Bug 681704

Summary: Unable to handle kernel paging request - drm_ht_insert_item
Product: [Fedora] Fedora Reporter: Nick Scavelli <nick.scavelli>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 14CC: gansalmon, itamar, jacques.defelice, jonathan, kernel-maint, madhu.chinakonda
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-08-31 19:39:37 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
dmesg after similar crash none

Description Nick Scavelli 2011-03-02 23:05:57 UTC 
Description of problem:
x freezes randomly during the day.  Happened twice yesterday and once today.  Haven't done anything different to my knowledge.

Version-Release number of selected component (if applicable):
kernel-2.6.35.11-83.fc14.x86_64
xorg-x11-server 1.9.4-1.fc14

How reproducible:
Random

Steps to Reproduce (different every time):
I typically have at least firefox running, IntelliJ and a JVM up.
  
Actual results:
x freezes but can ssh into box.

Expected results:
No freeze

Additional info:
Seems related to https://bugzilla.redhat.com/show_bug.cgi?id=665887 but I'll leave that up to the experts.

dmesg output after crash:

[69983.335697] BUG: unable to handle kernel paging request at 000000000001000f
[69983.335702] IP: [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[69983.335718] PGD 12e910067 PUD 12fa18067 PMD 0 
[69983.335722] Oops: 0000 [#1] SMP 
[69983.335724] last sysfs file: /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:09/PNP0C09:00/PNP0C0A:00/power_supply/BAT0/voltage_now
[69983.335727] CPU 0 
[69983.335728] Modules linked in: ipheth tun ip6table_filter ip6_tables nls_utf8 udf aesni_intel cryptd aes_x86_64 aes_generic fuse ebtable_nat ebtables bridge stp llc rfcomm sco bnep l2cap sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf ip6t_REJECT nf_conntrack_ipv6 ipv6 kvm_intel kvm uinput snd_hda_codec_intelhdmi snd_hda_codec_conexant arc4 snd_hda_intel snd_hda_codec snd_hwdep ecb snd_seq snd_seq_device uvcvideo snd_pcm e1000e iwlagn thinkpad_acpi btusb bluetooth videodev v4l2_compat_ioctl32 snd_timer snd iwlcore mac80211 i2c_i801 wmi joydev microcode soundcore iTCO_wdt iTCO_vendor_support cfg80211 rfkill snd_page_alloc sdhci_pci sdhci firewire_ohci mmc_core firewire_core crc_itu_t i915 drm_kms_helper drm i2c_algo_bit i2c_core video output [last unloaded: ip6_tables]
[69983.335766] 
[69983.335768] Pid: 1876, comm: Xorg Not tainted 2.6.35.11-83.fc14.x86_64 #1 4384BQ1/4384BQ1
[69983.335770] RIP: 0010:[<ffffffffa0033a57>]  [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[69983.335780] RSP: 0018:ffff88012e807cf0  EFLAGS: 00010206
[69983.335781] RAX: ffffc9001182c1f8 RBX: ffff8800b50f4628 RCX: 000000000000ffff
[69983.335783] RDX: ffff88010b10d628 RSI: ffff8800b3fedc28 RDI: 000000000000ffff
[69983.335785] RBP: ffff88012e807d08 R08: 9638000000000000 R09: ffffc900274acb80
[69983.335787] R10: 0000000000000052 R11: 0000000000000030 R12: ffff88012ff2b518
[69983.335789] R13: 000000000017b2c7 R14: ffff8800b3c89ba0 R15: ffff88012ff2b4e0
[69983.335792] FS:  00007f21af0fa860(0000) GS:ffff880002000000(0000) knlGS:0000000000000000
[69983.335795] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[69983.335796] CR2: 000000000001000f CR3: 000000012c4ad000 CR4: 00000000000006f0
[69983.335798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[69983.335801] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[69983.335803] Process Xorg (pid: 1876, threadinfo ffff88012e806000, task ffff8801301c8000)
[69983.335805] Stack:
[69983.335806]  ffff8800b50f4600 ffff88012e807da8 ffff88012fa99820 ffff88012e807d58
[69983.335809] <0> ffffffffa007f85c ffff88012e807d28 ffff88012ff5c000 ffff88012e807d38
[69983.335811] <0> ffff88012bc25240 00000000fffffff2 ffff88012e807da8 ffffffffa00aa010
[69983.335814] Call Trace:
[69983.335827]  [<ffffffffa007f85c>] i915_gem_mmap_gtt_ioctl+0x177/0x240 [i915]
[69983.335834]  [<ffffffffa002c2b8>] drm_ioctl+0x28b/0x389 [drm]
[69983.335841]  [<ffffffffa007f6e5>] ? i915_gem_mmap_gtt_ioctl+0x0/0x240 [i915]
[69983.335846]  [<ffffffff81116e3e>] ? do_sync_read+0xcb/0x108
[69983.335849]  [<ffffffff811242f3>] vfs_ioctl+0x36/0xa7
[69983.335851]  [<ffffffff81124c54>] do_vfs_ioctl+0x468/0x49b
[69983.335853]  [<ffffffff81124cdd>] sys_ioctl+0x56/0x79
[69983.335857]  [<ffffffff81009cf2>] system_call_fastpath+0x16/0x1b
[69983.335858] Code: fc 4c 89 ef e8 b7 fe ff ff 89 c0 31 d2 48 c1 e0 03 49 03 44 24 10 48 8b 30 48 89 f1 eb 08 77 19 48 89 ca 48 89 f9 48 85 c9 74 0e <4c> 39 69 10 48 8b 39 0f 18 0f 75 e7 eb 39 48 85 d2 74 1d 48 8b 
[69983.335878] RIP  [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[69983.335885]  RSP <ffff88012e807cf0>
[69983.335886] CR2: 000000000001000f
[69983.335893] ---[ end trace e453db2f0d940fb4 ]---
Comment 1 Nick Scavelli 2011-03-10 17:04:49 UTC 
Created attachment 483512 [details]
dmesg after similar crash
Comment 2 Nick Scavelli 2011-03-10 17:06:56 UTC 
Another similar crash, x freezes no response from input (keyboard or mouse). Can still ssh into box.

Any way to recover from this ? restart x from ssh ?
Comment 3 Nick Scavelli 2011-03-18 18:12:40 UTC 
Another crash today, dmesg right after crash (note this is by ssh'ing into the box)

104667.062706] BUG: unable to handle kernel paging request at 0000000039970111
[104667.062712] IP: [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[104667.062726] PGD 132be2067 PUD 12bd64067 PMD 0 
[104667.062729] Oops: 0000 [#1] SMP 
[104667.062731] last sysfs file: /sys/devices/system/cpu/cpu3/cache/index2/shared_cpu_map
[104667.062734] CPU 0 
[104667.062735] Modules linked in: tcp_lp ipheth tun aesni_intel cryptd aes_x86_64 aes_generic nls_utf8 udf fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat bridge stp llc rfcomm sco bnep l2cap sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 kvm_intel kvm uinput snd_hda_codec_intelhdmi snd_hda_codec_conexant arc4 snd_hda_intel ecb snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm iwlagn btusb snd_timer iwlcore thinkpad_acpi mac80211 cfg80211 bluetooth uvcvideo videodev snd e1000e v4l2_compat_ioctl32 rfkill soundcore snd_page_alloc microcode iTCO_wdt iTCO_vendor_support wmi joydev i2c_i801 sdhci_pci sdhci firewire_ohci firewire_core crc_itu_t mmc_core i915 drm_kms_helper drm i2c_algo_bit i2c_core video output [last unloaded: scsi_wait_scan]
[104667.062768] 
[104667.062771] Pid: 20185, comm: Xorg Not tainted 2.6.35.11-83.fc14.x86_64 #1 4384BQ1/4384BQ1
[104667.062772] RIP: 0010:[<ffffffffa0033a57>]  [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[104667.062783] RSP: 0018:ffff88010f535cf0  EFLAGS: 00010202
[104667.062784] RAX: ffffc9001176b1f8 RBX: ffff88002f28b028 RCX: 0000000039970101
[104667.062786] RDX: ffff88011c7a8a20 RSI: ffff8801306a9188 RDI: 0000000039970101
[104667.062787] RBP: ffff88010f535d08 R08: c878000000000000 R09: ffff88010f535cb8
[104667.062789] R10: 000000000000001b R11: 0000000000000001 R12: ffff88012ff105d8
[104667.062791] R13: 000000000010f90f R14: ffff8800941921e0 R15: ffff88012ff105a0
[104667.062793] FS:  00007f61857e3860(0000) GS:ffff880002000000(0000) knlGS:0000000000000000
[104667.062794] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[104667.062796] CR2: 0000000039970111 CR3: 000000011bd8a000 CR4: 00000000000006f0
[104667.062798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[104667.062800] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[104667.062802] Process Xorg (pid: 20185, threadinfo ffff88010f534000, task ffff880047e59740)
[104667.062803] Stack:
[104667.062804]  ffff88002f28b000 ffff88010f535da8 ffff88012f9da020 ffff88010f535d58
[104667.062806] <0> ffffffffa007f85c ffff88010f535d28 ffff88012ff32000 ffff88010f535d38
[104667.062809] <0> ffff88011bc5d0c0 00000000fffffff2 ffff88010f535da8 ffffffffa00aa010
[104667.062812] Call Trace:
[104667.062825]  [<ffffffffa007f85c>] i915_gem_mmap_gtt_ioctl+0x177/0x240 [i915]
[104667.062832]  [<ffffffffa002c2b8>] drm_ioctl+0x28b/0x389 [drm]
[104667.062839]  [<ffffffffa007f6e5>] ? i915_gem_mmap_gtt_ioctl+0x0/0x240 [i915]
[104667.062844]  [<ffffffff810e9519>] ? pmd_offset+0x19/0x40
[104667.062848]  [<ffffffff811242f3>] vfs_ioctl+0x36/0xa7
[104667.062849]  [<ffffffff81124c54>] do_vfs_ioctl+0x468/0x49b
[104667.062852]  [<ffffffff81124cdd>] sys_ioctl+0x56/0x79
[104667.062855]  [<ffffffff81009cf2>] system_call_fastpath+0x16/0x1b
[104667.062857] Code: fc 4c 89 ef e8 b7 fe ff ff 89 c0 31 d2 48 c1 e0 03 49 03 44 24 10 48 8b 30 48 89 f1 eb 08 77 19 48 89 ca 48 89 f9 48 85 c9 74 0e <4c> 39 69 10 48 8b 39 0f 18 0f 75 e7 eb 39 48 85 d2 74 1d 48 8b 
[104667.062876] RIP  [<ffffffffa0033a57>] drm_ht_insert_item+0x45/0x98 [drm]
[104667.062884]  RSP <ffff88010f535cf0>
[104667.062885] CR2: 0000000039970111
[104667.062888] ---[ end trace f246561d28538953 ]---
Comment 4 Josh Boyer 2011-08-31 19:39:37 UTC 

*** This bug has been marked as a duplicate of bug 665887 ***
Comment 5 jacques de felice 2011-12-04 14:00:17 UTC 
FYI

very similar crash
BUT UNDER Ubuntu 10.10

syslog:

Dec  3 10:49:38 nomade-2 kernel: [17097.431432] BUG: unable to handle kernel paging request at 00aaaaae
Dec  3 10:49:38 nomade-2 kernel: [17097.431449] IP: [<f820e506>] drm_ht_insert_item+0x96/0xa0 [drm]
Dec  3 10:49:38 nomade-2 kernel: [17097.431497] *pde = 7ca8e067 
Dec  3 10:49:38 nomade-2 kernel: [17097.431506] Oops: 0003 [#1] SMP 
Dec  3 10:49:38 nomade-2 kernel: [17097.431514] last sysfs file: /sys/devices/system/cpu/cpu1/cpufreq/scaling_cur_freq
Dec  3 10:49:38 nomade-2 kernel: [17097.431523] Modules linked in: ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nls_iso8859_1 nls_cp437 vfat fat usb_storage binfmt_misc vboxnetadp vboxnetflt vboxdrv ip6table_filter ip6_tables xt_TCPMSS xt_limit nf_nat_irc nf_nat_ftp ipt_LOG xt_DSCP nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE xt_state ipt_REJECT xt_tcpudp bridge stp parport_pc ppdev dm_crypt iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_mangle iptable_filter ip_tables x_tables snd_hda_codec_realtek snd_hda_codec_si3054 snd_hda_intel arc4 snd_hda_codec snd_hwdep snd_pcm snd_seq_midi iwl3945 snd_rawmidi snd_seq_midi_event iwlcore snd_seq snd_timer snd_seq_device mac80211 snd cfg80211 psmouse serio_raw soundcore snd_page_alloc lp parport raid10 raid456 async_raid6_recov async_pq raid6_pq async_xor xor async_memcpy async_tx raid1 raid0 multipath linear i915 usbhid 8139too drm_kms_helper hid drm ahci 8139cp firewire_ohci sdh
Dec  3 10:49:38 nomade-2 kernel: ci_pci sdhci i2c_algo_bit intel_agp video libahci mii firewire_core agpgart led_class output crc_itu_t [last unloaded: scsi_transport_iscsi]
Dec  3 10:49:38 nomade-2 kernel: [17097.431766] 
Dec  3 10:49:38 nomade-2 kernel: [17097.431775] Pid: 1450, comm: Xorg Not tainted 2.6.35-31-generic #62-Ubuntu AMILO Pi 1505/AMILO Pi 1505
Dec  3 10:49:38 nomade-2 kernel: [17097.431785] EIP: 0060:[<f820e506>] EFLAGS: 00213287 CPU: 1
Dec  3 10:49:38 nomade-2 kernel: [17097.431818] EIP is at drm_ht_insert_item+0x96/0xa0 [drm]
Dec  3 10:49:38 nomade-2 kernel: [17097.431826] EAX: 63636166 EBX: 0013c3bb ECX: 74630074 EDX: ee48d258
Dec  3 10:49:38 nomade-2 kernel: [17097.431833] ESI: f84c2818 EDI: 00aaaaaa EBP: ed4c3e30 ESP: ed4c3e24
Dec  3 10:49:38 nomade-2 kernel: [17097.431841]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
Dec  3 10:49:38 nomade-2 kernel: [17097.431849] Process Xorg (pid: 1450, ti=ed4c2000 task=eb089960 task.ti=ed4c2000)
Dec  3 10:49:38 nomade-2 kernel: [17097.431855] Stack:
Dec  3 10:49:38 nomade-2 kernel: [17097.431860]  ee48d240 ebacaa80 f6aa5300 ed4c3e50 f8366620 00000000 000080d0 ed4c3e50
Dec  3 10:49:38 nomade-2 kernel: [17097.431879] <0> 00000000 ed4c3ec0 f7094000 ed4c3e74 f8369492 f836afbc ed4c3e74 f690e014
Dec  3 10:49:38 nomade-2 kernel: [17097.431900] <0> ee48d240 ec323280 f690e000 c0106464 ed4c3f50 f820698d 00000001 f8217e54
Dec  3 10:49:38 nomade-2 kernel: [17097.431923] Call Trace:
Dec  3 10:49:38 nomade-2 kernel: [17097.431968]  [<f8366620>] ? i915_gem_create_mmap_offset+0xb0/0x120 [i915]
Dec  3 10:49:38 nomade-2 kernel: [17097.432012]  [<f8369492>] ? i915_gem_mmap_gtt_ioctl+0xb2/0x150 [i915]
Dec  3 10:49:38 nomade-2 kernel: [17097.432053]  [<f836afbc>] ? i915_gem_create_ioctl+0x8c/0xb0 [i915]
Dec  3 10:49:38 nomade-2 kernel: [17097.432068]  [<c0106464>] ? unmask_8259A+0x4/0x40
Dec  3 10:49:38 nomade-2 kernel: [17097.432108]  [<f820698d>] ? drm_ioctl+0x1ad/0x430 [drm]
Dec  3 10:49:38 nomade-2 kernel: [17097.432134]  [<c0106464>] ? unmask_8259A+0x4/0x40
Dec  3 10:49:38 nomade-2 kernel: [17097.432168]  [<f83693e0>] ? i915_gem_mmap_gtt_ioctl+0x0/0x150 [i915]
Dec  3 10:49:38 nomade-2 kernel: [17097.432193]  [<c02198f4>] ? do_sync_read+0xa4/0xe0
Dec  3 10:49:38 nomade-2 kernel: [17097.432207]  [<c0330256>] ? apparmor_file_permission+0x16/0x20
Dec  3 10:49:38 nomade-2 kernel: [17097.432218]  [<c0304664>] ? security_file_permission+0x14/0x20
Dec  3 10:49:38 nomade-2 kernel: [17097.432229]  [<c0219992>] ? rw_verify_area+0x62/0xd0
Dec  3 10:49:38 nomade-2 kernel: [17097.432239]  [<c0106464>] ? unmask_8259A+0x4/0x40
Dec  3 10:49:38 nomade-2 kernel: [17097.432248]  [<c0227ba2>] ? vfs_ioctl+0x32/0xb0
Dec  3 10:49:38 nomade-2 kernel: [17097.432282]  [<f82067e0>] ? drm_ioctl+0x0/0x430 [drm]
Dec  3 10:49:38 nomade-2 kernel: [17097.432292]  [<c0228439>] ? do_vfs_ioctl+0x79/0x2d0
Dec  3 10:49:38 nomade-2 kernel: [17097.432301]  [<c02286f7>] ? sys_ioctl+0x67/0x80
Dec  3 10:49:38 nomade-2 kernel: [17097.432313]  [<c05cc184>] ? syscall_call+0x7/0xb
Dec  3 10:49:38 nomade-2 kernel: [17097.432322]  [<c0106464>] ? unmask_8259A+0x4/0x40
Dec  3 10:49:38 nomade-2 kernel: [17097.432328] Code: 51 04 5b 5e 5f 5d c3 8d b6 00 00 00 00 b8 ea ff ff ff 5b 5e 5f 5d c3 c7 02 00 00 00 00 89 16 31 c0 89 72 04 5b 5e 5f 5d c3 89 3a <89> 57 04 eb ed 90 8d 74 26 00 55 89 e5 56 53 0f 1f 44 00 00 69 
Dec  3 10:49:38 nomade-2 kernel: [17097.432445] EIP: [<f820e506>] drm_ht_insert_item+0x96/0xa0 [drm] SS:ESP 0068:ed4c3e24
Dec  3 10:49:38 nomade-2 kernel: [17097.432490] CR2: 0000000000aaaaae
Dec  3 10:49:38 nomade-2 kernel: [17097.432498] ---[ end trace 8c4ad56ed3d3cc26 ]---
...
Dec  3 10:57:20 nomade-2 kernel: [    0.000000] Linux version 2.6.35-31-generic (buildd@vernadsky) (gcc version 4.4.5 (Ubuntu/Linaro 4.4.4-14ubuntu5) ) #62-Ubuntu SMP Tue Nov 8 14:00:30 UTC 2011 (Ubuntu 2.6.35-31.62-generic 2.6.35.13)