Nouveau - Jan 2017 - [Bug 99354] New: [G71] "Assertion `bkref' failed" reproducible with glmark2

https://bugs.freedesktop.org/show_bug.cgi?id=99354

            Bug ID: 99354
           Summary: [G71] "Assertion `bkref' failed" reproducible
with
                    glmark2
           Product: Mesa
           Version: 13.0
          Hardware: x86 (IA32)
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Drivers/DRI/nouveau
          Assignee: nouveau at lists.freedesktop.org
          Reporter: barra_cuda at gmx.com
        QA Contact: nouveau at lists.freedesktop.org

Created attachment 128875
  --> https://bugs.freedesktop.org/attachment.cgi?id=128875&action=edit
glmark2 backtrace

[G71] "Assertion `bkref' failed" reproducible with glmark2

Using glmark2 I can trigger the assertion
"glmark2: pushbuf.c:238: pushbuf_krel: Assertion `bkref' failed."
quite easily. I'm not sure if this is a duplicate of other bugs.

The fastest way to reproduce seems to be:

./glmark2 -b
buffer:columns=200:interleave=false:update-dispersion=0.99:update-fraction=0.5:update-method=subdata:buffer-usage=static
--run-forever

Changing some parameters from that command line still trigger the assertion,
but usually it takes a bit more time. The command above triggers for me
after 2.5 seconds (usually less than that), while for example the following
command

./glmark2 -b
buffer:columns=200:interleave=false:update-dispersion=0.9:update-fraction=0.5:update-method=map
--run-forever

can trigger even a minute later.

I've used glmark2 at commit f413c5b423250b4fde8f95639ad368d5b02c5b9b.

Software versions:
xf86-video-nouveau-1.0.13
mesa-13.0.3
libdrm-2.4.74
xorg-server-1.19.0

Hardware: nVidia Quadro FX 1500

Backtrace attached.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170110/298039eb/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #1 from Michele Ballabio <barra_cuda at gmx.com> ---
Created attachment 128876
  --> https://bugs.freedesktop.org/attachment.cgi?id=128876&action=edit
glmark2 apitrace

This is an apitrace of glmark2 hitting th bkref assertion. I've used
apitrace
at commit 849af14927410b5cd8a9597a39bd7f636ae54644.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170110/8f15b28b/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #2 from Ilia Mirkin <imirkin at alum.mit.edu> ---
Does running the apitrace in question cause the assert to happen?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170110/ac2fdd1b/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #3 from Michele Ballabio <barra_cuda at gmx.com> ---
(In reply to Ilia Mirkin from comment #2)
> Does running the apitrace in question cause the assert to happen?
Yes it does:

apitrace replay apitrace.out

[...]

glretrace: pushbuf.c:238: pushbuf_krel: Assertion `bkref' failed.
apitrace: warning: caught signal 6
16922: error: caught an unhandled exception
glretrace+0x2b391d
glretrace+0x2b3116
glretrace+0x2b132c
linux-gate.so.1+0xb3b
/lib/libc.so.6: gsignal+0xbd
/lib/libc.so.6: abort+0x16c
/lib/libc.so.6+0x27eb4
/lib/libc.so.6: __assert_fail+0x57
/usr/lib/libdrm_nouveau.so.2: pushbuf_krel+0x3ce3:
/tmp/libdrm-2.4.74/nouveau/pushbuf.c:238
/usr/lib/libdrm_nouveau.so.2: nouveau_pushbuf_reloc+0x44:
/tmp/libdrm-2.4.74/nouveau/pushbuf.c:746
/usr/lib/xorg/modules/dri/nouveau_dri.so: PUSH_RELOC+0x541f38:
./nv30/nv30_winsys.h:26
/usr/lib/xorg/modules/dri/nouveau_dri.so: nv30_transfer_copy_data+0x544701:
nv30/nv30_transfer.c:740
/usr/lib/xorg/modules/dri/nouveau_dri.so: nouveau_transfer_write+0x528d0c:
/tmp/mesa-13.0.3/src/gallium/drivers/nouveau/nouveau_buffer.c:211
/usr/lib/xorg/modules/dri/nouveau_dri.so:
nouveau_buffer_transfer_unmap+0x52976e:
/tmp/mesa-13.0.3/src/gallium/drivers/nouveau/nouveau_buffer.c:544
/usr/lib/xorg/modules/dri/nouveau_dri.so: u_transfer_unmap_vtbl+0x4526ad:
util/u_transfer.c:154
/usr/lib/xorg/modules/dri/nouveau_dri.so: pipe_transfer_unmap+0x452321:
./util/u_inlines.h:457
/usr/lib/xorg/modules/dri/nouveau_dri.so: u_default_buffer_subdata+0x4523eb:
util/u_transfer.c:35
/usr/lib/xorg/modules/dri/nouveau_dri.so: pipe_buffer_write+0x235686:
../../src/gallium/auxiliary/util/u_inlines.h:345
/usr/lib/xorg/modules/dri/nouveau_dri.so: st_bufferobj_subdata+0x235836:
state_tracker/st_cb_bufferobjects.c:132
/usr/lib/xorg/modules/dri/nouveau_dri.so: _mesa_buffer_sub_data+0x5ff8d:
main/bufferobj.c:1804
/usr/lib/xorg/modules/dri/nouveau_dri.so: _mesa_BufferSubData+0x60015:
main/bufferobj.c:1818
glretrace+0x142273
glretrace+0x93096
glretrace+0x84afc
glretrace+0x86cfc
glretrace+0x86c6f
glretrace+0x84e46
glretrace+0x85013
glretrace+0x85a7f
/lib/libc.so.6: __libc_start_main+0x106
glretrace+0x81ba0: ../sysdeps/i386/start.S:115
apitrace: info: taking default action for signal 6

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170110/410e4d1a/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #4 from Ilia Mirkin <imirkin at alum.mit.edu> ---
Cool thanks! I think a similar issue has been reported before, and I stared at
that code with little success. Having a reproducible issue that I can poke at
should definitely make success (in at least understanding, if not fixing) much
more likely.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170110/1ba1a29f/attachment-0001.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #5 from Ilia Mirkin <imirkin at alum.mit.edu> ---
While I was not able to hit the issue by replaying your trace, I grabbed
glmark2, and with

MESA_GL_VERSION_OVERRIDE=2.0 ./build/src/glmark2 -b
buffer:columns=200:interleave=false:update-dispersion=0.99:update-fraction=0.5:update-method=subdata:buffer-usage=static

(built with the x11-gl target) it indeed fails on my NV34. Will start digging.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170111/ae36e209/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

--- Comment #6 from Ilia Mirkin <imirkin at alum.mit.edu> ---
I have been unable to trigger the issue locally with the following mesa patch:

https://patchwork.freedesktop.org/patch/132414/

Please try to see if this also resolves your problems.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170111/9d26594e/attachment.html>

https://bugs.freedesktop.org/show_bug.cgi?id=99354

Michele Ballabio <barra_cuda at gmx.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #7 from Michele Ballabio <barra_cuda at gmx.com> ---
I've applied your patch on top of mesa 13.0.3 (there was a conflict in
nvc0_query_hw.c, but it doesn't matter with my hardware).

I've been running
gdb --args ./glmark2 -b
buffer:columns=200:interleave=false:update-dispersion=0.99:update-fraction=0.5:update-method=subdata:buffer-usage=static
--run-forever
for 30 minutes now, so I guess this issue is fixed.

Thank you, Ilia.

Changing status to resolved-fixed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20170111/1670fcf5/attachment.html>