2010/1/26 Laurent Wandrebeck :

Hi there,

Quite easy bug to trigger:

WARNING: at drivers/gpu/drm/radeon/r600_blit_kms.c:550 r600_blit_prepare_copy+0x36/0x3e4 [radeon]() (Not tainted) Hardware name: 939Dual-VSTA Modules linked in: fuse nfsd lockd nfs_acl auth_rpcgss exportfs sunrpc cpufreq_ondemand powernow_k8 freq_table nf_conntrack_tftp ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 dm_multipath uinput snd_usb_audio snd_hda_codec_atihdmi snd_hda_intel snd_hda_codec snd_usb_lib snd_seq snd_rawmidi snd_seq_device snd_pcm uli526x k8temp snd_timer amd64_edac_mod edac_core snd_page_alloc snd_hwdep snd joydev shpchp pwc soundcore videodev v4l1_compat v4l2_compat_ioctl32 serio_raw ata_generic pata_acpi sata_uli pata_ali radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan] Pid: 1616, comm: Xorg Not tainted 2.6.31.12-174.2.3.fc12.x86_64 #1 Call Trace:  [<ffffffff81051710>] warn_slowpath_common+0x84/0x9c  [<ffffffff8105173c>] warn_slowpath_null+0x14/0x16  [<ffffffffa00a12aa>] r600_blit_prepare_copy+0x36/0x3e4 [radeon]  [<ffffffffa0098214>] r600_copy_blit+0x2b/0x57 [radeon]  [<ffffffffa00795f9>] radeon_move_blit+0x101/0x13f [radeon]  [<ffffffffa007986f>] radeon_bo_move+0x238/0x25e [radeon]  [<ffffffffa004c248>] ttm_bo_handle_move_mem+0x1cc/0x2bb [ttm]  [<ffffffffa004dab6>] ttm_bo_move_buffer+0xb0/0xef [ttm]  [<ffffffffa0078a07>] ? radeon_fence_destroy+0x56/0x5e [radeon]  [<ffffffffa004db37>] ttm_buffer_object_validate+0x42/0xbf [ttm]  [<ffffffffa007a22c>] radeon_object_list_validate+0xaf/0x152 [radeon]  [<ffffffffa008692f>] radeon_cs_parser_relocs+0x19c/0x1fa [radeon]  [<ffffffffa0086cae>] ? radeon_cs_ioctl+0x0/0x19a [radeon]  [<ffffffffa0086d71>] radeon_cs_ioctl+0xc3/0x19a [radeon]  [<ffffffffa001521f>] drm_ioctl+0x237/0x2f4 [drm]  [<ffffffff81108dd1>] vfs_ioctl+0x6f/0x87  [<ffffffff811092e0>] do_vfs_ioctl+0x47b/0x4c1  [<ffffffff8110937c>] sys_ioctl+0x56/0x79  [<ffffffff81011cf2>] system_call_fastpath+0x16/0x1b ---[ end trace 4582b1d562190995 ]--- BUG: unable to handle kernel NULL pointer dereference at 0000000000000028 IP: [<ffffffffa00a19bc>] r600_kms_blit_copy+0x68/0x518 [radeon] PGD 12c59a067 PUD 12c599067 PMD 0 Oops: 0000 [#1] SMP last sysfs file: /sys/devices/pci0000:00/0000:00:18.3/temp3_input CPU 1 Modules linked in: fuse nfsd lockd nfs_acl auth_rpcgss exportfs sunrpc cpufreq_ondemand powernow_k8 freq_table nf_conntrack_tftp ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 dm_multipath uinput snd_usb_audio snd_hda_codec_atihdmi snd_hda_intel snd_hda_codec snd_usb_lib snd_seq snd_rawmidi snd_seq_device snd_pcm uli526x k8temp snd_timer amd64_edac_mod edac_core snd_page_alloc snd_hwdep snd joydev shpchp pwc soundcore videodev v4l1_compat v4l2_compat_ioctl32 serio_raw ata_generic pata_acpi sata_uli pata_ali radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan] Pid: 1616, comm: Xorg Tainted: G        W 2.6.31.12-174.2.3.fc12.x86_64 #1 939Dual-VSTA RIP: 0010:[<ffffffffa00a19bc>]  [<ffffffffa00a19bc>] r600_kms_blit_copy+0x68/0x518 [radeon] RSP: 0018:ffff8801389f7948  EFLAGS: 00010216 RAX: 0000000000000000 RBX: ffff880138633000 RCX: ffffffffa00b66d7 RDX: ffffffffa00aa920 RSI: ffffffffa00b66a1 RDI: 0000000000000001 RBP: ffff8801389f79b8 R08: 000000001027c000 R09: 00000000d1249000 R10: 0000000000000028 R11: 0000000000000010 R12: 00000000000000c0 R13: 0000000000001000 R14: 00000000d1249000 R15: 000000001027c000 FS:  00007fe28cd937c0(0000) GS:ffff88002803f000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000028 CR3: 000000012c577000 CR4: 00000000000006e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process Xorg (pid: 1616, threadinfo ffff8801389f6000, task ffff88012c78c680) Stack:  ffff880100001000 ffff880000000030 00007fe200000054 0000000000000004 <0> ffff880100000030 0000000000000028 ffff880100000010 0000021000000020 <0> ffff880136170e00 ffff880138633000 000000001027c000 ffff880116c58800 Call Trace:  [<ffffffffa0098226>] r600_copy_blit+0x3d/0x57 [radeon]  [<ffffffffa00795f9>] radeon_move_blit+0x101/0x13f [radeon]  [<ffffffffa007986f>] radeon_bo_move+0x238/0x25e [radeon]  [<ffffffffa004c248>] ttm_bo_handle_move_mem+0x1cc/0x2bb [ttm]  [<ffffffffa004dab6>] ttm_bo_move_buffer+0xb0/0xef [ttm]  [<ffffffffa0078a07>] ? radeon_fence_destroy+0x56/0x5e [radeon]  [<ffffffffa004db37>] ttm_buffer_object_validate+0x42/0xbf [ttm]  [<ffffffffa007a22c>] radeon_object_list_validate+0xaf/0x152 [radeon]  [<ffffffffa008692f>] radeon_cs_parser_relocs+0x19c/0x1fa [radeon]  [<ffffffffa0086cae>] ? radeon_cs_ioctl+0x0/0x19a [radeon]  [<ffffffffa0086d71>] radeon_cs_ioctl+0xc3/0x19a [radeon]  [<ffffffffa001521f>] drm_ioctl+0x237/0x2f4 [drm]  [<ffffffff81108dd1>] vfs_ioctl+0x6f/0x87  [<ffffffff811092e0>] do_vfs_ioctl+0x47b/0x4c1  [<ffffffff8110937c>] sys_ioctl+0x56/0x79  [<ffffffff81011cf2>] system_call_fastpath+0x16/0x1b Code: a0 48 c7 c2 20 a9 0a a0 48 c7 c6 a1 66 0b a0 bf 01 00 00 00 e8 f3 71 f7 ff 44 8b a3 c0 0e 00 00 48 8b 83 c8 0e 00 00 49 c1 e4 02 <4c> 03 60 28 41 f6 c5 03 0f 85 22 02 00 00 4c 89 f0 4c 09 f8 a8 RIP  [<ffffffffa00a19bc>] r600_kms_blit_copy+0x68/0x518 [radeon]  RSP <ffff8801389f7948> CR2: 0000000000000028

Please note that this driver has never been stable on my hardware, but it's pretty difficult to get a trace. I can do some testing, provided you send me a F12 x86_64 package, I'm short on time to compile X and such.

Don't use radeonhd for KMS. Use radeon (xf86-video-ati) instead. -- Rafał -- To unsubscribe, e-mail: radeonhd+unsubscribe@opensuse.org For additional commands, e-mail: radeonhd+help@opensuse.org