[Nouveau] [Bug 84880] New: [NV94] X freeze on nouveau list_del corruption / unable to handle kernel paging request

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Fri Oct 10 11:14:05 PDT 2014 

https://bugs.freedesktop.org/show_bug.cgi?id=84880

            Bug ID: 84880
           Summary: [NV94] X freeze on nouveau list_del corruption /
                    unable to handle kernel paging request
           Product: xorg
           Version: unspecified
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: NEW
          Severity: critical
          Priority: medium
         Component: Driver/nouveau
          Assignee: nouveau at lists.freedesktop.org
          Reporter: adamw at happyassassin.net
        QA Contact: xorg-team at lists.x.org

Running kernel-3.17.0-301.fc21 on Fedora 21 (more or less 3.17.0 upstream I
believe), my desktop (GNOME 3.14) froze while I was zooming in Google Maps in
Firefox. I could ssh in and interact with the system normally and trigger a
reboot, but X was stuck. Logs show a kernel WARNING: __list_del corruption ,
followed by a BUG: unable to handle kernel paging request. Pasting both traces
in-line. The traces are separated from any other log messages by 3 minutes, so
I don't think anything else is relevant.

Oct 10 10:36:18 adam.happyassassin.net kernel: ------------[ cut here
]------------
Oct 10 10:36:18 adam.happyassassin.net kernel: WARNING: CPU: 0 PID: 1516 at
lib/list_debug.c:62 __list_del_entry+0xdd/0xe0()
Oct 10 10:36:18 adam.happyassassin.net kernel: list_del corruption. next->prev
should be ffff8801b5727240, but was ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in:
rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs
dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost
macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter
ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat
nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo
videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev
snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi
bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi
asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul
crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek
snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller
lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm
snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video
i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core
ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin
Not tainted 3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System
manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel:  0000000000000000
00000000905d5f2b ffff88042608fca0 ffffffff8173c311
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fce8
ffff88042608fcd8 ffffffff81096e8d ffff8801b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9560
ffff8801b5727240 ffff8801b5727240 ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8173c311>]
dump_stack+0x45/0x56
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096e8d>]
warn_slowpath_common+0x7d/0xa0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096f0c>]
warn_slowpath_fmt+0x5c/0x80
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abed>]
__list_del_entry+0xdd/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>]
list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>]
ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>]
nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>]
ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>]
ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>]
ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>]
ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>]
ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>]
ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>]
remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>]
do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>]
vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>]
SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>]
system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6d
]---
Oct 10 10:36:18 adam.happyassassin.net kernel: BUG: unable to handle kernel
paging request at ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: IP: [<ffffffff8139ab39>]
__list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: PGD 0 
Oct 10 10:36:18 adam.happyassassin.net kernel: Oops: 0000 [#1] SMP 
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in:
rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs
dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost
macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter
ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat
nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo
videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev
snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi
bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi
asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul
crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek
snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller
lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm
snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video
i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core
ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin
Tainted: G        W      3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System
manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel: task: ffff880418cbebf0 ti:
ffff88042608c000 task.ti: ffff88042608c000
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP: 0010:[<ffffffff8139ab39>] 
[<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: RSP: 0018:ffff88042608fd50 
EFLAGS: 00010202
Oct 10 10:36:18 adam.happyassassin.net kernel: RAX: ffff8801b57277c0 RBX:
ffff8801b5727440 RCX: dead000000200200
Oct 10 10:36:18 adam.happyassassin.net kernel: RDX: ffff8001b5727240 RSI:
ffff8800b9f48301 RDI: ffff8801b5727440
Oct 10 10:36:18 adam.happyassassin.net kernel: RBP: ffff88042608fd50 R08:
00000000b5727501 R09: 000000018040001e
Oct 10 10:36:18 adam.happyassassin.net kernel: R10: ffffffffa008fb2e R11:
ffff8801b57275c0 R12: ffff8804085c9560
Oct 10 10:36:18 adam.happyassassin.net kernel: R13: ffff8801b5727440 R14:
ffff8801b5727440 R15: ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: FS:  00007f742949c9c0(0000)
GS:ffff88043f400000(0000) knlGS:0000000000000000
Oct 10 10:36:18 adam.happyassassin.net kernel: CS:  0010 DS: 0000 ES: 0000 CR0:
0000000080050033
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240 CR3:
00000000ba905000 CR4: 00000000000427e0
Oct 10 10:36:18 adam.happyassassin.net kernel: Stack:
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fd68
ffffffff8139abfd ffff880425e6b9c0 ffff88042608fdb8
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffffffffa00902e8
ffff880425e6ba31 ffff880425e6b9c0 ffff8801b57277c0
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9500
ffff8804249c0000 ffff880428458098 ffff8802e1006030
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>]
list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>]
ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>]
nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>]
ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>]
ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>]
ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>]
ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>]
ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>]
ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>]
remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>]
do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>]
vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>]
SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>]
system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: Code: 00 00 55 48 8b 07 48 b9 00
01 10 00 00 00 ad de 48 8b 57 08 48 89 e5 48 39 c8 74 36 48 b9 00 02 20 00 00
00 ad de 48 39 ca 74 4f <4c> 8b 02 4c 39 c7 75 6f 4c 8b 40 08 4c 39 c7 0f 85 82
00 00 00 
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP  [<ffffffff8139ab39>]
__list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  RSP <ffff88042608fd50>
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6e
]---

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/nouveau/attachments/20141010/c68e19a6/attachment-0001.html>

More information about the Nouveau mailing list