Created attachment 331990 [details] dmesg-2.6.29-0.119.rc5.fc11.x86_64 Description of problem: 2.6.29-0.119.rc5.fc11.x86_64 Thinkpad X300 http://www.smolts.org/client/show/pub_9371d993-29e5-49e0-a2f5-03b892355f7e WARNING: at lib/dma-debug.c:448 check_unmap+0x2b4/0x3dd() (Not tainted) Hardware name: 6476CTO e1000e 0000:00:19.0: DMA-API: device driver frees DMA memory with wrong function [device address=0x000000011a39a000] [size=93 byte s] [mapped as page] [unmapped as single] Modules linked in: fuse i915 drm i2c_algo_bit ipt_MASQUERADE iptable_nat nf_nat bridge stp llc ip6t_REJECT nf_conntrack_ipv6 ip6ta ble_filter ip6_tables ipv6 cpufreq_ondemand acpi_cpufreq freq_table dm_multipath kvm_intel kvm uinput thinkpad_acpi hwmon pcspkr j oydev i2c_i801 i2c_core snd_hda_codec_analog arc4 uvcvideo snd_hda_intel iTCO_wdt ecb videodev iTCO_vendor_support snd_hda_codec v 4l1_compat usb_storage v4l2_compat_ioctl32 snd_hwdep snd_seq_dummy iwlagn snd_seq_oss iwlcore snd_seq_midi_event snd_seq rfkill sn d_seq_device lib80211 mac80211 snd_pcm_oss cfg80211 snd_mixer_oss snd_pcm snd_timer snd soundcore snd_page_alloc e1000e video outp ut sha256_generic cbc aes_x86_64 aes_generic dm_crypt [last unloaded: microcode] Pid: 2648, comm: Xorg Not tainted 2.6.29-0.119.rc5.fc11.x86_64 #1 Call Trace: <IRQ> [<ffffffff810488f6>] warn_slowpath+0xb7/0xe7 [<ffffffff8106934c>] ? graph_unlock+0x6b/0x77 [<ffffffff8106c9d5>] ? __lock_acquire+0xb67/0xc0d [<ffffffff8137bd9f>] ? _spin_lock_irqsave+0x78/0x86 [<ffffffff811985eb>] ? get_hash_bucket+0x28/0x34 [<ffffffff8119702d>] ? swiotlb_virt_to_bus+0x1f/0x23 [<ffffffff81198c2f>] check_unmap+0x2b4/0x3dd [<ffffffff81067ad2>] ? tick_program_event+0x25/0x27 [<ffffffff8106b6d3>] ? trace_hardirqs_on_caller+0x118/0x153 [<ffffffff81198ea5>] debug_dma_unmap_page+0x50/0x52 [<ffffffffa004e036>] pci_unmap_page+0x6d/0x76 [e1000e] [<ffffffffa004e068>] e1000_put_txbuf+0x29/0x4a [e1000e] [<ffffffffa004e185>] e1000_clean_tx_irq+0xc3/0x2bd [e1000e] [<ffffffffa00512e5>] ? e1000_clean+0x66/0x241 [e1000e] [<ffffffffa00512f1>] e1000_clean+0x72/0x241 [e1000e] [<ffffffff812e1631>] net_rx_action+0xb1/0x1e9 [<ffffffff812e1720>] ? net_rx_action+0x1a0/0x1e9 [<ffffffff8104de7c>] __do_softirq+0x8f/0x173 [<ffffffff810126ac>] call_softirq+0x1c/0x30 [<ffffffff81013799>] do_softirq+0x4d/0xb4 [<ffffffff8104dac7>] irq_exit+0x4e/0x8b [<ffffffff81013aa8>] do_IRQ+0x127/0x14b [<ffffffff81011d93>] ret_from_intr+0x0/0x2e <EOI> <4>---[ end trace cba21dd5d55a7ad7 ]--- Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Getting something similar with a tg3 ethernet chipset as well. WARNING: at lib/dma-debug.c:448 check_unmap+0x2b4/0x3dd() (Not tainted) Hardware name: Precision WorkStation 490 tg3 0000:0b:00.0: DMA-API: device driver frees DMA memory with wrong function [device address=0x0000000154924000] [size=93 bytes] [mapped as page] [unmapped as single] Modules linked in: bridge stp llc bnep sco l2cap bluetooth sunrpc ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 p4_clockmod speedstep_lib freq_table dm_multipath uinput ppdev firewire_ohci firewire_core dcdbas crc_itu_t i2c_i801 i5k_amb iTCO_wdt hwmon pcspkr parport_pc serio_raw i2c_core tg3 iTCO_vendor_support shpchp parport i5000_edac edac_core sha256_generic cbc aes_x86_64 aes_generic dm_crypt [last unloaded: freq_table] Pid: 0, comm: swapper Not tainted 2.6.29-0.119.rc5.fc11.x86_64 #1 Call Trace: <IRQ> [<ffffffff810488f6>] warn_slowpath+0xb7/0xe7 [<ffffffff8106934c>] ? graph_unlock+0x6b/0x77 [<ffffffff8106c9d5>] ? __lock_acquire+0xb67/0xc0d [<ffffffff8137bd9f>] ? _spin_lock_irqsave+0x78/0x86 [<ffffffff811985eb>] ? get_hash_bucket+0x28/0x34 [<ffffffff8119702d>] ? swiotlb_virt_to_bus+0x1f/0x23 [<ffffffff81198c2f>] check_unmap+0x2b4/0x3dd [<ffffffff81198ea5>] debug_dma_unmap_page+0x50/0x52 [<ffffffff812e03cd>] dma_unmap_page+0x67/0x70 [<ffffffff812e0432>] skb_dma_unmap+0x5c/0x75 [<ffffffffa007ec82>] tg3_poll+0x12a/0x919 [tg3] [<ffffffff812e1720>] ? net_rx_action+0x1a0/0x1e9 [<ffffffff812e1631>] net_rx_action+0xb1/0x1e9 [<ffffffff812e1720>] ? net_rx_action+0x1a0/0x1e9 [<ffffffff8104de7c>] __do_softirq+0x8f/0x173 [<ffffffff810126ac>] call_softirq+0x1c/0x30 [<ffffffff81013799>] do_softirq+0x4d/0xb4 [<ffffffff8104dac7>] irq_exit+0x4e/0x8b [<ffffffff81013aa8>] do_IRQ+0x127/0x14b [<ffffffff81011d93>] ret_from_intr+0x0/0x2e <EOI> [<ffffffff8101793f>] ? mwait_idle+0x9d/0xc6 [<ffffffff81017936>] ? mwait_idle+0x94/0xc6 [<ffffffff8137ee0c>] ? atomic_notifier_call_chain+0xf/0x11 [<ffffffff810101db>] ? enter_idle+0x22/0x24 [<ffffffff81010240>] ? cpu_idle+0x63/0xae [<ffffffff8137561a>] ? start_secondary+0x199/0x19e
Can you poke with an updated log after trying with a (forthcoming) -rc6-git kernel? Should be in the archive today or tomorrow.
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle. Changing version to '11'. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
I have been unable to reproduce this issue with recent versions of the Fedora 11 kernel.