Bug 53707 - [RS780] Kernel panic after opening 6K×6K image in firefox
Summary: [RS780] Kernel panic after opening 6K×6K image in firefox
Status: RESOLVED FIXED
Alias: None
Product: DRI
Classification: Unclassified
Component: DRM/Radeon (show other bugs)
Version: DRI git
Hardware: Other All
: medium normal
Assignee: Default DRI bug account
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-08-19 11:10 UTC by ojab
Modified: 2012-08-26 11:02 UTC (History)
0 users

See Also:
i915 platform:
i915 features:

Attachments
Kernel panic #1 (1.25 MB, image/jpeg)
2012-08-19 11:10 UTC, ojab 		no flags Details
Kernel panic #1 (1.05 MB, image/jpeg)
2012-08-19 11:12 UTC, ojab 		no flags Details
Karnel panic #2 (1.07 MB, image/jpeg)
2012-08-19 11:13 UTC, ojab 		no flags Details
Xorg.log (42.47 KB, text/plain)
2012-08-19 11:13 UTC, ojab 		no flags Details
glxinfo (25.18 KB, text/plain)
2012-08-19 11:15 UTC, ojab 		no flags Details
Kernel log, second panic (5.54 KB, text/plain)
2012-08-19 11:15 UTC, ojab 		no flags Details
Show Obsolete (1) View All

Description ojab 2012-08-19 11:10:45 UTC 
Created attachment 65768 [details]
Kernel panic #1

I've got kernel panic two times in a row after opening http://apod.nasa.gov/apod/image/1207/orion_hubble_6000.jpg in firefox on vanilla kernel-3.5.2 with libdrm/mesa/xf86-video-ati from latest git.
Comment 1 ojab 2012-08-19 11:12:42 UTC 
Created attachment 65769 [details]
Kernel panic #1
Comment 2 ojab 2012-08-19 11:13:09 UTC 
Created attachment 65770 [details]
Karnel panic #2
Comment 3 ojab 2012-08-19 11:13:50 UTC 
Created attachment 65771 [details]
Xorg.log
Comment 4 ojab 2012-08-19 11:15:03 UTC 
Created attachment 65772 [details]
glxinfo
Comment 5 ojab 2012-08-19 11:15:46 UTC 
Created attachment 65773 [details]
Kernel log, second panic
Comment 6 ojab 2012-08-19 11:28:23 UTC 
It also happens with default xorg.conf (without "ColorTiling2D" and "AccelDFS").
Comment 7 ojab 2012-08-25 14:09:34 UTC 
There is no crashes with 3.4 kernel, but messages "space check failed in flush".
Comment 8 ojab 2012-08-25 17:09:14 UTC 
Bisection leads me to (linux-stable tree)

8fbaa37e12d83fe586e593bba3af8bd907117d50 is the first bad commit
commit 8fbaa37e12d83fe586e593bba3af8bd907117d50
Author: Jerome Glisse <jglisse@redhat.com>
Date:   Thu Jul 12 18:23:05 2012 -0400

    drm/radeon: fix bo creation retry path
    
    commit d1c7871ddb1f588b8eb35affd9ee1a3d5e11cd0c upstream.
    
    Retry label was at wrong place in function leading to memory
    leak.
    
    Signed-off-by: Jerome Glisse <jglisse@redhat.com>
    Reviewed-by: Michel Dänzer <michel.daenzer@amd.com>
    Reviewed-by: Christian König <christian.koenig@amd.com>
    Signed-off-by: Dave Airlie <airlied@redhat.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

:040000 040000 5e9268680a97277b9560844799a6f70df12b97ff acb9847d2ea78612801e15b21063ae65b5dcf536 M	drivers
Comment 9 ojab 2012-08-26 11:02:51 UTC 
Fixed in Linus tree 

commit 676bc2e1e4f9072f7a640d5b7c99ffdf9709a6e7
Author: Alex Deucher <alexander.deucher@amd.com>
Date:   Tue Aug 21 09:55:01 2012 -0400

    Revert "drm/radeon: fix bo creation retry path"
    
    This reverts commit d1c7871ddb1f588b8eb35affd9ee1a3d5e11cd0c.
    
    ttm_bo_init() destroys the BO on failure. So this patch makes
    the retry path work with freed memory.  This ends up causing
    kernel panics when this path is hit.
    
    Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
    Cc: stable@vger.kernel.org

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.