Public bug reported:
Running Firefox Nightly on a Thinkpad T510 and experiencing lockups in
Wayland and in Xorg. SSHing into the machine works, but the mouse is
unresponsive on the device.
Here are some traces:
Dec 08 19:47:48 ThinkPad-T510 kernel: ------------[ cut here ]------------
Dec 08 19:47:48 ThinkPad-T510 kernel: refcount_t: underflow; use-after-free.
Dec 08 19:47:48 ThinkPad-T510 kernel: WARNING: CPU: 3 PID: 1755 at
lib/refcount.c:28 refcount_warn_saturate+0xae/0xf0
Dec 08 19:47:48 ThinkPad-T510 kernel: Modules linked in: nfnetlink rfcomm ccm
cmac algif_hash algif_skcipher af_alg bnep lz4 zram zfs(PO) zunicode(PO)
zavl(PO) icp(PO) zcommon(PO) znvpair(PO) spl(O) zlua>
Dec 08 19:47:48 ThinkPad-T510 kernel: drm_kms_helper glue_helper psmouse
libahci sdhci_pci i2c_i801 cqhci i2c_smbus lpc_ich firewire_core syscopyarea
crc_itu_t sdhci sysfillrect sysimgblt fb_sys_fops ce>
Dec 08 19:47:48 ThinkPad-T510 kernel: CPU: 3 PID: 1755 Comm: Xwayland Tainted:
P O 5.8.0-25-generic #26-Ubuntu
Dec 08 19:47:48 ThinkPad-T510 kernel: Hardware name: LENOVO 43147PU/43147PU,
BIOS 6MET92WW (1.52 ) 09/26/2012
Dec 08 19:47:48 ThinkPad-T510 kernel: RIP: 0010:refcount_warn_saturate+0xae/0xf0
Dec 08 19:47:48 ThinkPad-T510 kernel: Code: d9 e0 69 01 01 e8 37 8d b1 ff 0f 0b
5d c3 80 3d c6 e0 69 01 00 75 91 48 c7 c7 48 af 1f b6 c6 05 b6 e0 69 01 01 e8
17 8d b1 ff <0f> 0b 5d c3 80 3d a4 e0 69 01 0>
Dec 08 19:47:48 ThinkPad-T510 kernel: RSP: 0018:ffffa533874f3cc8 EFLAGS:
00010282
Dec 08 19:47:48 ThinkPad-T510 kernel: RAX: 0000000000000000 RBX:
0000000000000002 RCX: ffff8afff3d98cd8
Dec 08 19:47:48 ThinkPad-T510 kernel: RDX: 00000000ffffffd8 RSI:
0000000000000027 RDI: ffff8afff3d98cd0
Dec 08 19:47:48 ThinkPad-T510 kernel: RBP: ffffa533874f3cc8 R08:
0000000000000004 R09: 000000000000046d
Dec 08 19:47:48 ThinkPad-T510 kernel: R10: 0000000000000000 R11:
0000000000000001 R12: 0000000000000004
Dec 08 19:47:48 ThinkPad-T510 kernel: R13: ffff8afee6895800 R14:
ffff8affe1684800 R15: ffff8affe1992000
Dec 08 19:47:48 ThinkPad-T510 kernel: FS: 00007fc1b91f6a40(0000)
GS:ffff8afff3d80000(0000) knlGS:0000000000000000
Dec 08 19:47:48 ThinkPad-T510 kernel: CS: 0010 DS: 0000 ES: 0000 CR0:
0000000080050033
Dec 08 19:47:48 ThinkPad-T510 kernel: CR2: 00007ffa033700c0 CR3:
00000001d46b2006 CR4: 00000000000206e0
Dec 08 19:47:48 ThinkPad-T510 kernel: Call Trace:
Dec 08 19:47:48 ThinkPad-T510 kernel: ttm_bo_put+0x3f/0x50 [ttm]
Dec 08 19:47:48 ThinkPad-T510 kernel: nouveau_gem_new+0x8a/0x120 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: nouveau_gem_ioctl_new+0x5b/0xd0 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: drm_ioctl_kernel+0xae/0xf0 [drm]
Dec 08 19:47:48 ThinkPad-T510 kernel: drm_ioctl+0x238/0x3d0 [drm]
Dec 08 19:47:48 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: ? hrtimer_start_range_ns+0x84/0xd0
Dec 08 19:47:48 ThinkPad-T510 kernel: nouveau_drm_ioctl+0x66/0xc0 [nouveau]
Dec 08 19:47:48 ThinkPad-T510 kernel: ksys_ioctl+0x8e/0xc0
Dec 08 19:47:48 ThinkPad-T510 kernel: __x64_sys_ioctl+0x1a/0x20
Dec 08 19:47:48 ThinkPad-T510 kernel: do_syscall_64+0x49/0xc0
Dec 08 19:47:48 ThinkPad-T510 kernel: entry_SYSCALL_64_after_hwframe+0x44/0xa9
Dec 08 19:47:48 ThinkPad-T510 kernel: RIP: 0033:0x7fc1b990313b
Dec 08 19:47:48 ThinkPad-T510 kernel: Code: 89 d8 49 8d 3c 1c 48 f7 d8 49 39 c4
72 b5 e8 1c ff ff ff 85 c0 78 ba 4c 89 e0 5b 5d 41 5c c3 f3 0f 1e fa b8 10 00
00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8>
Dec 08 19:47:48 ThinkPad-T510 kernel: RSP: 002b:00007fff362bd6e8 EFLAGS:
00000246 ORIG_RAX: 0000000000000010
Dec 08 19:47:48 ThinkPad-T510 kernel: RAX: ffffffffffffffda RBX:
00007fff362bd740 RCX: 00007fc1b990313b
Dec 08 19:47:48 ThinkPad-T510 kernel: RDX: 00007fff362bd740 RSI:
00000000c0306480 RDI: 000000000000000e
Dec 08 19:47:48 ThinkPad-T510 kernel: RBP: 00000000c0306480 R08:
0000000000000000 R09: 0000564a23c97760
Dec 08 19:47:48 ThinkPad-T510 kernel: R10: 0000564a23ce4630 R11:
0000000000000246 R12: 00007fff362bd740
Dec 08 19:47:48 ThinkPad-T510 kernel: R13: 000000000000000e R14:
0000564a23383860 R15: 0000000000001000
Dec 08 19:47:48 ThinkPad-T510 kernel: ---[ end trace 52a24d448f20dca6 ]---
Dec 08 19:57:17 ThinkPad-T510 kernel: ------------[ cut here ]------------
Dec 08 19:57:17 ThinkPad-T510 kernel: refcount_t: underflow; use-after-free.
Dec 08 19:57:17 ThinkPad-T510 kernel: WARNING: CPU: 1 PID: 1669 at
lib/refcount.c:28 refcount_warn_saturate+0xae/0xf0
Dec 08 19:57:17 ThinkPad-T510 kernel: Modules linked in: rfcomm ccm cmac
algif_hash algif_skcipher af_alg bnep lz4 zram zfs(PO) zunicode(PO) zavl(PO)
icp(PO) zcommon(PO) znvpair(PO) spl(O) zlua(PO) intel>
Dec 08 19:57:17 ThinkPad-T510 kernel: cec rc_core aesni_intel crypto_simd
cryptd ahci glue_helper psmouse drm libahci sdhci_pci i2c_i801 i2c_smbus
lpc_ich cqhci firewire_ohci e1000e firewire_core sdhci >
Dec 08 19:57:17 ThinkPad-T510 kernel: CPU: 1 PID: 1669 Comm: Xorg Tainted: P
O 5.8.0-25-generic #26-Ubuntu
Dec 08 19:57:17 ThinkPad-T510 kernel: Hardware name: LENOVO 43147PU/43147PU,
BIOS 6MET92WW (1.52 ) 09/26/2012
Dec 08 19:57:17 ThinkPad-T510 kernel: RIP: 0010:refcount_warn_saturate+0xae/0xf0
Dec 08 19:57:17 ThinkPad-T510 kernel: Code: d9 e0 69 01 01 e8 37 8d b1 ff 0f 0b
5d c3 80 3d c6 e0 69 01 00 75 91 48 c7 c7 48 af 3f 84 c6 05 b6 e0 69 01 01 e8
17 8d b1 ff <0f> 0b 5d c3 80 3d a4 e0 69 01 0>
Dec 08 19:57:17 ThinkPad-T510 kernel: RSP: 0018:ffffa7b9074fbcc8 EFLAGS:
00010282
Dec 08 19:57:17 ThinkPad-T510 kernel: RAX: 0000000000000000 RBX:
0000000000000002 RCX: ffff983073c98cd8
Dec 08 19:57:17 ThinkPad-T510 kernel: RDX: 00000000ffffffd8 RSI:
0000000000000027 RDI: ffff983073c98cd0
Dec 08 19:57:17 ThinkPad-T510 kernel: RBP: ffffa7b9074fbcc8 R08:
0000000000000004 R09: 0000000000000467
Dec 08 19:57:17 ThinkPad-T510 kernel: R10: 0000000000000000 R11:
0000000000000001 R12: 0000000000000004
Dec 08 19:57:17 ThinkPad-T510 kernel: R13: ffff982f5e99b000 R14:
ffff9830617d1000 R15: ffff983072e00000
Dec 08 19:57:17 ThinkPad-T510 kernel: FS: 00007ff0540f0a40(0000)
GS:ffff983073c80000(0000) knlGS:0000000000000000
Dec 08 19:57:17 ThinkPad-T510 kernel: CS: 0010 DS: 0000 ES: 0000 CR0:
0000000080050033
Dec 08 19:57:17 ThinkPad-T510 kernel: CR2: 00007fafcaeec3d8 CR3:
00000001d96c6004 CR4: 00000000000206e0
Dec 08 19:57:17 ThinkPad-T510 kernel: Call Trace:
Dec 08 19:57:17 ThinkPad-T510 kernel: ttm_bo_put+0x3f/0x50 [ttm]
Dec 08 19:57:17 ThinkPad-T510 kernel: nouveau_gem_new+0x8a/0x120 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: nouveau_gem_ioctl_new+0x5b/0xd0 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: drm_ioctl_kernel+0xae/0xf0 [drm]
Dec 08 19:57:17 ThinkPad-T510 kernel: drm_ioctl+0x238/0x3d0 [drm]
Dec 08 19:57:17 ThinkPad-T510 kernel: ? nouveau_gem_new+0x120/0x120 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: ? __fput+0x16d/0x250
Dec 08 19:57:17 ThinkPad-T510 kernel: nouveau_drm_ioctl+0x66/0xc0 [nouveau]
Dec 08 19:57:17 ThinkPad-T510 kernel: ksys_ioctl+0x8e/0xc0
Dec 08 19:57:17 ThinkPad-T510 kernel: __x64_sys_ioctl+0x1a/0x20
Dec 08 19:57:17 ThinkPad-T510 kernel: do_syscall_64+0x49/0xc0
Dec 08 19:57:17 ThinkPad-T510 kernel: entry_SYSCALL_64_after_hwframe+0x44/0xa9
Dec 08 19:57:17 ThinkPad-T510 kernel: RIP: 0033:0x7ff05455613b
Dec 08 19:57:17 ThinkPad-T510 kernel: Code: 89 d8 49 8d 3c 1c 48 f7 d8 49 39 c4
72 b5 e8 1c ff ff ff 85 c0 78 ba 4c 89 e0 5b 5d 41 5c c3 f3 0f 1e fa b8 10 00
00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8>
Dec 08 19:57:17 ThinkPad-T510 kernel: RSP: 002b:00007ffed41fcd48 EFLAGS:
00000246 ORIG_RAX: 0000000000000010
Dec 08 19:57:17 ThinkPad-T510 kernel: RAX: ffffffffffffffda RBX:
00007ffed41fcda0 RCX: 00007ff05455613b
Dec 08 19:57:17 ThinkPad-T510 kernel: RDX: 00007ffed41fcda0 RSI:
00000000c0306480 RDI: 0000000000000010
Dec 08 19:57:17 ThinkPad-T510 kernel: RBP: 00000000c0306480 R08:
0000000000000000 R09: 000056536fcef720
Dec 08 19:57:17 ThinkPad-T510 kernel: R10: 0000000000000007 R11:
0000000000000246 R12: 00007ffed41fcda0
Dec 08 19:57:17 ThinkPad-T510 kernel: R13: 0000000000000010 R14:
000056536eee6d20 R15: 0000000000001000
Dec 08 19:57:17 ThinkPad-T510 kernel: ---[ end trace 948e5fa1b6518eb7 ]---
[ 601.930714] ------------[ cut here ]------------
[ 601.930719] Trying to vfree() bad address (000000002507bf51)
[ 601.930738] WARNING: CPU: 2 PID: 2881 at mm/vmalloc.c:2281
__vunmap+0x263/0x280
[ 601.930739] Modules linked in: rfcomm ccm cmac algif_hash algif_skcipher
af_alg bnep lz4 zram zfs(PO) zunicode(PO) zavl(PO) icp(PO) zcommon(PO)
znvpair(PO) spl(O) zlua(PO) intel_powerclamp coretemp kvm_intel kvm uvcvideo
joydev input_leds intel_cstate serio_raw iwlmvm snd_hda_codec_conexant
snd_hda_codec_hdmi snd_hda_codec_generic at24 videobuf2_vmalloc mac80211
wmi_bmof videobuf2_memops intel_ips videobuf2_v4l2 videobuf2_common libarc4
snd_hda_intel videodev snd_intel_dspcfg thinkpad_acpi snd_hda_codec mc iwlwifi
snd_seq_midi nvram ledtrig_audio snd_seq_midi_event btusb btrtl btbcm
snd_hda_core btintel snd_rawmidi bluetooth cfg80211 snd_hwdep ecdh_generic ecc
snd_pcm snd_seq snd_seq_device snd_timer mei_me mei snd soundcore mac_hid
sch_fq_codel msr parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs
blake2b_generic xor raid6_pq libcrc32c nouveau mxm_wmi i2c_algo_bit ttm
drm_kms_helper crct10dif_pclmul crc32_pclmul syscopyarea sysfillrect
ghash_clmulni_intel sysimgblt fb_sys_fops
[ 601.930801] cec rc_core aesni_intel crypto_simd cryptd ahci glue_helper
psmouse drm libahci sdhci_pci i2c_i801 i2c_smbus lpc_ich cqhci firewire_ohci
e1000e firewire_core sdhci crc_itu_t wmi video
[ 601.930818] CPU: 2 PID: 2881 Comm: threaded-ml Tainted: P W O
5.8.0-25-generic #26-Ubuntu
[ 601.930820] Hardware name: LENOVO 43147PU/43147PU, BIOS 6MET92WW (1.52 )
09/26/2012
[ 601.930823] RIP: 0010:__vunmap+0x263/0x280
[ 601.930827] Code: 01 00 74 a8 e8 1e ca 91 00 31 d2 31 f6 48 c7 c7 ff ff ff
ff e8 ee cf ff ff eb 91 48 89 fe 48 c7 c7 98 a7 3c 84 e8 82 c5 df ff <0f> 0b eb
86 4c 89 ee 48 c7 c7 c0 a7 3c 84 e8 6f c5 df ff 0f 0b e9
[ 601.930829] RSP: 0018:ffffa7b907f838f8 EFLAGS: 00010282
[ 601.930831] RAX: 0000000000000000 RBX: ffff98301ad82900 RCX: ffff983073d18cd8
[ 601.930832] RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff983073d18cd0
[ 601.930833] RBP: ffffa7b907f83920 R08: 0000000000000004 R09: 0000000000000494
[ 601.930835] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000240
[ 601.930836] R13: ffff9830611ec240 R14: 0000008c266d75c5 R15: ffffa7b907f83a48
[ 601.930839] FS: 00007f24237fe640(0000) GS:ffff983073d00000(0000)
knlGS:0000000000000000
[ 601.930840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 601.930842] CR2: 00007fdb9eba46c0 CR3: 00000002266a0003 CR4: 00000000000206e0
[ 601.930843] Call Trace:
[ 601.930851] vunmap+0x30/0x40
[ 601.930942] nvkm_umem_unmap+0x51/0x70 [nouveau]
[ 601.930991] nvkm_object_dtor+0x9f/0x110 [nouveau]
[ 601.931045] nvkm_object_del+0x25/0x90 [nouveau]
[ 601.931102] nvkm_ioctl_del+0x3c/0x60 [nouveau]
[ 601.931158] nvkm_ioctl+0xf0/0x190 [nouveau]
[ 601.931250] nvkm_client_ioctl+0x12/0x20 [nouveau]
[ 601.931303] nvif_object_ioctl+0x4e/0x60 [nouveau]
[ 601.931357] nvif_object_fini+0x5a/0x80 [nouveau]
[ 601.931412] nvif_mem_fini+0xe/0x10 [nouveau]
[ 601.931502] nouveau_mem_fini+0x57/0x70 [nouveau]
[ 601.931593] nouveau_mem_del+0x15/0x30 [nouveau]
[ 601.931684] nouveau_manager_del+0x11/0x20 [nouveau]
[ 601.931693] ttm_bo_cleanup_memtype_use+0x79/0x80 [ttm]
[ 601.931700] ttm_bo_release+0x198/0x380 [ttm]
[ 601.931709] ttm_bo_put+0x30/0x50 [ttm]
[ 601.931799] nouveau_gem_object_del+0x58/0x90 [nouveau]
[ 601.931839] drm_gem_object_free+0x41/0x70 [drm]
[ 601.931864] drm_gem_object_put_unlocked+0x76/0x80 [drm]
[ 601.931888] drm_gem_object_handle_put_unlocked+0x7e/0xb0 [drm]
[ 601.931912] drm_gem_object_release_handle+0x76/0xa0 [drm]
[ 601.931936] ? drm_gem_object_handle_put_unlocked+0xb0/0xb0 [drm]
[ 601.931940] idr_for_each+0x60/0xd0
[ 601.931965] drm_gem_release+0x21/0x30 [drm]
[ 601.931988] drm_file_free.part.0+0x15f/0x170 [drm]
[ 601.932011] drm_close_helper.isra.0+0x65/0x70 [drm]
[ 601.932034] drm_release+0x6a/0x110 [drm]
[ 601.932038] __fput+0xe9/0x250
[ 601.932041] ____fput+0xe/0x10
[ 601.932045] task_work_run+0x6d/0xa0
[ 601.932048] do_exit+0x200/0x440
[ 601.932051] do_group_exit+0x3b/0xb0
[ 601.932055] get_signal+0x174/0x630
[ 601.932060] do_signal+0x2f/0x1d0
[ 601.932066] exit_to_usermode_loop+0x8e/0x120
[ 601.932069] __prepare_exit_to_usermode+0xa2/0xe0
[ 601.932073] __syscall_return_slowpath+0x31/0x160
[ 601.932078] do_syscall_64+0x56/0xc0
[ 601.932081] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 601.932084] RIP: 0033:0x7f24a4c3e48f
[ 601.932086] Code: Bad RIP value.
[ 601.932087] RSP: 002b:00007f24237fd560 EFLAGS: 00000293 ORIG_RAX:
0000000000000007
[ 601.932090] RAX: fffffffffffffdfc RBX: 00007f2438026f70 RCX: 00007f24a4c3e48f
[ 601.932092] RDX: 00000000ffffffff RSI: 0000000000000003 RDI: 00007f24180114f0
[ 601.932094] RBP: 00007f24380078b0 R08: 0000000000000000 R09: 00000000ffffffff
[ 601.932095] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f24180114f0
[ 601.932097] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007f24237fe640
[ 601.932101] ---[ end trace 948e5fa1b6518eb8 ]---
[ 601.937872] ------------[ cut here ]------------
[ 601.937877] Trying to vfree() bad address (000000009b2137f3)
[ 601.937898] WARNING: CPU: 3 PID: 2881 at mm/vmalloc.c:2281
__vunmap+0x263/0x280
[ 601.937900] Modules linked in: rfcomm ccm cmac algif_hash algif_skcipher
af_alg bnep lz4 zram zfs(PO) zunicode(PO) zavl(PO) icp(PO) zcommon(PO)
znvpair(PO) spl(O) zlua(PO) intel_powerclamp coretemp kvm_intel kvm uvcvideo
joydev input_leds intel_cstate serio_raw iwlmvm snd_hda_codec_conexant
snd_hda_codec_hdmi snd_hda_codec_generic at24 videobuf2_vmalloc mac80211
wmi_bmof videobuf2_memops intel_ips videobuf2_v4l2 videobuf2_common libarc4
snd_hda_intel videodev snd_intel_dspcfg thinkpad_acpi snd_hda_codec mc iwlwifi
snd_seq_midi nvram ledtrig_audio snd_seq_midi_event btusb btrtl btbcm
snd_hda_core btintel snd_rawmidi bluetooth cfg80211 snd_hwdep ecdh_generic ecc
snd_pcm snd_seq snd_seq_device snd_timer mei_me mei snd soundcore mac_hid
sch_fq_codel msr parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs
blake2b_generic xor raid6_pq libcrc32c nouveau mxm_wmi i2c_algo_bit ttm
drm_kms_helper crct10dif_pclmul crc32_pclmul syscopyarea sysfillrect
ghash_clmulni_intel sysimgblt fb_sys_fops
[ 601.937983] cec rc_core aesni_intel crypto_simd cryptd ahci glue_helper
psmouse drm libahci sdhci_pci i2c_i801 i2c_smbus lpc_ich cqhci firewire_ohci
e1000e firewire_core sdhci crc_itu_t wmi video
[ 601.938010] CPU: 3 PID: 2881 Comm: threaded-ml Tainted: P W O
5.8.0-25-generic #26-Ubuntu
[ 601.938012] Hardware name: LENOVO 43147PU/43147PU, BIOS 6MET92WW (1.52 )
09/26/2012
[ 601.938018] RIP: 0010:__vunmap+0x263/0x280
[ 601.938022] Code: 01 00 74 a8 e8 1e ca 91 00 31 d2 31 f6 48 c7 c7 ff ff ff
ff e8 ee cf ff ff eb 91 48 89 fe 48 c7 c7 98 a7 3c 84 e8 82 c5 df ff <0f> 0b eb
86 4c 89 ee 48 c7 c7 c0 a7 3c 84 e8 6f c5 df ff 0f 0b e9
[ 601.938025] RSP: 0018:ffffa7b907f838f8 EFLAGS: 00010282
[ 601.938028] RAX: 0000000000000000 RBX: ffff98301adc1600 RCX: ffff983073d98cd8
[ 601.938031] RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff983073d98cd0
[ 601.938033] RBP: ffffa7b907f83920 R08: 0000000000000004 R09: 00000000000004d7
[ 601.938035] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000120
[ 601.938040] R13: ffff9830721ca120 R14: 0000008c26dab5f9 R15: ffffa7b907f83a48
[ 601.938044] FS: 00007f24237fe640(0000) GS:ffff983073d80000(0000)
knlGS:0000000000000000
[ 601.938046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 601.938049] CR2: 0000333866fb1000 CR3: 000000022a948002 CR4: 00000000000206e0
[ 601.938051] Call Trace:
[ 601.938059] vunmap+0x30/0x40
[ 601.938182] nvkm_umem_unmap+0x51/0x70 [nouveau]
[ 601.938259] nvkm_object_dtor+0x9f/0x110 [nouveau]
[ 601.938347] nvkm_object_del+0x25/0x90 [nouveau]
[ 601.938423] nvkm_ioctl_del+0x3c/0x60 [nouveau]
[ 601.938497] nvkm_ioctl+0xf0/0x190 [nouveau]
[ 601.938623] nvkm_client_ioctl+0x12/0x20 [nouveau]
[ 601.938694] nvif_object_ioctl+0x4e/0x60 [nouveau]
[ 601.938777] nvif_object_fini+0x5a/0x80 [nouveau]
[ 601.938850] nvif_mem_fini+0xe/0x10 [nouveau]
[ 601.938967] nouveau_mem_fini+0x57/0x70 [nouveau]
[ 601.939091] nouveau_mem_del+0x15/0x30 [nouveau]
[ 601.939215] nouveau_manager_del+0x11/0x20 [nouveau]
[ 601.939231] ttm_bo_cleanup_memtype_use+0x79/0x80 [ttm]
[ 601.939242] ttm_bo_release+0x198/0x380 [ttm]
[ 601.939254] ttm_bo_put+0x30/0x50 [ttm]
[ 601.939375] nouveau_gem_object_del+0x58/0x90 [nouveau]
[ 601.939415] drm_gem_object_free+0x41/0x70 [drm]
[ 601.939453] drm_gem_object_put_unlocked+0x76/0x80 [drm]
[ 601.939491] drm_gem_object_handle_put_unlocked+0x7e/0xb0 [drm]
[ 601.939531] drm_gem_object_release_handle+0x76/0xa0 [drm]
[ 601.939563] ? drm_gem_object_handle_put_unlocked+0xb0/0xb0 [drm]
[ 601.939569] idr_for_each+0x60/0xd0
[ 601.939603] drm_gem_release+0x21/0x30 [drm]
[ 601.939639] drm_file_free.part.0+0x15f/0x170 [drm]
[ 601.939677] drm_close_helper.isra.0+0x65/0x70 [drm]
[ 601.939718] drm_release+0x6a/0x110 [drm]
[ 601.939724] __fput+0xe9/0x250
[ 601.939730] ____fput+0xe/0x10
[ 601.939734] task_work_run+0x6d/0xa0
[ 601.939739] do_exit+0x200/0x440
[ 601.939743] do_group_exit+0x3b/0xb0
[ 601.939749] get_signal+0x174/0x630
[ 601.939755] do_signal+0x2f/0x1d0
[ 601.939762] exit_to_usermode_loop+0x8e/0x120
[ 601.939767] __prepare_exit_to_usermode+0xa2/0xe0
[ 601.939772] __syscall_return_slowpath+0x31/0x160
[ 601.939779] do_syscall_64+0x56/0xc0
[ 601.939784] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 601.939788] RIP: 0033:0x7f24a4c3e48f
[ 601.939790] Code: Bad RIP value.
[ 601.939792] RSP: 002b:00007f24237fd560 EFLAGS: 00000293 ORIG_RAX:
0000000000000007
[ 601.939797] RAX: fffffffffffffdfc RBX: 00007f2438026f70 RCX: 00007f24a4c3e48f
[ 601.939799] RDX: 00000000ffffffff RSI: 0000000000000003 RDI: 00007f24180114f0
[ 601.939802] RBP: 00007f24380078b0 R08: 0000000000000000 R09: 00000000ffffffff
[ 601.939805] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f24180114f0
[ 601.939807] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007f24237fe640
[ 601.939813] ---[ end trace 948e5fa1b6518eb9 ]---
[ 617.475475] ------------[ cut here ]------------
[ 617.475480] Trying to vfree() bad address (00000000e0abe6c0)
[ 617.475500] WARNING: CPU: 1 PID: 2496 at mm/vmalloc.c:2281
__vunmap+0x263/0x280
[ 617.475501] Modules linked in: rfcomm ccm cmac algif_hash algif_skcipher
af_alg bnep lz4 zram zfs(PO) zunicode(PO) zavl(PO) icp(PO) zcommon(PO)
znvpair(PO) spl(O) zlua(PO) intel_powerclamp coretemp kvm_intel kvm uvcvideo
joydev input_leds intel_cstate serio_raw iwlmvm snd_hda_codec_conexant
snd_hda_codec_hdmi snd_hda_codec_generic at24 videobuf2_vmalloc mac80211
wmi_bmof videobuf2_memops intel_ips videobuf2_v4l2 videobuf2_common libarc4
snd_hda_intel videodev snd_intel_dspcfg thinkpad_acpi snd_hda_codec mc iwlwifi
snd_seq_midi nvram ledtrig_audio snd_seq_midi_event btusb btrtl btbcm
snd_hda_core btintel snd_rawmidi bluetooth cfg80211 snd_hwdep ecdh_generic ecc
snd_pcm snd_seq snd_seq_device snd_timer mei_me mei snd soundcore mac_hid
sch_fq_codel msr parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs
blake2b_generic xor raid6_pq libcrc32c nouveau mxm_wmi i2c_algo_bit ttm
drm_kms_helper crct10dif_pclmul crc32_pclmul syscopyarea sysfillrect
ghash_clmulni_intel sysimgblt fb_sys_fops
[ 617.475558] cec rc_core aesni_intel crypto_simd cryptd ahci glue_helper
psmouse drm libahci sdhci_pci i2c_i801 i2c_smbus lpc_ich cqhci firewire_ohci
e1000e firewire_core sdhci crc_itu_t wmi video
[ 617.475575] CPU: 1 PID: 2496 Comm: WRWorker#1 Tainted: P W O
5.8.0-25-generic #26-Ubuntu
[ 617.475577] Hardware name: LENOVO 43147PU/43147PU, BIOS 6MET92WW (1.52 )
09/26/2012
[ 617.475580] RIP: 0010:__vunmap+0x263/0x280
[ 617.475583] Code: 01 00 74 a8 e8 1e ca 91 00 31 d2 31 f6 48 c7 c7 ff ff ff
ff e8 ee cf ff ff eb 91 48 89 fe 48 c7 c7 98 a7 3c 84 e8 82 c5 df ff <0f> 0b eb
86 4c 89 ee 48 c7 c7 c0 a7 3c 84 e8 6f c5 df ff 0f 0b e9
[ 617.475585] RSP: 0018:ffffa7b906e178f8 EFLAGS: 00010282
[ 617.475586] RAX: 0000000000000000 RBX: ffff98301adc1a80 RCX: ffff983073c98cd8
[ 617.475588] RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff983073c98cd0
[ 617.475589] RBP: ffffa7b906e17920 R08: 0000000000000004 R09: 000000000000051a
[ 617.475590] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000008a0
[ 617.475591] R13: ffff9830646288a0 R14: 0000008fc4fa8171 R15: ffffa7b906e17a48
[ 617.475594] FS: 00007fdbc8ffe640(0000) GS:ffff983073c80000(0000)
knlGS:0000000000000000
[ 617.475595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 617.475596] CR2: 00007fdb95ffe910 CR3: 000000015d80a006 CR4: 00000000000206e0
[ 617.475598] Call Trace:
[ 617.475604] vunmap+0x30/0x40
[ 617.475702] nvkm_umem_unmap+0x51/0x70 [nouveau]
[ 617.475749] nvkm_object_dtor+0x9f/0x110 [nouveau]
[ 617.475795] nvkm_object_del+0x25/0x90 [nouveau]
[ 617.475839] nvkm_ioctl_del+0x3c/0x60 [nouveau]
[ 617.475885] nvkm_ioctl+0xf0/0x190 [nouveau]
[ 617.475948] nvkm_client_ioctl+0x12/0x20 [nouveau]
[ 617.475992] nvif_object_ioctl+0x4e/0x60 [nouveau]
[ 617.476036] nvif_object_fini+0x5a/0x80 [nouveau]
[ 617.476079] nvif_mem_fini+0xe/0x10 [nouveau]
[ 617.476142] nouveau_mem_fini+0x57/0x70 [nouveau]
[ 617.476206] nouveau_mem_del+0x15/0x30 [nouveau]
[ 617.476271] nouveau_manager_del+0x11/0x20 [nouveau]
[ 617.476282] ttm_bo_cleanup_memtype_use+0x79/0x80 [ttm]
[ 617.476288] ttm_bo_release+0x198/0x380 [ttm]
[ 617.476294] ttm_bo_put+0x30/0x50 [ttm]
[ 617.476354] nouveau_gem_object_del+0x58/0x90 [nouveau]
[ 617.476398] drm_gem_object_free+0x41/0x70 [drm]
[ 617.476418] drm_gem_object_put_unlocked+0x76/0x80 [drm]
[ 617.476437] drm_gem_object_handle_put_unlocked+0x7e/0xb0 [drm]
[ 617.476456] drm_gem_object_release_handle+0x76/0xa0 [drm]
[ 617.476475] ? drm_gem_object_handle_put_unlocked+0xb0/0xb0 [drm]
[ 617.476479] idr_for_each+0x60/0xd0
[ 617.476499] drm_gem_release+0x21/0x30 [drm]
[ 617.476517] drm_file_free.part.0+0x15f/0x170 [drm]
[ 617.476536] drm_close_helper.isra.0+0x65/0x70 [drm]
[ 617.476555] drm_release+0x6a/0x110 [drm]
[ 617.476558] __fput+0xe9/0x250
[ 617.476561] ____fput+0xe/0x10
[ 617.476564] task_work_run+0x6d/0xa0
[ 617.476567] do_exit+0x200/0x440
[ 617.476569] do_group_exit+0x3b/0xb0
[ 617.476572] get_signal+0x174/0x630
[ 617.476576] ? record_times+0x1b/0x90
[ 617.476579] do_signal+0x2f/0x1d0
[ 617.476584] exit_to_usermode_loop+0x8e/0x120
[ 617.476587] __prepare_exit_to_usermode+0xa2/0xe0
[ 617.476589] __syscall_return_slowpath+0x31/0x160
[ 617.476593] do_syscall_64+0x56/0xc0
[ 617.476596] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 617.476599] RIP: 0033:0x7fdbe64f9c06
[ 617.476600] Code: Bad RIP value.
[ 617.476601] RSP: 002b:00007fdbc8ffd930 EFLAGS: 00000282 ORIG_RAX:
00000000000000ca
[ 617.476604] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007fdbe64f9c06
[ 617.476605] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdbd27f5cf8
[ 617.476606] RBP: 00007fdbd27f5cd0 R08: 0000000000000000 R09: 0000000000000000
[ 617.476607] R10: 0000000000000000 R11: 0000000000000282 R12: 00007fdbd27f5cf4
[ 617.476608] R13: 00007fdbd27f5c40 R14: 00007fdbc8ffd970 R15: 00007fdbd27f5cf8
[ 617.476612] ---[ end trace 948e5fa1b6518eba ]---
ProblemType: Bug
DistroRelease: Ubuntu 21.04
Package: linux-image-5.8.0-25-generic 5.8.0-25.26
ProcVersionSignature: Ubuntu 5.8.0-25.26-generic 5.8.14
Uname: Linux 5.8.0-25-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu55
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/controlC0: asif 1592 F.... pulseaudio
/dev/snd/controlC1: asif 1592 F.... pulseaudio
CasperMD5CheckResult: skip
CurrentDesktop: GNOME
Date: Tue Dec 8 19:54:01 2020
MachineType: LENOVO 43147PU
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcFB: 0 nouveaudrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-5.8.0-25-generic
root=UUID=a8bef705-98f8-4001-9e40-ca6bcb93583c ro rootflags=subvol=@ quiet
splash vt.handoff=7
RelatedPackageVersions:
linux-restricted-modules-5.8.0-25-generic N/A
linux-backports-modules-5.8.0-25-generic N/A
linux-firmware 1.192
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 09/26/2012
dmi.bios.release: 1.82
dmi.bios.vendor: LENOVO
dmi.bios.version: 6MET92WW (1.52 )
dmi.board.name: 43147PU
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.ec.firmware.release: 1.33
dmi.modalias:
dmi:bvnLENOVO:bvr6MET92WW(1.52):bd09/26/2012:br1.82:efr1.33:svnLENOVO:pn43147PU:pvrThinkPadT510:rvnLENOVO:rn43147PU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.family: ThinkPad T510
dmi.product.name: 43147PU
dmi.product.version: ThinkPad T510
dmi.sys.vendor: LENOVO
** Affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug hirsute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1907318
Title:
GNOME lockups in nouveau
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1907318/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
