Bug 1189293

Summary: [abrt] kernel BUG at mm/memcontrol.c:6606!
Product: [Fedora] Fedora Reporter: Stuart D Gathman <stuart>
Component: xorg-x11-drv-intelAssignee: Adam Jackson <ajax>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 21CC: ajax, gansalmon, itamar, jonathan, kernel-maint, madhu.chinakonda, mchehab, xgl-maint
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/c02d320aa8f18a1d10d7f3ee2c1fe1653a73c3ec
Whiteboard: abrt_hash:5358697ce194a2f18937f33d0d10ef2a536ef007
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-10 14:31:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Stuart D Gathman 2015-02-04 22:05:48 UTC 
Description of problem:
Work for several hours, display suddenly freezes.  System still accessible by ssh.  Xorg process is unkillable - preventing normal shutdown.  Use sync; sync; reboot --force

Additional info:
reporter:       libreport-2.3.0
kernel BUG at mm/memcontrol.c:6606!
invalid opcode: 0000 [#1] SMP 
Modules linked in: vfat fat rfcomm fuse tun ccm ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep snd_hda_codec_idt snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_hda_controller dell_wmi sparse_keymap snd_hda_codec arc4 mmc_block iwl3945 iTCO_wdt iwlegacy gpio_ich coretemp btusb iTCO_vendor_support snd_hwdep mac80211 bluetooth dell_laptop dcdbas snd_seq joydev cfg80211 serio_raw snd_seq_device snd_pcm r592 i2c_i801 memstick sdhci_pci snd_timer sdhci mmc_core
 rfkill snd soundcore lpc_ich wmi acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc hid_logitech_dj i915 firewire_ohci i2c_algo_bit drm_kms_helper firewire_core ata_generic sky2 pata_acpi drm crc_itu_t video
CPU: 0 PID: 1336 Comm: Xorg.bin Not tainted 3.18.5-201.fc21.i686 #1
Hardware name: Dell Inc. Inspiron 1525                   /0U990C, BIOS A16 10/16/2008
task: eebbcfc0 ti: d9306000 task.ti: d9306000
EIP: 0060:[<c05868ca>] EFLAGS: 00013296 CPU: 0
EIP is at mem_cgroup_migrate+0x12a/0x180
EAX: f72ef2d0 EBX: f4da7300 ECX: 00000041 EDX: 00000000
ESI: f5be6b60 EDI: f5be6b60 EBP: d9307ba8 ESP: d9307b90
 DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
CR0: 8005003b CR2: adc09000 CR3: 32103000 CR4: 000007d0
Stack:
 c0d6d540 f4da7300 42435198 f4da7300 00000000 f5be6b60 d9307bd4 c0549f35
 f4da7300 fffba000 d9307c20 00000dfd c0d16100 f5be6b60 00000dfd f2ba9828
 f5be6b60 d9307c34 c054a63e 000037ca 000037f6 d9307c48 eebbcfc0 00000000
Call Trace:
 [<c0549f35>] shmem_replace_page.isra.29+0x115/0x1d0
 [<c054a63e>] shmem_getpage_gfp+0x64e/0x7c0
 [<c054a880>] shmem_read_mapping_page_gfp+0x40/0x70
 [<f7fb6204>] i915_gem_object_get_pages_gtt+0x144/0x2d0 [i915]
 [<f7fb1cf9>] i915_gem_object_get_pages+0x49/0xa0 [i915]
 [<f7fb67a0>] i915_gem_object_pin+0x370/0x6a0 [i915]
 [<c0940d60>] ? sock_poll+0x100/0x100
 [<f7faafb4>] i915_gem_execbuffer_reserve_vma.isra.11+0x64/0xf0 [i915]
 [<f7fab2f1>] i915_gem_execbuffer_reserve+0x2b1/0x320 [i915]
 [<f7fabbd1>] i915_gem_do_execbuffer.isra.16+0x521/0xbe0 [i915]
 [<f7fb33ac>] ? i915_gem_object_set_to_gtt_domain+0xfc/0x190 [i915]
 [<f7fad07b>] i915_gem_execbuffer2+0x8b/0x2d0 [i915]
 [<f7facff0>] ? i915_gem_execbuffer+0x510/0x510 [i915]
 [<f7e06035>] drm_ioctl+0x1f5/0x560 [drm]
 [<f7facff0>] ? i915_gem_execbuffer+0x510/0x510 [i915]
 [<c04b1eee>] ? enqueue_hrtimer+0x1e/0x70
 [<c04b24b2>] ? __hrtimer_start_range_ns+0x302/0x4a0
 [<f7e05e40>] ? drm_getmap+0xc0/0xc0 [drm]
 [<c05a07b2>] do_vfs_ioctl+0x302/0x4f0
 [<c0676c82>] ? inode_has_perm.isra.30+0x32/0x50
 [<c0676de7>] ? file_has_perm+0x97/0xa0
 [<c0677a1b>] ? selinux_file_ioctl+0x4b/0xe0
 [<c05a0a00>] SyS_ioctl+0x60/0x90
 [<c0a52a5f>] sysenter_do_call+0x12/0x12
Code: ff ba b0 ad c1 c0 89 d8 e8 64 14 fd ff 0f 0b 66 90 ba e0 ad c1 c0 89 d8 e8 54 14 fd ff 0f 0b ba 80 ad c1 c0 89 f0 e8 46 14 fd ff <0f> 0b 8d 55 ec 89 f0 89 4d e8 e8 57 d1 ff ff c7 07 00 00 00 00
Comment 1 Stuart D Gathman 2015-02-04 22:05:52 UTC 
Created attachment 988309 [details]
File: dmesg
Comment 2 Stuart D Gathman 2015-02-04 22:47:46 UTC 
Probably a dup for bug#1165369
Comment 3 Stuart D Gathman 2015-02-05 20:30:57 UTC 
This and bug#1165369 are regressions since kernel-3.16.7, reported with kernel-3.17 since Nov '14.
Comment 4 Stuart D Gathman 2015-02-05 20:35:06 UTC 
Until kernel-3.18.5-201, the kernel was tainted by intel_modeset early in the boot process - so the crash an hour or so later was unreportable by abrt.  Now with 3.18.5, the kernel is untainted when it hits this bug (which I think is the same as with earlier kernels) - so abrt is able to report it.
Comment 5 Stuart D Gathman 2015-02-06 15:38:15 UTC 
I installed kernel-3.16.7-200.fc20.i686 on F21, and it fixes the problem.
Comment 6 Stuart D Gathman 2015-02-06 15:41:31 UTC 
Clearly, many other important things have been fixed since 3.16.7 (e.g. 3.16.7 is tainted during boot and runs tainted) - so I hope this gets fixed soon.
Comment 7 Stuart D Gathman 2015-02-10 01:32:58 UTC 
A patch for kernel-3.18.5 was posted on bug#1165369 that likely fixes this bug (assuming this is a dup of that bug).
Comment 8 Stuart D Gathman 2015-02-10 01:34:09 UTC 
Or rather, kernel-3.18.4.  Bummer.
Comment 9 Josh Boyer 2015-02-10 14:31:03 UTC 

*** This bug has been marked as a duplicate of bug 1165369 ***