Bug#817874: linux-image-3.16.0-4-amd64: 3.16.7-ckt25-1 freeze with radeon driver

[Steve VanDevender]

Package: src:linux
Version: 3.16.7-ckt25-1
Followup-For: Bug #817874

I'm also seeing freezes with a system using the radeon driver.  Here's
the first logged kernel oops (the subsequent oopses basically look the
same):

Apr  1 14:43:01 hexadecimal kernel: [90926.018227] *pdpt = 07ac4001 
*pde =  
Apr  1 14:43:01 hexadecimal kernel: [90926.018260] Oops: 0002 [#1] SMP 
Apr  1 14:43:01 hexadecimal kernel: [90926.018282] Modules linked in: nls_utf8 
nls_cp437 vfat fat usb_storage cpufreq_powersave cpufreq_userspace 
cpufreq_stats cpufreq_conservative radeon dell_wmi snd_hda_codec_analog 
snd_hda_codec_generic sparse_keymap iTCO_wdt iTCO_vendor_support coretemp 
kvm_intel dcdbas kvm lpc_ich mfd_core snd_hda_intel snd_hda_controller ttm 
snd_hda_codec drm_kms_helper drm pcspkr snd_hwdep snd_pcm_oss i2c_i801 evdev 
i2c_algo_bit serio_raw i2c_core snd_mixer_oss mei_me mei snd_pcm snd_timer wmi 
snd soundcore shpchp tpm_tis tpm button acpi_cpufreq processor thermal_sys fuse 
parport_pc ppdev lp parport autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid 
hid sg sr_mod sd_mod cdrom crc_t10dif crct10dif_generic crct10dif_common ahci 
libahci ata_generic libata scsi_mod ehci_pci uhci_hcd ehci_hcd e1000e ptp 
pps_core usbcore usb_common
Apr  1 14:43:01 hexadecimal kernel: [90926.018913] EIP: 0060:[] 
EFLAGS: 00010286 CPU: 0
Apr  1 14:43:01 hexadecimal kernel: [90926.018952] EIP is at 
radeon_fence_ref+0x10/0x50 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.018980] EAX: 0001 EBX:  
ECX:  EDX: 
Apr  1 14:43:01 hexadecimal kernel: [90926.019013] ESI: e7285288 EDI: 0008 
EBP: c8a03c8c ESP: c8a03c88
Apr  1 14:43:01 hexadecimal kernel: [90926.019045]  DS: 007b ES: 007b FS: 00d8 
GS: 00e0 SS: 0068
Apr  1 14:43:01 hexadecimal kernel: [90926.019073] CR0: 8005003b CR2: 0004 
CR3: 31262000 CR4: 000407f0
Apr  1 14:43:01 hexadecimal kernel: [90926.019116]  c8a03cd8 c8a03d1c f8563865 
f47b3010 f47b3010 f6f7 c8a03db0 
Apr  1 14:43:01 hexadecimal kernel: [90926.019169]  0020 f6f71138 0006f840 
f6f710e4 c8a03cf4  052b25d0 f758a048
Apr  1 14:43:01 hexadecimal kernel: [90926.019221]  c8a03cf4 c1084eb3 f6f49ca0 
    
Apr  1 14:43:01 hexadecimal kernel: [90926.019303]  [] ? 
radeon_sa_bo_new+0x1f5/0x390 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019338]  [] ? 
update_cfs_rq_blocked_load+0x133/0x180
Apr  1 14:43:01 hexadecimal kernel: [90926.019383]  [] ? 
radeon_ib_get+0x2f/0xd0 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019425]  [] ? 
radeon_cs_ioctl+0x131/0x6b0 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019459]  [] ? 
update_rq_clock.part.82+0x18/0x50
Apr  1 14:43:01 hexadecimal kernel: [90926.019501]  [] ? 
radeon_cs_parser_init+0x4b0/0x4b0 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019541]  [] ? 
drm_ioctl+0x1cf/0x530 [drm]
Apr  1 14:43:01 hexadecimal kernel: [90926.019580]  [] ? 
radeon_cs_parser_init+0x4b0/0x4b0 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019616]  [] ? 
try_to_wake_up+0x136/0x290
Apr  1 14:43:01 hexadecimal kernel: [90926.019646]  [] ? 
__pm_runtime_resume+0x51/0x70
Apr  1 14:43:01 hexadecimal kernel: [90926.019683]  [] ? 
radeon_drm_ioctl+0x3e/0x70 [radeon]
Apr  1 14:43:01 hexadecimal kernel: [90926.019720]  [] ? 0xf84e8fff
Apr  1 14:43:01 hexadecimal kernel: [90926.019742]  [] ? 
do_vfs_ioctl+0x2f2/0x4d0
Apr  1 14:43:01 hexadecimal kernel: [90926.019770]  [] ? 
SyS_futex+0x8c/0x140
Apr  1 14:43:01 hexadecimal kernel: [90926.019796]  [] ? 
SyS_ioctl+0x60/0x90
Apr  1 14:43:01 hexadecimal kernel: [90926.019822]  [] ? 
sysenter_do_call+0x12/0x12
Apr  1 14:43:01 hexadecimal kernel: [90926.020105] CR2: 0004
Apr  1 14:43:01 hexadecimal kernel: [90926.027602] ---[ end trace 
ad087539d71c4c47 ]---
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] sending NMI to all CPUs:
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] NMI backtrace for cpu 1
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] EIP: 0060:[] 
EFLAGS: 0026 CPU: 1
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] EIP is at 
__const_udelay+0x3/0x20
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] EAX: 01062560 EBX: 2710 
ECX: f000 EDX: f000
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] ESI: c1614f80 EDI: f7593620 
EBP: f4d4fe74 ESP: f4d4fe64
Apr  1 14:43:22 hexadecimal kernel: [90947.032000]  DS: 007b ES: 007b FS: 00d8 
GS: 00e0 SS: 0068
Apr  1 14:43:22 hexadecimal kernel: [90947.032000] CR0: 80050033 CR2: b2a6c000 
CR3: 33d66000 CR4: 000407f0
Apr  1 14:43:22 hexadecimal kernel: [90947.032000]  c104038a c1548401 c157a0ce 
c1614f80 f4d4febc c10ac95d c1557924 1483
Apr  1 14:43:22 hexadecimal kernel: [90947.032000]  002ca9ee 002ca9ed 03af 
0001 f4d4febc c1084790 0001 c166a5ec
Apr  1 14:43:22 hexadecimal kernel: [90947.032000]  c1614f80 f7593620 0001 
f6f1e560  0001 f4d4fed0 c1062dac
Apr  1 14:43:22 hexadecimal kernel: 

Bug#817874: linux-image-3.16.0-4-amd64: 3.16.7-ckt25-1 freeze with radeon driver

[Olaf Skibbe]

Package: src:linux
Version: 3.16.7-ckt25-1
Followup-For: Bug #817874

Dear Maintainer,

I can confirm the bug described above.

Here, it can be triggered by using the the mouse wheel extensively
within iceweasel (e.g. on http://www.tagesschau.de/) bu *only* when
the iceweasel configuration is set to "Use smooth scrolling" and "Use
hardware acceleration when available". I repeated the freeze four
times.

The reaction is a freezing of screen, mouse and keyboard. The machine
is still available via ssh (which allows a proper reboot).

The syslog looks similar to that above:


Mar 14 13:48:57 boogie kernel: [  360.715790] BUG: unable to handle kernel NULL
pointer dereference at 0008
Mar 14 13:48:57 boogie kernel: [  360.715957] IP: []
radeon_fence_ref+0xd/0x50 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025] PGD 0
Mar 14 13:48:57 boogie kernel: [  360.716025] Oops: 0002 [#1] SMP
Mar 14 13:48:57 boogie kernel: [  360.716025] Modules linked in: cfg80211
binfmt_misc cpufreq_userspace cpufreq_conservative cpufreq_stats
cpufreq_powersave openafs$
Mar 14 13:48:57 boogie kernel: [  360.716025] CPU: 1 PID: 1026 Comm: Xorg
Tainted: P   O  3.16.0-4-amd64 #1 Debian 3.16.7-ckt25-1
Mar 14 13:48:57 boogie kernel: [  360.716025] Hardware name: Hewlett-Packard HP
Compaq dc5750 Microtower/0A64h, BIOS 786E3 v02.10 01/25/2007
Mar 14 13:48:57 boogie kernel: [  360.716025] task: 8801ae817570 ti:
8801af7a task.ti: 8801af7a
Mar 14 13:48:57 boogie kernel: [  360.716025] RIP: 0010:[]
[] radeon_fence_ref+0xd/0x50 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025] RSP: 0018:8801af7a3b18
EFLAGS: 00010292
Mar 14 13:48:57 boogie kernel: [  360.716025] RAX:  RBX:
8801afadd5f8 RCX: 8801afadcd08
Mar 14 13:48:57 boogie kernel: [  360.716025] RDX: 0001 RSI:
 RDI: 
Mar 14 13:48:57 boogie kernel: [  360.716025] RBP: 8801afadd550 R08:
8801afadc000 R09: 
Mar 14 13:48:57 boogie kernel: [  360.716025] R10: 0002 R11:
8801af7a3e08 R12: 0020
Mar 14 13:48:57 boogie kernel: [  360.716025] R13: 8801af7a3be0 R14:
8801af7a3bb0 R15: 8801afadd5f8
Mar 14 13:48:57 boogie kernel: [  360.716025] FS:  7f3917fd8980()
GS:8801b7d0() knlGS:
Mar 14 13:48:57 boogie kernel: [  360.716025] CS:  0010 DS:  ES:  CR0:
80050033
Mar 14 13:48:57 boogie kernel: [  360.716025] CR2: 0008 CR3:
0001af7bf000 CR4: 07e0
Mar 14 13:48:57 boogie kernel: [  360.716025] Stack:
Mar 14 13:48:57 boogie kernel: [  360.716025]  a04a20bc
002d0ae0 f0200100 8801af7a3cd0
Mar 14 13:48:57 boogie kernel: [  360.716025]  8801afadc000
8801ae817570 8801ae817570 0001
Mar 14 13:48:57 boogie kernel: [  360.716025]  
  
Mar 14 13:48:57 boogie kernel: [  360.716025] Call Trace:
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
radeon_sa_bo_new+0x25c/0x460 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
radeon_ib_get+0x2e/0xd0 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
radeon_cs_ioctl+0x13c/0x730 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
drm_ioctl+0x1c7/0x5b0 [drm]
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
__do_page_fault+0x1d1/0x4f0
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
radeon_drm_ioctl+0x46/0x80 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
do_vfs_ioctl+0x2cf/0x4b0
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
__sys_recvmsg+0x65/0x80
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
SyS_ioctl+0x81/0xa0
Mar 14 13:48:57 boogie kernel: [  360.716025]  [] ?
system_call_fast_compare_end+0x10/0x15
Mar 14 13:48:57 boogie kernel: [  360.716025] Code: e4 48 8b 3b 89 c1 89 ea 48
c7 c6 80 16 53 a0 31 c0 e8 68 f7 f5 e0 eb cb 66 0f 1f 44 00 00 66 66 66 66 90
48 89 f$
Mar 14 13:48:57 boogie kernel: [  360.716025] RIP  []
radeon_fence_ref+0xd/0x50 [radeon]
Mar 14 13:48:57 boogie kernel: [  360.716025]  RSP 
Mar 14 13:48:57 boogie kernel: [  360.716025] CR2: 0008
Mar 14 13:48:57 boogie kernel: [  360.758511] ---[ end trace 6f48cc9b77fa01c1
]---

Cheers,
Olaf



-- Package-specific info:
** Version:
Linux version 3.16.0-4-amd64 (debian-kernel@lists.debian.org) (gcc version 
4.8.4 (Debian 4.8.4-1) ) #1 SMP Debian 3.16.7-ckt25-1 (2016-03-06)

** Command line:
BOOT_IMAGE=/boot/vmlinuz-3.16.0-4-amd64 
root=UUID=c8204b94-5044-4973-8eee-6dd6017bc888 ro quiet

** Tainted: PO (4097)
 * Proprietary module has been loaded.
 * Out-of-tree module has been loaded.

** Kernel log:
[   10.024276] powernow_k8: fid 0xa (1800 MHz), vid 0x10
[   10.024277] powernow_k8: fid 0x2 (1000 MHz), vid 0x12
[   10.024354] powernow_k8: Found 1 AMD Athlon(tm) 64 X2 Dual Core Processor 
4600+ (2 cpu cores) (version 2.20.00)
[   10.184682] input: HP WMI hotkeys as 

Bug#817874: linux-image-3.16.0-4-amd64: 3.16.7-ckt25-1 freeze with radeon driver

[Борис Попов]

Hi!

I have this problem too.

-- 
Boris Popov

Bug#817874: linux-image-3.16.0-4-amd64: 3.16.7-ckt25-1 freeze with radeon driver

[Michael Lange]

Package: src:linux
Version: 3.16.7-ckt25-1
Severity: important

Dear Maintainer,

the day before yesterday apt-get update && apt-get upgrade upgraded the kernel
package to version 3.16.7-ckt25-1 from jessie-proposed-updates. When I booted
this kernel yesterday for the first time I experienced sudden "freezes" of the
system that made the machine completely unusable. After some investigating I
found that apparently a newly introduced bug affecting the radeon driver caused
this. The following stack trace was found in the syslog:

Mar 10 11:03:09 localhost kernel: [  109.581099] BUG: unable to handle kernel
NULL pointer dereference at 0008
Mar 10 11:03:09 localhost kernel: [  109.581180] IP: []
radeon_fence_ref+0xd/0x50 [radeon]
Mar 10 11:03:09 localhost kernel: [  109.581296] PGD 0
Mar 10 11:03:09 localhost kernel: [  109.581312] Oops: 0002 [#1] SMP
Mar 10 11:03:09 localhost kernel: [  109.581337] Modules linked in: analog
joydev binfmt_misc cpufreq_stats cpufreq_powersave cpufreq_conservative
ip6table_filter ip6_tables xt_recent iptable_nat nf_nat_ipv4 xt_comment
ipt_REJECT xt_addrtype xt_mark iptable_mangle xt_tcpudp xt_CT iptable_raw
xt_multiport nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack ipt_ULOG xt_NFLOG
nfnetlink_log xt_LOG nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip
nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda
ts_kmp nf_conntrack_amanda nf_nat nf_conntrack_sane nf_conntrack_tftp
nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp
nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nfnetlink
nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc
nf_conntrack_h323 nf_conntrack_ftp nf_conntrack iptable_filter ip_tables
x_tables usblp snd_fm801 snd_mpu401_uart snd_opl3_lib snd_hwdep snd_rawmidi
snd_seq_device tea575x snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm
snd_timer snd kvm soundcore videodev media ac97_bus radeon evdev serio_raw
fm801_gp pcspkr gameport edac_mce_amd edac_core k10temp sp5100_tco ttm
drm_kms_helper drm i2c_algo_bit shpchp i2c_piix4 wmi i2c_core button
acpi_cpufreq processor thermal_sys it87 hwmon_vid cpufreq_userspace fuse
parport_pc ppdev lp parport autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid
hid nls_utf8 nls_iso8859_15 nls_iso8859_1 nls_cp437 nls_cp850 vfat fat
usb_storage loop sd_mod sg crc_t10dif crct10dif_generic crct10dif_common sr_mod
cdrom ata_generic ohci_pci pata_atiixp ahci libahci libata floppy r8169 mii
ohci_hcd ehci_pci scsi_mod ehci_hcd usbcore usb_common
Mar 10 11:03:09 localhost kernel: [  109.584654] CPU: 1 PID: 2289 Comm: Xorg
Not tainted 3.16.0-4-amd64 #1 Debian 3.16.7-ckt25-1
Mar 10 11:03:09 localhost kernel: [  109.587031] Hardware name: Gigabyte
Technology Co., Ltd. GA-MA78LMT-S2/GA-MA78LMT-S2, BIOS F14 08/16/2011
Mar 10 11:03:09 localhost kernel: [  109.589444] task: 8800bf728250 ti:
88012a7e4000 task.ti: 88012a7e4000
Mar 10 11:03:09 localhost kernel: [  109.591882] RIP: 0010:[]
[] radeon_fence_ref+0xd/0x50 [radeon]
Mar 10 11:03:09 localhost kernel: [  109.594355] RSP: 0018:88012a7e7b18
EFLAGS: 00010292
Mar 10 11:03:09 localhost kernel: [  109.596795] RAX:  RBX:
8800bea715f8 RCX: 8800bea70d08
Mar 10 11:03:09 localhost kernel: [  109.599238] RDX: 0001 RSI:
 RDI: 
Mar 10 11:03:09 localhost kernel: [  109.601672] RBP: 8800bea71550 R08:
8800bea7 R09: 
Mar 10 11:03:09 localhost kernel: [  109.604091] R10: 000e R11:
ffe8 R12: 0020
Mar 10 11:03:09 localhost kernel: [  109.606497] R13: 88012a7e7be0 R14:
88012a7e7bb0 R15: 8800bea715f8
Mar 10 11:03:09 localhost kernel: [  109.608913] FS:  7f2cfa138980()
GS:88012fc4() knlGS:
Mar 10 11:03:09 localhost kernel: [  109.611334] CS:  0010 DS:  ES: 
CR0: 80050033
Mar 10 11:03:09 localhost kernel: [  109.613760] CR2: 0008 CR3:
000129cdb000 CR4: 07e0
Mar 10 11:03:09 localhost kernel: [  109.616194] Stack:
Mar 10 11:03:09 localhost kernel: [  109.618626]  a041b0bc
002c8060 ef600100 88012a7e7cd0
Mar 10 11:03:09 localhost kernel: [  109.621116]  8800bea7
8800bf728250 8800bf728250 0220
Mar 10 11:03:09 localhost kernel: [  109.623630]  
  
Mar 10 11:03:09 localhost kernel: [  109.626150] Call Trace:
Mar 10 11:03:09 localhost kernel: [  109.628658]  [] ?
radeon_sa_bo_new+0x25c/0x460 [radeon]
Mar 10 11:03:09 localhost kernel: [  109.631193]  [] ?
radeon_ib_get+0x2e/0xd0 [radeon]
Mar 10 11:03:09 localhost kernel: [  109.633754]  [] ?
radeon_cs_ioctl+0x13c/0x730 [radeon]
Mar 10 11:03:09 localhost kernel: [  109.636310]  [] ?
drm_ioctl+0x1c7/0x5b0 [drm]
Mar 10 11:03:09 localhost kernel: [  109.638872]  [] ?
__do_page_fault+0x1d1/0x4f0
Mar 10 11:03:09 localhost kernel: [