Bug 709123

abrt version: 2.0.1
architecture:   i686
cmdline:        ro root=/dev/mapper/shilvana_sys-root rd_LVM_LV=shilvana_sys/root rd_LVM_LV=shilvana_sys/swap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYTABLE=ru quiet
comment:        Crash occurs while loading large image (~3mb) in firefox.
component:      kernel
kernel:         2.6.38.6-26.rc1.fc15.i686.PAE
kernel_tainted: 128
os_release:     Fedora release 15 (Lovelock)
package:        kernel
reason:         BUG: unable to handle kernel NULL pointer dereference at 00000004
time:           Mon May 30 21:39:40 2011

backtrace:
:BUG: unable to handle kernel NULL pointer dereference at 00000004
:IP: [<f7c038ef>] nv50_vm_map_sg+0x23/0x70 [nouveau]
:*pdpt = 000000002eeef001 *pde = 0000000139704067 
:Oops: 0000 [#1] SMP 
:last sysfs file: /sys/devices/system/cpu/cpu1/cache/index2/shared_cpu_map
:Modules linked in: usb_storage uas tcp_lp fuse sunrpc cpufreq_ondemand acpi_cpufreq mperf ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables ext2 snd_hda_codec_analog arc4 btusb bluetooth iwlagn snd_hda_intel snd_hda_codec iwlcore snd_hwdep mac80211 snd_seq snd_seq_device snd_pcm r852 sm_common thinkpad_acpi nand nand_ids nand_ecc mtd microcode snd_timer cfg80211 snd_page_alloc iTCO_wdt snd iTCO_vendor_support e1000e wmi soundcore rfkill i2c_i801 joydev ipv6 firewire_ohci sdhci_pci sdhci pata_acpi mmc_core firewire_core yenta_socket ata_generic crc_itu_t nouveau ttm drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: scsi_wait_scan]
:Pid: 1522, comm: X Not tainted 2.6.38.6-26.rc1.fc15.i686.PAE #1 LENOVO 6460EDG/6460EDG
:EIP: 0060:[<f7c038ef>] EFLAGS: 00013206 CPU: 1
:EIP is at nv50_vm_map_sg+0x23/0x70 [nouveau]
:EAX: 00000000 EBX: 00000000 ECX: ee0b50c0 EDX: ed5c8e80
:ESI: ee0b50c0 EDI: ee0b50d8 EBP: eed3bc50 ESP: eed3bc34
: DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
:Process X (pid: 1522, ti=eed3a000 task=eefd6480 task.ti=eed3a000)
:Stack:
: f6900000 f17a2180 eed3bc4c ed5c8e80 00004150 00000003 f17a2180 eed3bc84
: f7bcaa86 00000000 00004150 00000000 00000000 ee0b50d8 00004150 00004150
: 00020000 ee0b50c0 eed3bcfc f17a2180 eed3bca8 f7bb365c 04150000 00000000
:Call Trace:
: [<f7bcaa86>] nouveau_vm_map_sg+0xb7/0xe2 [nouveau]
: [<f7bb365c>] nouveau_bo_move_ntfy+0x7d/0x8c [nouveau]
: [<f7b0a38e>] ttm_bo_handle_move_mem+0x140/0x254 [ttm]
: [<c045ba8e>] ? __run_hrtimer+0xee/0x11f
: [<f7b0af60>] ttm_bo_move_buffer+0xd0/0xf0 [ttm]
: [<c04400ab>] ? mmput+0x26/0xc8
: [<f7b0b03d>] ttm_bo_validate+0xbd/0xf4 [ttm]
: [<f7bb3ce2>] nouveau_bo_validate+0x2f/0x4e [nouveau]
: [<f7bb590c>] validate_list+0x10d/0x279 [nouveau]
: [<f7b0a0c4>] ? ttm_bo_reserve+0x63/0x6d [ttm]
: [<f7bb6334>] nouveau_gem_ioctl_pushbuf+0x57b/0xb9c [nouveau]
: [<c059babe>] ? avc_has_perm_noaudit+0x8e/0x346
: [<f7aad45f>] drm_ioctl+0x2a4/0x38a [drm]
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
: [<f7bb5db9>] ? nouveau_gem_ioctl_pushbuf+0x0/0xb9c [nouveau]
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
: [<c059cea0>] ? file_has_perm+0x9a/0xb3
: [<f7aad1bb>] ? drm_ioctl+0x0/0x38a [drm]
: [<c04f9e9d>] do_vfs_ioctl+0x451/0x482
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
: [<c059d111>] ? selinux_file_ioctl+0x39/0x3c
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
: [<c04f9f16>] sys_ioctl+0x48/0x6a
: [<c040969f>] sysenter_do_call+0x12/0x28
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
: [<c0406481>] ? xen_timer_interrupt+0xf0/0x200
:Code: 83 c4 30 5b 5e 5f 5d c3 55 89 e5 57 56 53 83 ec 10 3e 8d 74 26 00 8b 5d 08 89 c7 89 ce c1 e3 03 89 55 f0 29 5d 10 eb 42 8b 45 10 <8b> 4c 18 04 8b 14 18 8b 46 40 c7 44 24 04 02 00 00 00 89 04 24 
:EIP: [<f7c038ef>] nv50_vm_map_sg+0x23/0x70 [nouveau] SS:ESP 0068:eed3bc34
:CR2: 0000000000000004