[Intel-gfx] NULL pointer dereference in intel_fb_obj_invalidate
Christian Hesse
list at eworm.de
Fri Feb 26 08:31:16 UTC 2016
Hello everybody,
I am running a Lenovo Thinkpad X250 with this graphics controller:
00:02.0 VGA compatible controller: Intel Corporation Broadwell-U Integrated
Graphics (rev 09)
Everything works just fine when using the integrated display.
The notebook is connected to a docking station with two connected display
ports. With light-locker I can lock and unlock the screen once, system panics
with a kernel NULL pointer dereference in intel_fb_obj_invalidate the second
time.
Screen 0: minimum 8 x 8, current 3840 x 1080, maximum 32767 x 32767
eDP1 connected (normal left inverted right x axis y axis)
1920x1080 60.04 +
1400x1050 59.98
1600x900 60.00
1280x1024 60.02
1280x960 60.00
1368x768 60.00
1280x720 60.00
1024x768 60.00
1024x576 60.00
960x540 60.00
800x600 60.32 56.25
864x486 60.00
640x480 59.94
720x405 60.00
640x360 60.00
DP1 disconnected (normal left inverted right x axis y axis)
DP2 disconnected (normal left inverted right x axis y axis)
DP2-1 connected primary 1920x1080+0+0 (normal left inverted right x axis y axis) 521mm x 293mm
1920x1080 60.00*+ 50.00 59.94
1680x1050 59.88
1600x900 60.00
1280x1024 75.02 60.02
1440x900 59.90
1280x800 59.91
1152x864 75.00
1280x720 60.00 50.00 59.94
1024x768 75.08 70.07 60.00
832x624 74.55
800x600 72.19 75.00 60.32 56.25
720x576 50.00
720x480 60.00 59.94
640x480 75.00 72.81 66.67 60.00 59.94
720x400 70.08
DP2-2 connected 1920x1080+1920+0 (normal left inverted right x axis y axis) 521mm x 293mm
1920x1080 60.00*+ 50.00 59.94
1680x1050 59.88
1600x900 60.00
1280x1024 75.02 60.02
1440x900 59.90
1280x800 59.91
1152x864 75.00
1280x720 60.00 50.00 59.94
1024x768 75.08 70.07 60.00
832x624 74.55
800x600 72.19 75.00 60.32 56.25
720x576 50.00
720x480 60.00 59.94
640x480 75.00 72.81 66.67 60.00 59.94
720x400 70.08
DP2-3 disconnected (normal left inverted right x axis y axis)
HDMI1 disconnected (normal left inverted right x axis y axis)
HDMI2 disconnected (normal left inverted right x axis y axis)
VIRTUAL1 disconnected (normal left inverted right x axis y axis)
kernel: BUG: unable to handle kernel NULL pointer dereference at 0000000000000060
kernel: IP: [<ffffffffa06978dc>] intel_fb_obj_invalidate+0x1c/0xf0 [i915]
kernel: PGD c2f70067 PUD c2e8b067 PMD 0
kernel: Oops: 0000 [#1] PREEMPT SMP
kernel: Modules linked in: fuse pci_stub vboxpci(O) bridge acpi_call(O) stp llc nf_log_ipv6 nf_log_ipv4 nf_log_common nft_redir_ipv4 nft_redir nf_nat_redirect nft_log nft_reject_inet nf_reject_ipv4 nf_reject_ ipv6 nft_reject nft_limit nft_meta nf_conntrack_ipv6 nf_defrag_ipv6 nft_ct nft_hash nft_rbtree nft_masq_ipv4 nf_nat_masquerade_ipv4 nft_masq nft_chain_nat_ipv4 nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack nf_tables_inet nf_tables_ipv6 nf_tables_ipv4 nf_tables nfnetlink sch_fq_codel zram lz4_compress vboxnetflt(O) vboxnetadp(O) snd_hda_codec_hdmi vboxdrv(O) iTCO_wdt iTCO_vendor_support nls_iso8859_1 usbserial udf crc_itu_t uas usb_storage tun nfs lockd grace sunrpc fscache loop iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi hfsplus hfs xfs libcrc32c intel_rapl crc32c_generic
kernel: iosf_mbi nls_cp437 vfat x86_pkg_temp_thermal fat intel_powerclamp coretemp squashfs isofs kvm_intel btrfs kvm cdc_ether usbnet irqbypass r8152 btusb btrtl btbcm xor btintel snd_hda_codec_realtek mii mousedev joydev arc4 bluetooth snd_hda_codec_generic iwlmvm mac80211 pcspkr evdev input_leds mac_hid psmouse serio_raw iwlwifi intel_pch_thermal i2c_i801 rtsx_pci_ms cfg80211 memstick thermal lpc_ich wmi i915 mei_me drm_kms_helper mei snd_hda_intel thinkpad_acpi battery snd_hda_codec nvram led_class ac rfkill snd_hda_core e1000e drm snd_hwdep ptp pps_core intel_gtt snd_pcm syscopyarea sysfillrect sysimgblt fb_sys_fops i2c_algo_bit fjes video snd_timer snd button shpchp soundcore tpm_tis tpm raid6_pq dummy dm_snapshot dm_bufio processor cdrom ip_tables x_tables ext4 crc16 mbcache jbd2 sha256_ssse3
kernel: sha256_generic hmac drbg ansi_cprng dm_crypt algif_skcipher af_alg hid_generic usbhid hid dm_mod sd_mod rtsx_pci_sdmmc mmc_core atkbd libps2 crct10dif_pclmul crc32_pclmul crc32c_intel aesni_intel aes _x86_64 lrw gf128mul glue_helper ablk_helper cryptd ahci libahci libata scsi_mod ehci_pci xhci_pci ehci_hcd xhci_hcd rtsx_pci usbcore usb_common i8042 serio
kernel: CPU: 1 PID: 1417 Comm: Xorg Tainted: G U W O 4.4.2-1-ARCH #1
kernel: Hardware name: LENOVO 20CLS06D00/20CLS06D00, BIOS N10ET41W (1.20 ) 01/19/2016
kernel: task: ffff88022312b700 ti: ffff8800c2d70000 task.ti: ffff8800c2d70000
kernel: RIP: 0010:[<ffffffffa06978dc>] [<ffffffffa06978dc>] intel_fb_obj_invalidate+0x1c/0xf0 [i915]
kernel: RSP: 0018:ffff8800c2d73a58 EFLAGS: 00010246
kernel: RAX: ffff88022312b700 RBX: ffff8801e9ae4400 RCX: 00000000315bb001
kernel: RDX: ffff8800c7c3b300 RSI: 0000000000000000 RDI: ffff8801e9ae4400
kernel: RBP: ffff8800c2d73a80 R08: 0000000000018ac0 R09: ffffffffa0489cf6
kernel: R10: ffffea000062e100 R11: ffff88018107cd80 R12: 0000000000000000
kernel: R13: 0000000000000000 R14: 0000000000200001 R15: 0000000000000080
kernel: FS: 00007f5216994940(0000) GS:ffff88022dc40000(0000) knlGS:0000000000000000
kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kernel: CR2: 0000000000000060 CR3: 00000000c2f69000 CR4: 00000000003406e0
kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
kernel: DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
kernel: Stack:
kernel: ffff880222b51100 ffff88022165d800 0000000000000000 0000000000200001
kernel: 0000000000000080 ffff8800c2d73aa0 ffffffffa06a1403 000000008133c5bf
kernel: ffff8800c2d73c48 ffff8800c2d73c18 ffffffff8133c506 ffff88022165d860
kernel: Call Trace:
kernel: [<ffffffffa06a1403>] intel_fbdev_set_par+0x43/0x60 [i915]
kernel: [<ffffffff8133c506>] fb_set_var+0x236/0x460
kernel: [<ffffffff811f2a16>] ? do_sys_poll+0x146/0x570
kernel: [<ffffffff810a9ead>] ? update_curr+0x7d/0x160
kernel: [<ffffffff813331af>] fbcon_blank+0x30f/0x350
kernel: [<ffffffff8109e699>] ? ttwu_do_wakeup+0x19/0xe0
kernel: [<ffffffff813af913>] do_unblank_screen+0xc3/0x190
kernel: [<ffffffff813a58a9>] complete_change_console+0x59/0xe0
kernel: [<ffffffff813a6040>] vt_ioctl+0x710/0x12e0
kernel: [<ffffffff81192d0d>] ? do_wp_page+0xdd/0x610
kernel: [<ffffffffa04707e9>] ? drm_ioctl+0x189/0x540 [drm]
kernel: [<ffffffff8139a181>] tty_ioctl+0x361/0xc30
kernel: [<ffffffff81195a10>] ? handle_mm_fault+0xa20/0x1980
kernel: [<ffffffff811f0b68>] do_vfs_ioctl+0x298/0x480
kernel: [<ffffffff811fabe7>] ? __fget+0x77/0xb0
kernel: [<ffffffff811f0dc9>] SyS_ioctl+0x79/0x90
kernel: [<ffffffff81591cee>] entry_SYSCALL_64_fastpath+0x12/0x71
kernel: Code: 41 5f 5d c3 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 41 89 f5 53 4c 8b 67 08 48 89 fb <41> 8b 44 24 60 4d 8b 74 24 28 83 f8 01 74 58 8b b3 5c 01 00 00
kernel: RIP [<ffffffffa06978dc>] intel_fb_obj_invalidate+0x1c/0xf0 [i915]
kernel: RSP <ffff8800c2d73a58>
kernel: CR2: 0000000000000060
kernel: ---[ end trace bc44be530a8de325 ]---
I tried Linus' git tree (4.5rc5.r189.g84e54c4), but that is even worse: It
freezes on first try and log does not contain anything.
Any chance to get that fixed? Thanks!
--
main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <https://lists.freedesktop.org/archives/intel-gfx/attachments/20160226/efa50708/attachment-0001.sig>
More information about the Intel-gfx
mailing list