Bug#650135: xserver crashes
On 2011-11-26 22:02 +0100, Thomas Koch wrote:
> Package: xserver-xorg-video-nouveau
>
> Version: 1:0.0.16+git20110411+8378443-1+b2
> Severity: normal
>
> I'm sorry that I can't give any more specific bug report. I was just
> reading a PDF with okular and from one moment to another xserver was
> gone, I saw tty1 with a kernel trace and the mouse pointer was still
> visible.
That's a kernel oops, not an xserver crash.
> [ 3094.261467] BUG: unable to handle kernel NULL pointer dereference at (null)
> [ 3094.261535] IP: [<ffffffffa0404c48>] nv50_vm_map_sg+0x1f/0x88 [nouveau]
> [ 3094.261596] PGD 0
> [ 3094.261618] Oops: 0000 [#1] SMP
> [ 3094.261655] CPU 0
> [ 3094.261676] Modules linked in: acpi_cpufreq mperf cpufreq_userspace cpufreq_conservative cpufreq_powersave cpufreq_stats parport_pc ppdev lp parport binfmt_misc uinput fuse nfsd nfs lockd fscache auth_rpcgss nfs_acl sunrpc ext2 loop firewire_sbp2 snd_hda_codec_analog snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm thinkpad_acpi arc4 snd_seq_midi snd_rawmidi ecb snd_seq_midi_event snd_seq snd_timer btusb bluetooth nouveau iwl4965 iwl_legacy ttm snd_seq_device drm_kms_helper mac80211 crc16 pcmcia joydev drm cfg80211 i2c_i801 i2c_algo_bit yenta_socket rfkill r852 sm_common i2c_core nand r592 nand_ids nand_ecc psmouse memstick mtd snd evdev pcmcia_rsrc snd_page_alloc tpm_tis soundcore serio_raw mxm_wmi pcmcia_core battery ac pcspkr power_supply tpm processor tpm_bios nvram button video wmi ext3 jbd mbcache sha256_generic cryptd aes_x86_64 aes_generic cbc usbhid hid dm_crypt dm_mod sg sd_mod sr_mod cdrom crc_t10dif ata_generic uhci_hcd ahci libahci thermal thermal_sys firewire_ohci sdhci_pci sdhci ata_piix mmc_core firewire_core crc_itu_t ehci_hcd libata scsi_mod usbcore e1000e [last unloaded: scsi_wait_scan]
> [ 3094.262784]
> [ 3094.262803] Pid: 2006, comm: Xorg Not tainted 3.1.0-1-amd64 #1 LENOVO 64608SG/64608SG
> [ 3094.262869] RIP: 0010:[<ffffffffa0404c48>] [<ffffffffa0404c48>] nv50_vm_map_sg+0x1f/0x88 [nouveau]
> [ 3094.262943] RSP: 0018:ffff8800b9235788 EFLAGS: 00010206
> [ 3094.262996] RAX: 0000000000001e45 RBX: ffff8800846e91c0 RCX: 0000000000000015
> [ 3094.263041] RDX: ffff8800846e91c0 RSI: ffff8800b9fbcf40 RDI: ffff8800af49caf8
> [ 3094.263086] RBP: ffff8800af49caf8 R08: 0000000000001e30 R09: 0000000000000000
> [ 3094.263131] R10: 0000000000020000 R11: 0000000000000000 R12: 00000000000000a8
> [ 3094.263184] R13: ffff8800b9fbcf40 R14: 0000000000000000 R15: 0000000000001e30
> [ 3094.263236] FS: 00007fdf1c432880(0000) GS:ffff8800bec00000(0000) knlGS:0000000000000000
> [ 3094.263285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 3094.263323] CR2: 0000000000000000 CR3: 00000000b9550000 CR4: 00000000000006f0
> [ 3094.263370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 3094.263418] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> [ 3094.263464] Process Xorg (pid: 2006, threadinfo ffff8800b9234000, task ffff8800373d3550)
> [ 3094.263515] Stack:
> [ 3094.263537] 0000000001e30000 ffff8800af49ca80 ffff8800b9fb72c0 0000000000000001
> [ 3094.263602] ffff8800af49caf8 000000000000f180 0000000000000000 ffffffffa03c913f
> [ 3094.263680] 0000000000000000 ffff880000020000 0000000000001e45 ffff8800846e91c0
> [ 3094.263745] Call Trace:
> [ 3094.263778] [<ffffffffa03c913f>] ? nouveau_vm_map_sg+0xbb/0xf2 [nouveau]
> [ 3094.263828] [<ffffffffa03b16db>] ? nouveau_vma_getmap.isra.4+0x62/0x6d [nouveau]
> [ 3094.263885] [<ffffffffa03b1da5>] ? nouveau_bo_move_m2mf.isra.7+0x89/0x63a [nouveau]
> [ 3094.263950] [<ffffffffa03d6ab9>] ? nv_mask+0x32/0x41 [nouveau]
> [ 3094.264000] [<ffffffffa03b2635>] ? nouveau_bo_move+0xf8/0x171 [nouveau]
> [ 3094.264065] [<ffffffffa0369542>] ? ttm_bo_handle_move_mem+0x1c2/0x2a1 [ttm]
> [ 3094.264123] [<ffffffffa036987d>] ? ttm_bo_evict+0x25c/0x2a3 [ttm]
> [ 3094.264185] [<ffffffffa03b00e3>] ? nouveau_notifier_init_channel+0xe0/0xfd [nouveau]
> [ 3094.264247] [<ffffffffa0369a1e>] ? ttm_mem_evict_first+0x15a/0x18a [ttm]
> [ 3094.264295] [<ffffffffa036a07e>] ? ttm_bo_mem_space+0x297/0x2ec [ttm]
> [ 3094.264345] [<ffffffffa03b1500>] ? nouveau_bo_init_mem_type+0x8b/0x10a [nouveau]
> [ 3094.264404] [<ffffffffa036a17a>] ? ttm_bo_move_buffer+0xa7/0xf3 [ttm]
> [ 3094.264459] [<ffffffffa03b00e3>] ? nouveau_notifier_init_channel+0xe0/0xfd [nouveau]
> [ 3094.264517] [<ffffffffa03b15e3>] ? nouveau_bo_create_ttm_backend_entry+0x64/0x64 [nouveau]
> [ 3094.264571] [<ffffffffa036a26a>] ? ttm_bo_validate+0xa4/0xe9 [ttm]
> [ 3094.264621] [<ffffffffa036a5a2>] ? ttm_bo_init+0x2f3/0x32f [ttm]
> [ 3094.264670] [<ffffffffa03b19de>] ? nouveau_bo_new+0x1e9/0x207 [nouveau]
> [ 3094.264724] [<ffffffffa03b15e3>] ? nouveau_bo_create_ttm_backend_entry+0x64/0x64 [nouveau]
> [ 3094.264791] [<ffffffffa03b3c6b>] ? nouveau_gem_new+0x4b/0xdc [nouveau]
> [ 3094.264844] [<ffffffffa03b3d9f>] ? nouveau_gem_ioctl_new+0xa3/0x109 [nouveau]
> [ 3094.264901] [<ffffffffa02ff5ec>] ? drm_ioctl+0x26a/0x33e [drm]
> [ 3094.264954] [<ffffffffa03b3cfc>] ? nouveau_gem_new+0xdc/0xdc [nouveau]
> [ 3094.264982] [<ffffffff81100e2c>] ? do_vfs_ioctl+0x452/0x493
> [ 3094.264982] [<ffffffff81100eb8>] ? sys_ioctl+0x4b/0x6f
> [ 3094.264982] [<ffffffff810f3f16>] ? sys_read+0x5f/0x6b
> [ 3094.264982] [<ffffffff813322d2>] ? system_call_fastpath+0x16/0x1b
> [ 3094.264982] Code: 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 41 56 41 55 49 89 f5 41 54 44 8d 24 cd 00 00 00 00 55 48 89 fd 53 48 89 d3 48 83 ec 10 eb 57
> [ 3094.264982] 8b 31 8b 93 d8 00 00 00 49 83 c1 08 b9 02 00 00 00 48 89 ef
> [ 3094.264982] RIP [<ffffffffa0404c48>] nv50_vm_map_sg+0x1f/0x88 [nouveau]
> [ 3094.264982] RSP <ffff8800b9235788>
> [ 3094.264982] CR2: 0000000000000000
> [ 3094.290566] ---[ end trace 30c582704037cdbd ]---
If you can reproduce this, please report it upstream, see
http://nouveau.freedesktop.org/wiki/Bugs for instructions. There is
also a Fedora bug report at
https://bugzilla.redhat.com/show_bug.cgi?id=699551 that seems to be
closely related.
Cheers,
Sven
Reply to: