[Bug 43835] System crashes when radeon firmware blob (R520_cp.bin) is installed

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=43835

--- Comment #35 from Jonathan Nieder <jrnieder at gmail.com> 2012-01-25 09:37:29 PST ---
bugzilla-daemon at freedesktop.org wrote:

> Syslog with "drm.debug=6" + call trace

Summary follows.  Log is from 25 January.

 15:55 bootup
 15:55 [after 22 seconds] drm driver loads
 15:55 [after 27 seconds] consolekit loads
 15:55 [after 33 or so seconds] modesetting again
 15:55 [after 39 seconds] gdm startup (this is where it crashed previously)
 16:34 [2344 seconds]:

| radeon 0000:01:00.0: GPU lockup CP stall for more than 10000msec
| ------------[ cut here ]------------
| WARNING: at [...]/drivers/gpu/drm/radeon/radeon_fence.c:267
radeon_fence_wait+0x22e/0x298 [radeon]()
| Hardware name: iMac5,1
| GPU lockup (waiting for 0x0003A3C8 last fence id 0x0003A3C7)
| Modules linked in: hid_magicmouse hidp michael_mic arc4 pci_stub vboxpci(O)
vboxnetadp(O) vboxnetflt(O) vboxdrv(O) acpi_cpufreq mperf cpufreq_stats
cpufreq_conservative cpufreq_powersave cpufreq_userspace parport_pc ppdev lp
parport bnep rfcomm binfmt_misc promethean(O) fuse nfsd nfs lockd fscache
auth_rpcgss nfs_acl sunrpc uvcvideo videodev media ssb mmc_core pcmcia
pcmcia_core ndiswrapper(O) loop firewire_sbp2 ir_lirc_codec rc_avermedia_m135a
lirc_dev mxl5005s cryptd aes_i586 aes_generic ir_mce_kbd_decoder af9013 ecb
btusb ir_sony_decoder bluetooth rfkill ir_jvc_decoder ir_rc6_decoder
ir_rc5_decoder isight_firmware dvb_usb_af9015 dvb_usb dvb_core ir_nec_decoder
rc_core uas hid_apple usb_storage snd_hda_codec_idt lib80211_crypt_tkip usbhid
hid wl(P) snd_hda_intel snd_hda_codec radeon snd_hwdep snd_pcm snd_seq
snd_timer snd_seq_device ttm drm_kms_helper drm snd i2c_algo_bit i2c_i801
soundcore applesmc i2c_core snd_page_alloc power_supply iTCO_wdt
iTCO_vendor_support 
| processor input_polldev evdev pcspkr lib80211 thermal_sys apple_bl button
ext4 mbcache jbd2 crc16 sr_mod cdrom sd_mod crc_t10dif ata_generic
firewire_ohci uhci_hcd firewire_core crc_itu_t ata_piix libata ehci_hcd sky2
usbcore scsi_mod [last unloaded: scsi_wait_scan]
| Pid: 1515, comm: Xorg Tainted: P           O 3.1.0-1-686-pae #1
| Call Trace:
|  [<c1037698>] ? warn_slowpath_common+0x68/0x79
|  [<f88b3ffe>] ? radeon_fence_wait+0x22e/0x298 [radeon]
|  [<c1037711>] ? warn_slowpath_fmt+0x29/0x2d
|  [<f88b3ffe>] ? radeon_fence_wait+0x22e/0x298 [radeon]
|  [<c104cf51>] ? add_wait_queue+0x30/0x30
|  [<f872521f>] ? ttm_bo_wait+0xa6/0x153 [ttm]
|  [<f88c32b6>] ? radeon_bo_wait+0x59/0x77 [radeon]
|  [<f88c3719>] ? radeon_gem_wait_idle_ioctl+0x2a/0x50 [radeon]
|  [<f87aedc9>] ? drm_ioctl+0x224/0x2dd [drm]
|  [<f88c36ef>] ? radeon_gem_busy_ioctl+0x6b/0x6b [radeon]
|  [<c10110cc>] ? restore_i387_fxsave+0x63/0x70
|  [<f87aeba5>] ? drm_copy_field+0x47/0x47 [drm]
|  [<c10d33d2>] ? do_vfs_ioctl+0x459/0x48f
|  [<c1011a89>] ? restore_i387_xstate+0x16c/0x1a3
|  [<c10adf54>] ? mmap_region+0x2ef/0x3b7
|  [<c104334d>] ? recalc_sigpending+0x1f/0x2f
|  [<c10d344c>] ? sys_ioctl+0x44/0x68
|  [<c12b2ddf>] ? sysenter_do_call+0x12/0x28
| ---[ end trace 6b5e1f4e74986b70 ]---
| radeon: wait for empty RBBM fifo failed ! Bad things might happen.
| Failed to wait GUI idle while programming pipes. Bad things might happen.
| radeon 0000:01:00.0: (rs600_asic_reset:348) RBBM_STATUS=0xB4116100
| radeon 0000:01:00.0: (rs600_asic_reset:367) RBBM_STATUS=0x94010140
| radeon 0000:01:00.0: (rs600_asic_reset:375) RBBM_STATUS=0x94000140
| radeon 0000:01:00.0: (rs600_asic_reset:383) RBBM_STATUS=0x94000140
| radeon 0000:01:00.0: restoring config space at offset 0x1 (was 0x100403,
writing 0x100407)
| radeon 0000:01:00.0: failed to reset GPU
| radeon 0000:01:00.0: GPU reset failed
| BUG: unable to handle kernel paging request at f8982990

This is Debian kernel 3.1.8-2 (close to upstream v3.1.8).  I don't see
any page table corruption this time.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.