Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #76568 > unrolled thread

Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541

Started byAnsgar <ansgar@debian.org>
First post2022-10-19 19:00 +0200
Last post2022-12-31 10:10 +0100
Articles 9 — 5 participants

Back to article view | Back to linux.debian.kernel


Contents

  Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541 Ansgar <ansgar@debian.org> - 2022-10-19 19:00 +0200
    Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541 Ansgar <ansgar@debian.org> - 2022-10-21 11:50 +0200
    Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541 Diederik de Haas <didi.debian@cknow.org> - 2022-10-21 17:30 +0200
    Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541 "Mathieu Parent (Debian)" <sathieu@debian.org> - 2022-11-27 13:40 +0100
    Bug#1022068: Still found Mathieu Parent <math.parent@gmail.com> - 2022-12-04 11:30 +0100
      Processed (with 2 errors): Still found "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-12-04 11:30 +0100
      Bug#1022068: Still found Mathieu Parent <math.parent@gmail.com> - 2022-12-16 14:30 +0100
    Bug#1022068: Reproduced Mathieu Parent <math.parent@gmail.com> - 2022-12-31 10:10 +0100
      Processed: Reproduced "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-12-31 10:10 +0100

#76568 — Bug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541

FromAnsgar <ansgar@debian.org>
Date2022-10-19 19:00 +0200
SubjectBug#1022068: linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541
Message-ID<FikA9-fkjp-1@gated-at.bofh.it>
Source: linux
Version: 6.0.2-1
Severity: important

After upgrading to linux 6.0.2-1 I see the following message during boot:

+---
| [    3.723631] i915 0000:00:02.0: [drm] fb0: i915drmfb frame buffer device
| [...]
| [    3.855523] vga_switcheroo: enabled
| [    3.855536] nouveau 0000:01:00.0: DRM: VRAM: 2048 MiB
| [    3.855537] nouveau 0000:01:00.0: DRM: GART: 1048576 MiB
| [    3.855539] nouveau 0000:01:00.0: DRM: TMDS table version 2.0
| [    3.855541] nouveau 0000:01:00.0: DRM: DCB version 4.0
| [    3.855542] nouveau 0000:01:00.0: DRM: DCB outp 00: 08800fc6 0f420010
| [    3.855544] nouveau 0000:01:00.0: DRM: DCB outp 01: 08000f82 00020010
| [    3.855545] nouveau 0000:01:00.0: DRM: DCB conn 00: 01000046
| [    3.857230] nouveau 0000:01:00.0: DRM: MM: using COPY for buffer copies
| [    3.858820] BUG: kernel NULL pointer dereference, address: 0000000000000020
| [    3.858838] #PF: supervisor read access in kernel mode
| [    3.858847] #PF: error_code(0x0000) - not-present page
| [    3.858856] PGD 0 P4D 0 
| [    3.858864] Oops: 0000 [#1] PREEMPT SMP PTI
| [    3.858872] CPU: 1 PID: 427 Comm: systemd-udevd Not tainted 6.0.0-1-amd64 #1  Debian 6.0.2-1
| [    3.858886] Hardware name: LENOVO 20EGS1FD00/20EGS1FD00, BIOS GNET88WW (2.36 ) 05/30/2018
| [    3.858898] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
| [    3.858982] Code: 72 ce 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86 35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6 43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 d5 e3 95 ce 48 8b 3c 24 4c
| [    3.859008] RSP: 0018:ffffa8e7409bb718 EFLAGS: 00010246
| [    3.859018] RAX: 0000000000000000 RBX: ffffa8e7409bb720 RCX: 0000000000000000
| [    3.859030] RDX: 0000000000000028 RSI: ffffa8e7409bb720 RDI: ffffa8e7409bb748
| [    3.859042] RBP: 0000000000000000 R08: ffffa8e7409bb968 R09: 0000000000000008
| [    3.859053] R10: ffff95661041f9c0 R11: ffffa8e740e30000 R12: ffff9565ca2114f8
| [    3.859065] R13: ffffa8e7409bb720 R14: 0000000000000008 R15: ffffa8e7409bb740
| [    3.859076] FS:  00007fc0a2a6e8c0(0000) GS:ffff956d1e240000(0000) knlGS:0000000000000000
| [    3.859090] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
| [    3.859100] CR2: 0000000000000020 CR3: 0000000100f74001 CR4: 00000000001706e0
| [    3.859112] Call Trace:
| [    3.859120]  <TASK>
| [    3.859128]  nvif_conn_hpd_status+0x35/0xe0 [nouveau]
| [    3.859209]  nouveau_dp_detect+0x2d0/0x410 [nouveau]
| [    3.859302]  nouveau_connector_detect+0x9b/0x550 [nouveau]
| [    3.859395]  drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
| [    3.859421]  drm_helper_probe_single_connector_modes+0x361/0x510 [drm_kms_helper]
| [    3.859444]  drm_client_modeset_probe+0x224/0x1490 [drm]
| [    3.859487]  ? nouveau_cli_init+0x3ea/0x490 [nouveau]
| [    3.859582]  ? __pm_runtime_suspend+0x6a/0x100
| [    3.859593]  __drm_fb_helper_initial_config_and_unlock+0x44/0x510 [drm_kms_helper]
| [    3.859618]  ? drm_client_init+0x133/0x160 [drm]
| [    3.859653]  nouveau_fbcon_init+0x14a/0x1c0 [nouveau]
| [    3.859736]  nouveau_drm_device_init+0x1ec/0x7a0 [nouveau]
| [    3.859819]  ? pci_update_current_state+0x6e/0xa0
| [    3.859831]  nouveau_drm_probe+0x128/0x1f0 [nouveau]
| [    3.859913]  ? _raw_spin_unlock_irqrestore+0x23/0x40
| [    3.859925]  local_pci_probe+0x41/0x80
| [    3.859935]  pci_device_probe+0xc3/0x230
| [    3.859946]  really_probe+0xde/0x380
| [    3.859955]  ? pm_runtime_barrier+0x50/0x90
| [    3.859963]  __driver_probe_device+0x78/0x170
| [    3.859972]  driver_probe_device+0x1f/0x90
| [    3.859981]  __driver_attach+0xd1/0x1d0
| [    3.859990]  ? __device_attach_driver+0x110/0x110
| [    3.860000]  bus_for_each_dev+0x87/0xd0
| [    3.860011]  bus_add_driver+0x1ae/0x200
| [    3.860019]  driver_register+0x89/0xe0
| [    3.860028]  ? 0xffffffffc0731000
| [    3.860035]  do_one_initcall+0x59/0x220
| [    3.860047]  do_init_module+0x4a/0x200
| [    3.860057]  __do_sys_finit_module+0xac/0x120
| [    3.860067]  do_syscall_64+0x3a/0xc0
| [    3.860077]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
| [    3.860088] RIP: 0033:0x7fc0a3177859
| [    3.860096] Code: 08 44 89 e0 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 87 05 0f 00 f7 d8 64 89 01 48
| [    3.860121] RSP: 002b:00007ffdb9440778 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
| [    3.860133] RAX: ffffffffffffffda RBX: 000055f6ea1a8cf0 RCX: 00007fc0a3177859
| [    3.860144] RDX: 0000000000000000 RSI: 00007fc0a3327efd RDI: 0000000000000015
| [    3.860155] RBP: 00007fc0a3327efd R08: 0000000000000000 R09: 000055f6ea1af1a0
| [    3.860167] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000020000
| [    3.860178] R13: 0000000000000000 R14: 000055f6ea1df350 R15: 000055f6e964fcc1
| [    3.860190]  </TASK>
| [    3.860196] Modules linked in: raid1 md_mod i915 nouveau(+) sd_mod t10_pi sr_mod crc64_rocksoft_generic cdrom crc64_rocksoft crc_t10dif crct10dif_generic crc64 crct10dif_pclmul crct10dif_common drm_ttm_helper crc32_pclmul mxm_wmi crc32c_intel drm_buddy i2c_algo_bit drm_display_helper ghash_clmulni_intel drm_kms_helper cec rc_core ahci libahci ttm sdhci_pci xhci_pci cqhci libata xhci_hcd aesni_intel ehci_pci ehci_hcd crypto_simd serio_raw scsi_mod sdhci drm cryptd usbcore scsi_common mmc_core usb_common wmi battery video button dm_mod msr parport_pc ppdev lp parport efivarfs autofs4
| [    3.860292] CR2: 0000000000000020
| [    3.860307] ---[ end trace 0000000000000000 ]---
| [    3.860320] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
| [    3.861040] Code: 72 ce 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86 35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6 43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 d5 e3 95 ce 48 8b 3c 24 4c
| [    3.861725] RSP: 0018:ffffa8e7409bb718 EFLAGS: 00010246
| [    3.862422] RAX: 0000000000000000 RBX: ffffa8e7409bb720 RCX: 0000000000000000
| [    3.863110] RDX: 0000000000000028 RSI: ffffa8e7409bb720 RDI: ffffa8e7409bb748
| [    3.863831] RBP: 0000000000000000 R08: ffffa8e7409bb968 R09: 0000000000000008
| [    3.864542] R10: ffff95661041f9c0 R11: ffffa8e740e30000 R12: ffff9565ca2114f8
| [    3.865219] R13: ffffa8e7409bb720 R14: 0000000000000008 R15: ffffa8e7409bb740
| [    3.865886] FS:  00007fc0a2a6e8c0(0000) GS:ffff956d1e240000(0000) knlGS:0000000000000000
| [    3.866620] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
| [    3.867309] CR2: 0000000000000020 CR3: 0000000100f74001 CR4: 00000000001706e0
+---

I only use the integrated Intel graphics, the Nvidia card is unused.

There was no null pointer dereference with the previous kernel
(5.19.11-1 (2022-09-24)).

Besides the null pointer dereference above, suspend to RAM also no
longer works properly after the upgrade. I have not investigated that
further so far.

Ansgar

-- System Information:
Kernel: Linux 6.0.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_DIE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

[toc] | [next] | [standalone]


#76614

FromAnsgar <ansgar@debian.org>
Date2022-10-21 11:50 +0200
Message-ID<FiWP8-fHmI-3@gated-at.bofh.it>
In reply to#76568
On Wed, 2022-10-19 at 18:47 +0200, Ansgar wrote:
> After upgrading to linux 6.0.2-1 I see the following message during
> boot:
[...]
> Besides the null pointer dereference above, suspend to RAM also no
> longer works properly after the upgrade. I have not investigated that
> further so far.

At least this part is easy: after blacklisting the nouveau driver to
avoid the warning about the NULL pointer dereference, suspend works
again.

Ansgar

[toc] | [prev] | [next] | [standalone]


#76623

FromDiederik de Haas <didi.debian@cknow.org>
Date2022-10-21 17:30 +0200
Message-ID<Fj289-fKyb-3@gated-at.bofh.it>
In reply to#76568

[Multipart message — attachments visible in raw view] — view raw

On woensdag 19 oktober 2022 18:47:06 CEST Ansgar wrote:
> After upgrading to linux 6.0.2-1 I see the following message during boot:
> 
> ...
>
> | [    3.858820] BUG: kernel NULL pointer dereference, address:
> | 0000000000000020 [    3.858838] #PF: supervisor read access in kernel
> | mode
> 
> I only use the integrated Intel graphics, the Nvidia card is unused.
> 
> There was no null pointer dereference with the previous kernel
> (5.19.11-1 (2022-09-24)).

Can you verify if the issue is also present on 6.0~rc7-1~exp1?
I expect it does, but it's better to know then to assume.

There have been quite some commit under 'drivers/gpu/drm/nouveau' in kernel 
6.0 and in 6.0.3 there have been several NPE fixes, although they didn't appear 
directly related to your issue.
It could be, but it could also be that there are more.

[toc] | [prev] | [next] | [standalone]


#77302

From"Mathieu Parent (Debian)" <sathieu@debian.org>
Date2022-11-27 13:40 +0100
Message-ID<Fwp6V-6Gpt-3@gated-at.bofh.it>
In reply to#76568
On Fri, 21 Oct 2022 17:21:01 +0200 Diederik de Haas
<didi.debian@cknow.org> wrote:
> On woensdag 19 oktober 2022 18:47:06 CEST Ansgar wrote:
> > After upgrading to linux 6.0.2-1 I see the following message during boot:
> >
> > ...
> >
> > | [    3.858820] BUG: kernel NULL pointer dereference, address:
> > | 0000000000000020 [    3.858838] #PF: supervisor read access in kernel
> > | mode
> >
> > I only use the integrated Intel graphics, the Nvidia card is unused.
> >
> > There was no null pointer dereference with the previous kernel
> > (5.19.11-1 (2022-09-24)).
>
> Can you verify if the issue is also present on 6.0~rc7-1~exp1?
> I expect it does, but it's better to know then to assume.
>
> There have been quite some commit under 'drivers/gpu/drm/nouveau' in kernel
> 6.0 and in 6.0.3 there have been several NPE fixes, although they didn't appear
> directly related to your issue.
> It could be, but it could also be that there are more.

I think I have the same problem than Angsar. And still reprocude it
with 6.1~rc5-1~exp1:

[    2.347693] nouveau 0000:01:00.0: enabling device (0006 -> 0007)
[    2.347973] Console: switching to colour dummy device 80x25
[    2.348099] nouveau 0000:01:00.0: NVIDIA GK107 (0e7120a2)
[    2.363961] nouveau 0000:01:00.0: bios: version 80.07.59.00.0c
[    2.414698] usb 1-1: New USB device found, idVendor=8087,
idProduct=0024, bcdDevice= 0.00
[    2.414702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    2.415145] hub 1-1:1.0: USB hub found
[    2.415319] hub 1-1:1.0: 6 ports detected
[    2.430667] usb 2-1: New USB device found, idVendor=8087,
idProduct=0024, bcdDevice= 0.00
[    2.430671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    2.430999] hub 2-1:1.0: USB hub found
[    2.431042] hub 2-1:1.0: 8 ports detected
[    2.433009] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[    2.433620] ata1.00: ACPI cmd 00/00:00:00:00:00:a0(NOP) rejected by
device (Stat=0x51 Err=0x04)
[    2.433674] ata1.00: ATA-8: SAMSUNG SSD PM830 2.5" 7mm 512GB,
CXM03D1Q, max UDMA/133
[    2.433737] ata1.00: 1000215216 sectors, multi 16: LBA48 NCQ (depth 32), AA
[    2.434038] ata1.00: ACPI cmd 00/00:00:00:00:00:a0(NOP) rejected by
device (Stat=0x51 Err=0x04)
[    2.434122] ata1.00: configured for UDMA/133
[    2.435359] scsi 0:0:0:0: Direct-Access     ATA      SAMSUNG SSD
PM83 3D1Q PQ: 0 ANSI: 5
[    2.638562] i915 0000:00:02.0: [drm] VT-d active for gfx access
[    2.638566] i915 0000:00:02.0: vgaarb: deactivate vga console
[    2.638598] i915 0000:00:02.0: [drm] Transparent Hugepage support
is recommended for optimal performance when IOMMU is enabled!
[    2.638601] i915 0000:00:02.0: [drm] DMAR active, disabling use of
stolen memory
[    2.646770] nouveau 0000:01:00.0: fb: 2048 MiB GDDR5
[    2.683850] [drm] Initialized i915 1.6.0 20201103 for 0000:00:02.0 on minor 1
[    2.684119] ACPI: video: [Firmware Bug]: ACPI(PEGP) defines _DOD but not _DOS
[    2.684347] ACPI: video: Video Device [PEGP] (multi-head: yes  rom:
yes  post: no)
[    2.684507] input: Video Bus as
/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:38/LNXVIDEO:00/input/input6
[    2.685055] ACPI: video: Video Device [GFX0] (multi-head: yes  rom:
no  post: no)
[    2.685247] input: Video Bus as
/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:01/input/input7
[    2.702363] usb 1-1.5: new high-speed USB device number 3 using ehci-pci
[    2.718352] usb 2-1.5: new full-speed USB device number 3 using ehci-pci
[    2.721400] vga_switcheroo: enabled
[    2.721415] nouveau 0000:01:00.0: DRM: VRAM: 2048 MiB
[    2.721417] nouveau 0000:01:00.0: DRM: GART: 1048576 MiB
[    2.721419] nouveau 0000:01:00.0: DRM: TMDS table version 2.0
[    2.721421] nouveau 0000:01:00.0: DRM: DCB version 4.0
[    2.721422] nouveau 0000:01:00.0: DRM: DCB outp 00: 08800fd6 0f420020
[    2.721424] nouveau 0000:01:00.0: DRM: DCB outp 01: 08000f92 00020020
[    2.721425] nouveau 0000:01:00.0: DRM: DCB conn 00: 00001046
[    2.723196] nouveau 0000:01:00.0: DRM: MM: using COPY for buffer copies
[    2.725211] BUG: kernel NULL pointer dereference, address: 0000000000000020
[    2.725213] #PF: supervisor read access in kernel mode
[    2.725214] #PF: error_code(0x0000) - not-present page
[    2.725215] PGD 0 P4D 0
[    2.725217] Oops: 0000 [#1] PREEMPT_RT SMP PTI
[    2.725219] CPU: 3 PID: 203 Comm: systemd-udevd Not tainted
6.1.0-0-rt-amd64 #1  Debian 6.1~rc5-1~exp1
[    2.725221] Hardware name: Dell Inc. XPS L521X/029M77, BIOS A13 12/07/2012
[    2.725222] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[    2.725298] Code: e0 e5 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 15 d4 1f e6 48 8b 3c
24 4c
[    2.725299] RSP: 0018:ffffb45a8054b708 EFLAGS: 00010246
[    2.725301] RAX: 0000000000000000 RBX: ffffb45a8054b710 RCX: 0000000000000000
[    2.725302] RDX: 0000000000000028 RSI: ffffb45a8054b710 RDI: ffffb45a8054b738
[    2.725303] RBP: 0000000000000000 R08: ffffb45a8054b958 R09: 00000000ffffff8e
[    2.725304] R10: 0000000000000000 R11: 000000000000003f R12: ffff9e0489847508
[    2.725305] R13: ffffb45a8054b710 R14: 0000000000000008 R15: ffffb45a8054b730
[    2.725306] FS:  00007f2c9ec40d00(0000) GS:ffff9e07cf2c0000(0000)
knlGS:0000000000000000
[    2.725307] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.725308] CR2: 0000000000000020 CR3: 000000010163c002 CR4: 00000000001706e0
[    2.725310] Call Trace:
[    2.725312]  <TASK>
[    2.725315]  nvif_conn_hpd_status+0x35/0xe0 [nouveau]
[    2.725386]  nouveau_dp_detect+0x2f7/0x470 [nouveau]
[    2.725478]  ? migrate_enable+0xde/0x160
[    2.725482]  nouveau_connector_detect+0x9b/0x550 [nouveau]
[    2.725578]  drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
[    2.725595]  drm_helper_probe_single_connector_modes+0x31b/0x550
[drm_kms_helper]
[    2.725608]  ? __kmem_cache_alloc_node+0x12c/0x210
[    2.725612]  drm_client_modeset_probe+0x243/0x1660 [drm]
[    2.725647]  ? nouveau_cli_init+0x400/0x4a0 [nouveau]
[    2.725738]  ? recalibrate_cpu_khz+0x10/0x10
[    2.725741]  ? __pm_runtime_suspend+0x61/0x70
[    2.725745]  __drm_fb_helper_initial_config_and_unlock+0x44/0x530
[drm_kms_helper]
[    2.725759]  ? drm_client_init+0x133/0x160 [drm]
[    2.725792]  nouveau_fbcon_init+0x159/0x1d0 [nouveau]
[    2.725890]  nouveau_drm_device_init+0x1f8/0x7b0 [nouveau]
[    2.725982]  ? pci_update_current_state+0x6e/0xa0
[    2.725986]  nouveau_drm_probe+0x128/0x1f0 [nouveau]
[    2.726082]  ? rt_spin_unlock+0x13/0x40
[    2.726086]  local_pci_probe+0x41/0x80
[    2.726090]  pci_device_probe+0xc3/0x230
[    2.726092]  really_probe+0xde/0x380
[    2.726096]  ? pm_runtime_barrier+0x50/0x90
[    2.726098]  __driver_probe_device+0x78/0x170
[    2.726101]  driver_probe_device+0x1f/0x90
[    2.726103]  __driver_attach+0xd1/0x1d0
[    2.726106]  ? __device_attach_driver+0x110/0x110
[    2.726108]  bus_for_each_dev+0x87/0xd0
[    2.726111]  bus_add_driver+0x1b1/0x200
[    2.726113]  driver_register+0x89/0xe0
[    2.726116]  ? 0xffffffffc0c5b000
[    2.726118]  do_one_initcall+0x59/0x280
[    2.726122]  do_init_module+0x4a/0x200
[    2.726125]  __do_sys_finit_module+0xac/0x120
[    2.726129]  do_syscall_64+0x3a/0xc0
[    2.726133]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[    2.726136] RIP: 0033:0x7f2c9f3445a9
[    2.726138] Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00
90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 27 08 0d 00 f7 d8 64 89
01 48
[    2.726140] RSP: 002b:00007ffe76944e78 EFLAGS: 00000246 ORIG_RAX:
0000000000000139
[    2.726142] RAX: ffffffffffffffda RBX: 0000564c4da28500 RCX: 00007f2c9f3445a9
[    2.726143] RDX: 0000000000000000 RSI: 00007f2c9f4d6efd RDI: 0000000000000013
[    2.726144] RBP: 00007f2c9f4d6efd R08: 0000000000000000 R09: 0000564c4d9fb240
[    2.726145] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000020000
[    2.726145] R13: 0000000000000000 R14: 0000564c4da15a00 R15: 0000564c4c09be50
[    2.726148]  </TASK>
[    2.726148] Modules linked in: i915 nouveau(+) ahci drm_buddy
mxm_wmi libahci i2c_algo_bit crct10dif_pclmul crct10dif_common
crc32_pclmul drm_display_helper crc32c_intel libata cec sdhci_pci
ghash_clmulni_intel rc_core cqhci drm_ttm_helper sha512_ssse3 xhci_pci
sha512_generic ttm r8169 ehci_pci aesni_intel xhci_hcd drm_kms_helper
scsi_mod realtek sdhci ehci_hcd rtsx_pci_sdmmc i2c_i801 crypto_simd
mdio_devres drm usbcore psmouse cryptd libphy mmc_core rtsx_pci
lpc_ich i2c_smbus scsi_common usb_common battery video wmi button
[    2.726174] CR2: 0000000000000020
[    2.726274] ---[ end trace 0000000000000000 ]---
[    2.726275] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[    2.726368] Code: e0 e5 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 15 d4 1f e6 48 8b 3c
24 4c
[    2.726369] RSP: 0018:ffffb45a8054b708 EFLAGS: 00010246
[    2.726371] RAX: 0000000000000000 RBX: ffffb45a8054b710 RCX: 0000000000000000
[    2.726372] RDX: 0000000000000028 RSI: ffffb45a8054b710 RDI: ffffb45a8054b738
[    2.726373] RBP: 0000000000000000 R08: ffffb45a8054b958 R09: 00000000ffffff8e
[    2.726374] R10: 0000000000000000 R11: 000000000000003f R12: ffff9e0489847508
[    2.726374] R13: ffffb45a8054b710 R14: 0000000000000008 R15: ffffb45a8054b730
[    2.726375] FS:  00007f2c9ec40d00(0000) GS:ffff9e07cf2c0000(0000)
knlGS:0000000000000000
[    2.726377] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.726378] CR2: 0000000000000020 CR3: 000000010163c002 CR4: 00000000001706e0

Regards

Mathieu Parent

[toc] | [prev] | [next] | [standalone]


#77430 — Bug#1022068: Still found

FromMathieu Parent <math.parent@gmail.com>
Date2022-12-04 11:30 +0100
SubjectBug#1022068: Still found
Message-ID<FyUpX-8h3n-5@gated-at.bofh.it>
In reply to#76568
found  1022068 6.1~rc7-1~exp1
done

Still in latest experimental kernel. :-(

[toc] | [prev] | [next] | [standalone]


#77431 — Processed (with 2 errors): Still found

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-12-04 11:30 +0100
SubjectProcessed (with 2 errors): Still found
Message-ID<FyUpX-8h3n-9@gated-at.bofh.it>
In reply to#77430
Processing commands for control@bugs.debian.org:

> found  1022068 6.1~rc7-1~exp1
Bug #1022068 [src:linux] linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541
Marked as found in versions linux/6.1~rc7-1~exp1.
> done
Unknown command or malformed arguments to command.
> Still in latest experimental kernel. :-(
Unknown command or malformed arguments to command.
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
1022068: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022068
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]


#77629 — Bug#1022068: Still found

FromMathieu Parent <math.parent@gmail.com>
Date2022-12-16 14:30 +0100
SubjectBug#1022068: Still found
Message-ID<FDiWJ-b3Pi-1@gated-at.bofh.it>
In reply to#77430
found  1022068 6.1~rc8-1~exp1
upstream 1022068 https://gitlab.freedesktop.org/drm/nouveau/-/issues/188
thanks

Still in latest experimental kernel. :-(

I've found an upstream bug (every distro affected).

Cheers
-- 
Mathieu

[toc] | [prev] | [next] | [standalone]


#77775 — Bug#1022068: Reproduced

FromMathieu Parent <math.parent@gmail.com>
Date2022-12-31 10:10 +0100
SubjectBug#1022068: Reproduced
Message-ID<FIG2m-eyMo-19@gated-at.bofh.it>
In reply to#76568
found 1022068 6.1.1-1~exp2
thanks

Hello,

Reproduced (without much surprise) with 6.1.1-1~exp2.

I built linux from git (84e57d292203a45c96dbcb2e6be9dd80961d981a), to
see if I can reproduce the bug. Unfortunately, this kernel doesn't
boot (and I don't have much time to investigate).


[    2.739231] BUG: kernel NULL pointer dereference, address: 0000000000000020
[    2.739233] #PF: supervisor read access in kernel mode
[    2.739234] #PF: error_code(0x0000) - not-present page
[    2.739236] PGD 0 P4D 0
[    2.739238] Oops: 0000 [#1] PREEMPT_RT SMP PTI
[    2.739240] CPU: 2 PID: 215 Comm: systemd-udevd Not tainted
6.1.0-0-rt-amd64 #1  Debian 6.1.1-1~exp2
[    2.739242] Hardware name: Dell Inc. XPS L521X/029M77, BIOS A13 12/07/2012
[    2.739243] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[    2.739319] Code: 94 de 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 55 24 d3 de 48 8b 3c
24 4c
[    2.739321] RSP: 0018:ffffa98280c37608 EFLAGS: 00010246
[    2.739322] RAX: 0000000000000000 RBX: ffffa98280c37610 RCX: 0000000000000000
[    2.739323] RDX: 0000000000000028 RSI: ffffa98280c37610 RDI: ffffa98280c37638
[    2.739324] RBP: 0000000000000000 R08: ffffa98280c37860 R09: 00000000ffffff8e
[    2.739325] R10: 0000000000000000 R11: ffff8e1cdf5c6000 R12: ffff8e19c40a7508
[    2.739326] R13: ffffa98280c37610 R14: 0000000000000008 R15: ffffa98280c37630
[    2.739327] FS:  00007facb03abd00(0000) GS:ffff8e1ccf280000(0000)
knlGS:0000000000000000
[    2.739329] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.739330] CR2: 0000000000000020 CR3: 000000010194c003 CR4: 00000000001706e0
[    2.739331] Call Trace:
[    2.739334]  <TASK>
[    2.739337]  nvif_conn_hpd_status+0x35/0xe0 [nouveau]
[    2.739401]  nouveau_dp_detect+0x2f7/0x470 [nouveau]
[    2.739489]  ? migrate_enable+0xde/0x160
[    2.739493]  nouveau_connector_detect+0x9b/0x550 [nouveau]
[    2.739584]  drm_helper_probe_detect+0x84/0xb0 [drm_kms_helper]
[    2.739601]  drm_helper_probe_single_connector_modes+0x31b/0x550
[drm_kms_helper]
[    2.739615]  ? __kmem_cache_alloc_node+0x12c/0x210
[    2.739619]  drm_client_modeset_probe+0x243/0x1660 [drm]
[    2.739657]  ? nouveau_cli_init+0x400/0x4a0 [nouveau]
[    2.739745]  ? recalibrate_cpu_khz+0x10/0x10
[    2.739747]  ? __pm_runtime_suspend+0x61/0x70
[    2.739751]  __drm_fb_helper_initial_config_and_unlock+0x44/0x530
[drm_kms_helper]
[    2.739766]  ? drm_client_init+0x133/0x160 [drm]
[    2.739796]  nouveau_fbcon_init+0x159/0x1d0 [nouveau]
[    2.739882]  nouveau_drm_device_init+0x1f8/0x7b0 [nouveau]
[    2.739968]  ? pci_update_current_state+0x6e/0xa0
[    2.739972]  nouveau_drm_probe+0x128/0x1f0 [nouveau]
[    2.740057]  ? rt_spin_unlock+0x13/0x40
[    2.740061]  local_pci_probe+0x41/0x80
[    2.740064]  pci_device_probe+0xc3/0x230
[    2.740066]  really_probe+0xde/0x380
[    2.740070]  ? pm_runtime_barrier+0x50/0x90
[    2.740072]  __driver_probe_device+0x78/0x170
[    2.740075]  driver_probe_device+0x1f/0x90
[    2.740077]  __driver_attach+0xd1/0x1d0
[    2.740080]  ? __device_attach_driver+0x110/0x110
[    2.740083]  bus_for_each_dev+0x87/0xd0
[    2.740085]  bus_add_driver+0x1b1/0x200
[    2.740088]  driver_register+0x89/0xe0
[    2.740090]  ? 0xffffffffc0825000
[    2.740092]  do_one_initcall+0x59/0x280
[    2.740096]  do_init_module+0x4a/0x200
[    2.740099]  __do_sys_finit_module+0xac/0x120
[    2.740103]  do_syscall_64+0x5b/0xc0
[    2.740107]  ? fpregs_assert_state_consistent+0x22/0x50
[    2.740109]  ? exit_to_user_mode_prepare+0x3c/0x1c0
[    2.740111]  ? syscall_exit_to_user_mode+0x17/0x40
[    2.740114]  ? do_syscall_64+0x67/0xc0
[    2.740115]  ? do_syscall_64+0x67/0xc0
[    2.740117]  ? syscall_exit_to_user_mode+0x17/0x40
[    2.740119]  ? do_syscall_64+0x67/0xc0
[    2.740120]  ? syscall_exit_to_user_mode+0x17/0x40
[    2.740123]  ? do_syscall_64+0x67/0xc0
[    2.740124]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[    2.740126] RIP: 0033:0x7facb0ab65a9
[    2.740128] Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00
90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24
08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 27 08 0d 00 f7 d8 64 89
01 48
[    2.740130] RSP: 002b:00007fffd742f858 EFLAGS: 00000246 ORIG_RAX:
0000000000000139
[    2.740131] RAX: ffffffffffffffda RBX: 000055f070a5e8f0 RCX: 00007facb0ab65a9
[    2.740132] RDX: 0000000000000000 RSI: 00007facb0c49efd RDI: 0000000000000013
[    2.740133] RBP: 00007facb0c49efd R08: 0000000000000000 R09: 000055f070a32240
[    2.740134] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000020000
[    2.740135] R13: 0000000000000000 R14: 000055f070a5c610 R15: 000055f06f9efe50
[    2.740137]  </TASK>
[    2.740138] Modules linked in: hid i915 nouveau(+) ahci libahci
drm_buddy mxm_wmi i2c_algo_bit drm_display_helper crct10dif_pclmul
crct10dif_common crc32_pclmul crc32c_intel libata cec sdhci_pci r8169
rc_core cqhci xhci_pci ghash_clmulni_intel drm_ttm_helper sha512_ssse3
sha512_generic ttm ehci_pci realtek scsi_mod xhci_hcd drm_kms_helper
aesni_intel mdio_devres ehci_hcd i2c_i801 sdhci rtsx_pci_sdmmc drm
crypto_simd usbcore cryptd mmc_core psmouse libphy rtsx_pci
scsi_common lpc_ich i2c_smbus usb_common video battery wmi button
[    2.740163] CR2: 0000000000000020
[    2.740271] ---[ end trace 0000000000000000 ]---
[    2.740272] RIP: 0010:nvif_object_mthd+0xba/0x200 [nouveau]
[    2.740335] Code: 94 de 41 8d 56 20 49 8b 44 24 08 83 fa 17 0f 86
35 01 00 00 4c 39 e0 0f 84 ea 00 00 00 4c 89 63 10 31 c9 48 89 de c6
43 06 ff <48> 8b 78 20 48 8b 40 38 48 8b 40 28 e8 55 24 d3 de 48 8b 3c
24 4c
[    2.740337] RSP: 0018:ffffa98280c37608 EFLAGS: 00010246
[    2.740338] RAX: 0000000000000000 RBX: ffffa98280c37610 RCX: 0000000000000000
[    2.740339] RDX: 0000000000000028 RSI: ffffa98280c37610 RDI: ffffa98280c37638
[    2.740340] RBP: 0000000000000000 R08: ffffa98280c37860 R09: 00000000ffffff8e
[    2.740341] R10: 0000000000000000 R11: ffff8e1cdf5c6000 R12: ffff8e19c40a7508
[    2.740342] R13: ffffa98280c37610 R14: 0000000000000008 R15: ffffa98280c37630
[    2.740343] FS:  00007facb03abd00(0000) GS:ffff8e1ccf280000(0000)
knlGS:0000000000000000
[    2.740344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.740345] CR2: 0000000000000020 CR3: 000000010194c003 CR4: 00000000001706e0

Regards

-- 
Mathieu Parent

[toc] | [prev] | [next] | [standalone]


#77776 — Processed: Reproduced

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-12-31 10:10 +0100
SubjectProcessed: Reproduced
Message-ID<FIG2m-eyMo-25@gated-at.bofh.it>
In reply to#77775
Processing commands for control@bugs.debian.org:

> found 1022068 6.1.1-1~exp2
Bug #1022068 [src:linux] linux: kernel NULL pointer dereference in nouveau driver on Thinkpad W541
Marked as found in versions linux/6.1.1-1~exp2.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1022068: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022068
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web