_add corruption. 
prev->next should be next (ffff8800799756c0), but was ffff88005d42dcb0. 
(prev=ffff88005b278eb0).
Dec 11 00:38:47 karlalex kernel: [ 2016.175206] Modules linked in: 
tcp_lp fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat 
vboxpci(O) xt_CHECKSUM vboxnetadp(O) vboxnetflt(O) iptable_mangle tun 
bridge stp llc vboxdrv(O) lockd ip6t_REJECT nf_conntrack_ipv6 
nf_defrag_ipv6 ip6table_filter ip6_tables nf_conntrack_ipv4 
nf_defrag_ipv4 xt_state nf_conntrack snd_hda_codec_realtek snd_hda_intel 
snd_hda_codec snd_hwdep ppdev snd_seq snd_seq_device snd_pcm snd_timer 
snd soundcore microcode snd_page_alloc pcspkr i2c_i801 iTCO_wdt 
iTCO_vendor_support r8169 mii uinput parport_pc parport floppy sunrpc 
i915 drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: 
scsi_wait_scan]
Dec 11 00:38:47 karlalex kernel: [ 2016.175254] Pid: 1868, comm: 
gnome-shell Tainted: G           O 3.2.0-rc5 #18
Dec 11 00:38:47 karlalex kernel: [ 2016.175256] Call Trace:
Dec 11 00:38:47 karlalex kernel: [ 2016.175263]  [<ffffffff8105a3e8>] 
warn_slowpath_common+0x83/0x9b
Dec 11 00:38:47 karlalex kernel: [ 2016.175266]  [<ffffffff8105a4a3>] 
warn_slowpath_fmt+0x46/0x48
Dec 11 00:38:47 karlalex kernel: [ 2016.175270]  [<ffffffff810502f2>] ? 
get_parent_ip+0xe/0x3e
Dec 11 00:38:47 karlalex kernel: [ 2016.175273]  [<ffffffff812418ef>] 
__list_add+0x66/0x7f
Dec 11 00:38:47 karlalex kernel: [ 2016.175290]  [<ffffffffa007560f>] 
list_move_tail+0x27/0x2c [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175301]  [<ffffffffa00757cb>] 
i915_gem_retire_requests_ring+0xef/0x177 [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175312]  [<ffffffffa0076cbc>] 
i915_wait_request+0x401/0x447 [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175316]  [<ffffffff810502f2>] ? 
get_parent_ip+0xe/0x3e
Dec 11 00:38:47 karlalex kernel: [ 2016.175318]  [<ffffffff810502f2>] ? 
get_parent_ip+0xe/0x3e
Dec 11 00:38:47 karlalex kernel: [ 2016.175321]  [<ffffffff810502f2>] ? 
get_parent_ip+0xe/0x3e
Dec 11 00:38:47 karlalex kernel: [ 2016.175333]  [<ffffffffa0076d33>] 
i915_gem_object_wait_rendering+0x31/0x33 [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175344]  [<ffffffffa0077db2>] 
i915_gem_object_set_to_gtt_domain+0x53/0xd6 [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175355]  [<ffffffffa0077ec8>] 
i915_gem_set_domain_ioctl+0x93/0xcb [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175368]  [<ffffffffa001d78a>] 
drm_ioctl+0x2bf/0x397 [drm]
Dec 11 00:38:47 karlalex kernel: [ 2016.175371]  [<ffffffff811ee50b>] ? 
avc_has_perm_flags+0x61/0x7a
Dec 11 00:38:47 karlalex kernel: [ 2016.175383]  [<ffffffffa0077e35>] ? 
i915_gem_object_set_to_gtt_domain+0xd6/0xd6 [i915]
Dec 11 00:38:47 karlalex kernel: [ 2016.175386]  [<ffffffff811ef0a5>] ? 
inode_has_perm+0x32/0x34
Dec 11 00:38:47 karlalex kernel: [ 2016.175389]  [<ffffffff811ef14e>] ? 
file_has_perm+0xa7/0xc9
Dec 11 00:38:47 karlalex kernel: [ 2016.175394]  [<ffffffff8113f1bb>] 
do_vfs_ioctl+0x415/0x456
Dec 11 00:38:47 karlalex kernel: [ 2016.175397]  [<ffffffff8113f252>] 
sys_ioctl+0x56/0x7c
Dec 11 00:38:47 karlalex kernel: [ 2016.175402]  [<ffffffff814deb02>] 
system_call_fastpath+0x16/0x1b
Dec 11 00:38:47 karlalex kernel: [ 2016.175404] ---[ end trace 
9a493f8550a2caf6 ]---
Dec 11 00:38:47 karlalex kernel: [ 2016.428775] ------------[ cut here 
]------------

Both times, I had just turned on the machine and booted with -rc5. The 
first time, I rebooted into the stock kernel, then into -rc5 again, and 
I did not get any corruption. It seems that having just turned on the 
machine (as opposed to hard/soft rebooting) has something to do with 
this, but I could be wrong.

Output of lspci -v is attached.

Virtualbox module is compiled and loaded, but never used in either case. 
This module is also loaded in -rc4 and caused no problems for me.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: messages-20111211
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20111211/65dc89c3/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: .config
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20111211/65dc89c3/attachment-0001.asc>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: lspci.txt
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20111211/65dc89c3/attachment-0002.txt>