Bug 665887 - [G45] Oops at drm_ht_insert_item
Summary: [G45] Oops at drm_ht_insert_item
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 14
Hardware: x86_64
OS: Linux
low
high
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 681704 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-12-27 18:14 UTC by Alex Villacís Lasso
Modified: 2011-10-11 18:41 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-10-11 18:41:42 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
dmesg output with backtrace at the end (78.30 KB, text/plain)
2010-12-27 18:14 UTC, Alex Villacís Lasso
no flags Details
Xorg.0.log right after the crash (341.30 KB, text/plain)
2010-12-27 18:17 UTC, Alex Villacís Lasso
no flags Details
Output of lspci -vvvv right after the crash (22.72 KB, text/plain)
2010-12-27 18:19 UTC, Alex Villacís Lasso
no flags Details
oops: drm_ht_insert_item+0x45/0x98 (3.02 KB, text/plain)
2011-03-04 12:17 UTC, Harshula Jayasuriya
no flags Details


Links
System ID Private Priority Status Summary Last Updated
FreeDesktop.org 29325 0 None None None Never
Linux Kernel 25572 0 None None None Never

Description Alex Villacís Lasso 2010-12-27 18:14:22 UTC
Created attachment 470868 [details]
dmesg output with backtrace at the end

Description of problem:
When performing GUI interaction using Compiz or Gnome-Shell, sometimes the kernel will oops with the attached backtrace, and the GUI completely freezes. System seems to remain active, as I can ssh from another machine to get the backtrace, but only a reboot will fix the freeze.

Version-Release number of selected component (if applicable):
kernel-2.6.35.10-72.fc14.x86_64
xorg-x11-server-Xorg-1.9.3-3.fc14.x86_64
mesa-libGL-7.9-5.fc14.x86_64
mesa-dri-drivers-7.9-5.fc14.x86_64
xorg-x11-drv-intel-2.12.0-6.fc14.1.x86_64

How reproducible:
Random

Steps to Reproduce (what I do):
1. Boot with affected kernel and compiz/gnome-shell
2. Leave azureus running over the weekend 
3. On monday, shut down azureus and start using gui for a while
  
Actual results:
GUI freeze

Expected results:
No GUI freeze, machine should keep working normally.

Additional info:
I knew of this bug since at least vanilla kernel 2.6.34-rc3. Fedora 12 kernel 2.6.32.x was not affected. I was hoping this would not creep into the distro kernel.
The following bug reports describe the same bug on vanilla kernel:
http://bugs.freedesktop.org/show_bug.cgi?id=29325
https://bugzilla.kernel.org/show_bug.cgi?id=15664

Comment 1 Alex Villacís Lasso 2010-12-27 18:17:45 UTC
Created attachment 470869 [details]
Xorg.0.log right after the crash

Comment 2 Alex Villacís Lasso 2010-12-27 18:19:09 UTC
Created attachment 470870 [details]
Output of lspci -vvvv right after the crash

Comment 3 James 2011-01-03 20:52:28 UTC
Hmm, think I may have just seen this: Intel X3100 graphics, x86-64 build of a kernel derive from Fedora's kernel 2.6.36.1-11 sources in Koji. Was attempting to print something from Evince at the time, Xorg crashed the moment a dialogue was disappearing with a desktop effect. Nothing suspicious in X server logs.


[81385.272943] BUG: unable to handle kernel paging request at 0000000108e00195
[81385.272995] IP: [<ffffffffa003559f>] drm_ht_insert_item+0x45/0x98 [drm]
[81385.273002] PGD 78272067 PUD 0 
[81385.273002] Oops: 0000 [#1] PREEMPT SMP 
[81385.273002] last sysfs file: /sys/devices/system/cpu/cpu1/cpufreq/scaling_cur_freq
[81385.273002] CPU 0 
[81385.273002] Modules linked in: vfat fat usb_storage tcp_lp hidp fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat bridge stp llc rfcomm sco bnep l2cap coretemp cpufreq_ondemand acpi_cpufreq freq_table mperf xt_physdev ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 kvm_intel kvm uinput arc4 ecb snd_hda_codec_si3054 iwlagn snd_hda_codec_realtek iwlcore snd_hda_intel snd_hda_codec mac80211 snd_hwdep btusb snd_seq bluetooth snd_seq_device snd_pcm cfg80211 snd_timer r8169 snd mii uvcvideo soundcore i2c_i801 iTCO_wdt snd_page_alloc videodev microcode rfkill v4l1_compat v4l2_compat_ioctl32 serio_raw joydev iTCO_vendor_support shpchp wmi thermal processor sdhci_pci sdhci firewire_ohci firewire_core mmc_core crc_itu_t uhci_hcd i915 drm_kms_helper drm i2c_algo_bit i2c_core video output [last unloaded: scsi_wait_scan]
[81385.273002] 
[81385.273002] Pid: 1672, comm: Xorg Not tainted 2.6.36.1-rhapsody.noecd.j915-270 #1 M720R/M720R
[81385.273002] RIP: 0010:[<ffffffffa003559f>]  [<ffffffffa003559f>] drm_ht_insert_item+0x45/0x98 [drm]
[81385.273002] RSP: 0018:ffff880077c0dd30  EFLAGS: 00010206
[81385.273002] RAX: ffffc90011fad1f8 RBX: ffff88005184de28 RCX: 0000000108e00195
[81385.273002] RDX: ffff880043e7b020 RSI: ffff880043e7b020 RDI: 0000000108e00195
[81385.273002] RBP: ffff880077c0dd48 R08: 2b78000000000000 R09: ffff880077c0dca8
[81385.273002] R10: ffff880077c0dcf8 R11: 0000000000000006 R12: ffff88003779abd8
[81385.273002] R13: 000000000017e56f R14: ffff880059014d80 R15: ffff88003779ab80
[81385.273002] FS:  00007f005cece860(0000) GS:ffff880001c00000(0000) knlGS:0000000000000000
[81385.273002] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[81385.273002] CR2: 0000000108e00195 CR3: 0000000037576000 CR4: 00000000000006f0
[81385.273002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[81385.273002] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[81385.273002] Process Xorg (pid: 1672, threadinfo ffff880077c0c000, task ffff880079514620)
[81385.273002] Stack:
[81385.273002]  ffff88005184de00 ffff880077c0dde8 ffff88003793c820 ffff880077c0dd98
[81385.273002] <0> ffffffffa0083ffa 00000000000fffff 00000001ffffffff ffff880000000000
[81385.273002] <0> ffff880037715e40 00000000fffffff2 ffff880077c0dde8 ffffffffa00b38d0
[81385.273002] Call Trace:
[81385.273002]  [<ffffffffa0083ffa>] i915_gem_mmap_gtt_ioctl+0x16c/0x21e [i915]
[81385.273002]  [<ffffffffa002d262>] drm_ioctl+0x29f/0x377 [drm]
[81385.273002]  [<ffffffffa0083e8e>] ? i915_gem_mmap_gtt_ioctl+0x0/0x21e [i915]
[81385.273002]  [<ffffffff810ed44e>] ? pmd_offset+0x19/0x40
[81385.273002]  [<ffffffff811ee831>] ? file_has_perm+0xa5/0xc7
[81385.273002]  [<ffffffff8112acf0>] do_vfs_ioctl+0x46c/0x4ad
[81385.273002]  [<ffffffff8112ad87>] sys_ioctl+0x56/0x7b
[81385.273002]  [<ffffffff81009d72>] system_call_fastpath+0x16/0x1b
[81385.273002] Code: 04 4c 89 ef e8 b7 fe ff ff 31 d2 89 c0 48 c1 e0 03 49 03 44 24 10 48 8b 30 48 89 f1 eb 08 77 19 48 89 ca 48 89 f9 48 85 c9 74 0e <48> 8b 39 4c 39 69 10 0f 18 0f 75 e7 eb 39 48 85 d2 74 1d 48 8b 
[81385.273002] RIP  [<ffffffffa003559f>] drm_ht_insert_item+0x45/0x98 [drm]
[81385.273002]  RSP <ffff880077c0dd30>
[81385.273002] CR2: 0000000108e00195

Comment 4 Harshula Jayasuriya 2011-03-04 12:17:40 UTC
Created attachment 482282 [details]
oops: drm_ht_insert_item+0x45/0x98

Comment 5 Josh Boyer 2011-08-31 19:39:37 UTC
*** Bug 681704 has been marked as a duplicate of this bug. ***

Comment 6 Dave Jones 2011-10-11 18:41:42 UTC
f14 isn't going to get much beyond security fixes at this point in its lifecycle.
If this is still happening on f15, please reopen or file a new bug.


Note You need to log in before you can comment on or make changes to this bug.