[Bug 95621] BUG in drm_framebuffer_free_bug at drivers/gpu/drm/drm_crtc.c:530

[bugzilla-daemon at bugzilla.kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=95621

Evgeny Kapun <abacabadabacaba at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |abacabadabacaba at gmail.com

--- Comment #2 from Evgeny Kapun <abacabadabacaba at gmail.com> ---
This bug affects me as well. I use vanilla 3.19.3 kernel on Debian. For me, it
happens when I log out. At this point, X server should restart, but instead the
machine hangs.

Log:
------------[ cut here ]------------
kernel BUG at drivers/gpu/drm/drm_crtc.c:536!
invalid opcode: 0000 [#1] SMP 
Modules linked in: dm_mod ctr ccm binfmt_misc cpufreq_stats pci_stub
cpufreq_powersave cpufreq_conservative vboxpci(O) cpufreq_userspace
vboxnetadp(O) vboxnetflt(O) vboxdrv(O) arc4 iwldvm btusb i915 bluetooth
mac80211 coretemp kvm_intel kvm iwlwifi snd_hda_codec_conexant pcmcia
snd_hda_codec_generic cfg80211 joydev iTCO_wdt snd_hda_intel
iTCO_vendor_support snd_hda_controller snd_hda_codec drm_kms_helper psmouse
r852 evdev sm_common nand pcspkr snd_hwdep serio_raw nand_ecc snd_pcm_oss drm
yenta_socket nand_bch bch nand_ids pcmcia_rsrc mtd pcmcia_core r592 memstick
lpc_ich snd_mixer_oss snd_pcm i2c_i801 mfd_core thinkpad_acpi snd_timer nvram
snd tpm_tis wmi acpi_cpufreq mei_me tpm processor shpchp rfkill video mei
i2c_algo_bit i2c_core battery 8250_fintek ac soundcore button fuse parport_pc
ppdev lp parport autofs4 ext4 crc16 mbcache jbd2 sg hid_generic sd_mod sr_mod
cdrom usbhid hid ahci libahci libata scsi_mod firewire_ohci sdhci_pci sdhci
firewire_core mmc_core crc_itu_t e1000e thermal thermal_sys ehci_pci uhci_hcd
ehci_hcd usbcore ptp pps_core usb_common
CPU: 1 PID: 1534 Comm: Xorg Tainted: G           O   3.19.3 #1
Hardware name: LENOVO 2765RAG/2765RAG, BIOS 7VET66WW (2.16 ) 04/22/2009
task: ffff88007edacca0 ti: ffff88007ee1c000 task.ti: ffff88007ee1c000
RIP: 0010:[<ffffffffa03fc9c5>]  [<ffffffffa03fc9c5>]
drm_framebuffer_free_bug+0x5/0x10 [drm]
RSP: 0018:ffff88007ee1fac0  EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff88007e65dc00 RCX: 0000000000000001
RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffff88007f86ff48
RBP: ffff88007f86ff40 R08: ffff88007ea09170 R09: 0000000000000000
R10: ffff88007e088d00 R11: 0000000000003246 R12: ffff88007f835e00
R13: ffff88012e6bf378 R14: ffff88007ee1fbb8 R15: 0000000000000080
FS:  00007fcbb76c8980(0000) GS:ffff88013bc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00007fd45bf18010 CR3: 0000000109a4c000 CR4: 00000000000407e0
Stack:
 ffffffffa03fe7ad ffff88007faef000 ffff88007e65dc00 ffff88012e6bf000
 ffffffffa04aa679 ffff88007f835e00 ffff88012e6bf000 0000000000200001
 ffff8800b3844860 ffff88007ee1fbb8 ffffffffa04ac610 ffff88007f835e00
Call Trace:
 [<ffffffffa03fe7ad>] ? drm_plane_force_disable+0x9d/0xd0 [drm]
 [<ffffffffa04aa679>] ? restore_fbdev_mode+0x49/0xe0 [drm_kms_helper]
 [<ffffffffa04ac610>] ? drm_fb_helper_restore_fbdev_mode_unlocked+0x20/0x60
[drm_kms_helper]
 [<ffffffffa04ac672>] ? drm_fb_helper_set_par+0x22/0x50 [drm_kms_helper]
 [<ffffffffa0972ef6>] ? intel_fbdev_set_par+0x16/0x60 [i915]
 [<ffffffff813361ee>] ? fb_set_var+0x15e/0x3a0
 [<ffffffffa017e165>] ? jbd2_journal_dirty_metadata+0xd5/0x2a0 [jbd2]
 [<ffffffff8132d1e3>] ? fbcon_blank+0x223/0x2e0
 [<ffffffff813a4ea7>] ? do_unblank_screen+0xb7/0x1f0
 [<ffffffff8139b698>] ? vt_ioctl+0x698/0x1360
 [<ffffffff8138e9ee>] ? tty_ioctl+0x3de/0xc40
 [<ffffffff811d5c91>] ? dput+0x21/0x1a0
 [<ffffffff811d2648>] ? do_vfs_ioctl+0x2e8/0x4f0
 [<ffffffff810887dc>] ? task_work_run+0xbc/0xf0
 [<ffffffff811d28d1>] ? SyS_ioctl+0x81/0xa0
 [<ffffffff81550baf>] ? int_signal+0x12/0x17
 [<ffffffff8155090d>] ? system_call_fastpath+0x16/0x1b
Code: 02 03 ed e0 4c 89 e7 e8 da 1c 15 e1 5b 48 89 ef 5d 41 5c e9 5e 72 da e0
66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90 <0f> 0b 66 0f 1f 84 00
00 00 00 00 66 66 66 66 90 53 48 89 fb e8 
RIP  [<ffffffffa03fc9c5>] drm_framebuffer_free_bug+0x5/0x10 [drm]
 RSP <ffff88007ee1fac0>
---[ end trace c658404e860f3cfe ]---

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.