Bug 706584 - nouveau crash
Summary: nouveau crash
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Fedora
Classification: Fedora
Component: xorg-x11-drv-nouveau
Version: 15
Hardware: x86_64
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Ben Skeggs
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-21 09:42 UTC by Dhaval Giani
Modified: 2012-02-05 16:41 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-05 16:41:26 UTC
Type: ---


Attachments (Terms of Use)

Description Dhaval Giani 2011-05-21 09:42:30 UTC
[250571.419802] [drm] nouveau 0000:01:00.0: PFIFO_DMA_PUSHER - Ch 4 Get 0x00213ee8c8 Put 0x00213f0bc8 IbGet 0x000002ff IbPut 0x00000300 State 0x80002054 (err: INVALID_CMD) Push 0x00400040
[251217.677069] [drm] nouveau 0000:01:00.0: PFIFO_DMA_PUSHER - Ch 4 Get 0x00212b2f20 Put 0x00212b521c IbGet 0x00000533 IbPut 0x00000534 State 0x80000000 (err: INVALID_CMD) Push 0x00400040
[254507.628844] Xorg: page allocation failure. order:6, mode:0x40d0
[254507.628849] Pid: 1370, comm: Xorg Not tainted 2.6.38.6-26.rc1.fc15.x86_64 #1
[254507.628851] Call Trace:
[254507.628861]  [<ffffffff810df22f>] __alloc_pages_nodemask+0x6e9/0x772
[254507.628869]  [<ffffffff811088bd>] alloc_pages_current+0xbe/0xd8
[254507.628873]  [<ffffffff810dbb92>] __get_free_pages+0xe/0x4a
[254507.628876]  [<ffffffff8110fba8>] kmalloc_order_trace+0x2c/0x5e
[254507.628880]  [<ffffffff811113d1>] __kmalloc+0x37/0x10d
[254507.628914]  [<ffffffffa008cf53>] nouveau_sgdma_populate+0x86/0x140 [nouveau]
[254507.628922]  [<ffffffffa006f086>] ttm_tt_populate+0x5f/0x78 [ttm]
[254507.628927]  [<ffffffffa006f0d1>] ttm_tt_bind+0x32/0x66 [ttm]
[254507.628933]  [<ffffffffa0070753>] ttm_bo_handle_move_mem+0x10c/0x299 [ttm]
[254507.628939]  [<ffffffffa0070b7f>] ttm_bo_evict+0x29f/0x2e8 [ttm]
[254507.628945]  [<ffffffffa0070d1a>] ttm_mem_evict_first+0x152/0x180 [ttm]
[254507.628951]  [<ffffffffa007138f>] ttm_bo_mem_space+0x29b/0x2ea [ttm]
[254507.628956]  [<ffffffffa0071494>] ttm_bo_move_buffer+0xb6/0x10c [ttm]
[254507.628969]  [<ffffffffa002c94d>] ? drm_mm_kmalloc+0x48/0x86 [drm]
[254507.628975]  [<ffffffffa00715a0>] ttm_bo_validate+0xb6/0xf4 [ttm]
[254507.628981]  [<ffffffffa00718de>] ttm_bo_init+0x300/0x339 [ttm]
[254507.628990]  [<ffffffffa008e2c6>] nouveau_bo_new+0x246/0x283 [nouveau]
[254507.629000]  [<ffffffffa008de89>] ? nouveau_bo_del_ttm+0x0/0x7b [nouveau]
[254507.629010]  [<ffffffffa009054d>] nouveau_gem_new+0x5e/0xee [nouveau]
[254507.629014]  [<ffffffff8112ff11>] ? pollwake+0x0/0x54
[254507.629024]  [<ffffffffa00906bc>] nouveau_gem_ioctl_new+0xdf/0x18d [nouveau]
[254507.629032]  [<ffffffffa0023861>] drm_ioctl+0x29e/0x37b [drm]
[254507.629042]  [<ffffffffa00905dd>] ? nouveau_gem_ioctl_new+0x0/0x18d [nouveau]
[254507.629045]  [<ffffffff8112f508>] do_vfs_ioctl+0x47e/0x4bf
[254507.629049]  [<ffffffff81121032>] ? fsnotify_access+0x5f/0x67
[254507.629052]  [<ffffffff8112f59f>] sys_ioctl+0x56/0x7b
[254507.629056]  [<ffffffff81009bc2>] system_call_fastpath+0x16/0x1b
[254507.629058] Mem-Info:
[254507.629059] Node 0 DMA per-cpu:
[254507.629062] CPU    0: hi:    0, btch:   1 usd:   0
[254507.629063] CPU    1: hi:    0, btch:   1 usd:   0
[254507.629065] CPU    2: hi:    0, btch:   1 usd:   0
[254507.629067] CPU    3: hi:    0, btch:   1 usd:   0
[254507.629068] Node 0 DMA32 per-cpu:
[254507.629070] CPU    0: hi:  186, btch:  31 usd:   0
[254507.629072] CPU    1: hi:  186, btch:  31 usd:   0
[254507.629074] CPU    2: hi:  186, btch:  31 usd: 156
[254507.629075] CPU    3: hi:  186, btch:  31 usd:   0
[254507.629077] Node 0 Normal per-cpu:
[254507.629079] CPU    0: hi:  186, btch:  31 usd:   0
[254507.629080] CPU    1: hi:  186, btch:  31 usd:   0
[254507.629082] CPU    2: hi:  186, btch:  31 usd:   0
[254507.629084] CPU    3: hi:  186, btch:  31 usd:   0
[254507.629088] active_anon:308994 inactive_anon:101384 isolated_anon:0
[254507.629089]  active_file:139045 inactive_file:138146 isolated_file:32
[254507.629090]  unevictable:4 dirty:30 writeback:0 unstable:0
[254507.629091]  free:92797 slab_reclaimable:51169 slab_unreclaimable:22273
[254507.629092]  mapped:25467 shmem:1387 pagetables:8454 bounce:0
[254507.629094] Node 0 DMA free:15808kB min:264kB low:328kB high:396kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:15680kB mlocked:0kB dirty:0kB writeback:0kB mapped:0kB shmem:0kB slab_reclaimable:0kB slab_unreclaimable:8kB kernel_stack:0kB pagetables:0kB unstable:0kB bounce:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no
[254507.629103] lowmem_reserve[]: 0 2988 3872 3872
[254507.629106] Node 0 DMA32 free:334672kB min:51952kB low:64940kB high:77928kB active_anon:1107308kB inactive_anon:276832kB active_file:432552kB inactive_file:432672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3060012kB mlocked:0kB dirty:120kB writeback:0kB mapped:44424kB shmem:3008kB slab_reclaimable:179100kB slab_unreclaimable:51060kB kernel_stack:632kB pagetables:6916kB unstable:0kB bounce:0kB writeback_tmp:0kB pages_scanned:276 all_unreclaimable? no
[254507.629117] lowmem_reserve[]: 0 0 883 883
[254507.629119] Node 0 Normal free:20708kB min:15364kB low:19204kB high:23044kB active_anon:128668kB inactive_anon:128704kB active_file:123492kB inactive_file:119984kB unevictable:16kB isolated(anon):0kB isolated(file):0kB present:904960kB mlocked:16kB dirty:0kB writeback:0kB mapped:57444kB shmem:2540kB slab_reclaimable:25576kB slab_unreclaimable:38024kB kernel_stack:2536kB pagetables:26900kB unstable:0kB bounce:0kB writeback_tmp:0kB pages_scanned:72 all_unreclaimable? no
[254507.629129] lowmem_reserve[]: 0 0 0 0
[254507.629132] Node 0 DMA: 0*4kB 2*8kB 1*16kB 1*32kB 2*64kB 2*128kB 2*256kB 1*512kB 2*1024kB 2*2048kB 2*4096kB = 15808kB
[254507.629139] Node 0 DMA32: 53806*4kB 14861*8kB 31*16kB 2*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 334672kB
[254507.629146] Node 0 Normal: 4583*4kB 33*8kB 2*16kB 1*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB 0*4096kB = 20708kB
[254507.629154] 278867 total pagecache pages
[254507.629155] 255 pages in swap cache
[254507.629157] Swap cache stats: add 2368, delete 2113, find 298/360
[254507.629158] Free swap  = 4187812kB
[254507.629160] Total swap = 4194300kB
[254507.645835] 1015792 pages RAM
[254507.645837] 36658 pages reserved
[254507.645839] 272957 pages shared
[254507.645841] 727808 pages non-shared
[254507.646393] BUG: unable to handle kernel NULL pointer dereference at           (null)
[254507.646424] IP: [<ffffffffa00e15be>] nv50_vm_map_sg+0x29/0x8f [nouveau]
[254507.646466] PGD 116cbb067 PUD 116e79067 PMD 0 
[254507.646482] Oops: 0000 [#1] SMP 
[254507.646493] last sysfs file: /sys/devices/LNXSYSTM:00/device:00/PNP0A08:00/device:0a/PNP0C09:00/PNP0C0A:00/power_supply/BAT0/voltage_now
[254507.646513] CPU 1 
[254507.646519] Modules linked in: vfat fat tcp_lp usb_storage uas fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat xt_CHECKSUM iptable_mangle bridge stp llc sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf rfcomm sco bnep l2cap ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables snd_hda_codec_hdmi snd_hda_codec_conexant arc4 iwlagn uvcvideo snd_hda_intel iwlcore mac80211 snd_hda_codec snd_hwdep videodev snd_seq v4l2_compat_ioctl32 snd_seq_device btusb snd_pcm bluetooth e1000e joydev cfg80211 microcode iTCO_wdt intel_ips i2c_i801 snd_timer iTCO_vendor_support snd_page_alloc thinkpad_acpi rfkill wmi snd soundcore virtio_net kvm_intel kvm ipv6 btrfs zlib_deflate libcrc32c xts gf128mul dm_crypt sdhci_pci sdhci mmc_core firewire_ohci firewire_core crc_itu_t nouveau ttm drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: scsi_wait_scan]
[254507.646773] 
[254507.646778] Pid: 1370, comm: Xorg Not tainted 2.6.38.6-26.rc1.fc15.x86_64 #1 LENOVO 2518FMG/2518FMG
[254507.646795] RIP: 0010:[<ffffffffa00e15be>]  [<ffffffffa00e15be>] nv50_vm_map_sg+0x29/0x8f [nouveau]
[254507.646824] RSP: 0018:ffff880116d17808  EFLAGS: 00010206
[254507.646831] RAX: 0000000000007f00 RBX: ffff88006cc34480 RCX: 000000000000eb1e
[254507.646839] RDX: ffff88006cc34480 RSI: ffff88012f9edf60 RDI: ffff88006cc344a8
[254507.646848] RBP: ffff880116d17848 R08: 0000000000007f00 R09: 0000000000000000
[254507.646856] R10: 0000000000016a1e R11: 0000000000020000 R12: 00000000000758f0
[254507.646865] R13: ffff88006cc344a8 R14: ffff88012f9edf60 R15: 0000000000007f00
[254507.646874] FS:  00007f1b4b8878a0(0000) GS:ffff8800bf080000(0000) knlGS:0000000000000000
[254507.646883] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[254507.646890] CR2: 0000000000000000 CR3: 000000011595d000 CR4: 00000000000006e0
[254507.646899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[254507.646907] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[254507.646916] Process Xorg (pid: 1370, threadinfo ffff880116d16000, task ffff88012dfb9720)
[254507.646925] Stack:
[254507.646929]  ffff88012bada500 ffff88012bada500 ffff88012ad00000 ffff88012bada500
[254507.646943]  ffff88006cc344a8 0000000000000001 0000000000000000 0000000000007f00
[254507.646957]  ffff880116d178b8 ffffffffa00a6486 ffff880116d178a8 ffffffff00020000
[254507.646971] Call Trace:
[254507.646988]  [<ffffffffa00a6486>] nouveau_vm_map_sg+0xbe/0xf7 [nouveau]
[254507.647004]  [<ffffffffa008dcb6>] nouveau_bo_move_ntfy+0x76/0x82 [nouveau]
[254507.647018]  [<ffffffffa00707ab>] ttm_bo_handle_move_mem+0x164/0x299 [ttm]
[254507.647030]  [<ffffffffa0070b7f>] ttm_bo_evict+0x29f/0x2e8 [ttm]
[254507.647043]  [<ffffffffa0070d1a>] ttm_mem_evict_first+0x152/0x180 [ttm]
[254507.647056]  [<ffffffffa007138f>] ttm_bo_mem_space+0x29b/0x2ea [ttm]
[254507.647068]  [<ffffffffa0071494>] ttm_bo_move_buffer+0xb6/0x10c [ttm]
[254507.647087]  [<ffffffffa002c94d>] ? drm_mm_kmalloc+0x48/0x86 [drm]
[254507.647099]  [<ffffffffa00715a0>] ttm_bo_validate+0xb6/0xf4 [ttm]
[254507.647110]  [<ffffffffa00718de>] ttm_bo_init+0x300/0x339 [ttm]
[254507.647125]  [<ffffffffa008e2c6>] nouveau_bo_new+0x246/0x283 [nouveau]
[254507.647141]  [<ffffffffa008de89>] ? nouveau_bo_del_ttm+0x0/0x7b [nouveau]
[254507.647157]  [<ffffffffa009054d>] nouveau_gem_new+0x5e/0xee [nouveau]
[254507.647168]  [<ffffffff8112ff11>] ? pollwake+0x0/0x54
[254507.647184]  [<ffffffffa00906bc>] nouveau_gem_ioctl_new+0xdf/0x18d [nouveau]
[254507.647198]  [<ffffffffa0023861>] drm_ioctl+0x29e/0x37b [drm]
[254507.647214]  [<ffffffffa00905dd>] ? nouveau_gem_ioctl_new+0x0/0x18d [nouveau]
[254507.647224]  [<ffffffff8112f508>] do_vfs_ioctl+0x47e/0x4bf
[254507.647233]  [<ffffffff81121032>] ? fsnotify_access+0x5f/0x67
[254507.647241]  [<ffffffff8112f59f>] sys_ioctl+0x56/0x7b
[254507.647250]  [<ffffffff81009bc2>] system_call_fastpath+0x16/0x1b
[254507.647257] Code: 5d c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 0f 1f 44 00 00 49 89 fd 49 89 f6 48 89 d3 44 8d 24 cd 00 00 00 00 eb 52 
[254507.647327]  8b 31 8b 53 70 49 83 c1 08 b9 02 00 00 00 4c 89 ef 44 89 45 
[254507.647361] RIP  [<ffffffffa00e15be>] nv50_vm_map_sg+0x29/0x8f [nouveau]
[254507.647853]  RSP <ffff880116d17808>
[254507.648611] CR2: 0000000000000000
[254507.660689] ---[ end trace 3ec184ad20dd21a6 ]---
[254508.259827] [drm:drm_release] *ERROR* Device busy: 1
[dhaval@gondor ~]$ 

[dhaval@gondor ~]$ uname -r
2.6.38.6-26.rc1.fc15.x86_64
[dhaval@gondor ~]$ 

happened when i tried to open an image, but not sure if it is reproducible yet.

Comment 1 Elad Alfassa 2011-05-21 20:27:53 UTC
Moving to nouveau



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 2 Dhaval Giani 2011-05-22 21:46:56 UTC
So I missed my lspci,

[dhaval@gondor ~]$ lspci 
00:00.0 Host bridge: Intel Corporation Core Processor DRAM Controller (rev 02)
00:01.0 PCI bridge: Intel Corporation Core Processor PCI Express x16 Root Port (rev 02)
00:16.0 Communication controller: Intel Corporation 5 Series/3400 Series Chipset HECI Controller (rev 06)
00:16.3 Serial controller: Intel Corporation 5 Series/3400 Series Chipset KT Controller (rev 06)
00:19.0 Ethernet controller: Intel Corporation 82577LM Gigabit Network Connection (rev 06)
00:1a.0 USB Controller: Intel Corporation 5 Series/3400 Series Chipset USB2 Enhanced Host Controller (rev 06)
00:1b.0 Audio device: Intel Corporation 5 Series/3400 Series Chipset High Definition Audio (rev 06)
00:1c.0 PCI bridge: Intel Corporation 5 Series/3400 Series Chipset PCI Express Root Port 1 (rev 06)
00:1c.1 PCI bridge: Intel Corporation 5 Series/3400 Series Chipset PCI Express Root Port 2 (rev 06)
00:1c.3 PCI bridge: Intel Corporation 5 Series/3400 Series Chipset PCI Express Root Port 4 (rev 06)
00:1c.4 PCI bridge: Intel Corporation 5 Series/3400 Series Chipset PCI Express Root Port 5 (rev 06)
00:1d.0 USB Controller: Intel Corporation 5 Series/3400 Series Chipset USB2 Enhanced Host Controller (rev 06)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev a6)
00:1f.0 ISA bridge: Intel Corporation Mobile 5 Series Chipset LPC Interface Controller (rev 06)
00:1f.2 SATA controller: Intel Corporation 5 Series/3400 Series Chipset 6 port SATA AHCI Controller (rev 06)
00:1f.3 SMBus: Intel Corporation 5 Series/3400 Series Chipset SMBus Controller (rev 06)
00:1f.6 Signal processing controller: Intel Corporation 5 Series/3400 Series Chipset Thermal Subsystem (rev 06)
01:00.0 VGA compatible controller: nVidia Corporation GT218 [NVS 3100M] (rev a2)
01:00.1 Audio device: nVidia Corporation High Definition Audio Controller (rev a1)
03:00.0 Network controller: Intel Corporation Centrino Wireless-N 1000
0d:00.0 SD Host controller: Ricoh Co Ltd Device e822 (rev 01)
0d:00.1 System peripheral: Ricoh Co Ltd Device e230 (rev 01)
0d:00.3 FireWire (IEEE 1394): Ricoh Co Ltd Device e832 (rev 01)
ff:00.0 Host bridge: Intel Corporation Core Processor QuickPath Architecture Generic Non-core Registers (rev 02)
ff:00.1 Host bridge: Intel Corporation Core Processor QuickPath Architecture System Address Decoder (rev 02)
ff:02.0 Host bridge: Intel Corporation Core Processor QPI Link 0 (rev 02)
ff:02.1 Host bridge: Intel Corporation Core Processor QPI Physical 0 (rev 02)
ff:02.2 Host bridge: Intel Corporation Core Processor Reserved (rev 02)
ff:02.3 Host bridge: Intel Corporation Core Processor Reserved (rev 02)
[dhaval@gondor ~]$ 


Also, I lose the hardware that has this in one more week. And I am unable to reproduce the issue as well.

Comment 3 Luigi Pardey 2012-02-05 16:41:26 UTC

-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers


Note You need to log in before you can comment on or make changes to this bug.