From mboxrd@z Thu Jan  1 00:00:00 1970
From: bugzilla-daemon@freedesktop.org
Subject: [Bug 99515] SIGSEGV MAPERR on Android nougat-x86 with mesa 17.0.0rc
Date: Tue, 24 Jan 2017 13:24:30 +0000
Message-ID: <bug-99515-502@http.bugs.freedesktop.org/>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0670712772=="
Return-path: <dri-devel-bounces@lists.freedesktop.org>
Received: from culpepper.freedesktop.org (culpepper.freedesktop.org
 [131.252.210.165])
 by gabe.freedesktop.org (Postfix) with ESMTP id EDAB16E00A
 for <dri-devel@lists.freedesktop.org>; Tue, 24 Jan 2017 13:24:29 +0000 (UTC)
List-Unsubscribe: <https://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <https://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <https://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: dri-devel@lists.freedesktop.org
List-Id: dri-devel@lists.freedesktop.org


--===============0670712772==
Content-Type: multipart/alternative; boundary="14852642690.2C6f397.25933";
 charset="UTF-8"


--14852642690.2C6f397.25933
Date: Tue, 24 Jan 2017 13:24:29 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://bugs.freedesktop.org/
Auto-Submitted: auto-generated

https://bugs.freedesktop.org/show_bug.cgi?id=3D99515

            Bug ID: 99515
           Summary: SIGSEGV MAPERR on Android nougat-x86 with mesa
                    17.0.0rc
           Product: Mesa
           Version: 17.0
          Hardware: x86-64 (AMD64)
                OS: other
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Drivers/Gallium/radeonsi
          Assignee: dri-devel@lists.freedesktop.org
          Reporter: issor.oruam@gmail.com
        QA Contact: dri-devel@lists.freedesktop.org

Created attachment 129125
  --> https://bugs.freedesktop.org/attachment.cgi?id=3D129125&action=3Dedit
Dmesg

Hi,

I've been seeying SIGSEGV MAPERR with radeonsi (HD7750 and HD7950)
It can be triggered in various situations/primitives,
like EGLSwapBuffersWithDamage, EGLterminate and others,
but the crash has always the same outcome and backtrace.

I think it is important to highlight that the issue started happening with
nougat, which uses multiple threads/render threads, as opposed to marshmall=
ow
which was using single threading and it is not affected.

Now this may have exposed a non thread safe path in radeonsi code,
because other drivers (intel, nouveau with Ilia's draft locking patches)
are not affected by this issue.

Dmesg, Logcat and addr2line log in the attachments
Available to provide further info and to test patches, if needed.
Mauro

--------- beginning of crash
01-21 19:30:40.195  1457  1457 F libc    : Fatal signal 11 (SIGSEGV), code =
1,
fault addr 0x0 in tid 1457 (surfaceflinger)
01-21 19:30:40.195  1443  1443 W         : debuggerd: handling request:
pid=3D1457 uid=3D0 gid=3D1003 tid=3D1457
01-21 19:30:40.196  1743  1743 E         : debuggerd: Unable to connect to
activity manager (connect failed: No such file or directory)
01-21 19:30:40.246  1743  1743 F DEBUG   : *** *** *** *** *** *** *** *** =
***
*** *** *** *** *** *** ***
01-21 19:30:40.246  1743  1743 F DEBUG   : Build fingerprint:
'Android-x86/android_x86_64/x86_64:7.1.1/NMF26O/utente12301216:eng/test-key=
s'
01-21 19:30:40.246  1743  1743 F DEBUG   : Revision: '0'
01-21 19:30:40.246  1743  1743 F DEBUG   : ABI: 'x86_64'
01-21 19:30:40.246  1743  1743 F DEBUG   : pid: 1457, tid: 1457, name:
surfaceflinger  >>> /system/bin/surfaceflinger <<<
01-21 19:30:40.246  1743  1743 F DEBUG   : signal 11 (SIGSEGV), code 1
(SEGV_MAPERR), fault addr 0x0
01-21 19:30:40.246  1743  1743 F DEBUG   :     rax 000077505a696cc0  rbx
000077505fa75a20  rcx 0000000000000000  rdx 0000000000000020
01-21 19:30:40.246  1743  1743 F DEBUG   :     rsi 0000000000000000  rdi
000077505a696cc0
01-21 19:30:40.246  1743  1743 F DEBUG   :     r8  ffffffffffffffd8  r9=20
0400050000000000  r10 0000000000000002  r11 0000000000000246
01-21 19:30:40.246  1743  1743 F DEBUG   :     r12 000077505fa75600  r13
0000000001000000  r14 000077505fa75a48  r15 000077505a6c3980
01-21 19:30:40.246  1743  1743 F DEBUG   :     cs  0000000000000033  ss=20
000000000000002b
01-21 19:30:40.246  1743  1743 F DEBUG   :     rip 000077505eb7b5f8  rbp
0000000000500000  rsp 00007ffea2d36c70  eflags 0000000000010206
01-21 19:30:40.326  1743  1743 F DEBUG   :=20
01-21 19:30:40.326  1743  1743 F DEBUG   : backtrace:
01-21 19:30:40.326  1743  1743 F DEBUG   :     #00 pc 000000000024f5f8=20
/system/lib64/dri/gallium_dri.so
01-21 19:30:40.326  1743  1743 F DEBUG   :     #01 pc 0000000000262843=20
/system/lib64/dri/gallium_dri.so


utente@utente-MS-7576:~/nougat-x86_kernel_49$ addr2line -Cfe
out/target/product/x86_64/symbols/system/lib64/dri/gallium_dri.so
000000000024f5f8
list_add
/proc/self/cwd/external/mesa/src/util/list.h:62
0000000000262843
pb_destroy
/proc/self/cwd/external/mesa/src/gallium/auxiliary/pipebuffer/pb_buffer.h:2=
32
0000000000260816

--=20
You are receiving this mail because:
You are the assignee for the bug.=

--14852642690.2C6f397.25933
Date: Tue, 24 Jan 2017 13:24:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://bugs.freedesktop.org/
Auto-Submitted: auto-generated

<html>
    <head>
      <base href=3D"https://bugs.freedesktop.org/">
    </head>
    <body><table border=3D"1" cellspacing=3D"0" cellpadding=3D"8">
        <tr>
          <th>Bug ID</th>
          <td><a class=3D"bz_bug_link=20
          bz_status_NEW "
   title=3D"NEW - SIGSEGV MAPERR on Android nougat-x86 with mesa 17.0.0rc"
   href=3D"https://bugs.freedesktop.org/show_bug.cgi?id=3D99515">99515</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>SIGSEGV MAPERR on Android nougat-x86 with mesa 17.0.0rc
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>Mesa
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>17.0
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>other
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Drivers/Gallium/radeonsi
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>dri-devel&#64;lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>issor.oruam&#64;gmail.com
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>dri-devel&#64;lists.freedesktop.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=3D""><a href=3D"attachment.cgi?id=3D129125=
" name=3D"attach_129125" title=3D"Dmesg">attachment 129125</a> <a href=3D"a=
ttachment.cgi?id=3D129125&amp;action=3Dedit" title=3D"Dmesg">[details]</a><=
/span>
Dmesg

Hi,

I've been seeying SIGSEGV MAPERR with radeonsi (HD7750 and HD7950)
It can be triggered in various situations/primitives,
like EGLSwapBuffersWithDamage, EGLterminate and others,
but the crash has always the same outcome and backtrace.

I think it is important to highlight that the issue started happening with
nougat, which uses multiple threads/render threads, as opposed to marshmall=
ow
which was using single threading and it is not affected.

Now this may have exposed a non thread safe path in radeonsi code,
because other drivers (intel, nouveau with Ilia's draft locking patches)
are not affected by this issue.

Dmesg, Logcat and addr2line log in the attachments
Available to provide further info and to test patches, if needed.
Mauro

--------- beginning of crash
01-21 19:30:40.195  1457  1457 F libc    : Fatal signal 11 (SIGSEGV), code =
1,
fault addr 0x0 in tid 1457 (surfaceflinger)
01-21 19:30:40.195  1443  1443 W         : debuggerd: handling request:
pid=3D1457 uid=3D0 gid=3D1003 tid=3D1457
01-21 19:30:40.196  1743  1743 E         : debuggerd: Unable to connect to
activity manager (connect failed: No such file or directory)
01-21 19:30:40.246  1743  1743 F DEBUG   : *** *** *** *** *** *** *** *** =
***
*** *** *** *** *** *** ***
01-21 19:30:40.246  1743  1743 F DEBUG   : Build fingerprint:
'Android-x86/android_x86_64/x86_64:7.1.1/NMF26O/utente12301216:eng/test-key=
s'
01-21 19:30:40.246  1743  1743 F DEBUG   : Revision: '0'
01-21 19:30:40.246  1743  1743 F DEBUG   : ABI: 'x86_64'
01-21 19:30:40.246  1743  1743 F DEBUG   : pid: 1457, tid: 1457, name:
surfaceflinger  &gt;&gt;&gt; /system/bin/surfaceflinger &lt;&lt;&lt;
01-21 19:30:40.246  1743  1743 F DEBUG   : signal 11 (SIGSEGV), code 1
(SEGV_MAPERR), fault addr 0x0
01-21 19:30:40.246  1743  1743 F DEBUG   :     rax 000077505a696cc0  rbx
000077505fa75a20  rcx 0000000000000000  rdx 0000000000000020
01-21 19:30:40.246  1743  1743 F DEBUG   :     rsi 0000000000000000  rdi
000077505a696cc0
01-21 19:30:40.246  1743  1743 F DEBUG   :     r8  ffffffffffffffd8  r9=20
0400050000000000  r10 0000000000000002  r11 0000000000000246
01-21 19:30:40.246  1743  1743 F DEBUG   :     r12 000077505fa75600  r13
0000000001000000  r14 000077505fa75a48  r15 000077505a6c3980
01-21 19:30:40.246  1743  1743 F DEBUG   :     cs  0000000000000033  ss=20
000000000000002b
01-21 19:30:40.246  1743  1743 F DEBUG   :     rip 000077505eb7b5f8  rbp
0000000000500000  rsp 00007ffea2d36c70  eflags 0000000000010206
01-21 19:30:40.326  1743  1743 F DEBUG   :=20
01-21 19:30:40.326  1743  1743 F DEBUG   : backtrace:
01-21 19:30:40.326  1743  1743 F DEBUG   :     #00 pc 000000000024f5f8=20
/system/lib64/dri/gallium_dri.so
01-21 19:30:40.326  1743  1743 F DEBUG   :     #01 pc 0000000000262843=20
/system/lib64/dri/gallium_dri.so


utente&#64;utente-MS-7576:~/nougat-x86_kernel_49$ addr2line -Cfe
out/target/product/x86_64/symbols/system/lib64/dri/gallium_dri.so
000000000024f5f8
list_add
/proc/self/cwd/external/mesa/src/util/list.h:62
0000000000262843
pb_destroy
/proc/self/cwd/external/mesa/src/gallium/auxiliary/pipebuffer/pb_buffer.h:2=
32
0000000000260816</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>=

--14852642690.2C6f397.25933--

--===============0670712772==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KZHJpLWRldmVs
IG1haWxpbmcgbGlzdApkcmktZGV2ZWxAbGlzdHMuZnJlZWRlc2t0b3Aub3JnCmh0dHBzOi8vbGlz
dHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8vZHJpLWRldmVsCg==

--===============0670712772==--