[Bug 110382] [CI][SHARDS] igt at runner@aborted - fail - general protection fault: 0000 [#1] PREEMPT SMP NOPTI, Workqueue: events azx_probe_work

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=110382

--- Comment #7 from Amadeusz Sławiński <amadeuszx.slawinski at linux.intel.com> ---
Created attachment 144186
  --> https://bugs.freedesktop.org/attachment.cgi?id=144186&action=edit
boot2.log

>From boot2.log, seems like problem with sysfs

<3>[   11.881334] BUG: sleeping function called from invalid context at
kernel/sched/completion.c:99
<3>[   11.882350]
=============================================================================
<3>[   11.882566] in_atomic(): 0, irqs_disabled(): 0, pid: 190, name:
kworker/4:3
<3>[   11.883476] BUG kmalloc-32 (Tainted: G      D          ): Poison
overwritten
<3>[   11.883477]
-----------------------------------------------------------------------------

<3>[   11.883478] INFO: 0x00000000c581b909-0x00000000cf17bda8. First byte 0xe8
instead of 0x6b
<3>[   11.883484] INFO: Allocated in widget_tree_create+0x21/0x110
[snd_hda_core] age=55 cpu=4 pid=190
<3>[   11.883486]       kmem_cache_alloc_trace+0x225/0x290
<3>[   11.883489]       widget_tree_create+0x21/0x110 [snd_hda_core]
<3>[   11.883491]       hda_widget_sysfs_init+0x1a/0x40 [snd_hda_core]
<3>[   11.883493]       snd_hdac_device_register+0x19/0x40 [snd_hda_core]
<3>[   11.883496]       snd_hda_codec_configure+0x39/0x160 [snd_hda_codec]
<3>[   11.883499]       azx_codec_configure+0x2a/0x60 [snd_hda_codec]
<3>[   11.883501]       azx_probe_work+0x42e/0x7e0 [snd_hda_intel]
<3>[   11.883503]       process_one_work+0x245/0x610
<3>[   11.883504]       worker_thread+0x37/0x380
<3>[   11.883505]       kthread+0x119/0x130
<3>[   11.883508]       ret_from_fork+0x24/0x50
<3>[   11.883510] INFO: Freed in hda_widget_sysfs_reinit+0x18c/0x210
[snd_hda_core] age=48 cpu=2 pid=348
<3>[   11.883513]       snd_hdac_refresh_widgets+0x85/0xc0 [snd_hda_core]
<3>[   11.883516]       snd_hda_codec_update_widgets+0xe/0x50 [snd_hda_codec]
<3>[   11.883518]       intel_hsw_common_init+0x59/0xc0 [snd_hda_codec_hdmi]
<3>[   11.883520]       hda_codec_driver_probe+0x88/0x150 [snd_hda_codec]
<3>[   11.883522]       really_probe+0xf3/0x3e0
<3>[   11.883523]       driver_probe_device+0x10a/0x120
<3>[   11.883524]       device_driver_attach+0x4b/0x50
<3>[   11.883524]       __driver_attach+0x97/0x130
<3>[   11.883527]       bus_for_each_dev+0x74/0xc0
<3>[   11.883528]       bus_add_driver+0x13f/0x210
<3>[   11.883529]       driver_register+0x56/0xe0
<3>[   11.883530]       do_one_initcall+0x58/0x2e0
<3>[   11.883532]       do_init_module+0x56/0x1ea
<3>[   11.883533]       load_module+0x2701/0x29e0
<3>[   11.883534]       __se_sys_finit_module+0xd3/0xf0
<3>[   11.883534]       do_syscall_64+0x55/0x190
<3>[   11.883536] INFO: Slab 0x00000000043b2366 objects=22 used=22 fp=0x       
  (null) flags=0x8000000000010200
<3>[   11.883536] INFO: Object 0x000000000c2cf882 @offset=1112
fp=0x00000000b006c361

<3>[   11.883538] Redzone 00000000f96d092c: bb bb bb bb bb bb bb bb            
             ........
<3>[   11.883539] Object 000000000c2cf882: 6b 6b 6b 6b 6b 6b 6b 6b e8 d5 db 99
84 88 ff ff  kkkkkkkk........
<3>[   11.883539] Object 00000000d4d94bbe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b a5  kkkkkkkkkkkkkkk.
<3>[   11.883540] Redzone 00000000be7a46be: bb bb bb bb bb bb bb bb            
             ........
<3>[   11.883541] Padding 00000000a84a9f5a: 5a 5a 5a 5a 5a 5a 5a 5a            
             ZZZZZZZZ

This looks like race between widget_tree_create() and
hda_widget_sysfs_reinit():
looks like hda_widget_sysfs_reinit() freed codec->widgets structure while
widget_tree_create() still operated on it.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-gfx-bugs/attachments/20190507/b6290ea1/attachment.html>