https://bugzilla.kernel.org/show_bug.cgi?id=46331

Summary: OOPS in radeon_ttm_bo_destroy when runing r600 piglit tests Product: Drivers Version: 2.5 Kernel Version: 3.6.0-rc2+ Platform: All OS/Version: Linux Tree: Mainline Status: NEW Severity: normal Priority: P1 Component: Video(DRI - non Intel) AssignedTo: drivers_video-dri@kernel-bugs.osdl.org ReportedBy: jlp.bugs@gmail.com Regression: No

I have run r600 piglit tests and the OOPS error screen showed up with this:

BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 IP: [<ffffffffa01762f4>] radeon_ttm_bo_destroy+0x34/0xd0 [radeon] PGD 108522067 PUD 123182067 PMD 0 Oops: 0002 [#1] PREEMPT SMP Modules linked in: asus_atk0110 usb_storage snd_hda_codec_hdmi radeon snd_hda_codec_realtek i2c_algo_bit snd_hda_intel snd_hda_codec snd_pcm coretemp aesni_intel aes_x86_64 r8169 hwmon drm_kms_helper ttm drm aes_generic xhci_hcd i2c_i801 mii ablk_helper cryptd video snd_page_alloc snd_timer snd ehci_hcd wmi CPU 0 Pid: 14945, comm: max-texture-siz Not tainted 3.6.0-rc2-00124-g6dab7ed #1 System manufacturer System Product Name/P8H67 RIP: 0010:[<ffffffffa01762f4>] [<ffffffffa01762f4>] radeon_ttm_bo_destroy+0x34/0xd0 [radeon] RSP: 0018:ffff8800d9fbfb18 EFLAGS: 00010282 RAX: ffff8802059c6800 RBX: ffff8802059c6848 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8802147f6ed8 RBP: ffff8802059c6800 R08: 0000000000000000 R09: ffff88021ec13f40 R10: ffffea00035a0540 R11: ffffffffa00bab18 R12: ffff8802147f6580 R13: ffff8802059c6848 R14: ffff8802059c6848 R15: ffff8802059c6888 FS: 00007f7fcdf95740(0000) GS:ffff88021ec00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000008 CR3: 00000000d6db1000 CR4: 00000000000407f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process max-texture-siz (pid: 14945, threadinfo ffff8800d9fbe000, task ffff880215376600) Stack: ffff8802059c688c 0000000000400480 ffff8802147f6580 ffffffffa007481d 0000000000000001 0000000000000001 ffff8802147f65a0 ffff8802147f69a8 ffff8802133f11f8 ffffffffa00758a4 0000000000000296 0000000000000003 Call Trace: [<ffffffffa007481d>] ? ttm_bo_release_list+0xad/0x100 [ttm] [<ffffffffa00758a4>] ? ttm_bo_release+0x194/0x230 [ttm] [<ffffffffa007597d>] ? ttm_bo_unref+0x3d/0x60 [ttm] [<ffffffffa007751c>] ? ttm_bo_init+0x2ac/0x3f0 [ttm] [<ffffffffa0176614>] ? radeon_bo_create+0x1f4/0x300 [radeon] [<ffffffffa01762c0>] ? radeon_bo_clear_va+0x50/0x50 [radeon] [<ffffffffa0187df4>] ? radeon_gem_object_create+0x64/0x110 [radeon] [<ffffffffa018816c>] ? radeon_gem_create_ioctl+0x6c/0x120 [radeon] [<ffffffffa00b011c>] ? drm_ioctl+0x40c/0x4c0 [drm] [<ffffffffa0188100>] ? radeon_gem_pwrite_ioctl+0x30/0x30 [radeon] [<ffffffff81028362>] ? do_page_fault+0x182/0x440 [<ffffffff8110460f>] ? do_vfs_ioctl+0x8f/0x530 [<ffffffff810be483>] ? vm_mmap_pgoff+0x73/0xa0 [<ffffffff81104af9>] ? sys_ioctl+0x49/0x80 [<ffffffff81473be2>] ? system_call_fastpath+0x16/0x1b Code: 89 fb 48 89 6c 24 08 48 8d 6f b8 4c 89 64 24 10 48 8b bf c8 01 00 00 48 81 c7 d8 0e 00 00 e8 b4 aa 2f e1 48 8b 53 b8 48 8b 43 c0 <48> 89 42 08 48 89 10 48 8b bb c8 01 00 00 48 89 6b b8 48 89 6b RIP [<ffffffffa01762f4>] radeon_ttm_bo_destroy+0x34/0xd0 [radeon] RSP <ffff8800d9fbfb18> CR2: 0000000000000008 ---[ end trace 61e9627de8e05172 ]---

The card is Radeon HD 5750, I'm using Mesa from git (8d1a9a9), libdrm is also from git.