Bug 84880 - [NV94] X freeze on nouveau list_del corruption / unable to handle kernel paging request
Summary: [NV94] X freeze on nouveau list_del corruption / unable to handle kernel pagi...
Status: NEW
Alias: None
Product: xorg
Classification: Unclassified
Component: Driver/nouveau (show other bugs)
Version: unspecified
Hardware: x86-64 (AMD64) Linux (All)
: medium critical
Assignee: Nouveau Project
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-10-10 18:14 UTC by Adam Williamson
Modified: 2014-10-10 18:14 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Adam Williamson 2014-10-10 18:14:05 UTC
Running kernel-3.17.0-301.fc21 on Fedora 21 (more or less 3.17.0 upstream I believe), my desktop (GNOME 3.14) froze while I was zooming in Google Maps in Firefox. I could ssh in and interact with the system normally and trigger a reboot, but X was stuck. Logs show a kernel WARNING: __list_del corruption , followed by a BUG: unable to handle kernel paging request. Pasting both traces in-line. The traces are separated from any other log messages by 3 minutes, so I don't think anything else is relevant.

Oct 10 10:36:18 adam.happyassassin.net kernel: ------------[ cut here ]------------
Oct 10 10:36:18 adam.happyassassin.net kernel: WARNING: CPU: 0 PID: 1516 at lib/list_debug.c:62 __list_del_entry+0xdd/0xe0()
Oct 10 10:36:18 adam.happyassassin.net kernel: list_del corruption. next->prev should be ffff8801b5727240, but was ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin Not tainted 3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel:  0000000000000000 00000000905d5f2b ffff88042608fca0 ffffffff8173c311
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fce8 ffff88042608fcd8 ffffffff81096e8d ffff8801b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9560 ffff8801b5727240 ffff8801b5727240 ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8173c311>] dump_stack+0x45/0x56
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096e8d>] warn_slowpath_common+0x7d/0xa0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096f0c>] warn_slowpath_fmt+0x5c/0x80
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abed>] __list_del_entry+0xdd/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>] list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>] ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>] nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>] ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>] ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>] ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>] ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>] ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>] ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>] remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>] do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>] vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>] SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>] system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6d ]---
Oct 10 10:36:18 adam.happyassassin.net kernel: BUG: unable to handle kernel paging request at ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: IP: [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: PGD 0 
Oct 10 10:36:18 adam.happyassassin.net kernel: Oops: 0000 [#1] SMP 
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin Tainted: G        W      3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel: task: ffff880418cbebf0 ti: ffff88042608c000 task.ti: ffff88042608c000
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP: 0010:[<ffffffff8139ab39>]  [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: RSP: 0018:ffff88042608fd50  EFLAGS: 00010202
Oct 10 10:36:18 adam.happyassassin.net kernel: RAX: ffff8801b57277c0 RBX: ffff8801b5727440 RCX: dead000000200200
Oct 10 10:36:18 adam.happyassassin.net kernel: RDX: ffff8001b5727240 RSI: ffff8800b9f48301 RDI: ffff8801b5727440
Oct 10 10:36:18 adam.happyassassin.net kernel: RBP: ffff88042608fd50 R08: 00000000b5727501 R09: 000000018040001e
Oct 10 10:36:18 adam.happyassassin.net kernel: R10: ffffffffa008fb2e R11: ffff8801b57275c0 R12: ffff8804085c9560
Oct 10 10:36:18 adam.happyassassin.net kernel: R13: ffff8801b5727440 R14: ffff8801b5727440 R15: ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: FS:  00007f742949c9c0(0000) GS:ffff88043f400000(0000) knlGS:0000000000000000
Oct 10 10:36:18 adam.happyassassin.net kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240 CR3: 00000000ba905000 CR4: 00000000000427e0
Oct 10 10:36:18 adam.happyassassin.net kernel: Stack:
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fd68 ffffffff8139abfd ffff880425e6b9c0 ffff88042608fdb8
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffffffffa00902e8 ffff880425e6ba31 ffff880425e6b9c0 ffff8801b57277c0
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9500 ffff8804249c0000 ffff880428458098 ffff8802e1006030
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>] list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>] ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>] nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>] ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>] ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>] ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>] ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>] ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>] ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>] remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>] do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>] vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>] SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>] system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: Code: 00 00 55 48 8b 07 48 b9 00 01 10 00 00 00 ad de 48 8b 57 08 48 89 e5 48 39 c8 74 36 48 b9 00 02 20 00 00 00 ad de 48 39 ca 74 4f <4c> 8b 02 4c 39 c7 75 6f 4c 8b 40 08 4c 39 c7 0f 85 82 00 00 00 
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP  [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  RSP <ffff88042608fd50>
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6e ]---


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.