panic by Xorg on ThinkPad R51e inside drm_pci_alloc, i915_gem_object_get_pages_phys
Hardware: ThinkPad R51 VGA
lspci -nn:
00:02.0 VGA compatible controller [0300]: Intel Corporation 82852/855GM Integrated Grahics Device [8086:3582] (rev 02)
00:02.1 Display controller [0380]: Intel Corporation 82852/855GM Integrated Graphics Device [8086:3582] (rev 02)
Kernel: git://anongit.freedesktop.org/drm-tip 5.5.0-rc7 0b551226df5e (2020/01/23)
Architecture: X86_32 (i386)
Distribution: CentOS 8, i686 rpms
Display: internal LCD (1024x768)
DRM screen resolution switching on boot is working.
After invoking Xorg, the kernel panics as below.
The panic does not contain "BUG" line for unknown reason;
I couldn't find any BUG()s in the codepath.
[ 185.593321] invalid opcode: 0000 [#1] SMP
[ 185.593344] CPU: 0 PID: 1666 Comm: Xorg Not tainted 5.5.0-rc7.el8.i586 #1
[ 185.593348] Hardware name: IBM 2887HEJ/2887HEJ, BIOS 1VET62WW (1.20 ) 12/31/2004
[ 185.593422] EIP: drm_pci_alloc+0x9c/0x120 [drm]
[ 185.593427] Code: e9 1a 8d 14 92 c1 e1 04 8b 89 40 b0 73 c8 83 e1 f0 8d 0c d1 8b 11 81 e2 00 00 01 00 74 10 ba 30 87 e0 f7 89 c8 e8 b4 b1 c0 cf <0f> 0b 66 90 8b 51 04 89 df 83 e2 01 75 e6 83 39 ff 74 61 3e 80 49
[ 185.593431] EAX: 00000000 EBX: 00004000 ECX: c82edbfe EDX: f3b83e88
[ 185.593435] ESI: ed454190 EDI: ec568000 EBP: d00fbb30 ESP: d00fbb24
[ 185.593438] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00210246
[ 185.593442] CR0: 80050033 CR2: 01d973b4 CR3: 28a71000 CR4: 000006d0
[ 185.593444] Call Trace:
[ 185.593580] i915_gem_object_get_pages_phys+0x59/0x260 [i915]
[ 185.593651] ____i915_gem_object_get_pages+0x1f/0x40 [i915]
[ 185.593722] i915_gem_object_attach_phys+0xba/0x170 [i915]
[ 185.593794] intel_plane_pin_fb+0xc5/0xe0 [i915]
[ 185.593866] intel_prepare_plane_fb+0xd7/0x350 [i915]
[ 185.593908] drm_atomic_helper_prepare_planes+0x82/0x120 [drm_kms_helper]
[ 185.593967] ? __i915_sw_fence_init+0x21/0x50 [i915]
[ 185.594039] intel_atomic_commit+0xbc/0x380 [i915]
[ 185.594112] ? intel_atomic_commit_tail+0x1340/0x1340 [i915]
[ 185.594149] drm_atomic_commit+0x3a/0x50 [drm]
[ 185.594168] drm_atomic_helper_update_plane+0xbf/0x130 [drm_kms_helper]
[ 185.594241] intel_legacy_cursor_update+0x84/0x2a0 [i915]
[ 185.594314] ? intel_framebuffer_create+0x60/0x60 [i915]
[ 185.594386] ? intel_unpin_fb_vma+0x80/0x80 [i915]
[ 185.594423] __setplane_atomic+0x9e/0xe0 [drm]
[ 185.594496] ? intel_unpin_fb_vma+0x80/0x80 [i915]
[ 185.594532] drm_mode_cursor_universal+0x14a/0x290 [drm]
[ 185.594572] drm_mode_cursor_common+0xc3/0x220 [drm]
[ 185.594610] ? drm_mode_setplane+0x250/0x250 [drm]
[ 185.594646] drm_mode_cursor_ioctl+0x57/0x70 [drm]
[ 185.594678] drm_ioctl_kernel+0x8f/0xd0 [drm]
[ 185.594709] drm_ioctl+0x21e/0x3c0 [drm]
[ 185.594745] ? drm_mode_setplane+0x250/0x250 [drm]
[ 185.594779] ? drm_version+0x80/0x80 [drm]
[ 185.594788] do_vfs_ioctl+0x9a/0x710
[ 185.594794] ? selinux_file_ioctl+0x156/0x210
[ 185.594800] ? tomoyo_path_chmod+0x20/0x20
[ 185.594804] ? tomoyo_file_ioctl+0x19/0x20
[ 185.594810] ? security_file_ioctl+0x30/0x50
[ 185.594814] ksys_ioctl+0x56/0x80
[ 185.594818] sys_ioctl+0x16/0x20
[ 185.594823] do_fast_syscall_32+0x7a/0x250
[ 185.594830] entry_SYSENTER_32+0xa5/0xf8
[ 185.594834] EIP: 0xb7edbad9
[ 185.594838] Code: 00 89 d3 eb cf 8d 74 26 00 b8 80 96 98 00 eb b5 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 185.594842] EAX: ffffffda EBX: 0000000c ECX: c01c64a3 EDX: bfe5ec90
[ 185.594845] ESI: 01d97240 EDI: c01c64a3 EBP: 0000000c ESP: bfe5ec08
[ 185.594849] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b EFLAGS: 00200292
[ 185.594853] Modules linked in: libfc scsi_transport_fc rfkill zram sg joydev lpc_ich pcspkr i2c_i801 parport_pc parport acpi_cpufreq ext4 mbcache jbd2 loop nls_utf8 isofs 8021q garp mrp stp llc i915 sr_mod sd_mod cdrom ata_generic cec i2c_algo_bit drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops drm ata_piix libata firewire_ohci firewire_core e1000 yenta_socket serio_raw crc_itu_t video sunrpc xts lrw dm_crypt dm_round_robin dm_multipath dm_snapshot dm_bufio dm_mirror dm_region_hash dm_log dm_zero dm_mod linear raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 iscsi_ibft squashfs cramfs be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 libcxgbi libcxgb iscsi_tcp libiscsi_tcp libiscsi edd scsi_transport_iscsi
[ 185.594970] ---[ end trace c0be11b0d9308200 ]---
[ 185.595002] EIP: drm_pci_alloc+0x9c/0x120 [drm]
[ 185.595006] Code: e9 1a 8d 14 92 c1 e1 04 8b 89 40 b0 73 c8 83 e1 f0 8d 0c d1 8b 11 81 e2 00 00 01 00 74 10 ba 30 87 e0 f7 89 c8 e8 b4 b1 c0 cf <0f> 0b 66 90 8b 51 04 89 df 83 e2 01 75 e6 83 39 ff 74 61 3e 80 49
[ 185.595010] EAX: 00000000 EBX: 00004000 ECX: c82edbfe EDX: f3b83e88
[ 185.595013] ESI: ed454190 EDI: ec568000 EBP: d00fbb30 ESP: d00fbb24
[ 185.595017] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00210246
[ 185.595020] CR0: 80050033 CR2: 01d973b4 CR3: 28a71000 CR4: 000006d0
[ 185.595024] Kernel panic - not syncing: Fatal exception
[ 185.595031] Kernel Offset: 0x6800000 from 0xc1000000 (relocation range: 0xc0000000-0xf77fdfff)
[ 185.595035] ---