[Bug 35045] New: BUG at ttm_bo.c:272! (ttm_bo_ref_bug -> ttm_bo_list_ref_sub+0x28/0x30)

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Sat Mar 5 14:44:21 PST 2011


https://bugs.freedesktop.org/show_bug.cgi?id=35045

           Summary: BUG at ttm_bo.c:272! (ttm_bo_ref_bug ->
                    ttm_bo_list_ref_sub+0x28/0x30)
           Product: DRI
           Version: XOrg CVS
          Platform: x86-64 (AMD64)
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: DRM/Radeon
        AssignedTo: dri-devel at lists.freedesktop.org
        ReportedBy: freedesktop at treblig.org


Hi,
  I've got a repeatable oops that happens when viewing full screen video in
flash in chromium, under kwin (with effects enabled) and switching virtual
desktop/workspace on ATI Technologies Inc RV710 [Radeon HD 4350].

Hardware: ATI Technologies Inc RV710 [Radeon HD 4350] in an ASRock P55M Pro
motherboard, with an i7-860 CPU, and 8GB RAM, connected to Dell S2409W display
via DVI.

OS: Ubuntu Natty upto date as of today, 64bit install, running KDE.

Kernel: Daily build from DRM next from
http://kernel.ubuntu.com/~kernel-ppa/mainline/drm-next/current/
linux-image-2.6.38-996-generic_2.6.38-996.201103041138_amd64.deb claims to be
commit e73f88af66fcc50083fae4b7e1c39b469179a97a

DRM/mesa/etc:
     ii  libdrm-radeon1                2.4.23-1ubuntu3  
     ii  libdrm2                       2.4.23-1ubuntu3
     ii  libgl1-mesa-dri               7.10.1~git20110215.cc1636b6-0

I've got a 3x3 virtual desktop setup, and am running Chromium and go to youtube
and pop a video full screen; and move around the virtual desktop with
ctrl-alt-arrows.  The oops below was produced twice.  I've got a bunch of
related symptoms; I installed the daily build because I was getting instances
of [drm:radeon_cs_ioctl] *ERROR* Failed to parse relocation -35! (which I think
is EDEADLOCK) doing similar combinations of going in and out of full screen
flash.
I've also seen when I try to go into full screen rapid flickering as if it
can't decide whether to go into full screen or stay out; once that's triggered
that flickering can repeat itself when starting other apps.


  This corresponds to Ubuntu bug
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/717870
and possibly also ubuntu bug 717889


Mar  5 22:12:17 major kernel: [  495.890854] ------------[ cut here
]------------
Mar  5 22:12:17 major kernel: [  495.890882] kernel BUG at
/home/kernel-ppa/COD/linux/drivers/gpu/drm/ttm/ttm_bo.c:272!
Mar  5 22:12:17 major kernel: [  495.890917] invalid opcode: 0000 [#1] SMP 
Mar  5 22:12:17 major kernel: [  495.890939] last sysfs file:
/sys/devices/system/cpu/cpu7/topology/thread_siblings
Mar  5 22:12:17 major kernel: [  495.890971] CPU 1 
Mar  5 22:12:17 major kernel: [  495.890981] Modules linked in: ip6table_filter
ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat
nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT binfmt_misc
xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge
stp kvm_intel kvm dm_crypt snd_hda_codec_hdmi snd_hda_codec_via snd_hda_intel
snd_seq_midi snd_hda_codec snd_rawmidi snd_hwdep snd_seq_midi_event snd_seq
snd_pcm snd_seq_device snd_timer snd ppdev soundcore parport_pc snd_page_alloc
lp parport radeon usbhid usb_storage ttm hid firewire_ohci drm_kms_helper uas
drm firewire_core r8169 pata_via crc_itu_t i2c_algo_bit configfs
Mar  5 22:12:17 major kernel: [  495.891289] 
Mar  5 22:12:17 major kernel: [  495.893682] Pid: 42, comm: kworker/1:1 Not
tainted 2.6.38-996-generic #201103041138 P55M Pro/To Be Filled By O.E.M.
Mar  5 22:12:17 major kernel: [  495.896183] RIP: 0010:[<ffffffffa00f3d89>] 
[<ffffffffa00f3d89>] ttm_bo_ref_bug+0x9/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  495.898561] RSP: 0000:ffff8802277ebd90 
EFLAGS: 00010202
Mar  5 22:12:17 major kernel: [  495.900903] RAX: ffffffffa00f6801 RBX:
0000000000000000 RCX: ffff880222bb3120
Mar  5 22:12:17 major kernel: [  495.903223] RDX: 0000000000000000 RSI:
0000000000000000 RDI: ffff880222bb308c
Mar  5 22:12:17 major kernel: [  495.905545] RBP: ffff8802277ebd90 R08:
0000000000000000 R09: 0000000000000000
Mar  5 22:12:17 major kernel: [  495.907870] R10: ffff8800c7453b58 R11:
0000000000000000 R12: ffff880222bb308c
Mar  5 22:12:17 major kernel: [  495.910371] R13: ffffffffa00f3d80 R14:
ffff880222bb3048 R15: 0000000000000000
Mar  5 22:12:17 major kernel: [  495.912659] FS:  0000000000000000(0000)
GS:ffff8800c7440000(0000) knlGS:0000000000000000
Mar  5 22:12:17 major kernel: [  495.914975] CS:  0010 DS: 0000 ES: 0000 CR0:
000000008005003b
Mar  5 22:12:17 major kernel: [  495.917310] CR2: 00000000f0969000 CR3:
00000001dc19a000 CR4: 00000000000006e0
Mar  5 22:12:17 major kernel: [  495.919642] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Mar  5 22:12:17 major kernel: [  495.921973] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Mar  5 22:12:17 major kernel: [  495.924274] Process kworker/1:1 (pid: 42,
threadinfo ffff8802277ea000, task ffff8802277bc440)
Mar  5 22:12:17 major kernel: [  495.926774] Stack:
Mar  5 22:12:17 major kernel: [  495.929067]  ffff8802277ebdc0 ffffffff812d31be
0000000000000001 0000000000000000
Mar  5 22:12:17 major kernel: [  495.931384]  ffff880222b1a208 0000000000000000
ffff8802277ebdd0 ffffffffa00f5048
Mar  5 22:12:17 major kernel: [  495.933688]  ffff8802277ebe10 ffffffffa00f67c8
01ff8802277ebe10 ffff880222bb3000
Mar  5 22:12:17 major kernel: [  495.936003] Call Trace:
Mar  5 22:12:17 major kernel: [  495.938310]  [<ffffffff812d31be>]
kref_sub+0x3e/0x80
Mar  5 22:12:17 major kernel: [  495.940583]  [<ffffffffa00f5048>]
ttm_bo_list_ref_sub+0x28/0x30 [ttm]
Mar  5 22:12:17 major kernel: [  495.942967]  [<ffffffffa00f67c8>]
ttm_bo_reserve+0x88/0xa0 [ttm]
Mar  5 22:12:17 major kernel: [  495.945209]  [<ffffffffa0154858>]
radeon_unpin_work_func+0x28/0xb0 [radeon]
Mar  5 22:12:17 major kernel: [  495.947398]  [<ffffffff810813ce>]
process_one_work+0x10e/0x390
Mar  5 22:12:17 major kernel: [  495.949673]  [<ffffffffa0154830>] ?
radeon_unpin_work_func+0x0/0xb0 [radeon]
Mar  5 22:12:17 major kernel: [  495.951872]  [<ffffffff8108221d>]
worker_thread+0xdd/0x260
Mar  5 22:12:17 major kernel: [  495.954094]  [<ffffffff81082140>] ?
worker_thread+0x0/0x260
Mar  5 22:12:17 major kernel: [  495.956341]  [<ffffffff81086277>]
kthread+0x97/0xa0
Mar  5 22:12:17 major kernel: [  495.958735]  [<ffffffff8100ce24>]
kernel_thread_helper+0x4/0x10
Mar  5 22:12:17 major kernel: [  495.958738]  [<ffffffff810861e0>] ?
kthread+0x0/0xa0
Mar  5 22:12:17 major kernel: [  495.958740]  [<ffffffff8100ce20>] ?
kernel_thread_helper+0x0/0x10
Mar  5 22:12:17 major kernel: [  495.958741] Code: 48 89 10 48 89 8f e0 00 00
00 48 89 8f d8 00 00 00 c9 89 f0 c3 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55
48 89 e5 0f 1f 44 00 00 <0f> 0b eb fe 0f 1f 00 55 48 89 e5 0f 1f 44 00 00 48 83
3e 00 48 
Mar  5 22:12:17 major kernel: [  495.958754] RIP  [<ffffffffa00f3d89>]
ttm_bo_ref_bug+0x9/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  495.958761]  RSP <ffff8802277ebd90>
Mar  5 22:12:17 major kernel: [  495.970338] ---[ end trace eb6ea5ab08ebf6f9
]---
Mar  5 22:12:17 major kernel: [  495.971011] BUG: unable to handle kernel
paging request at fffffffffffffff8
Mar  5 22:12:17 major kernel: [  495.973499] IP: [<ffffffff81085f30>]
kthread_data+0x10/0x20
Mar  5 22:12:17 major kernel: [  495.976059] PGD 1a05067 PUD 1a06067 PMD 0 
Mar  5 22:12:17 major kernel: [  495.978440] Oops: 0000 [#2] SMP 
Mar  5 22:12:17 major kernel: [  495.980762] last sysfs file:
/sys/devices/system/cpu/cpu7/topology/thread_siblings
Mar  5 22:12:17 major kernel: [  495.983104] CPU 1 
Mar  5 22:12:17 major kernel: [  495.983112] Modules linked in: ip6table_filter
ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat
nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT binfmt_misc
xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge
stp kvm_intel kvm dm_crypt snd_hda_codec_hdmi snd_hda_codec_via snd_hda_intel
snd_seq_midi snd_hda_codec snd_rawmidi snd_hwdep snd_seq_midi_event snd_seq
snd_pcm snd_seq_device snd_timer snd ppdev soundcore parport_pc snd_page_alloc
lp parport radeon usbhid usb_storage ttm hid firewire_ohci drm_kms_helper uas
drm firewire_core r8169 pata_via crc_itu_t i2c_algo_bit configfs
Mar  5 22:12:17 major kernel: [  495.993045] 
Mar  5 22:12:17 major kernel: [  495.995587] Pid: 42, comm: kworker/1:1
Tainted: G      D     2.6.38-996-generic #201103041138 P55M Pro/To Be Filled By
O.E.M.
Mar  5 22:12:17 major kernel: [  495.998137] RIP: 0010:[<ffffffff81085f30>] 
[<ffffffff81085f30>] kthread_data+0x10/0x20
Mar  5 22:12:17 major kernel: [  496.000687] RSP: 0018:ffff8802277eb9a8 
EFLAGS: 00010096
Mar  5 22:12:17 major kernel: [  496.003225] RAX: 0000000000000000 RBX:
ffff8802277bc440 RCX: ffff8802277ebb28
Mar  5 22:12:17 major kernel: [  496.005892] RDX: ffff8802277bc440 RSI:
0000000000000001 RDI: ffff8802277bc440
Mar  5 22:12:17 major kernel: [  496.008436] RBP: ffff8802277eb9a8 R08:
ffff8800c7456f60 R09: ffff88022762b8a8
Mar  5 22:12:17 major kernel: [  496.010907] R10: ffff88022762b898 R11:
0000000000000001 R12: 0000000000000001
Mar  5 22:12:17 major kernel: [  496.013390] R13: 0000000000000001 R14:
ffff8800c7453ac0 R15: 00007ffffffff000
Mar  5 22:12:17 major kernel: [  496.015887] FS:  0000000000000000(0000)
GS:ffff8800c7440000(0000) knlGS:0000000000000000
Mar  5 22:12:17 major kernel: [  496.018383] CS:  0010 DS: 0000 ES: 0000 CR0:
000000008005003b
Mar  5 22:12:17 major kernel: [  496.020860] CR2: fffffffffffffff8 CR3:
00000001dc19a000 CR4: 00000000000006e0
Mar  5 22:12:17 major kernel: [  496.023477] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Mar  5 22:12:17 major kernel: [  496.025936] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Mar  5 22:12:17 major kernel: [  496.028369] Process kworker/1:1 (pid: 42,
threadinfo ffff8802277ea000, task ffff8802277bc440)
Mar  5 22:12:17 major kernel: [  496.030832] Stack:
Mar  5 22:12:17 major kernel: [  496.033291]  ffff8802277eb9d8 ffffffff8107f89a
ffff8802277eba48 ffff8802277bc440
Mar  5 22:12:17 major kernel: [  496.035764]  ffff8802277bc7e0 0000000000000001
ffff8802277ebb28 ffffffff815b11e9
Mar  5 22:12:17 major kernel: [  496.038401]  ffff880222f55800 ffff8802277ebfd8
ffff8802277ebb28 0000000000013ac0
Mar  5 22:12:17 major kernel: [  496.040860] Call Trace:
Mar  5 22:12:17 major kernel: [  496.043305]  [<ffffffff8107f89a>]
wq_worker_sleeping+0x1a/0x90
Mar  5 22:12:17 major kernel: [  496.045791]  [<ffffffff815b11e9>]
schedule+0x549/0x790
Mar  5 22:12:17 major kernel: [  496.048146]  [<ffffffff812c8429>] ?
cfq_cic_free+0x19/0x20
Mar  5 22:12:17 major kernel: [  496.050423]  [<ffffffff812cb00a>] ?
cic_free_func+0x7a/0x90
Mar  5 22:12:17 major kernel: [  496.052633]  [<ffffffff812caf90>] ?
cic_free_func+0x0/0x90
Mar  5 22:12:17 major kernel: [  496.054976]  [<ffffffff812c8294>] ?
__call_for_each_cic+0x34/0x50
Mar  5 22:12:17 major kernel: [  496.057143]  [<ffffffff812bb90d>] ?
put_io_context+0x4d/0x60
Mar  5 22:12:17 major kernel: [  496.059273]  [<ffffffff8106a302>]
do_exit+0x2c2/0x3f0
Mar  5 22:12:17 major kernel: [  496.061397]  [<ffffffff815b4b43>]
oops_end+0xf3/0x100
Mar  5 22:12:17 major kernel: [  496.063503]  [<ffffffff8100fc3b>]
die+0x5b/0x90
Mar  5 22:12:17 major kernel: [  496.065648]  [<ffffffff815b4200>]
do_trap+0x140/0x160
Mar  5 22:12:17 major kernel: [  496.067779]  [<ffffffffa00f3d80>] ?
ttm_bo_ref_bug+0x0/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  496.070047]  [<ffffffff8100d905>]
do_invalid_op+0x95/0xb0
Mar  5 22:12:17 major kernel: [  496.072160]  [<ffffffffa00f3d89>] ?
ttm_bo_ref_bug+0x9/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  496.072163]  [<ffffffff8104bc3f>] ?
account_entity_dequeue+0x7f/0xb0
Mar  5 22:12:17 major kernel: [  496.072165]  [<ffffffff812d5e7f>] ?
rb_erase+0xbf/0x140
Mar  5 22:12:17 major kernel: [  496.072167]  [<ffffffff8100cc9b>]
invalid_op+0x1b/0x20
Mar  5 22:12:17 major kernel: [  496.072173]  [<ffffffffa00f3d80>] ?
ttm_bo_ref_bug+0x0/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  496.072177]  [<ffffffffa00f6801>] ?
ttm_bo_global_show+0x21/0x30 [ttm]
Mar  5 22:12:17 major kernel: [  496.072181]  [<ffffffffa00f3d89>] ?
ttm_bo_ref_bug+0x9/0x10 [ttm]
Mar  5 22:12:17 major kernel: [  496.072184]  [<ffffffff812d31be>]
kref_sub+0x3e/0x80
Mar  5 22:12:17 major kernel: [  496.072188]  [<ffffffffa00f5048>]
ttm_bo_list_ref_sub+0x28/0x30 [ttm]
Mar  5 22:12:17 major kernel: [  496.072192]  [<ffffffffa00f67c8>]
ttm_bo_reserve+0x88/0xa0 [ttm]
Mar  5 22:12:17 major kernel: [  496.072206]  [<ffffffffa0154858>]
radeon_unpin_work_func+0x28/0xb0 [radeon]
Mar  5 22:12:17 major kernel: [  496.072209]  [<ffffffff810813ce>]
process_one_work+0x10e/0x390
Mar  5 22:12:17 major kernel: [  496.072221]  [<ffffffffa0154830>] ?
radeon_unpin_work_func+0x0/0xb0 [radeon]
Mar  5 22:12:17 major kernel: [  496.072223]  [<ffffffff8108221d>]
worker_thread+0xdd/0x260
Mar  5 22:12:17 major kernel: [  496.072225]  [<ffffffff81082140>] ?
worker_thread+0x0/0x260
Mar  5 22:12:17 major kernel: [  496.072227]  [<ffffffff81086277>]
kthread+0x97/0xa0
Mar  5 22:12:17 major kernel: [  496.072229]  [<ffffffff8100ce24>]
kernel_thread_helper+0x4/0x10
Mar  5 22:12:17 major kernel: [  496.072231]  [<ffffffff810861e0>] ?
kthread+0x0/0xa0
Mar  5 22:12:17 major kernel: [  496.072233]  [<ffffffff8100ce20>] ?
kernel_thread_helper+0x0/0x10
Mar  5 22:12:17 major kernel: [  496.072234] Code: 1f 44 00 00 65 48 8b 04 25
40 cc 00 00 48 8b 80 48 03 00 00 8b 40 f0 c9 c3 66 90 55 48 89 e5 0f 1f 44 00
00 48 8b 87 48 03 00 00 <48> 8b 40 f8 c9 c3 66 2e 0f 1f 84 00 00 00 00 00 55 48
89 e5 0f 
Mar  5 22:12:17 major kernel: [  496.072246] RIP  [<ffffffff81085f30>]
kthread_data+0x10/0x20
Mar  5 22:12:17 major kernel: [  496.072248]  RSP <ffff8802277eb9a8>
Mar  5 22:12:17 major kernel: [  496.072249] CR2: fffffffffffffff8
Mar  5 22:12:17 major kernel: [  496.072250] ---[ end trace eb6ea5ab08ebf6fa
]---
Mar  5 22:12:17 major kernel: [  496.072251] Fixing recursive fault but reboot
is needed!

root at major:/home/dg#

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the dri-devel mailing list