[Bug 24159] New: [KMS] radeon module oops with stex3d and rv280

[<bug...@fr...>]

http://bugs.freedesktop.org/show_bug.cgi?id=24159

           Summary: [KMS] radeon module oops with stex3d and rv280
           Product: DRI
           Version: XOrg CVS
          Platform: x86 (IA32)
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: DRM/Radeon
        AssignedTo: dri...@li...
        ReportedBy: ra...@ma...


Using kernel from
http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git;a=shortlog;h=drm-next

up to adea4796cfb9b74d340f9e32ba523fb61305d0b7 ( drm/r600: get values from the
passed in IB not the copy.)

i got this oops:

Sep 26 02:28:43 (none) kernel: BUG: unable to handle kernel NULL pointer
dereference at 00000014
Sep 26 02:28:43 (none) kernel: IP: [<d120c48a>] radeon_object_size+0x8/0x10
[radeon]
Sep 26 02:28:43 (none) kernel: *pde = 00000000
Sep 26 02:28:43 (none) kernel: Oops: 0000 [#1] SMP
Sep 26 02:28:43 (none) kernel: last sysfs file:
/sys/devices/platform/w83627hf.656/in8_input
Sep 26 02:28:43 (none) kernel: Modules linked in: radeon ttm drm_kms_helper drm
i2c_algo_bit cfbcopyarea cfbimgblt cfbfillrect
 sg sd_mod snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_pcm_oss
snd_mixer_oss nfsd lockd nfs_acl auth_rpcgss sunrp
c ipv6 usb_storage usblp scsi_mod usb_libusual tuner_simple tuner_types tda9887
tda8290 snd_emu10k1 snd_cs4236 snd_via82xx ppd
ev snd_mpu401 snd_ac97_codec snd_wavefront snd_wss_lib ac97_bus snd_pcm saa7134
snd_opl3_lib snd_util_mem snd_page_alloc snd_t
imer snd_mpu401_uart ir_common snd_hwdep snd_rawmidi snd_seq_device parport_pc
snd uhci_hcd videobuf_dma_sg ehci_hcd parport v
ideobuf_core floppy usbcore ns558 shpchp rtc_cmos tveeprom rtc_core emu10k1_gp
8139too soundcore rtc_lib gameport pci_hotplug
mii via_agp xfs exportfs ufs agpgart tuner v4l2_common videodev v4l1_compat
w83627hf hwmon_vid hwmon i2c_viapro i2c_dev i2c_co
re fbcon tileblit font bitblit softcursor fb
Sep 26 02:28:43 (none) kernel:
Sep 26 02:28:43 (none) kernel: Pid: 3982, comm: stex3d Not tainted
(2.6.31-rc9-i486 #12) MS-6380E
Sep 26 02:28:43 (none) kernel: EIP: 0060:[<d120c48a>] EFLAGS: 00210202 CPU: 0
Sep 26 02:28:43 (none) kernel: EIP is at radeon_object_size+0x8/0x10 [radeon]
Sep 26 02:28:43 (none) kernel: EAX: 00000000 EBX: c90720d0 ECX: c9072000 EDX:
cc17c000
Sep 26 02:28:43 (none) kernel: ESI: 00000004 EDI: c9072120 EBP: c915dd78 ESP:
c915dd78
Sep 26 02:28:43 (none) kernel:  DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Sep 26 02:28:43 (none) kernel: Process stex3d (pid: 3982, ti=c915d000
task=cf878000 task.ti=c915d000)
Sep 26 02:28:43 (none) kernel: Stack:
Sep 26 02:28:43 (none) kernel:  c915ddb0 d121a07d 00000040 00002d00 c9072000
cc17c000 00000000 00000000
Sep 26 02:28:43 (none) kernel: <0> c9136c00 00000000 00004000 00000000 c915de28
c9072000 c915de18 d121bebd
Sep 26 02:28:43 (none) kernel: <0> 00000003 00000000 00001000 00000004 00000004
00000003 000000f7 d16a0000
Sep 26 02:28:43 (none) kernel: Call Trace:
Sep 26 02:28:43 (none) kernel:  [<d121a07d>] ? r100_cs_track_check+0x422/0x4ed
[radeon]
Sep 26 02:28:43 (none) kernel:  [<d121bebd>] ? r100_cs_parse+0x41a/0x46a
[radeon]
Sep 26 02:28:43 (none) kernel:  [<d1217d32>] ? radeon_cs_ioctl+0xe1/0x15f
[radeon]
Sep 26 02:28:43 (none) kernel:  [<d1120716>] ? drm_ioctl+0x20b/0x28b [drm]
Sep 26 02:28:43 (none) kernel:  [<d1217c51>] ? radeon_cs_ioctl+0x0/0x15f
[radeon]
Sep 26 02:28:43 (none) kernel:  [<c1083e04>] ? filemap_fault+0x6e/0x2ed
Sep 26 02:28:43 (none) kernel:  [<c10a88f9>] ?
mem_cgroup_update_mapped_file_stat+0x60/0x6b
Sep 26 02:28:43 (none) kernel:  [<c108394b>] ? unlock_page+0x43/0x46
Sep 26 02:28:43 (none) kernel:  [<c1094efd>] ? __do_fault+0x33c/0x36c
Sep 26 02:28:43 (none) kernel:  [<c10b53a4>] ? vfs_ioctl+0x53/0x6c
Sep 26 02:28:43 (none) kernel:  [<c10b58d6>] ? do_vfs_ioctl+0x470/0x4aa
Sep 26 02:28:43 (none) kernel:  [<c1045fae>] ? hrtimer_interrupt+0x13b/0x14b
Sep 26 02:28:43 (none) kernel:  [<c10b5941>] ? sys_ioctl+0x31/0x4a
Sep 26 02:28:43 (none) kernel:  [<c1002b25>] ? syscall_call+0x7/0xb
Sep 26 02:28:43 (none) kernel: Code: 18 00 89 c1 74 0e 8b 02 89 48 04 89 01 89
51 04 89 0a eb 0d 8b 42 04 89 11 89 4a 04 89 08
 89 41 04 5d c3 55 89 e5 0f 1f 44 00 00 <8b> 40 14 5d c1 e0 0c c3 55 89 e5 57
56 53 0f 1f 44 00 00 8b 98
Sep 26 02:28:43 (none) kernel: EIP: [<d120c48a>] radeon_object_size+0x8/0x10
[radeon] SS:ESP 0068:c915dd78
Sep 26 02:28:43 (none) kernel: CR2: 0000000000000014
Sep 26 02:28:43 (none) kernel: ---[ end trace cc0588276d1b182e ]---


My hw is AGP rv280, mesa from git master up to commit
c19482b16f164ce1b6625d18950a4644e5834373 ( st/xorg: Re-enable accelerated fills
and copies.)


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.