[Bug 35045] New: BUG at ttm_bo.c:272! (ttm_bo_ref_bug -> ttm_bo_list_ref_sub+0x28/0x30)

https://bugs.freedesktop.org/show_bug.cgi?id=35045

Summary: BUG at ttm_bo.c:272! (ttm_bo_ref_bug -> ttm_bo_list_ref_sub+0x28/0x30) Product: DRI Version: XOrg CVS Platform: x86-64 (AMD64) OS/Version: Linux (All) Status: NEW Severity: normal Priority: medium Component: DRM/Radeon AssignedTo: dri-devel@lists.freedesktop.org ReportedBy: freedesktop@treblig.org

Hi, I've got a repeatable oops that happens when viewing full screen video in flash in chromium, under kwin (with effects enabled) and switching virtual desktop/workspace on ATI Technologies Inc RV710 [Radeon HD 4350].

Hardware: ATI Technologies Inc RV710 [Radeon HD 4350] in an ASRock P55M Pro motherboard, with an i7-860 CPU, and 8GB RAM, connected to Dell S2409W display via DVI.

OS: Ubuntu Natty upto date as of today, 64bit install, running KDE.

Kernel: Daily build from DRM next from http://kernel.ubuntu.com/~kernel-ppa/mainline/drm-next/current/ linux-image-2.6.38-996-generic_2.6.38-996.201103041138_amd64.deb claims to be commit e73f88af66fcc50083fae4b7e1c39b469179a97a

DRM/mesa/etc: ii libdrm-radeon1 2.4.23-1ubuntu3 ii libdrm2 2.4.23-1ubuntu3 ii libgl1-mesa-dri 7.10.1~git20110215.cc1636b6-0

I've got a 3x3 virtual desktop setup, and am running Chromium and go to youtube and pop a video full screen; and move around the virtual desktop with ctrl-alt-arrows. The oops below was produced twice. I've got a bunch of related symptoms; I installed the daily build because I was getting instances of [drm:radeon_cs_ioctl] *ERROR* Failed to parse relocation -35! (which I think is EDEADLOCK) doing similar combinations of going in and out of full screen flash. I've also seen when I try to go into full screen rapid flickering as if it can't decide whether to go into full screen or stay out; once that's triggered that flickering can repeat itself when starting other apps.

This corresponds to Ubuntu bug https://bugs.launchpad.net/ubuntu/+source/linux/+bug/717870 and possibly also ubuntu bug 717889

Mar 5 22:12:17 major kernel: [ 495.890854] ------------[ cut here ]------------ Mar 5 22:12:17 major kernel: [ 495.890882] kernel BUG at /home/kernel-ppa/COD/linux/drivers/gpu/drm/ttm/ttm_bo.c:272! Mar 5 22:12:17 major kernel: [ 495.890917] invalid opcode: 0000 [#1] SMP Mar 5 22:12:17 major kernel: [ 495.890939] last sysfs file: /sys/devices/system/cpu/cpu7/topology/thread_siblings Mar 5 22:12:17 major kernel: [ 495.890971] CPU 1 Mar 5 22:12:17 major kernel: [ 495.890981] Modules linked in: ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT binfmt_misc xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge stp kvm_intel kvm dm_crypt snd_hda_codec_hdmi snd_hda_codec_via snd_hda_intel snd_seq_midi snd_hda_codec snd_rawmidi snd_hwdep snd_seq_midi_event snd_seq snd_pcm snd_seq_device snd_timer snd ppdev soundcore parport_pc snd_page_alloc lp parport radeon usbhid usb_storage ttm hid firewire_ohci drm_kms_helper uas drm firewire_core r8169 pata_via crc_itu_t i2c_algo_bit configfs Mar 5 22:12:17 major kernel: [ 495.891289] Mar 5 22:12:17 major kernel: [ 495.893682] Pid: 42, comm: kworker/1:1 Not tainted 2.6.38-996-generic #201103041138 P55M Pro/To Be Filled By O.E.M. Mar 5 22:12:17 major kernel: [ 495.896183] RIP: 0010:[<ffffffffa00f3d89>] [<ffffffffa00f3d89>] ttm_bo_ref_bug+0x9/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 495.898561] RSP: 0000:ffff8802277ebd90 EFLAGS: 00010202 Mar 5 22:12:17 major kernel: [ 495.900903] RAX: ffffffffa00f6801 RBX: 0000000000000000 RCX: ffff880222bb3120 Mar 5 22:12:17 major kernel: [ 495.903223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880222bb308c Mar 5 22:12:17 major kernel: [ 495.905545] RBP: ffff8802277ebd90 R08: 0000000000000000 R09: 0000000000000000 Mar 5 22:12:17 major kernel: [ 495.907870] R10: ffff8800c7453b58 R11: 0000000000000000 R12: ffff880222bb308c Mar 5 22:12:17 major kernel: [ 495.910371] R13: ffffffffa00f3d80 R14: ffff880222bb3048 R15: 0000000000000000 Mar 5 22:12:17 major kernel: [ 495.912659] FS: 0000000000000000(0000) GS:ffff8800c7440000(0000) knlGS:0000000000000000 Mar 5 22:12:17 major kernel: [ 495.914975] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b Mar 5 22:12:17 major kernel: [ 495.917310] CR2: 00000000f0969000 CR3: 00000001dc19a000 CR4: 00000000000006e0 Mar 5 22:12:17 major kernel: [ 495.919642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Mar 5 22:12:17 major kernel: [ 495.921973] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Mar 5 22:12:17 major kernel: [ 495.924274] Process kworker/1:1 (pid: 42, threadinfo ffff8802277ea000, task ffff8802277bc440) Mar 5 22:12:17 major kernel: [ 495.926774] Stack: Mar 5 22:12:17 major kernel: [ 495.929067] ffff8802277ebdc0 ffffffff812d31be 0000000000000001 0000000000000000 Mar 5 22:12:17 major kernel: [ 495.931384] ffff880222b1a208 0000000000000000 ffff8802277ebdd0 ffffffffa00f5048 Mar 5 22:12:17 major kernel: [ 495.933688] ffff8802277ebe10 ffffffffa00f67c8 01ff8802277ebe10 ffff880222bb3000 Mar 5 22:12:17 major kernel: [ 495.936003] Call Trace: Mar 5 22:12:17 major kernel: [ 495.938310] [<ffffffff812d31be>] kref_sub+0x3e/0x80 Mar 5 22:12:17 major kernel: [ 495.940583] [<ffffffffa00f5048>] ttm_bo_list_ref_sub+0x28/0x30 [ttm] Mar 5 22:12:17 major kernel: [ 495.942967] [<ffffffffa00f67c8>] ttm_bo_reserve+0x88/0xa0 [ttm] Mar 5 22:12:17 major kernel: [ 495.945209] [<ffffffffa0154858>] radeon_unpin_work_func+0x28/0xb0 [radeon] Mar 5 22:12:17 major kernel: [ 495.947398] [<ffffffff810813ce>] process_one_work+0x10e/0x390 Mar 5 22:12:17 major kernel: [ 495.949673] [<ffffffffa0154830>] ? radeon_unpin_work_func+0x0/0xb0 [radeon] Mar 5 22:12:17 major kernel: [ 495.951872] [<ffffffff8108221d>] worker_thread+0xdd/0x260 Mar 5 22:12:17 major kernel: [ 495.954094] [<ffffffff81082140>] ? worker_thread+0x0/0x260 Mar 5 22:12:17 major kernel: [ 495.956341] [<ffffffff81086277>] kthread+0x97/0xa0 Mar 5 22:12:17 major kernel: [ 495.958735] [<ffffffff8100ce24>] kernel_thread_helper+0x4/0x10 Mar 5 22:12:17 major kernel: [ 495.958738] [<ffffffff810861e0>] ? kthread+0x0/0xa0 Mar 5 22:12:17 major kernel: [ 495.958740] [<ffffffff8100ce20>] ? kernel_thread_helper+0x0/0x10 Mar 5 22:12:17 major kernel: [ 495.958741] Code: 48 89 10 48 89 8f e0 00 00 00 48 89 8f d8 00 00 00 c9 89 f0 c3 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 0f 1f 44 00 00 <0f> 0b eb fe 0f 1f 00 55 48 89 e5 0f 1f 44 00 00 48 83 3e 00 48 Mar 5 22:12:17 major kernel: [ 495.958754] RIP [<ffffffffa00f3d89>] ttm_bo_ref_bug+0x9/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 495.958761] RSP <ffff8802277ebd90> Mar 5 22:12:17 major kernel: [ 495.970338] ---[ end trace eb6ea5ab08ebf6f9 ]--- Mar 5 22:12:17 major kernel: [ 495.971011] BUG: unable to handle kernel paging request at fffffffffffffff8 Mar 5 22:12:17 major kernel: [ 495.973499] IP: [<ffffffff81085f30>] kthread_data+0x10/0x20 Mar 5 22:12:17 major kernel: [ 495.976059] PGD 1a05067 PUD 1a06067 PMD 0 Mar 5 22:12:17 major kernel: [ 495.978440] Oops: 0000 [#2] SMP Mar 5 22:12:17 major kernel: [ 495.980762] last sysfs file: /sys/devices/system/cpu/cpu7/topology/thread_siblings Mar 5 22:12:17 major kernel: [ 495.983104] CPU 1 Mar 5 22:12:17 major kernel: [ 495.983112] Modules linked in: ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT binfmt_misc xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge stp kvm_intel kvm dm_crypt snd_hda_codec_hdmi snd_hda_codec_via snd_hda_intel snd_seq_midi snd_hda_codec snd_rawmidi snd_hwdep snd_seq_midi_event snd_seq snd_pcm snd_seq_device snd_timer snd ppdev soundcore parport_pc snd_page_alloc lp parport radeon usbhid usb_storage ttm hid firewire_ohci drm_kms_helper uas drm firewire_core r8169 pata_via crc_itu_t i2c_algo_bit configfs Mar 5 22:12:17 major kernel: [ 495.993045] Mar 5 22:12:17 major kernel: [ 495.995587] Pid: 42, comm: kworker/1:1 Tainted: G D 2.6.38-996-generic #201103041138 P55M Pro/To Be Filled By O.E.M. Mar 5 22:12:17 major kernel: [ 495.998137] RIP: 0010:[<ffffffff81085f30>] [<ffffffff81085f30>] kthread_data+0x10/0x20 Mar 5 22:12:17 major kernel: [ 496.000687] RSP: 0018:ffff8802277eb9a8 EFLAGS: 00010096 Mar 5 22:12:17 major kernel: [ 496.003225] RAX: 0000000000000000 RBX: ffff8802277bc440 RCX: ffff8802277ebb28 Mar 5 22:12:17 major kernel: [ 496.005892] RDX: ffff8802277bc440 RSI: 0000000000000001 RDI: ffff8802277bc440 Mar 5 22:12:17 major kernel: [ 496.008436] RBP: ffff8802277eb9a8 R08: ffff8800c7456f60 R09: ffff88022762b8a8 Mar 5 22:12:17 major kernel: [ 496.010907] R10: ffff88022762b898 R11: 0000000000000001 R12: 0000000000000001 Mar 5 22:12:17 major kernel: [ 496.013390] R13: 0000000000000001 R14: ffff8800c7453ac0 R15: 00007ffffffff000 Mar 5 22:12:17 major kernel: [ 496.015887] FS: 0000000000000000(0000) GS:ffff8800c7440000(0000) knlGS:0000000000000000 Mar 5 22:12:17 major kernel: [ 496.018383] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b Mar 5 22:12:17 major kernel: [ 496.020860] CR2: fffffffffffffff8 CR3: 00000001dc19a000 CR4: 00000000000006e0 Mar 5 22:12:17 major kernel: [ 496.023477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Mar 5 22:12:17 major kernel: [ 496.025936] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Mar 5 22:12:17 major kernel: [ 496.028369] Process kworker/1:1 (pid: 42, threadinfo ffff8802277ea000, task ffff8802277bc440) Mar 5 22:12:17 major kernel: [ 496.030832] Stack: Mar 5 22:12:17 major kernel: [ 496.033291] ffff8802277eb9d8 ffffffff8107f89a ffff8802277eba48 ffff8802277bc440 Mar 5 22:12:17 major kernel: [ 496.035764] ffff8802277bc7e0 0000000000000001 ffff8802277ebb28 ffffffff815b11e9 Mar 5 22:12:17 major kernel: [ 496.038401] ffff880222f55800 ffff8802277ebfd8 ffff8802277ebb28 0000000000013ac0 Mar 5 22:12:17 major kernel: [ 496.040860] Call Trace: Mar 5 22:12:17 major kernel: [ 496.043305] [<ffffffff8107f89a>] wq_worker_sleeping+0x1a/0x90 Mar 5 22:12:17 major kernel: [ 496.045791] [<ffffffff815b11e9>] schedule+0x549/0x790 Mar 5 22:12:17 major kernel: [ 496.048146] [<ffffffff812c8429>] ? cfq_cic_free+0x19/0x20 Mar 5 22:12:17 major kernel: [ 496.050423] [<ffffffff812cb00a>] ? cic_free_func+0x7a/0x90 Mar 5 22:12:17 major kernel: [ 496.052633] [<ffffffff812caf90>] ? cic_free_func+0x0/0x90 Mar 5 22:12:17 major kernel: [ 496.054976] [<ffffffff812c8294>] ? __call_for_each_cic+0x34/0x50 Mar 5 22:12:17 major kernel: [ 496.057143] [<ffffffff812bb90d>] ? put_io_context+0x4d/0x60 Mar 5 22:12:17 major kernel: [ 496.059273] [<ffffffff8106a302>] do_exit+0x2c2/0x3f0 Mar 5 22:12:17 major kernel: [ 496.061397] [<ffffffff815b4b43>] oops_end+0xf3/0x100 Mar 5 22:12:17 major kernel: [ 496.063503] [<ffffffff8100fc3b>] die+0x5b/0x90 Mar 5 22:12:17 major kernel: [ 496.065648] [<ffffffff815b4200>] do_trap+0x140/0x160 Mar 5 22:12:17 major kernel: [ 496.067779] [<ffffffffa00f3d80>] ? ttm_bo_ref_bug+0x0/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 496.070047] [<ffffffff8100d905>] do_invalid_op+0x95/0xb0 Mar 5 22:12:17 major kernel: [ 496.072160] [<ffffffffa00f3d89>] ? ttm_bo_ref_bug+0x9/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 496.072163] [<ffffffff8104bc3f>] ? account_entity_dequeue+0x7f/0xb0 Mar 5 22:12:17 major kernel: [ 496.072165] [<ffffffff812d5e7f>] ? rb_erase+0xbf/0x140 Mar 5 22:12:17 major kernel: [ 496.072167] [<ffffffff8100cc9b>] invalid_op+0x1b/0x20 Mar 5 22:12:17 major kernel: [ 496.072173] [<ffffffffa00f3d80>] ? ttm_bo_ref_bug+0x0/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 496.072177] [<ffffffffa00f6801>] ? ttm_bo_global_show+0x21/0x30 [ttm] Mar 5 22:12:17 major kernel: [ 496.072181] [<ffffffffa00f3d89>] ? ttm_bo_ref_bug+0x9/0x10 [ttm] Mar 5 22:12:17 major kernel: [ 496.072184] [<ffffffff812d31be>] kref_sub+0x3e/0x80 Mar 5 22:12:17 major kernel: [ 496.072188] [<ffffffffa00f5048>] ttm_bo_list_ref_sub+0x28/0x30 [ttm] Mar 5 22:12:17 major kernel: [ 496.072192] [<ffffffffa00f67c8>] ttm_bo_reserve+0x88/0xa0 [ttm] Mar 5 22:12:17 major kernel: [ 496.072206] [<ffffffffa0154858>] radeon_unpin_work_func+0x28/0xb0 [radeon] Mar 5 22:12:17 major kernel: [ 496.072209] [<ffffffff810813ce>] process_one_work+0x10e/0x390 Mar 5 22:12:17 major kernel: [ 496.072221] [<ffffffffa0154830>] ? radeon_unpin_work_func+0x0/0xb0 [radeon] Mar 5 22:12:17 major kernel: [ 496.072223] [<ffffffff8108221d>] worker_thread+0xdd/0x260 Mar 5 22:12:17 major kernel: [ 496.072225] [<ffffffff81082140>] ? worker_thread+0x0/0x260 Mar 5 22:12:17 major kernel: [ 496.072227] [<ffffffff81086277>] kthread+0x97/0xa0 Mar 5 22:12:17 major kernel: [ 496.072229] [<ffffffff8100ce24>] kernel_thread_helper+0x4/0x10 Mar 5 22:12:17 major kernel: [ 496.072231] [<ffffffff810861e0>] ? kthread+0x0/0xa0 Mar 5 22:12:17 major kernel: [ 496.072233] [<ffffffff8100ce20>] ? kernel_thread_helper+0x0/0x10 Mar 5 22:12:17 major kernel: [ 496.072234] Code: 1f 44 00 00 65 48 8b 04 25 40 cc 00 00 48 8b 80 48 03 00 00 8b 40 f0 c9 c3 66 90 55 48 89 e5 0f 1f 44 00 00 48 8b 87 48 03 00 00 <48> 8b 40 f8 c9 c3 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 0f Mar 5 22:12:17 major kernel: [ 496.072246] RIP [<ffffffff81085f30>] kthread_data+0x10/0x20 Mar 5 22:12:17 major kernel: [ 496.072248] RSP <ffff8802277eb9a8> Mar 5 22:12:17 major kernel: [ 496.072249] CR2: fffffffffffffff8 Mar 5 22:12:17 major kernel: [ 496.072250] ---[ end trace eb6ea5ab08ebf6fa ]--- Mar 5 22:12:17 major kernel: [ 496.072251] Fixing recursive fault but reboot is needed!

root@major:/home/dg#