From: Xiaotian Feng <dfeng@redhat.com>
Subject: BUG: unable to handle kernel paging request on 2.6.33-rc2
Date: Tue, 05 Jan 2010 19:10:03 +0800
Message-ID: <4B431E0B.40200@redhat.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <linux-kernel-owner+glk-linux-kernel-3=40m.gmane.org-S1754393Ab0AELK2@vger.kernel.org>
Sender: linux-kernel-owner@vger.kernel.org
To: airlied@redhat.com, jglisse@redhat.com, dri-devel@lists.sourceforge.net, "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
List-Id: dri-devel@lists.freedesktop.org

Hi:

     When I perform "echo mem > /sys/power/state", I got BUG on 
rs600_gart_set_page, then suspend hangs.

     I don't have a camera to log the outputs, the call trace are:

     rs600_gart_set_page+0x31
     radeon_gart_bind
     radeon_ttm_backend
     ttm_tt_bind
     ttm_bo_handle_move_mem
     ttm_mem_evict_fist
     ttm_bo_force_list_clean
     ttm_bo_evict_vram
     ttm_suspend_kms
     radeon_pci_suspend
     pci_legacy_suspend
     pci_pm_suspend
     pm_op
     dpm_suspend
     suspend_devices_and_enter
     enter_state
     state_store
     kobj_attr_store
     sysfs_write_file
     vfs_write
     sys_write
     system_call_fastpath

     l *rs600_gart_set_page+0x31 is in writeq, maybe this is a possible 
use-after-free. Thanks.