Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541

161 views
Skip to first unread message

Ansgar

unread,
Oct 19, 2022, 1:00:04 PM10/19/22
to
Source: linux
Version: 6.0.2-1
Severity: important

After upgrading to linux 6.0.2-1 I see the following message during boot:

+---
| [ 3.723631] i915 0000:00:02.0: [drm] fb0: i915drmfb frame buffer device
| [...]
| [ 3.855523] vga_switcheroo: enabled
| [ 3.855536] nouveau 0000:01:00.0: DRM: VRAM: 2048 MiB
| [ 3.855537] nouveau 0000:01:00.0: DRM: GART: 1048576 MiB
| [ 3.855539] nouveau 0000:01:00.0: DRM: TMDS table version 2.0
| [ 3.855541] nouveau 0000:01:00.0: DRM: DCB version 4.0
| [ 3.855542] nouveau 0000:01:00.0: DRM: DCB outp 00: 08800fc6 0f420010
| [ 3.855544] nouveau 0000:01:00.0: DRM: DCB outp 01: 08000f82 00020010
| [ 3.855545] nouveau 0000:01:00.0: DRM: DCB conn 00: 01000046
| [ 3.857230] nouveau 0000:01:00.0: DRM: MM: using COPY for buffer copies
| [ 3.858820] BUG: kernel NULL pointer dereference, address: 0000000000000020
| [ 3.858838] #PF: supervisor read access in kernel mode
| [ 3.858847] #PF: error_code(0x0000) - not-present page
| [ 3.858856] PGD 0 P4D 0
| [ 3.858864] Oops: 0000 [#1] PREEMPT SMP PTI
| [ 3.858872] CPU: 1 PID: 427 Comm: systemd-udevd Not tainted 6.0.0-1-amd64 #1 Debian 6.0.2-1
| [ 3.858886] Hardware name: LENOVO 20EGS1FD00/20EGS1FD00, BIOS GNET88WW (2.36 ) 05/30/2018
| [ 3.858898] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
| [ 3.858982] Code: 72 ce 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86 35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6 43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 d5 e3 95 ce 48 8b 3c 24 4c
| [ 3.859008] RSP: 0018:ffffa8e7409bb718 EFLAGS: 00010246
| [ 3.859018] RAX: 0000000000000000 RBX: ffffa8e7409bb720 RCX: 0000000000000000
| [ 3.859030] RDX: 0000000000000028 RSI: ffffa8e7409bb720 RDI: ffffa8e7409bb748
| [ 3.859042] RBP: 0000000000000000 R08: ffffa8e7409bb968 R09: 0000000000000008
| [ 3.859053] R10: ffff95661041f9c0 R11: ffffa8e740e30000 R12: ffff9565ca2114f8
| [ 3.859065] R13: ffffa8e7409bb720 R14: 0000000000000008 R15: ffffa8e7409bb740
| [ 3.859076] FS: 00007fc0a2a6e8c0(0000) GS:ffff956d1e240000(0000) knlGS:0000000000000000
| [ 3.859090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
| [ 3.859100] CR2: 0000000000000020 CR3: 0000000100f74001 CR4: 00000000001706e0
| [ 3.859112] Call Trace:
| [ 3.859120] <TASK>
| [ 3.859128] nvif_conn_hpd_status+0x35/0xe0 [nouveau]
| [ 3.859209] nouveau_dp_detect+0x2d0/0x410 [nouveau]
| [ 3.859302] nouveau_connector_detect+0x9b/0x550 [nouveau]
| [ 3.859395] drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
| [ 3.859421] drm_helper_probe_single_connector_modes+0x361/0x510 [drm_kms_helper]
| [ 3.859444] drm_client_modeset_probe+0x224/0x1490 [drm]
| [ 3.859487] ? nouveau_cli_init+0x3ea/0x490 [nouveau]
| [ 3.859582] ? __pm_runtime_suspend+0x6a/0x100
| [ 3.859593] __drm_fb_helper_initial_config_and_unlock+0x44/0x510 [drm_kms_helper]
| [ 3.859618] ? drm_client_init+0x133/0x160 [drm]
| [ 3.859653] nouveau_fbcon_init+0x14a/0x1c0 [nouveau]
| [ 3.859736] nouveau_drm_device_init+0x1ec/0x7a0 [nouveau]
| [ 3.859819] ? pci_update_current_state+0x6e/0xa0
| [ 3.859831] nouveau_drm_probe+0x128/0x1f0 [nouveau]
| [ 3.859913] ? _raw_spin_unlock_irqrestore+0x23/0x40
| [ 3.859925] local_pci_probe+0x41/0x80
| [ 3.859935] pci_device_probe+0xc3/0x230
| [ 3.859946] really_probe+0xde/0x380
| [ 3.859955] ? pm_runtime_barrier+0x50/0x90
| [ 3.859963] __driver_probe_device+0x78/0x170
| [ 3.859972] driver_probe_device+0x1f/0x90
| [ 3.859981] __driver_attach+0xd1/0x1d0
| [ 3.859990] ? __device_attach_driver+0x110/0x110
| [ 3.860000] bus_for_each_dev+0x87/0xd0
| [ 3.860011] bus_add_driver+0x1ae/0x200
| [ 3.860019] driver_register+0x89/0xe0
| [ 3.860028] ? 0xffffffffc0731000
| [ 3.860035] do_one_initcall+0x59/0x220
| [ 3.860047] do_init_module+0x4a/0x200
| [ 3.860057] __do_sys_finit_module+0xac/0x120
| [ 3.860067] do_syscall_64+0x3a/0xc0
| [ 3.860077] entry_SYSCALL_64_after_hwframe+0x63/0xcd
| [ 3.860088] RIP: 0033:0x7fc0a3177859
| [ 3.860096] Code: 08 44 89 e0 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 87 05 0f 00 f7 d8 64 89 01 48
| [ 3.860121] RSP: 002b:00007ffdb9440778 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
| [ 3.860133] RAX: ffffffffffffffda RBX: 000055f6ea1a8cf0 RCX: 00007fc0a3177859
| [ 3.860144] RDX: 0000000000000000 RSI: 00007fc0a3327efd RDI: 0000000000000015
| [ 3.860155] RBP: 00007fc0a3327efd R08: 0000000000000000 R09: 000055f6ea1af1a0
| [ 3.860167] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000020000
| [ 3.860178] R13: 0000000000000000 R14: 000055f6ea1df350 R15: 000055f6e964fcc1
| [ 3.860190] </TASK>
| [ 3.860196] Modules linked in: raid1 md_mod i915 nouveau(+) sd_mod t10_pi sr_mod crc64_rocksoft_generic cdrom crc64_rocksoft crc_t10dif crct10dif_generic crc64 crct10dif_pclmul crct10dif_common drm_ttm_helper crc32_pclmul mxm_wmi crc32c_intel drm_buddy i2c_algo_bit drm_display_helper ghash_clmulni_intel drm_kms_helper cec rc_core ahci libahci ttm sdhci_pci xhci_pci cqhci libata xhci_hcd aesni_intel ehci_pci ehci_hcd crypto_simd serio_raw scsi_mod sdhci drm cryptd usbcore scsi_common mmc_core usb_common wmi battery video button dm_mod msr parport_pc ppdev lp parport efivarfs autofs4
| [ 3.860292] CR2: 0000000000000020
| [ 3.860307] ---[ end trace 0000000000000000 ]---
| [ 3.860320] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
| [ 3.861040] Code: 72 ce 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86 35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6 43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 d5 e3 95 ce 48 8b 3c 24 4c
| [ 3.861725] RSP: 0018:ffffa8e7409bb718 EFLAGS: 00010246
| [ 3.862422] RAX: 0000000000000000 RBX: ffffa8e7409bb720 RCX: 0000000000000000
| [ 3.863110] RDX: 0000000000000028 RSI: ffffa8e7409bb720 RDI: ffffa8e7409bb748
| [ 3.863831] RBP: 0000000000000000 R08: ffffa8e7409bb968 R09: 0000000000000008
| [ 3.864542] R10: ffff95661041f9c0 R11: ffffa8e740e30000 R12: ffff9565ca2114f8
| [ 3.865219] R13: ffffa8e7409bb720 R14: 0000000000000008 R15: ffffa8e7409bb740
| [ 3.865886] FS: 00007fc0a2a6e8c0(0000) GS:ffff956d1e240000(0000) knlGS:0000000000000000
| [ 3.866620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
| [ 3.867309] CR2: 0000000000000020 CR3: 0000000100f74001 CR4: 00000000001706e0
+---

I only use the integrated Intel graphics, the Nvidia card is unused.

There was no null pointer dereference with the previous kernel
(5.19.11-1 (2022-09-24)).

Besides the null pointer dereference above, suspend to RAM also no
longer works properly after the upgrade. I have not investigated that
further so far.

Ansgar

-- System Information:
Kernel: Linux 6.0.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_DIE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Ansgar

unread,
Oct 21, 2022, 5:50:04 AM10/21/22
to
On Wed, 2022-10-19 at 18:47 +0200, Ansgar wrote:
> After upgrading to linux 6.0.2-1 I see the following message during
> boot:
[...]
> Besides the null pointer dereference above, suspend to RAM also no
> longer works properly after the upgrade. I have not investigated that
> further so far.

At least this part is easy: after blacklisting the nouveau driver to
avoid the warning about the NULL pointer dereference, suspend works
again.

Ansgar

Diederik de Haas

unread,
Oct 21, 2022, 11:30:04 AM10/21/22
to
On woensdag 19 oktober 2022 18:47:06 CEST Ansgar wrote:
> After upgrading to linux 6.0.2-1 I see the following message during boot:
>
> ...
>
> | [ 3.858820] BUG: kernel NULL pointer dereference, address:
> | 0000000000000020 [ 3.858838] #PF: supervisor read access in kernel
> | mode
>
> I only use the integrated Intel graphics, the Nvidia card is unused.
>
> There was no null pointer dereference with the previous kernel
> (5.19.11-1 (2022-09-24)).

Can you verify if the issue is also present on 6.0~rc7-1~exp1?
I expect it does, but it's better to know then to assume.

There have been quite some commit under 'drivers/gpu/drm/nouveau' in kernel
6.0 and in 6.0.3 there have been several NPE fixes, although they didn't appear
directly related to your issue.
It could be, but it could also be that there are more.
signature.asc

Mathieu Parent (Debian)

unread,
Nov 27, 2022, 7:40:04 AM11/27/22
to
On Fri, 21 Oct 2022 17:21:01 +0200 Diederik de Haas
<didi....@cknow.org> wrote:
> On woensdag 19 oktober 2022 18:47:06 CEST Ansgar wrote:
> > After upgrading to linux 6.0.2-1 I see the following message during boot:
> >
> > ...
> >
> > | [ 3.858820] BUG: kernel NULL pointer dereference, address:
> > | 0000000000000020 [ 3.858838] #PF: supervisor read access in kernel
> > | mode
> >
> > I only use the integrated Intel graphics, the Nvidia card is unused.
> >
> > There was no null pointer dereference with the previous kernel
> > (5.19.11-1 (2022-09-24)).
>
> Can you verify if the issue is also present on 6.0~rc7-1~exp1?
> I expect it does, but it's better to know then to assume.
>
> There have been quite some commit under 'drivers/gpu/drm/nouveau' in kernel
> 6.0 and in 6.0.3 there have been several NPE fixes, although they didn't appear
> directly related to your issue.
> It could be, but it could also be that there are more.

I think I have the same problem than Angsar. And still reprocude it
with 6.1~rc5-1~exp1:

[ 2.347693] nouveau 0000:01:00.0: enabling device (0006 -> 0007)
[ 2.347973] Console: switching to colour dummy device 80x25
[ 2.348099] nouveau 0000:01:00.0: NVIDIA GK107 (0e7120a2)
[ 2.363961] nouveau 0000:01:00.0: bios: version 80.07.59.00.0c
[ 2.414698] usb 1-1: New USB device found, idVendor=8087,
idProduct=0024, bcdDevice= 0.00
[ 2.414702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2.415145] hub 1-1:1.0: USB hub found
[ 2.415319] hub 1-1:1.0: 6 ports detected
[ 2.430667] usb 2-1: New USB device found, idVendor=8087,
idProduct=0024, bcdDevice= 0.00
[ 2.430671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2.430999] hub 2-1:1.0: USB hub found
[ 2.431042] hub 2-1:1.0: 8 ports detected
[ 2.433009] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[ 2.433620] ata1.00: ACPI cmd 00/00:00:00:00:00:a0(NOP) rejected by
device (Stat=0x51 Err=0x04)
[ 2.433674] ata1.00: ATA-8: SAMSUNG SSD PM830 2.5" 7mm 512GB,
CXM03D1Q, max UDMA/133
[ 2.433737] ata1.00: 1000215216 sectors, multi 16: LBA48 NCQ (depth 32), AA
[ 2.434038] ata1.00: ACPI cmd 00/00:00:00:00:00:a0(NOP) rejected by
device (Stat=0x51 Err=0x04)
[ 2.434122] ata1.00: configured for UDMA/133
[ 2.435359] scsi 0:0:0:0: Direct-Access ATA SAMSUNG SSD
PM83 3D1Q PQ: 0 ANSI: 5
[ 2.638562] i915 0000:00:02.0: [drm] VT-d active for gfx access
[ 2.638566] i915 0000:00:02.0: vgaarb: deactivate vga console
[ 2.638598] i915 0000:00:02.0: [drm] Transparent Hugepage support
is recommended for optimal performance when IOMMU is enabled!
[ 2.638601] i915 0000:00:02.0: [drm] DMAR active, disabling use of
stolen memory
[ 2.646770] nouveau 0000:01:00.0: fb: 2048 MiB GDDR5
[ 2.683850] [drm] Initialized i915 1.6.0 20201103 for 0000:00:02.0 on minor 1
[ 2.684119] ACPI: video: [Firmware Bug]: ACPI(PEGP) defines _DOD but not _DOS
[ 2.684347] ACPI: video: Video Device [PEGP] (multi-head: yes rom:
yes post: no)
[ 2.684507] input: Video Bus as
/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:38/LNXVIDEO:00/input/input6
[ 2.685055] ACPI: video: Video Device [GFX0] (multi-head: yes rom:
no post: no)
[ 2.685247] input: Video Bus as
/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:01/input/input7
[ 2.702363] usb 1-1.5: new high-speed USB device number 3 using ehci-pci
[ 2.718352] usb 2-1.5: new full-speed USB device number 3 using ehci-pci
[ 2.721400] vga_switcheroo: enabled
[ 2.721415] nouveau 0000:01:00.0: DRM: VRAM: 2048 MiB
[ 2.721417] nouveau 0000:01:00.0: DRM: GART: 1048576 MiB
[ 2.721419] nouveau 0000:01:00.0: DRM: TMDS table version 2.0
[ 2.721421] nouveau 0000:01:00.0: DRM: DCB version 4.0
[ 2.721422] nouveau 0000:01:00.0: DRM: DCB outp 00: 08800fd6 0f420020
[ 2.721424] nouveau 0000:01:00.0: DRM: DCB outp 01: 08000f92 00020020
[ 2.721425] nouveau 0000:01:00.0: DRM: DCB conn 00: 00001046
[ 2.723196] nouveau 0000:01:00.0: DRM: MM: using COPY for buffer copies
[ 2.725211] BUG: kernel NULL pointer dereference, address: 0000000000000020
[ 2.725213] #PF: supervisor read access in kernel mode
[ 2.725214] #PF: error_code(0x0000) - not-present page
[ 2.725215] PGD 0 P4D 0
[ 2.725217] Oops: 0000 [#1] PREEMPT_RT SMP PTI
[ 2.725219] CPU: 3 PID: 203 Comm: systemd-udevd Not tainted
6.1.0-0-rt-amd64 #1 Debian 6.1~rc5-1~exp1
[ 2.725221] Hardware name: Dell Inc. XPS L521X/029M77, BIOS A13 12/07/2012
[ 2.725222] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[ 2.725298] Code: e0 e5 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 15 d4 1f e6 48 8b 3c
24 4c
[ 2.725299] RSP: 0018:ffffb45a8054b708 EFLAGS: 00010246
[ 2.725301] RAX: 0000000000000000 RBX: ffffb45a8054b710 RCX: 0000000000000000
[ 2.725302] RDX: 0000000000000028 RSI: ffffb45a8054b710 RDI: ffffb45a8054b738
[ 2.725303] RBP: 0000000000000000 R08: ffffb45a8054b958 R09: 00000000ffffff8e
[ 2.725304] R10: 0000000000000000 R11: 000000000000003f R12: ffff9e0489847508
[ 2.725305] R13: ffffb45a8054b710 R14: 0000000000000008 R15: ffffb45a8054b730
[ 2.725306] FS: 00007f2c9ec40d00(0000) GS:ffff9e07cf2c0000(0000)
knlGS:0000000000000000
[ 2.725307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.725308] CR2: 0000000000000020 CR3: 000000010163c002 CR4: 00000000001706e0
[ 2.725310] Call Trace:
[ 2.725312] <TASK>
[ 2.725315] nvif_conn_hpd_status+0x35/0xe0 [nouveau]
[ 2.725386] nouveau_dp_detect+0x2f7/0x470 [nouveau]
[ 2.725478] ? migrate_enable+0xde/0x160
[ 2.725482] nouveau_connector_detect+0x9b/0x550 [nouveau]
[ 2.725578] drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
[ 2.725595] drm_helper_probe_single_connector_modes+0x31b/0x550
[drm_kms_helper]
[ 2.725608] ? __kmem_cache_alloc_node+0x12c/0x210
[ 2.725612] drm_client_modeset_probe+0x243/0x1660 [drm]
[ 2.725647] ? nouveau_cli_init+0x400/0x4a0 [nouveau]
[ 2.725738] ? recalibrate_cpu_khz+0x10/0x10
[ 2.725741] ? __pm_runtime_suspend+0x61/0x70
[ 2.725745] __drm_fb_helper_initial_config_and_unlock+0x44/0x530
[drm_kms_helper]
[ 2.725759] ? drm_client_init+0x133/0x160 [drm]
[ 2.725792] nouveau_fbcon_init+0x159/0x1d0 [nouveau]
[ 2.725890] nouveau_drm_device_init+0x1f8/0x7b0 [nouveau]
[ 2.725982] ? pci_update_current_state+0x6e/0xa0
[ 2.725986] nouveau_drm_probe+0x128/0x1f0 [nouveau]
[ 2.726082] ? rt_spin_unlock+0x13/0x40
[ 2.726086] local_pci_probe+0x41/0x80
[ 2.726090] pci_device_probe+0xc3/0x230
[ 2.726092] really_probe+0xde/0x380
[ 2.726096] ? pm_runtime_barrier+0x50/0x90
[ 2.726098] __driver_probe_device+0x78/0x170
[ 2.726101] driver_probe_device+0x1f/0x90
[ 2.726103] __driver_attach+0xd1/0x1d0
[ 2.726106] ? __device_attach_driver+0x110/0x110
[ 2.726108] bus_for_each_dev+0x87/0xd0
[ 2.726111] bus_add_driver+0x1b1/0x200
[ 2.726113] driver_register+0x89/0xe0
[ 2.726116] ? 0xffffffffc0c5b000
[ 2.726118] do_one_initcall+0x59/0x280
[ 2.726122] do_init_module+0x4a/0x200
[ 2.726125] __do_sys_finit_module+0xac/0x120
[ 2.726129] do_syscall_64+0x3a/0xc0
[ 2.726133] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2.726136] RIP: 0033:0x7f2c9f3445a9
[ 2.726138] Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00
90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 27 08 0d 00 f7 d8 64 89
01 48
[ 2.726140] RSP: 002b:00007ffe76944e78 EFLAGS: 00000246 ORIG_RAX:
0000000000000139
[ 2.726142] RAX: ffffffffffffffda RBX: 0000564c4da28500 RCX: 00007f2c9f3445a9
[ 2.726143] RDX: 0000000000000000 RSI: 00007f2c9f4d6efd RDI: 0000000000000013
[ 2.726144] RBP: 00007f2c9f4d6efd R08: 0000000000000000 R09: 0000564c4d9fb240
[ 2.726145] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000020000
[ 2.726145] R13: 0000000000000000 R14: 0000564c4da15a00 R15: 0000564c4c09be50
[ 2.726148] </TASK>
[ 2.726148] Modules linked in: i915 nouveau(+) ahci drm_buddy
mxm_wmi libahci i2c_algo_bit crct10dif_pclmul crct10dif_common
crc32_pclmul drm_display_helper crc32c_intel libata cec sdhci_pci
ghash_clmulni_intel rc_core cqhci drm_ttm_helper sha512_ssse3 xhci_pci
sha512_generic ttm r8169 ehci_pci aesni_intel xhci_hcd drm_kms_helper
scsi_mod realtek sdhci ehci_hcd rtsx_pci_sdmmc i2c_i801 crypto_simd
mdio_devres drm usbcore psmouse cryptd libphy mmc_core rtsx_pci
lpc_ich i2c_smbus scsi_common usb_common battery video wmi button
[ 2.726174] CR2: 0000000000000020
[ 2.726274] ---[ end trace 0000000000000000 ]---
[ 2.726275] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[ 2.726368] Code: e0 e5 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 15 d4 1f e6 48 8b 3c
24 4c
[ 2.726369] RSP: 0018:ffffb45a8054b708 EFLAGS: 00010246
[ 2.726371] RAX: 0000000000000000 RBX: ffffb45a8054b710 RCX: 0000000000000000
[ 2.726372] RDX: 0000000000000028 RSI: ffffb45a8054b710 RDI: ffffb45a8054b738
[ 2.726373] RBP: 0000000000000000 R08: ffffb45a8054b958 R09: 00000000ffffff8e
[ 2.726374] R10: 0000000000000000 R11: 000000000000003f R12: ffff9e0489847508
[ 2.726374] R13: ffffb45a8054b710 R14: 0000000000000008 R15: ffffb45a8054b730
[ 2.726375] FS: 00007f2c9ec40d00(0000) GS:ffff9e07cf2c0000(0000)
knlGS:0000000000000000
[ 2.726377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.726378] CR2: 0000000000000020 CR3: 000000010163c002 CR4: 00000000001706e0

Regards

Mathieu Parent

Mathieu Parent

unread,
Dec 4, 2022, 5:30:04 AM12/4/22
to
found 1022068 6.1~rc7-1~exp1
done

Still in latest experimental kernel. :-(

Mathieu Parent

unread,
Dec 16, 2022, 8:30:03 AM12/16/22
to
found 1022068 6.1~rc8-1~exp1
upstream 1022068 https://gitlab.freedesktop.org/drm/nouveau/-/issues/188
thanks

Still in latest experimental kernel. :-(

I've found an upstream bug (every distro affected).

Cheers
--
Mathieu

Mathieu Parent

unread,
Dec 31, 2022, 4:10:05 AM12/31/22
to
found 1022068 6.1.1-1~exp2
thanks

Hello,

Reproduced (without much surprise) with 6.1.1-1~exp2.

I built linux from git (84e57d292203a45c96dbcb2e6be9dd80961d981a), to
see if I can reproduce the bug. Unfortunately, this kernel doesn't
boot (and I don't have much time to investigate).


[ 2.739231] BUG: kernel NULL pointer dereference, address: 0000000000000020
[ 2.739233] #PF: supervisor read access in kernel mode
[ 2.739234] #PF: error_code(0x0000) - not-present page
[ 2.739236] PGD 0 P4D 0
[ 2.739238] Oops: 0000 [#1] PREEMPT_RT SMP PTI
[ 2.739240] CPU: 2 PID: 215 Comm: systemd-udevd Not tainted
6.1.0-0-rt-amd64 #1 Debian 6.1.1-1~exp2
[ 2.739242] Hardware name: Dell Inc. XPS L521X/029M77, BIOS A13 12/07/2012
[ 2.739243] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[ 2.739319] Code: 94 de 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 55 24 d3 de 48 8b 3c
24 4c
[ 2.739321] RSP: 0018:ffffa98280c37608 EFLAGS: 00010246
[ 2.739322] RAX: 0000000000000000 RBX: ffffa98280c37610 RCX: 0000000000000000
[ 2.739323] RDX: 0000000000000028 RSI: ffffa98280c37610 RDI: ffffa98280c37638
[ 2.739324] RBP: 0000000000000000 R08: ffffa98280c37860 R09: 00000000ffffff8e
[ 2.739325] R10: 0000000000000000 R11: ffff8e1cdf5c6000 R12: ffff8e19c40a7508
[ 2.739326] R13: ffffa98280c37610 R14: 0000000000000008 R15: ffffa98280c37630
[ 2.739327] FS: 00007facb03abd00(0000) GS:ffff8e1ccf280000(0000)
knlGS:0000000000000000
[ 2.739329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.739330] CR2: 0000000000000020 CR3: 000000010194c003 CR4: 00000000001706e0
[ 2.739331] Call Trace:
[ 2.739334] <TASK>
[ 2.739337] nvif_conn_hpd_status+0x35/0xe0 [nouveau]
[ 2.739401] nouveau_dp_detect+0x2f7/0x470 [nouveau]
[ 2.739489] ? migrate_enable+0xde/0x160
[ 2.739493] nouveau_connector_detect+0x9b/0x550 [nouveau]
[ 2.739584] drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
[ 2.739601] drm_helper_probe_single_connector_modes+0x31b/0x550
[drm_kms_helper]
[ 2.739615] ? __kmem_cache_alloc_node+0x12c/0x210
[ 2.739619] drm_client_modeset_probe+0x243/0x1660 [drm]
[ 2.739657] ? nouveau_cli_init+0x400/0x4a0 [nouveau]
[ 2.739745] ? recalibrate_cpu_khz+0x10/0x10
[ 2.739747] ? __pm_runtime_suspend+0x61/0x70
[ 2.739751] __drm_fb_helper_initial_config_and_unlock+0x44/0x530
[drm_kms_helper]
[ 2.739766] ? drm_client_init+0x133/0x160 [drm]
[ 2.739796] nouveau_fbcon_init+0x159/0x1d0 [nouveau]
[ 2.739882] nouveau_drm_device_init+0x1f8/0x7b0 [nouveau]
[ 2.739968] ? pci_update_current_state+0x6e/0xa0
[ 2.739972] nouveau_drm_probe+0x128/0x1f0 [nouveau]
[ 2.740057] ? rt_spin_unlock+0x13/0x40
[ 2.740061] local_pci_probe+0x41/0x80
[ 2.740064] pci_device_probe+0xc3/0x230
[ 2.740066] really_probe+0xde/0x380
[ 2.740070] ? pm_runtime_barrier+0x50/0x90
[ 2.740072] __driver_probe_device+0x78/0x170
[ 2.740075] driver_probe_device+0x1f/0x90
[ 2.740077] __driver_attach+0xd1/0x1d0
[ 2.740080] ? __device_attach_driver+0x110/0x110
[ 2.740083] bus_for_each_dev+0x87/0xd0
[ 2.740085] bus_add_driver+0x1b1/0x200
[ 2.740088] driver_register+0x89/0xe0
[ 2.740090] ? 0xffffffffc0825000
[ 2.740092] do_one_initcall+0x59/0x280
[ 2.740096] do_init_module+0x4a/0x200
[ 2.740099] __do_sys_finit_module+0xac/0x120
[ 2.740103] do_syscall_64+0x5b/0xc0
[ 2.740107] ? fpregs_assert_state_consistent+0x22/0x50
[ 2.740109] ? exit_to_user_mode_prepare+0x3c/0x1c0
[ 2.740111] ? syscall_exit_to_user_mode+0x17/0x40
[ 2.740114] ? do_syscall_64+0x67/0xc0
[ 2.740115] ? do_syscall_64+0x67/0xc0
[ 2.740117] ? syscall_exit_to_user_mode+0x17/0x40
[ 2.740119] ? do_syscall_64+0x67/0xc0
[ 2.740120] ? syscall_exit_to_user_mode+0x17/0x40
[ 2.740123] ? do_syscall_64+0x67/0xc0
[ 2.740124] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2.740126] RIP: 0033:0x7facb0ab65a9
[ 2.740128] Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00
90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 27 08 0d 00 f7 d8 64 89
01 48
[ 2.740130] RSP: 002b:00007fffd742f858 EFLAGS: 00000246 ORIG_RAX:
0000000000000139
[ 2.740131] RAX: ffffffffffffffda RBX: 000055f070a5e8f0 RCX: 00007facb0ab65a9
[ 2.740132] RDX: 0000000000000000 RSI: 00007facb0c49efd RDI: 0000000000000013
[ 2.740133] RBP: 00007facb0c49efd R08: 0000000000000000 R09: 000055f070a32240
[ 2.740134] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000020000
[ 2.740135] R13: 0000000000000000 R14: 000055f070a5c610 R15: 000055f06f9efe50
[ 2.740137] </TASK>
[ 2.740138] Modules linked in: hid i915 nouveau(+) ahci libahci
drm_buddy mxm_wmi i2c_algo_bit drm_display_helper crct10dif_pclmul
crct10dif_common crc32_pclmul crc32c_intel libata cec sdhci_pci r8169
rc_core cqhci xhci_pci ghash_clmulni_intel drm_ttm_helper sha512_ssse3
sha512_generic ttm ehci_pci realtek scsi_mod xhci_hcd drm_kms_helper
aesni_intel mdio_devres ehci_hcd i2c_i801 sdhci rtsx_pci_sdmmc drm
crypto_simd usbcore cryptd mmc_core psmouse libphy rtsx_pci
scsi_common lpc_ich i2c_smbus usb_common video battery wmi button
[ 2.740163] CR2: 0000000000000020
[ 2.740271] ---[ end trace 0000000000000000 ]---
[ 2.740272] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[ 2.740335] Code: 94 de 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 55 24 d3 de 48 8b 3c
24 4c
[ 2.740337] RSP: 0018:ffffa98280c37608 EFLAGS: 00010246
[ 2.740338] RAX: 0000000000000000 RBX: ffffa98280c37610 RCX: 0000000000000000
[ 2.740339] RDX: 0000000000000028 RSI: ffffa98280c37610 RDI: ffffa98280c37638
[ 2.740340] RBP: 0000000000000000 R08: ffffa98280c37860 R09: 00000000ffffff8e
[ 2.740341] R10: 0000000000000000 R11: ffff8e1cdf5c6000 R12: ffff8e19c40a7508
[ 2.740342] R13: ffffa98280c37610 R14: 0000000000000008 R15: ffffa98280c37630
[ 2.740343] FS: 00007facb03abd00(0000) GS:ffff8e1ccf280000(0000)
knlGS:0000000000000000
[ 2.740344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.740345] CR2: 0000000000000020 CR3: 000000010194c003 CR4: 00000000001706e0

Regards

--
Mathieu Parent
0 new messages