Bug 540200

Summary:	kernel oops radeon drm.
Product:	[Fedora] Fedora	Reporter:	Hin-Tak Leung <htl10>
Component:	kernel	Assignee:	Kernel Maintainer List <kernel-maint>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	12	CC:	dougsland, gansalmon, itamar, kernel-maint, mschmidt
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-12-02 12:00:44 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Hin-Tak Leung 2009-11-22 17:57:20 UTC

Description of problem:
------------[ cut here ]------------
WARNING: at lib/list_debug.c:30 __list_add+0x68/0x81() (Not tainted)
Hardware name: Satellite Pro A210
list_add corruption. prev->next should be next (ffff880072f76da0), but was ffff880018518530. (prev=ffff880018518530).
Modules linked in: fuse ipt_MASQUERADE iptable_nat nf_nat bridge stp llc autofs4 xt_physdev cpufreq_ondemand powernow_k8 freq_table dm_multipath kvm_amd kvm uinput arc4 ecb snd_hda_codec_realtek rtl8187 snd_hda_intel snd_hda_codec mac80211 eeprom_93cx6 sdhci_pci sdhci snd_hwdep snd_seq firewire_ohci snd_seq_device amd64_edac_mod mmc_core edac_core firewire_core shpchp snd_pcm r8169 snd_timer i2c_piix4 snd mii soundcore cfg80211 k8temp joydev crc_itu_t rfkill snd_page_alloc pata_acpi ata_generic pata_atiixp video output radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan]
Pid: 3036, comm: Xorg Not tainted 2.6.31.5-127.fc12.x86_64 #1
Call Trace:
 [<ffffffff81051694>] warn_slowpath_common+0x84/0x9c
 [<ffffffff81051703>] warn_slowpath_fmt+0x41/0x43
 [<ffffffffa004bf78>] ? ttm_buffer_object_init+0x338/0x361 [ttm]
 [<ffffffff81205813>] __list_add+0x68/0x81
 [<ffffffffa0078021>] radeon_object_create+0x1cb/0x1de [radeon]
 [<ffffffffa0077e09>] ? radeon_ttm_object_object_destroy+0x0/0x4d [radeon]
 [<ffffffffa008273f>] radeon_gem_object_create+0x90/0xfe [radeon]
 [<ffffffffa00827ad>] ? radeon_gem_create_ioctl+0x0/0xdf [radeon]
 [<ffffffffa0082807>] radeon_gem_create_ioctl+0x5a/0xdf [radeon]
 [<ffffffffa0082438>] ? radeon_gem_wait_idle_ioctl+0x59/0x63 [radeon]
 [<ffffffffa001421f>] drm_ioctl+0x237/0x2f4 [drm]
 [<ffffffff81108a15>] vfs_ioctl+0x6f/0x87
 [<ffffffff81108f24>] do_vfs_ioctl+0x47b/0x4c1
 [<ffffffff81108fc0>] sys_ioctl+0x56/0x79
 [<ffffffff81011cf2>] system_call_fastpath+0x16/0x1b
---[ end trace a4b2f6b423434131 ]---
------------[ cut here ]------------


Version-Release number of selected component (if applicable):
2.6.31.5-127.fc12.x86_64 

How reproducible:
always

Steps to Reproduce:
1. use machine normally. 
2. crash alert pops up
3.

  
Actual results:
oops in dmesg

Expected results:
No such oops

Additional info:

kerneloops submitter won't send, hence the manual report.

Am upgrading to latest drm/kernel/ati driver from koji and hope it goes away.
Feel free to resolve as duplicate of one of the existing bugs if that's the case.

Comment 1 Hin-Tak Leung 2009-11-22 22:43:19 UTC

Still an issue with latest koji kernel and bits.

$ rpm -qa --last |more
mesa-libGLU-devel-7.6-0.16.fc12               Sun 22 Nov 2009 18:08:07 GMT
mesa-libGLU-devel-7.6-0.16.fc12               Sun 22 Nov 2009 18:08:05 GMT
mesa-libGL-devel-7.6-0.16.fc12                Sun 22 Nov 2009 18:07:59 GMT
mesa-libGL-devel-7.6-0.16.fc12                Sun 22 Nov 2009 18:07:53 GMT
libdrm-devel-2.4.15-5.fc12                    Sun 22 Nov 2009 18:07:42 GMT
mesa-libGLU-7.6-0.16.fc12                     Sun 22 Nov 2009 18:07:39 GMT
mesa-libGL-7.6-0.16.fc12                      Sun 22 Nov 2009 18:07:37 GMT
glx-utils-7.6-0.16.fc12                       Sun 22 Nov 2009 18:07:35 GMT
xorg-x11-drv-ati-6.13.0-0.12.20091119git437113124.fc12 Sun 22 Nov 2009 18:07:33 GMT
mesa-dri-drivers-7.6-0.16.fc12                Sun 22 Nov 2009 18:07:30 GMT
xorg-x11-server-Xorg-1.7.1-9.fc12             Sun 22 Nov 2009 18:07:25 GMT
mesa-libGLU-7.6-0.16.fc12                     Sun 22 Nov 2009 18:07:21 GMT
mesa-libGL-7.6-0.16.fc12                      Sun 22 Nov 2009 18:07:19 GMT
mesa-dri-drivers-7.6-0.16.fc12                Sun 22 Nov 2009 18:07:16 GMT
libdrm-2.4.15-5.fc12                          Sun 22 Nov 2009 18:07:12 GMT
libdrm-2.4.15-5.fc12                          Sun 22 Nov 2009 18:05:31 GMT
kernel-2.6.31.6-145.fc12                      Sun 22 Nov 2009 18:03:55 GMT
kernel-doc-2.6.31.6-145.fc12                  Sun 22 Nov 2009 18:03:04 GMT
xorg-x11-drv-ati-debuginfo-6.13.0-0.12.20091119git437113124.fc12 Sun 22 Nov 2009 18:01:46 GMT
kernel-devel-2.6.31.6-145.fc12                Sun 22 Nov 2009 17:56:09 GMT
xorg-x11-server-debuginfo-1.7.1-9.fc12        Sun 22 Nov 2009 17:54:23 GMT
xorg-x11-server-devel-1.7.1-9.fc12            Sun 22 Nov 2009 17:53:56 GMT
xorg-x11-server-Xvfb-1.7.1-9.fc12             Sun 22 Nov 2009 17:53:52 GMT
kernel-firmware-2.6.31.6-145.fc12             Sun 22 Nov 2009 17:53:48 GMT
kernel-headers-2.6.31.6-145.fc12              Sun 22 Nov 2009 17:53:34 GMT
xorg-x11-server-common-1.7.1-9.fc12           Sun 22 Nov 2009 17:53:22 GMT

------------[ cut here ]------------
WARNING: at lib/list_debug.c:30 __list_add+0x68/0x81() (Not tainted)
Hardware name: Satellite Pro A210
list_add corruption. prev->next should be next (ffff88003782fda0), but was ffff880016554d30. (prev=ffff880016554d30).
Modules linked in: ums_onetouch usb_storage fuse ipt_MASQUERADE iptable_nat nf_nat bridge stp llc autofs4 xt_physdev cpufreq_ondemand powernow_k8 freq_table dm_multipath kvm_amd kvm uinput arc4 ecb snd_hda_codec_realtek snd_hda_intel snd_hda_codec rtl8187 snd_hwdep snd_seq snd_seq_device mac80211 eeprom_93cx6 r8169 cfg80211 snd_pcm shpchp firewire_ohci i2c_piix4 mii firewire_core snd_timer amd64_edac_mod edac_core snd soundcore rfkill crc_itu_t snd_page_alloc k8temp sdhci_pci sdhci mmc_core joydev pata_acpi ata_generic pata_atiixp video output radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan]
Pid: 2969, comm: Xorg Not tainted 2.6.31.6-145.fc12.x86_64 #1
Call Trace:
 [<ffffffff810516f4>] warn_slowpath_common+0x84/0x9c
 [<ffffffff81051763>] warn_slowpath_fmt+0x41/0x43
 [<ffffffffa004bf78>] ? ttm_buffer_object_init+0x338/0x361 [ttm]
 [<ffffffff81205923>] __list_add+0x68/0x81
 [<ffffffffa0078a55>] radeon_object_create+0x1cb/0x1de [radeon]
 [<ffffffffa007883d>] ? radeon_ttm_object_object_destroy+0x0/0x4d [radeon]
 [<ffffffffa0083625>] radeon_gem_object_create+0x90/0xfe [radeon]
 [<ffffffffa0083693>] ? radeon_gem_create_ioctl+0x0/0xdf [radeon]
 [<ffffffffa00836ed>] radeon_gem_create_ioctl+0x5a/0xdf [radeon]
 [<ffffffffa008328d>] ? radeon_gem_wait_idle_ioctl+0x59/0x63 [radeon]
 [<ffffffffa001421f>] drm_ioctl+0x237/0x2f4 [drm]
 [<ffffffff81108b29>] vfs_ioctl+0x6f/0x87
 [<ffffffff81109038>] do_vfs_ioctl+0x47b/0x4c1
 [<ffffffff811090d4>] sys_ioctl+0x56/0x79
 [<ffffffff81011cf2>] system_call_fastpath+0x16/0x1b
---[ end trace e95f289f111615c4 ]---
------------[ cut here ]------------

Comment 2 Michal Schmidt 2009-12-02 12:00:44 UTC


*** This bug has been marked as a duplicate of bug 537981 ***