<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Deterministic crash on RX460 "NULL pointer dereference""
   href="https://bugs.freedesktop.org/show_bug.cgi?id=99264">99264</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Deterministic crash on RX460 "NULL pointer dereference"
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>DRI
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>DRM/AMDgpu
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>dri-devel@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>daniel.mantione@freepascal.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=128734" name="attach_128734" title="Complete syslog data from boot to crash">attachment 128734</a> <a href="attachment.cgi?id=128734&action=edit" title="Complete syslog data from boot to crash">[details]</a></span>
Complete syslog data from boot to crash

Hello,

I am in the process of migrating from a Radeon HD6670 to an RX 460 for quite a
few months now. I regularily fit the RX460, but keep running into issues,
crashes and others, that force me to install the HD6670 again if I need my
computer for serious work or even a more stable gaming situation. However, I am
making progress identifying issues, and it looks like there are 3 different
causes for crashes. One of them I can now reproduce very easy, and smells like
a real driver bug, so therefore I would like to report it.

My hardware is as follows:
 Xeon E5-2650v2 CPU (once it was an Opteron, but you stopped making new ones :(
)
 Supermicro X9SRE-3F mainboard
 32GB RAM
 HIS Radeon RX 460 2GB
 3 * HP LP2065 1600x1200 monitor
  - One connected via active DP to DVI converter
  - One connected via DVI
  - One connected via HDMI to DVI cable

My software configuration is as follows:
 OpenSuSE 13.1 with the following modifications:
  - Amd-staging-4.7 kernel as of 21 december 2016 (compiled it myself)
      (DAL is needed to use all my 3 monitors)
  - Xorg upgraded to 7.6  (via
<a href="http://download.opensuse.org/repositories/X11:/XOrg/openSUSE_13.1/">http://download.opensuse.org/repositories/X11:/XOrg/openSUSE_13.1/</a> )
  - Mesa upgraded to 13.0.1 (via
<a href="http://download.opensuse.org/repositories/X11:/XOrg/openSUSE_13.1/">http://download.opensuse.org/repositories/X11:/XOrg/openSUSE_13.1/</a> )

How to reproduce?

Using the game The Great Whale Road, I have captured the OpenGL command stream
with Apitrace:

<a href="http://apitrace.github.io/">http://apitrace.github.io/</a>

I have uploaded it here, be warned that this is a 770MB download:

<a href="http://www.freepascal.org/~daniel/greatwhaleroad.trace.bz2">http://www.freepascal.org/~daniel/greatwhaleroad.trace.bz2</a>

Then:

bunzip2 greatwhaleroad.trace.bz2
apitrace replay greatwhaleroad.trace

At the end of the replay, all monitors lose signal and go black. Because my
mainboard has a small Aspeed onboard VGA controller, I can switch my monitor
input to that VGA controller, login to the Linux VGA text console and recover
some information. In dmesg the stack trace below is visible. You can also see
that the X server and game processes are still running, but hanging inside the
kernel, so they cannot be killed.

Best regards,

DaniĆ«l Mantione

[ 1631.286172] BUG: unable to handle kernel NULL pointer dereference at
0000000000000030
[ 1631.333419] IP: [<ffffffffa08e3e7a>] amdgpu_gtt_mgr_alloc+0x2a/0x150
[amdgpu]
[ 1631.367823] PGD b9adf067 PUD b8ef5067 PMD 0
[ 1631.402734] Oops: 0000 [#1] SMP
[ 1631.436707] Modules linked in: ppdev parport zram lz4_compress
lz4_decompress fuse af_packet k8temp hwmon_vid sr_mod cdrom amdkfd amd_iommu_v2
amdgpu x86_pkg_temp_thermal
intel_powerclamp coretemp snd_seq_dummy snd_seq_oss snd_emu10k1_synth
snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_seq_midi
snd_seq_midi_event kvm_intel
snd_hda_codec_hdmi snd_emu10k1 snd_hda_intel kvm snd_hda_codec snd_rawmidi
snd_hda_core snd_ac97_codec ipmi_ssif ac97_bus snd_pcm_oss snd_pcm irqbypass
crct10dif_pclmul isci
crc32_pclmul crc32c_intel ttm ghash_clmulni_intel snd_util_mem snd_hwdep
snd_seq drbg iTCO_wdt iTCO_vendor_support igb ansi_cprng drm_kms_helper libsas
aesni_intel
snd_seq_device snd_timer ablk_helper cryptd lrw snd_mixer_oss gf128mul mei_me
ptp glue_helper drm snd emu10k1_gp usb_storage mei scsi_transport_sas
[ 1631.592832]  aes_x86_64 pps_core joydev md_mod gameport ioatdma backlight
soundcore fb_sys_fops pcspkr serio_raw shpchp sysimgblt i2c_i801 sysfillrect
syscopyarea lpc_ich
dca i2c_algo_bit mfd_core wmi ipmi_si ipmi_msghandler button binfmt_misc sg
dm_mod autofs4 ext4 mbcache jbd2 crc16 hid_generic usbhid ehci_pci ehci_hcd
usbcore sd_mod
usb_common xenbus_probe_frontend reiserfs fan thermal ahci libahci libata
scsi_mod [last unloaded: parport_pc]
[ 1631.721604] CPU: 0 PID: 3948 Comm: glretrace Not tainted 4.7.0-2-default+ #1
[ 1631.764334] Hardware name: Supermicro
X9SRE/X9SRE-3F/X9SRi/X9SRi-3F/X9SRE/X9SRE-3F/X9SRi/X9SRi-3F, BIOS 3.2a
08/31/2015
[ 1631.785241] [drm:amdgpu_job_timedout [amdgpu]] *ERROR* ring sdma0 timeout,
last signaled seq=10998, last emitted seq=10998
[ 1631.785245] [drm] IP block:tonga_ih is hung!
[ 1631.785518] [drm] Atomic commit: RESET. crtc id 0:[ffff880816a06000]
[ 1631.785540] [drm] Atomic commit: RESET. crtc id 1:[ffff880817700000]
[ 1631.785559] [drm] Atomic commit: RESET. crtc id 2:[ffff88081c3e4000]
[ 1631.785578] [drm] dc_commit_targets: 0 targets
[ 1632.074160] task: ffff88080564ccc0 ti: ffff8808057c0000 task.ti:
ffff8808057c0000
[ 1632.119037] RIP: 0010:[<ffffffffa08e3e7a>]  [<ffffffffa08e3e7a>]
amdgpu_gtt_mgr_alloc+0x2a/0x150 [amdgpu]
[ 1632.164304] RSP: 0018:ffff8808057c3a10  EFLAGS: 00010282
[ 1632.210314] RAX: ffff880808fe1970 RBX: ffff880818f1f890 RCX:
7fffffffffffffff
[ 1632.256563] RDX: 0000000000000000 RSI: ffff880818f1f858 RDI:
ffff880808fe1970
[ 1632.302370] RBP: ffff8808057c3a70 R08: 0000000000000001 R09:
ffff8806ccb7b928
[ 1632.348805] R10: ffff880811ebe540 R11: 0000000000000287 R12:
0000000000000000
[ 1632.394486] R13: ffff880818f1f890 R14: ffff880818f1f800 R15:
ffff8807bfaf4d80
[ 1632.439637] FS:  00007fed53c56700(0000) GS:ffff88081f200000(0000)
knlGS:0000000000000000
[ 1632.485411] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1632.531172] CR2: 0000000000000030 CR3: 00000000355cf000 CR4:
00000000001406f0
[ 1632.577066] Stack:
[ 1632.622940]  ffff8806ccb7b000 0000000000000680 0000000000000246
ffff8808057c3a50
[ 1632.669400]  ffffffff810a1799 ffff880808fe8608 ffff880808fe8608
ffff8807de2293c0
[ 1632.719718]  ffff8807de229470 ffff880818f1f890 ffff880818f1f800
ffff8807bfaf4d80
[ 1632.769794] Call Trace:
[ 1632.824132]  [<ffffffff810a1799>] ? __might_sleep+0x49/0x80
[ 1632.879008]  [<ffffffffa08c7afb>] amdgpu_ttm_bind+0x5b/0x150 [amdgpu]
[ 1632.932452]  [<ffffffffa08df45d>] amdgpu_vm_update_page_directory+0x7d/0x480
[amdgpu]
[ 1632.978788]  [<ffffffff811b019b>] ? krealloc+0x2b/0xa0
[ 1633.025524]  [<ffffffffa040ff54>] ? ttm_eu_reserve_buffers+0x184/0x330 [ttm]
[ 1633.072382]  [<ffffffffa08ce70b>] amdgpu_gem_va_update_vm+0x13b/0x180
[amdgpu]
[ 1633.119681]  [<ffffffffa0409c99>] ? ttm_bo_add_to_lru+0x89/0xe0 [ttm]
[ 1633.167081]  [<ffffffffa08cf7af>] amdgpu_gem_va_ioctl+0x1df/0x2a0 [amdgpu]
[ 1633.215410]  [<ffffffff810a1799>] ? __might_sleep+0x49/0x80
[ 1633.262823]  [<ffffffffa050062d>] drm_ioctl+0x25d/0x510 [drm]
[ 1633.310491]  [<ffffffff8122ea93>] ? touch_atime+0x23/0xa0
[ 1633.358466]  [<ffffffffa08cf5d0>] ? amdgpu_gem_metadata_ioctl+0x1f0/0x1f0
[amdgpu]
[ 1633.406696]  [<ffffffffa08b504b>] amdgpu_drm_ioctl+0x4b/0x80 [amdgpu]
[ 1633.454146]  [<ffffffff81224896>] do_vfs_ioctl+0x96/0x690
[ 1633.501757]  [<ffffffff81003246>] ? do_audit_syscall_entry+0x66/0x70
[ 1633.549670]  [<ffffffff81003729>] ? syscall_trace_enter_phase1+0xf9/0x110
[ 1633.597796]  [<ffffffff81224f09>] SyS_ioctl+0x79/0x90
[ 1633.645903]  [<ffffffff81003a79>] do_syscall_64+0x69/0x110
[ 1633.694445]  [<ffffffff81600925>] entry_SYSCALL64_slow_path+0x25/0x25
[ 1633.742299] Code: 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53
48 89 cb 48 83 ec 38 4c 8b 21 48 b9 ff ff ff ff ff ff ff 7f 4c 8b 57 30 <49> 39
4c 24 30 74 11
31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41
[ 1633.842789] RIP  [<ffffffffa08e3e7a>] amdgpu_gtt_mgr_alloc+0x2a/0x150
[amdgpu]
[ 1633.894212]  RSP <ffff8808057c3a10>
[ 1633.944739] CR2: 0000000000000030
[ 1633.994974] ---[ end trace d06de6dc7a13ea3e ]---
[ 1634.047545] [drm] dc_link_handle_hpd_rx_irq: Got short pulse HPD on link 0
[ 1634.047549] amdgpu 0000:04:00.0: SRBM_SOFT_RESET=0x00000400
[ 1635.184392] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.184446] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source
[ 1635.184501] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.184543] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source
[ 1635.184585] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.184623] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source
[ 1635.184673] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :4
[ 1635.184717] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :5
[ 1635.184758] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :6
[ 1635.184799] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :7
[ 1635.184838] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :8
[ 1635.184879] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :9
[ 1635.184917] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :10
[ 1635.184955] [drm:amdgpu_dm_set_crtc_irq_state [amdgpu]] *ERROR*
amdgpu_dm_set_crtc_irq_state: crtc is NULL at id :11
[ 1635.184998] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.185038] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source
[ 1635.185078] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.185116] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source
[ 1635.185158] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_ack: called for non-implemented irq source
[ 1635.185195] [drm:log_to_debug_console [amdgpu]] *ERROR*
dal_irq_service_dummy_set: called for non-implemented irq source</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>