<7>[ 44.708523] xe 0000:03:00.0: [drm:intel_power_well_enable [xe]] enabling AUX_TC2 <7>[ 44.711652] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.712459] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.712580] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 44.712918] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.713050] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 44.713160] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.715647] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.716332] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.716487] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 44.716752] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.716866] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 44.716982] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.719411] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.719936] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.720059] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 44.720326] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 44.720453] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 44.720579] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 44.814975] xe 0000:03:00.0: [drm:intel_power_well_disable [xe]] disabling AUX_TC2 <6>[ 45.125687] Console: switching to colour dummy device 80x25 <7>[ 45.125734] [IGT] xe_exec_system_allocator: executing <7>[ 45.164666] [IGT] xe_exec_system_allocator: starting subtest threads-many-stride-malloc-fork-read-after <3>[ 45.164866] [Poison overwritten] 0xffff888100b3fe00-0xffff888100b3fe00 @offset=15872. First byte 0x6a instead of 0x6b <3>[ 45.165077] ============================================================================= <3>[ 45.165087] BUG kmalloc-rnd-09-128 (Tainted: G S U ): Object corrupt <3>[ 45.165096] ----------------------------------------------------------------------------- <3>[ 45.165106] Allocated in drm_syncobj_create+0x60/0x180 age=3 cpu=1 pid=2156 <4>[ 45.165117] __kmalloc_cache_noprof+0x576/0x800 <4>[ 45.165121] drm_syncobj_create+0x60/0x180 <4>[ 45.165122] xe_exec_queue_create_bind+0xdf/0x150 [xe] <4>[ 45.165214] xe_vm_create+0x6b5/0xda0 [xe] <4>[ 45.165319] xe_vm_create_ioctl+0xf0/0x4a0 [xe] <4>[ 45.165417] drm_ioctl_kernel+0xb3/0x120 <4>[ 45.165420] drm_ioctl+0x2d4/0x5a0 <4>[ 45.165421] xe_drm_ioctl+0x53/0x80 [xe] <4>[ 45.165495] __x64_sys_ioctl+0xa5/0x100 <4>[ 45.165497] x64_sys_call+0x1144/0x26a0 <4>[ 45.165500] do_syscall_64+0x93/0xd60 <4>[ 45.165503] entry_SYSCALL_64_after_hwframe+0x76/0x7e <3>[ 45.165504] Freed in drm_syncobj_free+0x40/0x50 age=2 cpu=1 pid=2156 <4>[ 45.165513] kfree+0x428/0x590 <4>[ 45.165515] drm_syncobj_free+0x40/0x50 <4>[ 45.165516] xe_exec_queue_destroy+0x19d/0x2f0 [xe] <4>[ 45.165590] xe_vm_close_and_put+0x2b4/0xfc0 [xe] <4>[ 45.165687] xe_vm_destroy_ioctl+0xf9/0x1a0 [xe] <4>[ 45.165780] drm_ioctl_kernel+0xb3/0x120 <4>[ 45.165781] drm_ioctl+0x2d4/0x5a0 <4>[ 45.165783] xe_drm_ioctl+0x53/0x80 [xe] <4>[ 45.165856] __x64_sys_ioctl+0xa5/0x100 <4>[ 45.165858] x64_sys_call+0x1144/0x26a0 <4>[ 45.165859] do_syscall_64+0x93/0xd60 <4>[ 45.165861] entry_SYSCALL_64_after_hwframe+0x76/0x7e <3>[ 45.165862] Slab 0xffffea000402cf00 objects=42 used=8 fp=0xffff888100b3cb00 flags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff) <3>[ 45.165877] Object 0xffff888100b3fe00 @offset=15872 fp=0xffff888100b3cb00 <3>[ 45.165887] Redzone 00000000: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165897] Redzone 00000010: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165907] Redzone 00000020: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165917] Redzone 00000030: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165929] Redzone 00000040: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165938] Redzone 00000050: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165948] Redzone 00000060: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165958] Redzone 00000070: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3>[ 45.165967] Object 00000000: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk <3>[ 45.165977] Object 00000010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.165987] Object 00000020: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.165996] Object 00000030: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.166006] Object 00000040: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.166015] Object 00000050: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.166025] Object 00000060: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3>[ 45.166034] Object 00000070: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. <3>[ 45.166044] Redzone 00000000: bb bb bb bb bb bb bb bb ........ <3>[ 45.166053] Padding 00000000: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <3>[ 45.166063] Padding 00000010: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <3>[ 45.166072] Padding 00000020: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZ <4>[ 45.166082] Disabling lock debugging due to kernel taint <4>[ 45.166088] ------------[ cut here ]------------ <4>[ 45.166088] WARNING: CPU: 1 PID: 2156 at mm/slub.c:1232 object_err+0x22b/0x340 <4>[ 45.166091] Modules linked in: snd_hda_codec_intelhdmi snd_hda_codec_hdmi pmt_crashlog mei_lb mei_gsc_proxy mtd_intel_dg mei_gsc xe drm_gpuvm drm_gpusvm_helper drm_ttm_helper ttm gpu_sched drm_suballoc_helper drm_exec drm_buddy drm_display_helper cec rc_core drm_kunit_helpers i2c_algo_bit kunit overlay intel_rapl_msr intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp coretemp hid_generic cmdlinepart asus_nb_wmi asus_wmi spi_nor mei_pxp mei_hdcp kvm_intel sparse_keymap platform_profile mtd wmi_bmof kvm irqbypass binfmt_misc polyval_clmulni ghash_clmulni_intel usbhid aesni_intel hid rapl snd_hda_intel snd_intel_dspcfg snd_hda_codec intel_cstate r8169 video snd_hda_core snd_hwdep realtek snd_pcm i2c_i801 snd_timer i2c_mux idma64 nls_iso8859_1 snd mei_me i2c_smbus spi_intel_pci soundcore spi_intel mei intel_pmc_core pmt_telemetry pmt_discovery pmt_class intel_pmc_ssram_telemetry pinctrl_alderlake acpi_tad acpi_pad wmi intel_vsec dm_multipath msr <4>[ 45.166131] nvme_fabrics fuse efi_pstore nfnetlink autofs4 <4>[ 45.166135] CPU: 1 UID: 0 PID: 2156 Comm: xe_exec_system_ Tainted: G S BU 6.18.0-rc4-lgci-xe-xe-pw-157224v1+ #1 PREEMPT(voluntary) <4>[ 45.166138] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [U]=USER <4>[ 45.166138] Hardware name: ASUS System Product Name/PRIME Z790-P WIFI, BIOS 0812 02/24/2023 <4>[ 45.166139] RIP: 0010:object_err+0x22b/0x340 <4>[ 45.166141] Code: 48 c7 c7 08 db 0d 83 e8 83 fd ca ff 4c 89 ee 48 c7 c7 a4 1a 1c 83 e8 74 fd ca ff be 01 00 00 00 bf 05 00 00 00 e8 65 1d bd ff <0f> 0b 48 8d 65 e0 5b 41 5c 41 5d 41 5e 5d 31 c0 31 d2 31 c9 31 f6 <4>[ 45.166143] RSP: 0018:ffffc9000356b728 EFLAGS: 00010046 <4>[ 45.166144] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000 <4>[ 45.166145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 <4>[ 45.166146] RBP: ffffc9000356b748 R08: 0000000000000000 R09: 0000000000000000 <4>[ 45.166147] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888100061e00 <4>[ 45.166147] R13: ffff888100b3fe00 R14: 0000000000000001 R15: 000000000000006b <4>[ 45.166148] FS: 000079be7ecd3940(0000) GS:ffff8888dad6a000(0000) knlGS:0000000000000000 <4>[ 45.166149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 45.166150] CR2: 00005d5439dd2859 CR3: 000000011e37a000 CR4: 0000000000f52ef0 <4>[ 45.166151] PKRU: 55555554 <4>[ 45.166152] Call Trace: <4>[ 45.166153] <4>[ 45.166154] check_bytes_and_report+0x11d/0x150 <4>[ 45.166157] check_object+0x315/0x3f0 <4>[ 45.166159] alloc_debug_processing+0xab/0x190 <4>[ 45.166162] get_partial_node+0x1f1/0x460 <4>[ 45.166164] ___slab_alloc+0x8bd/0x1720 <4>[ 45.166167] ? devkmsg_write+0x68/0x1b0 <4>[ 45.166170] ? devkmsg_write+0x68/0x1b0 <4>[ 45.166172] ? devkmsg_write+0x68/0x1b0 <4>[ 45.166174] __slab_alloc.isra.0+0x35/0x90 <4>[ 45.166176] ? __slab_alloc.isra.0+0x35/0x90 <4>[ 45.166177] __kmalloc_noprof+0x6ae/0x9d0 <4>[ 45.166180] devkmsg_write+0x68/0x1b0 <4>[ 45.166181] ? devkmsg_write+0x68/0x1b0 <4>[ 45.166183] vfs_write+0x283/0x540 <4>[ 45.166186] ksys_write+0x6f/0xf0 <4>[ 45.166188] __x64_sys_write+0x19/0x30 <4>[ 45.166189] x64_sys_call+0x79/0x26a0 <4>[ 45.166191] do_syscall_64+0x93/0xd60 <4>[ 45.166192] ? cp_new_stat+0x15a/0x1a0 <4>[ 45.166196] ? __do_sys_newfstat+0x3c/0x70 <4>[ 45.166200] ? do_syscall_64+0x1b7/0xd60 <4>[ 45.166201] ? putname+0x65/0x90 <4>[ 45.166203] ? kmem_cache_free+0x553/0x680 <4>[ 45.166206] ? putname+0x65/0x90 <4>[ 45.166207] ? putname+0x65/0x90 <4>[ 45.166208] ? do_sys_openat2+0x8b/0xd0 <4>[ 45.166211] ? __x64_sys_openat+0x54/0xa0 <4>[ 45.166213] ? do_syscall_64+0x1b7/0xd60 <4>[ 45.166214] ? __task_pid_nr_ns+0xd9/0x270 <4>[ 45.166218] ? do_syscall_64+0x1b7/0xd60 <4>[ 45.166219] ? irqentry_exit+0x77/0xb0 <4>[ 45.166221] ? exc_page_fault+0xbd/0x2c0 <4>[ 45.166224] entry_SYSCALL_64_after_hwframe+0x76/0x7e <4>[ 45.166225] RIP: 0033:0x79be80f1c574 <4>[ 45.166226] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d d5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89 <4>[ 45.166227] RSP: 002b:00007ffce6b560d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 <4>[ 45.166229] RAX: ffffffffffffffda RBX: 0000000000000068 RCX: 000079be80f1c574 <4>[ 45.166229] RDX: 0000000000000068 RSI: 00005d545d471e90 RDI: 0000000000000007 <4>[ 45.166230] RBP: 00007ffce6b56100 R08: 0000000000000000 R09: 0000000000000000 <4>[ 45.166231] R10: 0000000000000001 R11: 0000000000000202 R12: 0000000000000068 <4>[ 45.166232] R13: 00005d545d471e90 R14: 00005d545d467b90 R15: 000079be81001ee0 <4>[ 45.166235] <4>[ 45.166236] irq event stamp: 104898 <4>[ 45.166236] hardirqs last enabled at (104897): [] do_syscall_64+0x54/0xd60 <4>[ 45.166239] hardirqs last disabled at (104898): [] _raw_spin_lock_irqsave+0x74/0x80 <4>[ 45.166241] softirqs last enabled at (104328): [] kernel_fpu_end+0x53/0x70 <4>[ 45.166243] softirqs last disabled at (104326): [] kernel_fpu_begin_mask+0xc4/0x120 <4>[ 45.166245] ---[ end trace 0000000000000000 ]--- <3>[ 45.166246] FIX kmalloc-rnd-09-128: Restoring Poison 0xffff888100b3fe00-0xffff888100b3fe00=0x6b <3>[ 45.166251] FIX kmalloc-rnd-09-128: Marking all objects used <7>[ 45.166269] [IGT] xe_exec_system_allocator: finished subtest threads-many-stride-malloc-fork-read-after, SUCCESS <7>[ 45.177742] xe 0000:03:00.0: [drm:drm_client_dev_restore] fbdev: ret=0 <7>[ 45.177781] [IGT] xe_exec_system_allocator: exiting, ret=0 <6>[ 45.194643] Console: switching to colour frame buffer device 240x67 <7>[ 45.439545] xe 0000:03:00.0: [drm:intel_power_well_enable [xe]] enabling AUX_TC2 <7>[ 45.443704] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.444483] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.444843] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 45.445347] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.445659] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 45.445961] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.448420] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.449138] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.449386] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 45.449776] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.450064] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 45.450304] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.452617] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.453355] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.453575] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK on first message, retry <7>[ 45.453938] xe 0000:03:00.0: [drm:do_gmbus_xfer [xe]] GMBUS [i915 gmbus tc3] NAK for addr: 003a w(1) <7>[ 45.454167] xe 0000:03:00.0: [drm:intel_hdmi_hdcp_read_bksv [xe]] Read Bksv over DDC failed (-6) <7>[ 45.454393] xe 0000:03:00.0: [drm:intel_hdcp_gsc_check_status [xe]] GSC Components not ready for HDCP2.x <7>[ 45.543901] xe 0000:03:00.0: [drm:intel_power_well_disable [xe]] disabling AUX_TC2