Bug 84880 - [NV94] X freeze on nouveau list_del corruption / unable to handle kernel paging request
Summary: [NV94] X freeze on nouveau list_del corruption / unable to handle kernel pagi...
Status: RESOLVED MOVED
Alias: None
Product: xorg
Classification: Unclassified
Component: Driver/nouveau (show other bugs)
Version: unspecified
Hardware: x86-64 (AMD64) Linux (All)
: medium critical
Assignee: Nouveau Project
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-10-10 18:14 UTC by Adam Williamson
Modified: 2019-12-04 08:50 UTC (History)
0 users

See Also:
i915 platform:
i915 features:

Attachments

Description Adam Williamson 2014-10-10 18:14:05 UTC 
Running kernel-3.17.0-301.fc21 on Fedora 21 (more or less 3.17.0 upstream I believe), my desktop (GNOME 3.14) froze while I was zooming in Google Maps in Firefox. I could ssh in and interact with the system normally and trigger a reboot, but X was stuck. Logs show a kernel WARNING: __list_del corruption , followed by a BUG: unable to handle kernel paging request. Pasting both traces in-line. The traces are separated from any other log messages by 3 minutes, so I don't think anything else is relevant.

Oct 10 10:36:18 adam.happyassassin.net kernel: ------------[ cut here ]------------
Oct 10 10:36:18 adam.happyassassin.net kernel: WARNING: CPU: 0 PID: 1516 at lib/list_debug.c:62 __list_del_entry+0xdd/0xe0()
Oct 10 10:36:18 adam.happyassassin.net kernel: list_del corruption. next->prev should be ffff8801b5727240, but was ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin Not tainted 3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel:  0000000000000000 00000000905d5f2b ffff88042608fca0 ffffffff8173c311
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fce8 ffff88042608fcd8 ffffffff81096e8d ffff8801b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9560 ffff8801b5727240 ffff8801b5727240 ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8173c311>] dump_stack+0x45/0x56
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096e8d>] warn_slowpath_common+0x7d/0xa0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096f0c>] warn_slowpath_fmt+0x5c/0x80
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abed>] __list_del_entry+0xdd/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>] list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>] ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>] nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>] ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>] ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>] ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>] ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>] ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>] ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>] remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>] do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>] vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>] SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>] system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6d ]---
Oct 10 10:36:18 adam.happyassassin.net kernel: BUG: unable to handle kernel paging request at ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: IP: [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: PGD 0 
Oct 10 10:36:18 adam.happyassassin.net kernel: Oops: 0000 [#1] SMP 
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin Tainted: G        W      3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel: task: ffff880418cbebf0 ti: ffff88042608c000 task.ti: ffff88042608c000
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP: 0010:[<ffffffff8139ab39>]  [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: RSP: 0018:ffff88042608fd50  EFLAGS: 00010202
Oct 10 10:36:18 adam.happyassassin.net kernel: RAX: ffff8801b57277c0 RBX: ffff8801b5727440 RCX: dead000000200200
Oct 10 10:36:18 adam.happyassassin.net kernel: RDX: ffff8001b5727240 RSI: ffff8800b9f48301 RDI: ffff8801b5727440
Oct 10 10:36:18 adam.happyassassin.net kernel: RBP: ffff88042608fd50 R08: 00000000b5727501 R09: 000000018040001e
Oct 10 10:36:18 adam.happyassassin.net kernel: R10: ffffffffa008fb2e R11: ffff8801b57275c0 R12: ffff8804085c9560
Oct 10 10:36:18 adam.happyassassin.net kernel: R13: ffff8801b5727440 R14: ffff8801b5727440 R15: ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: FS:  00007f742949c9c0(0000) GS:ffff88043f400000(0000) knlGS:0000000000000000
Oct 10 10:36:18 adam.happyassassin.net kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240 CR3: 00000000ba905000 CR4: 00000000000427e0
Oct 10 10:36:18 adam.happyassassin.net kernel: Stack:
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fd68 ffffffff8139abfd ffff880425e6b9c0 ffff88042608fdb8
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffffffffa00902e8 ffff880425e6ba31 ffff880425e6b9c0 ffff8801b57277c0
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9500 ffff8804249c0000 ffff880428458098 ffff8802e1006030
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>] list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>] ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>] nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>] ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>] ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>] ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>] ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>] ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>] ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>] remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>] do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>] vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>] SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>] system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: Code: 00 00 55 48 8b 07 48 b9 00 01 10 00 00 00 ad de 48 8b 57 08 48 89 e5 48 39 c8 74 36 48 b9 00 02 20 00 00 00 ad de 48 39 ca 74 4f <4c> 8b 02 4c 39 c7 75 6f 4c 8b 40 08 4c 39 c7 0f 85 82 00 00 00 
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP  [<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  RSP <ffff88042608fd50>
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6e ]---
Comment 1 Martin Peres 2019-12-04 08:50:11 UTC 
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/xorg/driver/xf86-video-nouveau/issues/138.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.