Bug 772535

Summary: [abrt] kernel: BUG: unable to handle kernel NULL pointer dereference at 000000000000002f
Product: [Fedora] Fedora Reporter: shepler.g
Component: xorg-x11-drv-nouveauAssignee: Ben Skeggs <bskeggs>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: airlied, ajax, bskeggs, gansalmon, itamar, jonathan, kernel-maint, madhu.chinakonda
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:6bf1be7cfd621b6c88bbba8f9a57a25ad42505df
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-13 12:46:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description shepler.g 2012-01-09 05:54:54 UTC
libreport version: 2.0.8
abrt_version:   2.0.7
cmdline:        BOOT_IMAGE=/boot/vmlinuz-3.1.7-1.fc16.x86_64 root=UUID=d6087988-990c-4ae5-b896-2955cf87f520 ro rd.md=0 rd.lvm=0 rd.dm=0 KEYTABLE=us quiet SYSFONT=latarcyrheb-sun16 rhgb rd.luks=0 LANG=en_US.UTF-8
kernel:         3.1.7-1.fc16.x86_64
reason:         BUG: unable to handle kernel NULL pointer dereference at 000000000000002f
time:           Sun 08 Jan 2012 09:49:13 PM PST

backtrace:
:BUG: unable to handle kernel NULL pointer dereference at 000000000000002f
:IP: [<ffffffff812ae630>] __rb_rotate_left+0x20/0x90
:PGD c27a4067 PUD b5ccc067 PMD 0 
:Oops: 0000 [#1] SMP 
:CPU 0 
:Modules linked in: des_generic md4 nls_utf8 cifs fscache fuse fcoe libfcoe libfc scsi_transport_fc scsi_tgt 8021q garp stp llc ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack binfmt_misc arc4 joydev rt2800pci rt2800lib crc_ccitt rt2x00pci rt2x00lib mac80211 cfg80211 snd_intel8x0 snd_ac97_codec rfkill ac97_bus edac_core snd_seq snd_seq_device snd_pcm forcedeth edac_mce_amd k8temp serio_raw ppdev eeprom_93cx6 snd_timer snd soundcore snd_page_alloc parport_pc parport nv_tco i2c_nforce2 uinput firewire_ohci firewire_core pata_acpi ata_generic crc_itu_t pata_amd sata_nv usb_storage nouveau ttm drm_kms_helper drm i2c_algo_bit i2c_core mxm_wmi wmi video [last unloaded: scsi_wait_scan]
:Pid: 1152, comm: Xorg Not tainted 3.1.7-1.fc16.x86_64 #1 Gateway GM5045E/C51MCP51
:RIP: 0010:[<ffffffff812ae630>]  [<ffffffff812ae630>] __rb_rotate_left+0x20/0x90
:RSP: 0018:ffff8800b62d1c08  EFLAGS: 00010202
:RAX: ffff8800ac7ee540 RBX: ffff8800ac7ed940 RCX: 000000000000002f
:RDX: ffff8800ac738940 RSI: ffff8800c3880730 RDI: ffff8800ac7ed940
:RBP: ffff8800b62d1c08 R08: 000000000000002f R09: ffffffffa002b280
:R10: 0000000000000367 R11: 0000000000000001 R12: ffff8800c3880730
:R13: ffff8800c3880300 R14: ffff8800ac6719c0 R15: ffff8800ac73b400
:FS:  00007fd267c9a880(0000) GS:ffff8800cfc00000(0000) knlGS:0000000000000000
:CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
:CR2: 000000000000002f CR3: 00000000b5dc6000 CR4: 00000000000006f0
:DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
:DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
:Process Xorg (pid: 1152, threadinfo ffff8800b62d0000, task ffff8800bd4bc590)
:Stack:
: ffff8800b62d1c28 ffffffff812aeace ffff8800ac73b440 ffff8800c3880428
: ffff8800b62d1c88 ffffffffa007aa85 ffff8800b62d1c58 ffffffff8119024c
: ffff8800ac640100 0000000000000008 ffff8800b62d1c68 ffff8800ac73b440
:Call Trace:
: [<ffffffff812aeace>] rb_erase+0x24e/0x310
: [<ffffffffa007aa85>] ttm_bo_release+0x55/0x200 [ttm]
: [<ffffffff8119024c>] ? mntput_no_expire+0xbc/0x100
: [<ffffffffa007aa30>] ? ttm_bo_delayed_workqueue+0x40/0x40 [ttm]
: [<ffffffff812ab586>] kref_put+0x36/0x70
: [<ffffffffa0079eae>] ttm_bo_unref+0x3e/0x50 [ttm]
: [<ffffffffa002ad30>] ? drm_gem_object_lookup+0x60/0x60 [drm]
: [<ffffffffa009ce1f>] nouveau_gem_object_del+0x3f/0x70 [nouveau]
: [<ffffffffa002ad5a>] drm_gem_object_free+0x2a/0x30 [drm]
: [<ffffffff812ab586>] kref_put+0x36/0x70
: [<ffffffffa002af9b>] drm_gem_handle_delete+0xcb/0x100 [drm]
: [<ffffffffa002b2a8>] drm_gem_close_ioctl+0x28/0x30 [drm]
: [<ffffffffa00293f4>] drm_ioctl+0x3e4/0x4c0 [drm]
: [<ffffffffa002b280>] ? drm_gem_destroy+0x60/0x60 [drm]
: [<ffffffff812566c0>] ? inode_has_perm+0x30/0x40
: [<ffffffff81259abc>] ? file_has_perm+0xdc/0xf0
: [<ffffffff81184368>] do_vfs_ioctl+0x98/0x550
: [<ffffffff811848b1>] sys_ioctl+0x91/0xa0
: [<ffffffff815dcd82>] system_call_fastpath+0x16/0x1b
:Code: 90 90 90 90 90 90 90 90 90 90 90 48 8b 47 08 55 48 8b 17 48 89 e5 48 8b 48 10 48 83 e2 fc 48 85 c9 48 89 4f 08 74 10 4c 8b 40 10 <49> 8b 08 83 e1 03 48 09 f9 49 89 08 48 8b 08 48 89 78 10 83 e1 
:RIP  [<ffffffff812ae630>] __rb_rotate_left+0x20/0x90
: RSP <ffff8800b62d1c08>
:CR2: 000000000000002f

comment:
:1. Mounted a samba share
:2. Open a spreadsheet document with libreoffice Calce
:3. sytem crashed.

smolt_data:
:
:
:General
:=================================
:UUID: 6ef3df13-8132-4f47-af6c-c579b2c565e7
:OS: Fedora release 16 (Verne)
:Default run level: Unknown
:Language: en_US.UTF-8
:Platform: x86_64
:BogoMIPS: 4007.51
:CPU Vendor: AuthenticAMD
:CPU Model: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
:CPU Stepping: 1
:CPU Family: 15
:CPU Model Num: 43
:Number of CPUs: 2
:CPU Speed: 2000
:System Memory: 3262
:System Swap: 599
:Vendor: Gateway
:System: GM5045E 
:Form factor: Desktop
:Kernel: 3.1.7-1.fc16.x86_64
:SELinux Enabled: 1
:SELinux Policy: targeted
:SELinux Enforce: Enforcing
:MythTV Remote: Unknown
:MythTV Role: Unknown
:MythTV Theme: Unknown
:MythTV Plugin: 
:MythTV Tuner: -1
:
:
:Devices
:=================================
:(4318:626:4187:3240) pci, None, RAM, MCP51 Memory Controller 0
:(4318:612:4187:3240) pci, nForce2_smbus, SERIAL, MCP51 SMBus
:(4318:609:4318:52100) pci, None, PCI/ISA, MCP51 LPC Bridge
:(4318:766:4187:3240) pci, None, RAM, C51 Memory Controller 1
:(4318:760:4187:3240) pci, None, RAM, C51 Memory Controller 5
:(4318:753:0:0) pci, None, RAM, C51 Host Bridge
:(4318:762:4187:3240) pci, None, RAM, C51 Memory Controller 0
:(4318:639:4187:3240) pci, None, RAM, C51 Memory Controller 3
:(4318:638:4187:3240) pci, None, RAM, C51 Memory Controller 2
:(4318:761:4187:3240) pci, None, RAM, C51 Memory Controller 4
:(4318:767:4187:3240) pci, None, RAM, C51 Host Bridge
:(4130:4353:0:0) pci, None, HOST/PCI, K8 [Athlon64/Opteron] Address Map
:(4130:4352:0:0) pci, None, HOST/PCI, K8 [Athlon64/Opteron] HyperTransport Technology Configuration
:(4130:4355:0:0) pci, k8temp, HOST/PCI, K8 [Athlon64/Opteron] Miscellaneous Control
:(4130:4354:0:0) pci, None, HOST/PCI, K8 [Athlon64/Opteron] DRAM Controller
:(4172:32804:4187:3240) pci, firewire_ohci, FIREWIRE, TSB43AB23 IEEE-1394a-2000 Controller (PHY/Link)
:(6164:1793:6164:10080) pci, rt2800pci, NETWORK, RT2760 Wireless 802.11n 1T/2R Cardbus
:(4318:913:5762:8736) pci, nouveau, VIDEO, G73 [GeForce 7600 GT]
:(4318:764:4318:0) pci, pcieport, PCI/PCI, C51 PCI Express Bridge
:(4318:617:4187:3240) pci, forcedeth, BRIDGE, MCP51 Ethernet Controller
:(4318:765:4318:0) pci, pcieport, PCI/PCI, C51 PCI Express Bridge
:(4318:623:0:0) pci, None, PCI/PCI, MCP51 PCI Bridge
:(4318:619:4187:3240) pci, snd_intel8x0, MULTIMEDIA_AUDIO, MCP51 AC97 Audio Controller
:(4318:613:4318:52100) pci, pata_amd, STORAGE, MCP51 IDE
:(4318:624:4187:3240) pci, None, RAM, MCP51 Host Bridge
:(4318:614:4187:3240) pci, sata_nv, STORAGE, MCP51 Serial ATA Controller
:(4318:763:4318:0) pci, pcieport, PCI/PCI, C51 PCI Express Bridge
:(4318:621:4318:52100) pci, ohci_hcd, USB, MCP51 USB Controller
:(4318:622:4318:52100) pci, ehci_hcd, USB, MCP51 USB Controller
:
:
:Filesystem Information
:=================================
:device mtpt type bsize frsize blocks bfree bavail file ffree favail
:-------------------------------------------------------------------
:/dev/sde1 / ext4 4096 4096 19224072 17554653 17359417 4890624 4696159 4696159
:/dev/sde2 /usr/local ext4 4096 4096 19224072 19126994 18150444 4890624 4885210 4885210
:/dev/sde5 /home ext4 4096 4096 38315283 36820252 34873948 9732096 9600039 9600039
:

Comment 1 Fedora End Of Life 2013-01-16 12:29:18 UTC
This message is a reminder that Fedora 16 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 16. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '16'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 16's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 16 is end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" and open it against that version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 2 Fedora End Of Life 2013-02-13 12:46:30 UTC
Fedora 16 changed to end-of-life (EOL) status on 2013-02-12. Fedora 16 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.