Bug 1167114

Summary: [abrt] kernel BUG at mm/memcontrol.c:6742!
Product: [Fedora] Fedora Reporter: Bavarian Bugger <reposer>
Component: xorg-x11-drv-intelAssignee: Adam Jackson <ajax>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: ajax, d.j, gansalmon, hedayatv, itamar, jonathan, kernel-maint, madhu.chinakonda, mchehab, vinnitrash, xgl-maint
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/079442cad9536a8187b8b27e52a430c060334bbc
Whiteboard: abrt_hash:a63f5eeebb7d6879c7dc015c237f37351dc9ad75
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-18 00:29:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Bavarian Bugger 2014-11-23 20:03:32 UTC 
Description of problem:
maybe during using virtmanager - installing ubuntu 14.04 - complete freezing of keyboard and display

Additional info:
reporter:       libreport-2.2.3
kernel BUG at mm/memcontrol.c:6742!
invalid opcode: 0000 [#1] SMP 
Modules linked in: ccm ipt_MASQUERADE xt_CHECKSUM tun ip6t_rpfilter bnep ip6t_REJECT bluetooth xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_si3054 snd_hda_intel snd_hda_controller snd_hda_codec snd_hwdep iTCO_wdt snd_seq coretemp kvm_intel iTCO_vendor_support lpc_ich snd_seq_device snd_pcm arc4 iwl3945 iwlegacy mac80211 joydev snd_timer cfg80211 kvm i2c_i801 snd mfd_core rfkill nfsd auth_rpcgss nfs_acl lockd serio_raw soundcore sunrpc acpi_cpufreq r8169 i915 ata_generic pata_acpi i2c_algo_bit mii drm_kms_helper drm video
CPU: 0 PID: 754 Comm: X Not tainted 3.17.3-200.fc20.i686+PAE #1
Hardware name: FUJITSU SIEMENS AMILO Pi 2515/F43     , BIOS 1.05C 10/01/2007
task: f3a964c0 ti: ed1a4000 task.ti: ed1a4000
EIP: 0060:[<c0586afb>] EFLAGS: 00013282 CPU: 0
EIP is at mem_cgroup_migrate+0x14b/0x180
EAX: 00000000 EBX: f5165ac0 ECX: f73d7448 EDX: 00000000
ESI: f5e2cda0 EDI: c0cfc680 EBP: ed1a5b9c ESP: ed1a5b84
 DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
CR0: 8005003b CR2: 6431f000 CR3: 33ad7000 CR4: 000027f0
Stack:
 c0d4af40 f5165ac0 b8fd2655 f5165ac0 00000000 c0cfc680 ed1a5bc8 c054be0b
 f5165ac0 ed1a5c20 0001a19a fffba000 c0cfc680 f5e2cda0 0001a19a e7adada8
 ffffffef ed1a5c34 c054c249 00068666 0006866a e7adae78 f3a964c0 ed1a5c48
Call Trace:
 [<c054be0b>] shmem_replace_page.isra.28+0x11b/0x200
 [<c054c249>] shmem_getpage_gfp+0x239/0x770
 [<c054c84f>] shmem_read_mapping_page_gfp+0x3f/0x70
 [<f7f25e6c>] i915_gem_object_get_pages_gtt+0x11c/0x330 [i915]
 [<c07cd5ea>] ? intel_gtt_insert_sg_entries+0x7a/0xa0
 [<f7f22206>] i915_gem_object_get_pages+0x66/0xa0 [i915]
 [<f7f26515>] i915_gem_object_pin+0x3f5/0x6f0 [i915]
 [<f7f1b715>] i915_gem_execbuffer_reserve_vma.isra.11+0x75/0x130 [i915]
 [<f7f1ba75>] i915_gem_execbuffer_reserve+0x2a5/0x2d0 [i915]
 [<f7f1c30e>] i915_gem_do_execbuffer.isra.18+0x51e/0x11d0 [i915]
 [<c0459a47>] ? kmap_atomic_prot_pfn+0xa7/0xe0
 [<f7f1d519>] ? i915_gem_execbuffer2+0x59/0x2c0 [i915]
 [<f7f1d54b>] i915_gem_execbuffer2+0x8b/0x2c0 [i915]
 [<f7f1d4c0>] ? i915_gem_execbuffer+0x500/0x500 [i915]
 [<f7c393cf>] drm_ioctl+0x1cf/0x520 [drm]
 [<c076379b>] ? acpi_hw_low_set_gpe+0x9c/0xb5
 [<c075478c>] ? acpi_bus_generate_netlink_event+0x155/0x155
 [<f7f1d4c0>] ? i915_gem_execbuffer+0x500/0x500 [i915]
 [<c075be94>] ? acpi_ev_sci_xrupt_handler+0x21/0x2f
 [<f7c39200>] ? drm_copy_field+0x70/0x70 [drm]
 [<c059e69a>] do_vfs_ioctl+0x2ea/0x4b0
 [<c066e392>] ? inode_has_perm.isra.32+0x32/0x40
 [<c066e4e7>] ? file_has_perm+0x97/0xa0
 [<c066ef5c>] ? selinux_file_ioctl+0x4c/0xf0
 [<c059e8c0>] SyS_ioctl+0x60/0x90
 [<c0a3c7df>] sysenter_do_call+0x12/0x12
Code: 2e c0 c0 89 d8 e8 76 58 fb ff 0f 0b ba 50 2e c0 c0 89 f0 e8 68 58 fb ff 0f 0b e8 21 a0 ed ff ba 84 37 c0 c0 89 f0 e8 55 58 fb ff <0f> 0b a8 04 0f 85 60 ff ff ff ba 44 38 c0 c0 89 f0 e8 3f 58 fb
EIP: [<c0586afb>] mem_cgroup_migrate+0x14b/0x180 SS:ESP 0068:ed1a5b84
Comment 1 Bavarian Bugger 2014-11-23 20:03:40 UTC 
Created attachment 960498 [details]
File: dmesg
Comment 2 Hedayat Vatankhah 2014-12-14 06:12:26 UTC 
Also in Fedora 21.
Comment 3 Kornienko Sergey 2014-12-20 20:48:03 UTC 
Still broken in 3.17.7
Reproduced after every suspend/resume, random Xorg freeze, but system accesible over ssh  

Fedora release 21 (Twenty One)
kernel 3.17.7-300.fc21.x86_64
BOOT_IMAGE=/boot/vmlinuz-3.17.7-300.fc21.x86_64 root=UUID=025db430-1171-47df-aa1e-448b72436eee ro vconsole.font=latarcyrheb-sun16 rhgb quiet LANG=ru_RU.UTF-8 selinux=0 resume=PARTUUID=b67ac7ae-04 zswap.enabled=1


kernel BUG at mm/memcontrol.c:6742!
invalid opcode: 0000 [#2] SMP 
Modules linked in: xt_TCPMSS ccm hidp rfcomm zram ppdev parport_pc parport fuse uvcvideo bnep vmw_vsock_vmci_transport vsock videobuf2_vmalloc xt_multiport videobuf2_memops xt_conntrack nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack arc4 videobuf2_core vmw_vmci iwl3945 v4l2_common iTCO_wdt videodev coretemp iTCO_vendor_support btusb iwlegacy kvm_intel bluetooth media kvm mac80211 snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_intel samsung_laptop snd_hda_controller joydev serio_raw snd_hda_codec sdhci_pci cfg80211 i2c_i801 sdhci snd_hwdep mmc_core snd_seq r592 memstick snd_seq_device lpc_ich rfkill snd_pcm mfd_core snd_timer wmi snd soundcore shpchp acpi_cpufreq binfmt_misc i915 firewire_ohci i2c_algo_bit drm_kms_helper firewire_core yenta_socket ata_generic drm
 pata_acpi sky2 crc_itu_t video [last unloaded: nf_nat]
CPU: 0 PID: 27136 Comm: swapoff Tainted: G      D        3.17.7-300.fc21.x86_64 #1
Hardware name: SAMSUNG ELECTRONICS CO., LTD. SQ45S70S/SQ45S70S, BIOS 18ST 02/04/2010
task: ffff8800bb5c75c0 ti: ffff880095634000 task.ti: ffff880095634000
RIP: 0010:[<ffffffff81203985>]  [<ffffffff81203985>] mem_cgroup_migrate+0x1e5/0x250
RSP: 0018:ffff880095637d80  EFLAGS: 00010246
RAX: ffff88013a189e90 RBX: ffffea0002366200 RCX: 0000000000000041
RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000001109e90
RBP: ffff880095637db0 R08: 0000000000000086 R09: 0000000000000541
R10: ffff880095637d80 R11: 0000000000000541 R12: ffffea0004427a40
R13: ffffffff81c717f0 R14: ffff880095637e20 R15: ffffea0002366200
FS:  00007f46c3ddb840(0000) GS:ffff88013fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00000000f7704000 CR3: 000000012cdbb000 CR4: 00000000000007f0
Stack:
 ffff880095e7aaf0 00000000550f9894 ffff880095637db0 00000000550f9894
 ffffea0004427a40 0000000000000000 ffff880095637df8 ffffffff811ace31
 000a00d4813882a3 ffffea0002366202 ffff8800366bc2d0 ffffea0004427a40
Call Trace:
 [<ffffffff811ace31>] shmem_replace_page+0x131/0x1f0
 [<ffffffff811af6d7>] shmem_unuse+0x257/0x320
 [<ffffffff811d9204>] try_to_unuse+0x4f4/0x5c0
 [<ffffffff811d95cf>] SyS_swapoff+0x1ef/0x5c0
 [<ffffffff81135d96>] ? __audit_syscall_exit+0x1f6/0x2a0
 [<ffffffff817473a9>] system_call_fastpath+0x16/0x1b
Code: e8 11 53 f9 ff 0f 0b 0f 1f 80 00 00 00 00 48 c7 c6 20 44 a5 81 48 89 df e8 f9 52 f9 ff 0f 0b 48 c7 c6 88 43 a5 81 e8 eb 52 f9 ff <0f> 0b 48 8d 75 e4 4c 89 e7 89 55 d4 48 89 45 d8 e8 f6 bb ff ff 
RIP  [<ffffffff81203985>] mem_cgroup_migrate+0x1e5/0x250

NAME=Fedora
VERSION="21 (Twenty One)"
ID=fedora
ID_LIKE=fedora
VERSION_ID=21
PRETTY_NAME="RFRemix 21 (Twenty One)"
ANSI_COLOR="0;34"
CPE_NAME="cpe:/o:fedoraproject:fedora:21"
HOME_URL="https://fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=21
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=21
Comment 4 Stuart D Gathman 2015-01-16 03:46:54 UTC 
Still broken in 3.17.8.  Only work around is to run kernel-3.16.7 from F20.  F21 and F20 and totally unusable on intel graphics with 3.17 kernels.
Comment 5 Stuart D Gathman 2015-01-16 03:48:57 UTC 
Reported when 3.17 kernel came out as bug#1165369
Comment 6 Stuart D Gathman 2015-01-31 13:55:59 UTC 
kernel-3.18.5-200.fc21 over on bodhi.fedoraproject.org seems to have fixed this so far.  The i915 modeset kernel oops is gone.  I'll know by tonight whether Xorg can stay up all day again.
Comment 7 Stuart D Gathman 2015-02-01 03:53:07 UTC 
Still up after using all day!  I would say this bug has been fixed as of kernel-3.18.50-200.  If others verify, you can close this bug.  But keep a link - it may get broken again.
Comment 8 Stuart D Gathman 2015-02-02 00:07:54 UTC 
Sadly, it crashed almost immediately on F20 - *but* there is an untainted oops.  So that is an improvement.  It also crashed eventually on F21 - again with an untainted oops.  So progress!

So kernel-3.18.5-200 is still broken - but oops reporting is improved.

Also kernel-3.18.5 breaks adjtimex
Comment 9 Stuart D Gathman 2015-02-16 02:27:16 UTC 
This seems to be fixed with kernel-3.18.7 on F21.  That kernel breaks putting the display to sleep, but that can be disabled - and I've been up for 2 days now.
Comment 10 Stuart D Gathman 2015-02-17 22:05:05 UTC 
Up for 4 days.  Seems rock solid.  This can probably be closed now.
Comment 11 Josh Boyer 2015-02-18 00:29:15 UTC 
Thanks.