[Bug 89724] New: [BDW]igt/gem_userptr_blits/forked-unsync-swapping-mempressure-normal sporadically causes BUG: unable to handle kernel NULL pointer dereference at 0000000000000101

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=89724

            Bug ID: 89724
           Summary: [BDW]igt/gem_userptr_blits/forked-unsync-swapping-memp
                    ressure-normal sporadically causes BUG: unable to
                    handle kernel NULL pointer dereference at
                    0000000000000101
           Product: DRI
           Version: unspecified
          Hardware: All
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: high
         Component: DRM/Intel
          Assignee: intel-gfx-bugs at lists.freedesktop.org
          Reporter: huax.lu at intel.com
        QA Contact: intel-gfx-bugs at lists.freedesktop.org
                CC: intel-gfx-bugs at lists.freedesktop.org

Created attachment 114540
  --> https://bugs.freedesktop.org/attachment.cgi?id=114540&action=edit
dmesg

==System Environment==
--------------------------
Regression: not sure

no-working platforms: BDW

==kernel==
--------------------------
drm-intel-nightly/ce08f8ea9b18746b783a00974dd2940474eed0c7
commit ce08f8ea9b18746b783a00974dd2940474eed0c7
Author: Daniel Vetter <daniel.vetter at ffwll.ch>
Date:   Thu Mar 19 15:53:39 2015 +0100

    drm-intel-nightly: 2015y-03m-19d-14h-53m-02s UTC integration manifest

==Bug detailed description==
-----------------------------
It sporadically causes BUG: unable to handle kernel NULL pointer dereference at
0000000000000101 on BDW, Fail rate:1/10

output:
IGT-Version: 1.10-ge7d26df (x86_64) (Linux:
4.0.0-rc4_drm-intel-nightly_294a23_20150321+ x86_64)
Aperture size is 4096 MiB
Total RAM is 3874 MiB
Testing unsynchronized mappings...

dmesg:
[  135.905373] BUG: unable to handle kernel NULL pointer dereference at
0000000000000101
[  135.905473] IP: [<0000000000000101>] 0x101
[  135.905527] PGD a4438067 PUD a4439067 PMD 0
[  135.905578] Oops: 0010 [#1] SMP
[  135.905618] Modules linked in: dm_mod iTCO_wdt iTCO_vendor_support ppdev
snd_hda_codec_hdmi pcspkr snd_hda_intel snd_hda_controller lpc_ich i2c_i801
mfd_core snd_hda_codec snd_hwdep snd_pcm snd_timer snd soundcore battery
parport_pc parport ac acpi_cpufreq i915 button video drm_kms_helper drm
[  135.905942] CPU: 1 PID: 4902 Comm: gem_userptr_bli Not tainted
4.0.0-rc4_drm-intel-nightly_294a23_20150321+ #176
[  135.906030] task: ffff8800a46ca0c0 ti: ffff8800a1480000 task.ti:
ffff8800a1480000
[  135.906096] RIP: 0010:[<0000000000000101>]  [<0000000000000101>] 0x101
[  135.906164] RSP: 0018:ffff8800a1483d00  EFLAGS: 00010202
[  135.906213] RAX: 0000000000000101 RBX: 00007f9f798ec000 RCX:
00000000026cd480
[  135.906279] RDX: ffffffff811347e7 RSI: 00007f9f798eb000 RDI:
ffffea00026cd480
[  135.906344] RBP: ffff88014978a228 R08: 0000000000000000 R09:
000000000000b626
[  135.906409] R10: 000000000000b800 R11: 000000000000b6d1 R12:
ffff8800a1483e18
[  135.906474] R13: ffffea00026cd480 R14: 0000000000000000 R15:
00007f9f79989000
[  135.906534] FS:  00007f9f891168c0(0000) GS:ffff88014ec40000(0000)
knlGS:0000000000000000
[  135.906600] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.906650] CR2: 0000000000000101 CR3: 000000000259f000 CR4:
00000000003406e0
[  135.906711] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
0000000000000000
[  135.906766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
0000000000000400
[  135.906813] Stack:
[  135.906832]  ffffffff810ed796 ffff88014effac00 00007f9f79989000
00007f9f79989000
[  135.906891]  00007f9f79989000 ffff88009451f7f8 ffff88009464f758
ffff880149327e60
[  135.906955]  0000000100000001 ffff88014916b3e8 ffff880002cbbf00
00007f9f798eb000
[  135.907018] Call Trace:
[  135.907044]  [<ffffffff810ed796>] ? unmap_single_vma+0x436/0x628
[  135.907089]  [<ffffffff810ee1fc>] ? unmap_vmas+0x4c/0x7f
[  135.907130]  [<ffffffff810f3903>] ? exit_mmap+0x5b/0xe4
[  135.907168]  [<ffffffff810efadd>] ? handle_mm_fault+0x329/0xc4d
[  135.907214]  [<ffffffff81039981>] ? mmput+0x2c/0xb6
[  135.907252]  [<ffffffff8103ce52>] ? do_exit+0x387/0x909
[  135.907296]  [<ffffffff81032a63>] ? __do_page_fault+0x345/0x3d8
[  135.907341]  [<ffffffff8103dffa>] ? do_group_exit+0x3a/0x8f
[  135.907383]  [<ffffffff8103e05b>] ? SyS_exit_group+0xc/0xc
[  135.907425]  [<ffffffff81799b72>] ? system_call_fastpath+0x12/0x17
[  135.907467] Code:  Bad RIP value.
[  135.907499] RIP  [<0000000000000101>] 0x101
[  135.907538]  RSP <ffff8800a1483d00>
[  135.907565] CR2: 0000000000000101
[  135.907593] ---[ end trace b10edcdb671b06f7 ]---
[  135.907626] Fixing recursive fault but reboot is needed!

==Reproduce steps==
---------------------------- 
1../gem_userptr_blits --run-subtest forked-unsync-swapping-mempressure-normal

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are on the CC list for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20150323/59e6e6f5/attachment.html>