Bug 889511 - [abrt]: WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x60 [gma500_gfx]()
Summary: [abrt]: WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: xorg-x11-drv-intel
Version: 17
Hardware: i686
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Adam Jackson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:2391d630cc407b6830c35433bd0...
: 946903 963404 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-12-21 14:36 UTC by Christof Arn
Modified: 2013-07-31 18:06 UTC (History)
16 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-07-31 18:06:13 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
dmesg of Fedora-19-Nightly-20130419.11-i686-Live-lxde-20130419.11-1.iso (64.74 KB, text/plain)
2013-04-22 11:31 UTC, Peter H. Jones
no flags Details
dmesg of Fedora-19-Nightly-20130419.11-i686-Live-lxde-20130419.11-1.iso with basic video (60.25 KB, text/plain)
2013-04-22 11:33 UTC, Peter H. Jones
no flags Details
dmesg output from Fedora-19-Nightly-i686-Live-lxde-20130509.10-1.iso (58.42 KB, text/plain)
2013-05-10 11:57 UTC, Peter H. Jones
no flags Details
dmesg output (59.46 KB, text/plain)
2013-05-22 07:58 UTC, Peter H. Jones
no flags Details
copy of /var/log/messages (111.73 KB, text/plain)
2013-05-23 09:52 UTC, Peter H. Jones
no flags Details

Description Christof Arn 2012-12-21 14:36:48 UTC
Description of problem:
I did yum update?

Additional info:
libreport version: 2.0.18
abrt_version:   2.0.18
cmdline:        BOOT_IMAGE=/vmlinuz-3.6.8-2.fc17.i686 root=UUID=ca548490-f6c3-415c-8526-d940805c31eb ro rd.md=0 rd.lvm=0 rd.dm=0 SYSFONT=True KEYTABLE=sg rd.luks=0 LANG=en_US.UTF-8 rhgb quiet
kernel:         3.6.8-2.fc17.i686

backtrace:
:WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x60 [gma500_gfx]()
:Hardware name: VGN-P31ZK_Q
:Modules linked in: vfat fat usb_storage lp parport fuse lockd sunrpc rfcomm bnep ip6t_REJECT nf_conntrack_ipv4 nf_conntrack_ipv6 nf_defrag_ipv6 nf_defrag_ipv4 xt_state nf_conntrack ip6table_filter ip6_tables xts gf128mul dm_crypt arc4 ath9k ath9k_common ath9k_hw ath snd_hda_codec_realtek uvcvideo snd_hda_intel mac80211 videobuf2_vmalloc videobuf2_memops snd_hda_codec videobuf2_core cfg80211 videodev media snd_hwdep snd_seq snd_seq_device snd_pcm snd_page_alloc snd_timer i2c_isch sony_laptop btusb bluetooth lpc_sch coretemp kvm snd soundcore rfkill sky2 microcode uinput ata_generic pata_acpi pata_sch gma500_gfx video i2c_algo_bit drm_kms_helper drm i2c_core
:Pid: 677, comm: Xorg Not tainted 3.6.8-2.fc17.i686 #1
:Call Trace:
: [<c043c602>] warn_slowpath_common+0x72/0xa0
: [<f81a91e3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
: [<f81a91e3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
: [<c043c652>] warn_slowpath_null+0x22/0x30
: [<f81a91e3>] psb_gtt_free_range+0x33/0x60 [gma500_gfx]
: [<f81a878b>] psb_gem_free_object+0x1b/0x20 [gma500_gfx]
: [<f8175f22>] drm_gem_object_free+0x22/0x30 [drm]
: [<f81764e7>] drm_gem_handle_delete+0xb7/0xf0 [drm]
: [<f81a88b0>] ? psb_gem_dumb_create+0x50/0x50 [gma500_gfx]
: [<f81a88bf>] psb_gem_dumb_destroy+0xf/0x20 [gma500_gfx]
: [<f818478b>] drm_mode_destroy_dumb_ioctl+0x2b/0x40 [drm]
: [<f8184760>] ? drm_mode_mmap_dumb_ioctl+0x50/0x50 [drm]
: [<f8174bf2>] drm_ioctl+0x422/0x480 [drm]
: [<f8184760>] ? drm_mode_mmap_dumb_ioctl+0x50/0x50 [drm]
: [<c04ffaca>] ? release_pages+0x19a/0x210
: [<f81ac8d5>] psb_unlocked_ioctl+0x35/0x80 [gma500_gfx]
: [<f81ac8a0>] ? psb_driver_preclose+0x10/0x10 [gma500_gfx]
: [<c05536da>] do_vfs_ioctl+0x7a/0x590
: [<c061940a>] ? inode_has_perm.isra.31.constprop.62+0x3a/0x50
: [<c061aa50>] ? file_has_perm+0xa0/0xb0
: [<c061ade8>] ? selinux_file_ioctl+0x48/0xe0
: [<c0553c58>] sys_ioctl+0x68/0x80
: [<c095bd1f>] sysenter_do_call+0x12/0x28

Comment 1 Josh Boyer 2013-01-02 13:43:34 UTC
Seems we're hitting this WARN_ON:


/**
 *      psb_gtt_free_range      -       release GTT address space
 *      @dev: our DRM device
 *      @gt: a mapping created with psb_gtt_alloc_range
 *
 *      Release a resource that was allocated with psb_gtt_alloc_range. If the
 *      object has been pinned by mmap users we clean this up here currently.
 */
void psb_gtt_free_range(struct drm_device *dev, struct gtt_range *gt)
{
        /* Undo the mmap pin if we are destroying the object */
        if (gt->mmapping) {
                psb_gtt_unpin(gt);
                gt->mmapping = 0;
        }
        WARN_ON(gt->in_gart && !gt->stolen);
        release_resource(&gt->resource);
        kfree(gt);
}

Does this happen often?

Comment 2 Neil Darlow 2013-01-07 07:27:24 UTC
This has just occurred for me on Fedora 18 with kernel-PAE-3.7.1 which abrt reported as #892452. I have not observed this problem before on kernels from the 3.6.x series.

Comment 3 Josh Boyer 2013-04-01 13:18:50 UTC
*** Bug 946903 has been marked as a duplicate of this bug. ***

Comment 4 Patrik Jakobsson 2013-04-15 22:57:44 UTC
That WARN_ON seems wrong since we can have a gtt range which is in gart but not backed by stolen memory. The xorg fbdev driver use buffers for which we allocate stolen mem, but with the xorg modesetting driver we can now use the non-stolen mem as well.

I'm gonna investigate this further, but it seems it can just go away.

Comment 5 Peter H. Jones 2013-04-22 11:31:54 UTC
Created attachment 738474 [details]
dmesg of Fedora-19-Nightly-20130419.11-i686-Live-lxde-20130419.11-1.iso

Saw this in Fedora-19-Nightly-20130419.11-i686-Live-lxde-20130419.11-1.iso. After boot, screen goes dark. Used CTRL-ALT-F2 to login as root and save output of dmesg.

This output contains the text "WARNING" twice:

[  132.357215] WARNING: at lib/dma-debug.c:937 check_unmap+0x493/0x950()
and
[  161.018911] WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x6

When I tried booting with standard video, I was hampered by the messages
[  122.540841] brcmsmac bcma0:0: brcms_ops_bss_info_changed: qos enabled: false (implement)
[  122.541068] brcmsmac bcma0:0: brcms_ops_config: change power-save mode: false (implement)
reappearing on the screen after every few seconds in the second (text) screen. I had to keep using CTRL-ALT-F2 to type every few characters.

Comment 6 Peter H. Jones 2013-04-22 11:33:37 UTC
Created attachment 738475 [details]
dmesg of Fedora-19-Nightly-20130419.11-i686-Live-lxde-20130419.11-1.iso with basic video

Comment 7 Neil Darlow 2013-04-23 06:53:48 UTC
I noticed that this bug has been assigned to xorg-x11-drv-intel. My system is using the modesetting driver and it displays this bug. Is the assignment correct?

Comment 8 Patrik Jakobsson 2013-04-23 09:13:24 UTC
Intel has nothing to do with this driver. It's a separate kernel driver leveraging the modesetting (or fbdev) driver in userspace. I'm maintaining it for now (as a hobby) and eventually we'll have a DDX xorg driver for it. So the assignment is probably wrong.

As to the actual problem, it's a bit different than I first thought. A buffer is created and then freed again without anything accessing it. Or even worse, it gets freed and then being accessed. That triggers the WARN_ON so the warning is actually sane. I'm working on a fix but have no time to play with it at the moment. The fix can probably be backported to stable kernels.

Comment 9 Peter H. Jones 2013-05-10 11:57:46 UTC
Created attachment 746133 [details]
dmesg output from Fedora-19-Nightly-i686-Live-lxde-20130509.10-1.iso

1. Occurs in Fedora-19-Nightly-i686-Live-lxde-20130509.10-1.iso . dmesg attached.

2. Suggest bugss 881281, 910656 and 894162 are duplicates of this one.

Comment 10 Josh Boyer 2013-05-16 13:57:24 UTC
*** Bug 963404 has been marked as a duplicate of this bug. ***

Comment 11 Munawar Ahmed 2013-05-16 16:30:18 UTC
Description of problem:
First I installed XFCE desktop through yum. Then I logged out. After taking a longish time, the system displayed to the effect that 'someting bad has happened-contact your administrator'. However after a few seconds the login screen did appear. Then I logged in for XFCE session. The error passage was present as the XFCE desktop appeared.

Version-Release number of selected component:
kernel

Additional info:
reporter:       libreport-2.1.4
cmdline:        BOOT_IMAGE=/vmlinuz-3.9.2-301.fc19.i686 root=/dev/mapper/fedora-root ro rd.lvm.lv=fedora/swap rd.md=0 rd.dm=0 rd.luks=0 vconsole.keymap=us rd.lvm.lv=fedora/root rhgb quiet LANG=en_US.UTF-8
kernel:         3.9.2-301.fc19.i686
runlevel:       N 5
type:           Kerneloops

Truncated backtrace:
WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x60 [gma500_gfx]()
Hardware name: HP Mini 110-4100
Modules linked in: fuse ebtable_nat ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_nat nf_nat_ipv6 ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter rfcomm ebtables ip6table_filter ip6_tables bnep snd_hda_codec_idt snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm ath3k snd_page_alloc iTCO_wdt acpi_cpufreq btusb arc4 snd_timer iTCO_vendor_support uvcvideo ath9k ath9k_common videobuf2_vmalloc videobuf2_memops ath9k_hw videobuf2_core videodev ath mperf bluetooth mac80211 hp_wmi cfg80211 sparse_keymap snd media rfkill coretemp soundcore lpc_ich r8169 microcode i2c_i801 of_i2c mii joydev wmi gma500_gfx i2c_algo_bit drm_kms_helper drm i2c_core video ums_realtek usb_storage uinput
Pid: 639, comm: Xorg Not tainted 3.9.2-301.fc19.i686 #1
Call Trace:
 [<c043e59b>] ? print_hardware_dmi_name+0x2b/0x30
 [<c043e603>] warn_slowpath_common+0x63/0x80
 [<f7f0d0f3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7f0d0f3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<c043e6c2>] warn_slowpath_null+0x22/0x30
 [<f7f0d0f3>] psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7f0c6de>] psb_gem_free_object+0x2e/0x40 [gma500_gfx]
 [<f7f3ae92>] drm_gem_object_free+0x22/0x30 [drm]
 [<f7f3b1ea>] drm_gem_handle_delete+0xda/0x130 [drm]
 [<f7f0c800>] ? psb_gem_dumb_create+0x50/0x50 [gma500_gfx]
 [<f7f0c80f>] psb_gem_dumb_destroy+0xf/0x20 [gma500_gfx]
 [<f7f496c4>] drm_mode_destroy_dumb_ioctl+0x24/0x30 [drm]
 [<f7f496a0>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<f7f39bea>] drm_ioctl+0x43a/0x4a0 [drm]
 [<f7f496a0>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<c0504213>] ? lru_add_drain+0x13/0x20
 [<c05366ff>] ? kfree+0x10f/0x150
 [<f7f3fd46>] ? drm_vm_close_locked+0x96/0xa0 [drm]
 [<f7f3fd46>] ? drm_vm_close_locked+0x96/0xa0 [drm]
 [<f7f10ad1>] psb_unlocked_ioctl+0x31/0x80 [gma500_gfx]
 [<f7f10aa0>] ? psb_probe+0x20/0x20 [gma500_gfx]
 [<c055497e>] do_vfs_ioctl+0x2ee/0x4f0
 [<c0622cda>] ? inode_has_perm.isra.32.constprop.62+0x3a/0x50
 [<c0622d77>] ? file_has_perm+0x87/0x90
 [<c062313c>] ? selinux_file_ioctl+0x4c/0xf0
 [<c0554bd8>] sys_ioctl+0x58/0x80
 [<c097d88d>] sysenter_do_call+0x12/0x28

Comment 12 Patrik Jakobsson 2013-05-20 11:06:05 UTC
This is now fixed and on it's way into the next 3.10-rc

Patches have been posted on the dri-devel mailing list if anyone would like to review. Hopefully it will be applicable to stable releases as well.

http://lists.freedesktop.org/archives/dri-devel/2013-May/038817.html

Comment 13 Peter H. Jones 2013-05-22 07:58:59 UTC
Created attachment 751555 [details]
dmesg output

Still have the bug in  Fedora-Live-LXDE-i686-19-Beta-1.iso. This passed the media check, but I saw buffer errors as the media check passed and booting proceeded, apparently normally. I'll double-check that my download is complete.

Comment 14 Peter H. Jones 2013-05-22 08:22:20 UTC
My download passes "sha256sum -c" test. I could not find the buffer error messages I saw in dmesg output, or /var/log/messages . All the files on the CD appear to be readable without error:
"bash-4.2$ mount | grep sr
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
/dev/sr0 on /run/media/jones/Fedora-Live-LXDE-i686-19-Beta-1 type iso9660 (ro,nosuid,nodev,relatime,uid=1000,gid=1000,iocharset=utf8,mode=0400,dmode=0500,uhelper=udisks2)
bash-4.2$ cd /run/media/jones/Fedora-Live-LXDE-i686-19-Beta-1
bash-4.2$ ls -lR
.:
total 22
-r--r--r--. 1 jones jones 18092 May 21 22:59 GPL
dr-xr-xr-x. 2 jones jones  2048 May 21 22:56 isolinux
dr-xr-xr-x. 2 jones jones  2048 May 21 23:01 LiveOS

./isolinux:
total 33115
-r--r--r--. 1 jones jones     2048 May 21 23:10 boot.cat
-r--r--r--. 1 jones jones 28607872 May 21 22:56 initrd0.img
-r--r--r--. 1 jones jones    24576 May 21 22:56 isolinux.bin
-r--r--r--. 1 jones jones     2252 May 21 22:56 isolinux.cfg
-r--r--r--. 1 jones jones   176500 May 21 22:56 memtest
-r--r--r--. 1 jones jones   155792 May 21 22:56 vesamenu.c32
-r--r--r--. 1 jones jones  4938864 May 21 22:56 vmlinuz0

./LiveOS:
total 661635
-r-xr-xr-x. 1 jones jones     47884 May 21 22:59 livecd-iso-to-disk
-r--r--r--. 1 jones jones     12288 May 21 23:01 osmin.img
-r--r--r--. 1 jones jones 677453824 May 21 23:10 squashfs.img
bash-4.2$ find . | xargs cksum
cksum: .: Is a directory
2811767965 18092 ./GPL
cksum: ./isolinux: Is a directory
3934248083 2048 ./isolinux/boot.cat
3911269744 28607872 ./isolinux/initrd0.img
2366614795 24576 ./isolinux/isolinux.bin
197765676 2252 ./isolinux/isolinux.cfg
570476567 176500 ./isolinux/memtest
2050806774 155792 ./isolinux/vesamenu.c32
270147603 4938864 ./isolinux/vmlinuz0
cksum: ./LiveOS: Is a directory
2905052163 47884 ./LiveOS/livecd-iso-to-disk
4187768394 12288 ./LiveOS/osmin.img
3626241325 677453824 ./LiveOS/squashfs.img
"

Comment 15 Patrik Jakobsson 2013-05-22 12:55:50 UTC
The fix got a NAK so it's _not_ in 3.10-rc2. I'm aiming for a new fix in -rc3 instead.

Comment 16 Peter H. Jones 2013-05-23 09:52:01 UTC
Created attachment 752075 [details]
copy of /var/log/messages

Bug is still in http://dl.fedoraproject.org/pub/alt/stage/19-Beta-RC4/Live/i386/Fedora-Live-LXDE-i686-19-Beta-1.iso .

Comment 17 yahyablora 2013-06-03 06:47:10 UTC
Description of problem:
This error notification always shows up every i boot my fedora.

Version-Release number of selected component:
kernel

Additional info:
reporter:       libreport-2.1.4
cmdline:        BOOT_IMAGE=/boot/vmlinuz-3.9.4-200.fc18.i686 root=UUID=c692a852-9145-4a57-bd29-50c0c4a8cccc ro rd.md=0 rd.lvm=0 rd.dm=0 rd.luks=0 vconsole.keymap=us rhgb quiet LANG=en_US.UTF-8
kernel:         3.9.4-200.fc18.i686
runlevel:       N 5
type:           Kerneloops

Truncated backtrace:
WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x60 [gma500_gfx]()
Hardware name: 1015CX
Modules linked in: ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast bnep bluetooth ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi vfat fat arc4 eeepc_wmi asus_wmi sparse_keymap ath9k ath9k_common ath9k_hw snd_hda_codec_hdmi ath snd_hda_codec_realtek mac80211 snd_hda_intel snd_hda_codec uvcvideo videobuf2_vmalloc videobuf2_memops snd_hwdep videobuf2_core snd_seq videodev snd_seq_device media snd_pcm cfg80211 snd_page_alloc snd_timer iTCO_wdt iTCO_vendor_support acpi_cpufreq mperf coretemp joydev snd i2c_i801 microcode rfkill of_i2c soundcore lpc_ich binfmt_misc uinput gma500_gfx i2c_algo_bit drm_kms_helper drm atl1c i2c_core wmi video sunrpc
Pid: 593, comm: X Not tainted 3.9.4-200.fc18.i686 #1
Call Trace:
 [<c043f92b>] ? print_hardware_dmi_name+0x2b/0x30
 [<c043f999>] warn_slowpath_common+0x69/0x90
 [<f7edd1a3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7edd1a3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<c043f9e2>] warn_slowpath_null+0x22/0x30
 [<f7edd1a3>] psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7edc753>] psb_gem_free_object+0x33/0x40 [gma500_gfx]
 [<f7f46062>] drm_gem_object_free+0x22/0x30 [drm]
 [<f7f46667>] drm_gem_handle_delete+0xc7/0x110 [drm]
 [<f7edc880>] ? psb_gem_dumb_create+0x50/0x50 [gma500_gfx]
 [<f7edc88f>] psb_gem_dumb_destroy+0xf/0x20 [gma500_gfx]
 [<f7f54b0b>] drm_mode_destroy_dumb_ioctl+0x2b/0x40 [drm]
 [<f7f54ae0>] ? drm_mode_mmap_dumb_ioctl+0x50/0x50 [drm]
 [<f7f44c82>] drm_ioctl+0x422/0x480 [drm]
 [<f7f54ae0>] ? drm_mode_mmap_dumb_ioctl+0x50/0x50 [drm]
 [<c051c4f0>] ? vma_interval_tree_remove+0x150/0x200
 [<c05084b3>] ? lru_add_drain+0x13/0x20
 [<c052edf7>] ? free_pages_and_swap_cache+0x17/0xb0
 [<c053ba61>] ? kfree+0x101/0x130
 [<f7f4afb6>] ? drm_vm_close_locked+0x96/0xa0 [drm]
 [<f7f4afb6>] ? drm_vm_close_locked+0x96/0xa0 [drm]
 [<f7ee0c25>] psb_unlocked_ioctl+0x35/0x80 [gma500_gfx]
 [<c053bc30>] ? kmem_cache_free+0x1a0/0x1b0
 [<f7ee0bf0>] ? psb_driver_preclose+0x10/0x10 [gma500_gfx]
 [<c0559d07>] do_vfs_ioctl+0x77/0x590
 [<c0523e75>] ? remove_vma+0x45/0x60
 [<c0525d36>] ? do_munmap+0x236/0x2f0
 [<c04b4756>] ? __audit_syscall_exit+0x1c6/0x270
 [<c055a28b>] sys_ioctl+0x6b/0x80
 [<c099344d>] sysenter_do_call+0x12/0x28

Comment 18 Munawar Ahmed 2013-06-18 12:01:58 UTC
Description of problem:
Reboot after updates

Version-Release number of selected component:
kernel

Additional info:
reporter:       libreport-2.1.5
cmdline:        BOOT_IMAGE=/vmlinuz-3.9.5-301.fc19.i686 root=/dev/mapper/fedora-root ro rd.lvm.lv=fedora/swap rd.md=0 rd.dm=0 rd.luks=0 vconsole.keymap=us rd.lvm.lv=fedora/root rhgb quiet LANG=en_US.UTF-8
kernel:         3.9.5-301.fc19.i686
runlevel:       unknown
type:           Kerneloops

Truncated backtrace:
WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x33/0x60 [gma500_gfx]()
Hardware name: HP Mini 110-4100
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_nat nf_nat_ipv6 ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle rfcomm nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables bnep iTCO_wdt snd_hda_codec_idt iTCO_vendor_support arc4 ath9k ath9k_common ath9k_hw hp_wmi snd_hda_intel sparse_keymap ath uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev media joydev acpi_cpufreq mperf coretemp mac80211 snd_hda_codec cfg80211 snd_hwdep snd_seq snd_seq_device ath3k btusb microcode snd_pcm bluetooth i2c_i801 of_i2c rfkill lpc_ich snd_page_alloc snd_timer r8169 snd mii soundcore wmi binfmt_misc uinput gma500_gfx i2c_algo_bit drm_kms_helper drm i2c_core video ums_realtek usb_storage
Pid: 1602, comm: Xorg Not tainted 3.9.5-301.fc19.i686 #1
Call Trace:
 [<c043e33b>] ? print_hardware_dmi_name+0x2b/0x30
 [<c043e3a3>] warn_slowpath_common+0x63/0x80
 [<f7f620f3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7f620f3>] ? psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<c043e462>] warn_slowpath_null+0x22/0x30
 [<f7f620f3>] psb_gtt_free_range+0x33/0x60 [gma500_gfx]
 [<f7f616de>] psb_gem_free_object+0x2e/0x40 [gma500_gfx]
 [<f7f2de92>] drm_gem_object_free+0x22/0x30 [drm]
 [<f7f2e1ea>] drm_gem_handle_delete+0xda/0x130 [drm]
 [<f7f61800>] ? psb_gem_dumb_create+0x50/0x50 [gma500_gfx]
 [<f7f6180f>] psb_gem_dumb_destroy+0xf/0x20 [gma500_gfx]
 [<f7f3c6b4>] drm_mode_destroy_dumb_ioctl+0x24/0x30 [drm]
 [<f7f3c690>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<f7f2cbea>] drm_ioctl+0x43a/0x4a0 [drm]
 [<f7f3c690>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<c0504343>] ? lru_add_drain+0x13/0x20
 [<c052a097>] ? free_pages_and_swap_cache+0x17/0xb0
 [<f7f32d46>] ? drm_vm_close_locked+0x96/0xa0 [drm]
 [<f7f65ad1>] psb_unlocked_ioctl+0x31/0x80 [gma500_gfx]
 [<f7f65aa0>] ? psb_probe+0x20/0x20 [gma500_gfx]
 [<c0554aae>] do_vfs_ioctl+0x2ee/0x4f0
 [<c0622e2a>] ? inode_has_perm.isra.32.constprop.62+0x3a/0x50
 [<c0622ec7>] ? file_has_perm+0x87/0x90
 [<c062328c>] ? selinux_file_ioctl+0x4c/0xf0
 [<c0554d08>] sys_ioctl+0x58/0x80
 [<c097de4d>] sysenter_do_call+0x12/0x28

Comment 19 Stephen Manis 2013-06-22 01:53:41 UTC
Description of problem:
This problem started immediately after installing kernel version 3.9.4-200.  

Version-Release number of selected component:
kernel

Additional info:
reporter:       libreport-2.1.4
cmdline:        BOOT_IMAGE=/vmlinuz-3.9.4-200.fc18.x86_64 root=/dev/mapper/fedora-root ro rd.lvm.lv=fedora/swap rd.md=0 rd.dm=0 rd.luks=0 vconsole.keymap=us rd.lvm.lv=fedora/root rhgb quiet LANG=en_US.UTF-8
kernel:         3.9.4-200.fc18.x86_64
runlevel:       unknown
type:           Kerneloops

Truncated backtrace:
WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x40/0x80 [gma500_gfx]()
Hardware name: To be filled by O.E.M.
Modules linked in: bnep bluetooth rfkill xt_LOG xt_limit xt_pkttype xt_conntrack iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iTCO_wdt iTCO_vendor_support snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_intel snd_hda_codec mperf snd_hwdep coretemp snd_seq microcode snd_seq_device snd_pcm serio_raw broadcom lpc_ich mfd_core snd_page_alloc i2c_i801 snd_timer tg3 snd ptp soundcore pps_core uinput binfmt_misc gma500_gfx i2c_algo_bit drm_kms_helper drm i2c_core video
Pid: 642, comm: X Not tainted 3.9.4-200.fc18.x86_64 #1
Call Trace:
 [<ffffffff8105f125>] warn_slowpath_common+0x75/0xa0
 [<ffffffff8105f16a>] warn_slowpath_null+0x1a/0x20
 [<ffffffffa0082640>] psb_gtt_free_range+0x40/0x80 [gma500_gfx]
 [<ffffffffa0081a0c>] psb_gem_free_object+0x3c/0x50 [gma500_gfx]
 [<ffffffffa0020c0a>] drm_gem_object_free+0x2a/0x30 [drm]
 [<ffffffffa00212e8>] drm_gem_handle_delete+0x108/0x150 [drm]
 [<ffffffffa0081b60>] psb_gem_dumb_destroy+0x10/0x20 [gma500_gfx]
 [<ffffffffa0031319>] drm_mode_destroy_dumb_ioctl+0x29/0x40 [drm]
 [<ffffffffa001f483>] drm_ioctl+0x4d3/0x580 [drm]
 [<ffffffffa00312f0>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<ffffffff811869b1>] ? kfree+0x151/0x190
 [<ffffffffa00868b2>] psb_unlocked_ioctl+0x42/0xa0 [gma500_gfx]
 [<ffffffff811b17e7>] do_vfs_ioctl+0x97/0x580
 [<ffffffff812a157a>] ? inode_has_perm.isra.32.constprop.62+0x2a/0x30
 [<ffffffff812a2c07>] ? file_has_perm+0x97/0xb0
 [<ffffffff8116635f>] ? do_munmap+0x32f/0x420
 [<ffffffff811b1d61>] sys_ioctl+0x91/0xb0
 [<ffffffff81669f59>] system_call_fastpath+0x16/0x1b

Comment 20 Fedora End Of Life 2013-07-03 19:31:19 UTC
This message is a reminder that Fedora 17 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 17. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '17'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 17's end of life.

Bug Reporter:  Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 17 is end of life. If you 
would still like  to see this bug fixed and are able to reproduce it 
against a later version  of Fedora, you are encouraged  change the 
'version' to a later Fedora version prior to Fedora 17's end of life.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 21 Stephen Manis 2013-07-07 14:27:16 UTC
Description of problem:
I received this error on my first boot into a fresh install, using an XFCE desktop.

Version-Release number of selected component:
kernel

Additional info:
reporter:       libreport-2.1.5
cmdline:        BOOT_IMAGE=/vmlinuz-3.9.5-301.fc19.x86_64 root=/dev/mapper/fedora_webserver-root ro rd.md=0 rd.dm=0 vconsole.keymap=us rd.lvm.lv=fedora_webserver/swap rd.lvm.lv=fedora_webserver/root rd.luks=0 vconsole.font=latarcyrheb-sun16 rhgb quiet
kernel:         3.9.5-301.fc19.x86_64
runlevel:       unknown
type:           Kerneloops

Truncated backtrace:
WARNING: at drivers/gpu/drm/gma500/gtt.c:383 psb_gtt_free_range+0x3c/0x70 [gma500_gfx]()
Hardware name: To be filled by O.E.M.
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_nat nf_nat_ipv6 ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle bnep bluetooth rfkill nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables iTCO_wdt iTCO_vendor_support snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_intel snd_hda_codec mperf snd_hwdep snd_seq coretemp snd_seq_device microcode snd_pcm broadcom serio_raw i2c_i801 tg3 lpc_ich mfd_core ptp pps_core snd_page_alloc snd_timer snd soundcore uinput gma500_gfx i2c_algo_bit drm_kms_helper drm i2c_core video
Pid: 499, comm: Xorg Not tainted 3.9.5-301.fc19.x86_64 #1
Call Trace:
 [<ffffffff8105cc26>] warn_slowpath_common+0x66/0x80
 [<ffffffff8105ccfa>] warn_slowpath_null+0x1a/0x20
 [<ffffffffa008155c>] psb_gtt_free_range+0x3c/0x70 [gma500_gfx]
 [<ffffffffa0080953>] psb_gem_free_object+0x33/0x40 [gma500_gfx]
 [<ffffffffa00207fa>] drm_gem_object_free+0x2a/0x30 [drm]
 [<ffffffffa0020c3e>] drm_gem_handle_delete+0xfe/0x150 [drm]
 [<ffffffffa0080a80>] psb_gem_dumb_destroy+0x10/0x20 [gma500_gfx]
 [<ffffffffa0030b99>] drm_mode_destroy_dumb_ioctl+0x29/0x40 [drm]
 [<ffffffffa001f2c9>] drm_ioctl+0x4e9/0x5b0 [drm]
 [<ffffffffa0030b70>] ? drm_mode_mmap_dumb_ioctl+0x40/0x40 [drm]
 [<ffffffffa0025ef0>] ? drm_vm_close_locked+0xa0/0xb0 [drm]
 [<ffffffff8118083e>] ? kfree+0x13e/0x180
 [<ffffffffa008577d>] psb_unlocked_ioctl+0x3d/0xa0 [gma500_gfx]
 [<ffffffff811ab225>] do_vfs_ioctl+0x305/0x520
 [<ffffffff812946ee>] ? file_has_perm+0x8e/0xa0
 [<ffffffff811ab4c1>] sys_ioctl+0x81/0xa0
 [<ffffffff8164e799>] system_call_fastpath+0x16/0x1b

Comment 22 Patrik Jakobsson 2013-07-07 16:02:20 UTC
This bug is fixed in stable 3.9.7 so please upgrade if it's available in your distribution.

Thanks
Patrik

Comment 23 Fedora End Of Life 2013-07-31 18:06:30 UTC
Fedora 17 changed to end-of-life (EOL) status on 2013-07-30. Fedora 17 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.