Nouveau - Oct 2014 - [Bug 84880] New: [NV94] X freeze on nouveau list_del corruption / unable to handle kernel paging request

https://bugs.freedesktop.org/show_bug.cgi?id=84880

            Bug ID: 84880
           Summary: [NV94] X freeze on nouveau list_del corruption /
                    unable to handle kernel paging request
           Product: xorg
           Version: unspecified
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: NEW
          Severity: critical
          Priority: medium
         Component: Driver/nouveau
          Assignee: nouveau at lists.freedesktop.org
          Reporter: adamw at happyassassin.net
        QA Contact: xorg-team at lists.x.org

Running kernel-3.17.0-301.fc21 on Fedora 21 (more or less 3.17.0 upstream I
believe), my desktop (GNOME 3.14) froze while I was zooming in Google Maps in
Firefox. I could ssh in and interact with the system normally and trigger a
reboot, but X was stuck. Logs show a kernel WARNING: __list_del corruption ,
followed by a BUG: unable to handle kernel paging request. Pasting both traces
in-line. The traces are separated from any other log messages by 3 minutes, so
I don't think anything else is relevant.

Oct 10 10:36:18 adam.happyassassin.net kernel: ------------[ cut here
]------------
Oct 10 10:36:18 adam.happyassassin.net kernel: WARNING: CPU: 0 PID: 1516 at
lib/list_debug.c:62 __list_del_entry+0xdd/0xe0()
Oct 10 10:36:18 adam.happyassassin.net kernel: list_del corruption.
next->prev
should be ffff8801b5727240, but was ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in:
rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs
dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost
macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter
ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat
nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo
videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev
snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi
bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi
asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul
crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek
snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller
lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm
snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video
i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core
ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin
Not tainted 3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System
manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel:  0000000000000000
00000000905d5f2b ffff88042608fca0 ffffffff8173c311
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fce8
ffff88042608fcd8 ffffffff81096e8d ffff8801b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9560
ffff8801b5727240 ffff8801b5727240 ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8173c311>]
dump_stack+0x45/0x56
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096e8d>]
warn_slowpath_common+0x7d/0xa0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81096f0c>]
warn_slowpath_fmt+0x5c/0x80
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abed>]
__list_del_entry+0xdd/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>]
list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>]
ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>]
nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>]
ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>]
ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>]
ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>]
ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>]
ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>]
ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>]
remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>]
do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>]
vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>]
SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>]
system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6d
]---
Oct 10 10:36:18 adam.happyassassin.net kernel: BUG: unable to handle kernel
paging request at ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: IP: [<ffffffff8139ab39>]
__list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: PGD 0 
Oct 10 10:36:18 adam.happyassassin.net kernel: Oops: 0000 [#1] SMP 
Oct 10 10:36:18 adam.happyassassin.net kernel: Modules linked in:
rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd rfcomm arc4 md4 nls_utf8 cifs
dns_resolver fscache fuse xt_CHECKSUM ipt_MASQUERADE vhost_net tun vhost
macvtap macvlan nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter
ip6t_REJECT xt_conntrack cfg80211 ebtable_nat ebtable_broute bridge stp llc
ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6
nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter
ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat
nf_conntrack iptable_mangle iptable_security iptable_raw bnep uvcvideo
videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common videodev
snd_usb_audio uas snd_usbmidi_lib joydev btusb usb_storage media snd_rawmidi
bluetooth x86_pkg_temp_thermal coretemp
Oct 10 10:36:18 adam.happyassassin.net kernel:  kvm_intel kvm eeepc_wmi
asus_wmi iTCO_wdt sparse_keymap rfkill iTCO_vendor_support crct10dif_pclmul
crc32_pclmul crc32c_intel ghash_clmulni_intel snd_hda_codec_realtek
snd_hda_codec_generic serio_raw i2c_i801 snd_hda_intel snd_hda_controller
lpc_ich snd_hda_codec mfd_core snd_hwdep snd_seq snd_seq_device snd_pcm
snd_timer snd mei_me mei soundcore shpchp sunrpc binfmt_misc nouveau video
i2c_algo_bit drm_kms_helper e1000e ttm firewire_ohci mxm_wmi drm firewire_core
ptp crc_itu_t pps_core wmi
Oct 10 10:36:18 adam.happyassassin.net kernel: CPU: 0 PID: 1516 Comm: Xorg.bin
Tainted: G        W      3.17.0-301.fc21.x86_64 #1
Oct 10 10:36:18 adam.happyassassin.net kernel: Hardware name: System
manufacturer System Product Name/P8P67 DELUXE, BIOS 1703 05/27/2011
Oct 10 10:36:18 adam.happyassassin.net kernel: task: ffff880418cbebf0 ti:
ffff88042608c000 task.ti: ffff88042608c000
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP:
0010:[<ffffffff8139ab39>]
[<ffffffff8139ab39>] __list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel: RSP: 0018:ffff88042608fd50 
EFLAGS: 00010202
Oct 10 10:36:18 adam.happyassassin.net kernel: RAX: ffff8801b57277c0 RBX:
ffff8801b5727440 RCX: dead000000200200
Oct 10 10:36:18 adam.happyassassin.net kernel: RDX: ffff8001b5727240 RSI:
ffff8800b9f48301 RDI: ffff8801b5727440
Oct 10 10:36:18 adam.happyassassin.net kernel: RBP: ffff88042608fd50 R08:
00000000b5727501 R09: 000000018040001e
Oct 10 10:36:18 adam.happyassassin.net kernel: R10: ffffffffa008fb2e R11:
ffff8801b57275c0 R12: ffff8804085c9560
Oct 10 10:36:18 adam.happyassassin.net kernel: R13: ffff8801b5727440 R14:
ffff8801b5727440 R15: ffff8804085c9500
Oct 10 10:36:18 adam.happyassassin.net kernel: FS:  00007f742949c9c0(0000)
GS:ffff88043f400000(0000) knlGS:0000000000000000
Oct 10 10:36:18 adam.happyassassin.net kernel: CS:  0010 DS: 0000 ES: 0000 CR0:
0000000080050033
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240 CR3:
00000000ba905000 CR4: 00000000000427e0
Oct 10 10:36:18 adam.happyassassin.net kernel: Stack:
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff88042608fd68
ffffffff8139abfd ffff880425e6b9c0 ffff88042608fdb8
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffffffffa00902e8
ffff880425e6ba31 ffff880425e6b9c0 ffff8801b57277c0
Oct 10 10:36:18 adam.happyassassin.net kernel:  ffff8804085c9500
ffff8804249c0000 ffff880428458098 ffff8802e1006030
Oct 10 10:36:18 adam.happyassassin.net kernel: Call Trace:
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff8139abfd>]
list_del+0xd/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00902e8>]
ttm_dma_unpopulate+0x2c8/0x360 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa01a8bbd>]
nouveau_ttm_tt_unpopulate+0x11d/0x130 [nouveau]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00871e4>]
ttm_tt_unpopulate+0x54/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa0087255>]
ttm_tt_destroy+0x65/0x70 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008787f>]
ttm_bo_cleanup_memtype_use+0x3f/0x90 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886a3>]
ttm_bo_release+0x273/0x2a0 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa00886f9>]
ttm_bo_unref+0x29/0x30 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffffa008bd14>]
ttm_bo_vm_close+0x34/0x60 [ttm]
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c6a72>]
remove_vma+0x32/0x70
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9047>]
do_munmap+0x247/0x440
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811c9281>]
vm_munmap+0x41/0x60
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff811ca2b2>]
SyS_munmap+0x22/0x30
Oct 10 10:36:18 adam.happyassassin.net kernel:  [<ffffffff81743469>]
system_call_fastpath+0x16/0x1b
Oct 10 10:36:18 adam.happyassassin.net kernel: Code: 00 00 55 48 8b 07 48 b9 00
01 10 00 00 00 ad de 48 8b 57 08 48 89 e5 48 39 c8 74 36 48 b9 00 02 20 00 00
00 ad de 48 39 ca 74 4f <4c> 8b 02 4c 39 c7 75 6f 4c 8b 40 08 4c 39 c7 0f
85 82
00 00 00 
Oct 10 10:36:18 adam.happyassassin.net kernel: RIP  [<ffffffff8139ab39>]
__list_del_entry+0x29/0xe0
Oct 10 10:36:18 adam.happyassassin.net kernel:  RSP <ffff88042608fd50>
Oct 10 10:36:18 adam.happyassassin.net kernel: CR2: ffff8001b5727240
Oct 10 10:36:18 adam.happyassassin.net kernel: ---[ end trace 7114183afcc2fd6e
]---

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.freedesktop.org/archives/nouveau/attachments/20141010/c68e19a6/attachment-0001.html>

https://bugs.freedesktop.org/show_bug.cgi?id=84880

Martin Peres <martin.peres at free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |MOVED

--- Comment #1 from Martin Peres <martin.peres at free.fr> ---
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been
closed from further activity.

You can subscribe and participate further through the new bug through this link
to our GitLab instance:
https://gitlab.freedesktop.org/xorg/driver/xf86-video-nouveau/issues/138.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/nouveau/attachments/20191204/382e85d3/attachment.html>