On Mon, Nov 8, 2010 at 2:02 PM, Markus Trippelsdorf <markus@xxxxxxxxxxxxxxx> wrote: > On Mon, Nov 08, 2010 at 07:43:02PM +0100, Markus Trippelsdorf wrote: >> On Mon, Nov 08, 2010 at 06:07:37PM +0100, Markus Trippelsdorf wrote: >> > On Mon, Nov 08, 2010 at 06:02:21PM +0100, Markus Trippelsdorf wrote: >> > > I can trigger a kernel crash on my system by simply loading this png >> > > image with firefox: >> > > http://mediaarchive.cern.ch/MediaArchive/Photo/Public/2010/1011251/1011251_01/1011251_01-A4-at-144-dpi.jpg >> > >> > Sorry the above link is wrong, this is the right one (that triggers the >> > crash): >> > http://cdsweb.cern.ch/record/1305179/files/HI-150431-630470-huge.png >> >> I triggered it a few more times and took the attached picture. >> It points to the BUG() call at drivers/gpu/drm/ttm/ttm_bo.c:1628 . >> (Sorry for the bad picture quality) > > And here the same BUG in plaintext (should be a bit easier to read): > > Nov 8 19:28:23 arch kernel: ------------[ cut here ]------------ > Nov 8 19:28:23 arch kernel: kernel BUG at drivers/gpu/drm/ttm/ttm_bo.c:1628! Quite puzzling it is as if there was already a bo at same offset in rb tree but not in vm mm. Maybe some other race in destruction... Cheers, Jerome Glisse _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/dri-devel