Lenovo X1 Carbon 4th freezes after suspend-resume

[Jarno Seppänen]

I have a Lenovo X1 Carbon 4th generation and a fresh 16.04 LTS installation. The machine always freezes after suspend and resume. Sometimes the freeze happens a few seconds after resuming, so that I have been able to capture the dmesg errors, see below.

To me it seems like the same bug as in https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1570484 but I'm filing a separate bug as instructed in https://help.ubuntu.com/community/ReportingBugs.

Dmesg log:

[ 377.341710] ------------[ cut here ]------------
[ 377.341734] kernel BUG at /build/linux-Ay7j_C/linux-4.4.0/mm/rmap.c:411!
[ 377.341758] invalid opcode: 0000 [#2] SMP
[ 377.341775] Modules linked in: ctr ccm rfcomm bnep nls_iso8859_1 arc4 intel_rapl x86_pkg_temp_thermal intel_powerclam
p snd_soc_skl snd_hda_codec_hdmi acer_wmi snd_soc_skl_ipc snd_hda_ext_core snd_hda_codec_conexant sparse_keymap snd_hda_
codec_generic snd_soc_sst_ipc coretemp snd_soc_sst_dsp snd_soc_core kvm snd_compress ac97_bus snd_pcm_dmaengine dw_dmac_
core irqbypass snd_hda_intel input_leds snd_hda_codec iwlmvm joydev snd_hda_core mac80211 snd_hwdep serio_raw snd_pcm uv
cvideo videobuf2_vmalloc videobuf2_memops qcserial cdc_mbim cdc_wdm usb_wwan iwlwifi cdc_ncm videobuf2_v4l2 usbnet usbse
rial mii videobuf2_core rtsx_pci_ms v4l2_common cfg80211 videodev memstick media btusb snd_seq_midi btrtl snd_seq_midi_e
vent thinkpad_acpi btbcm btintel nvram bluetooth snd_rawmidi mei_me shpchp mei snd_seq snd_seq_device
[ 377.342074] snd_timer snd soundcore mac_hid parport_pc ppdev lp parport autofs4 drbg ansi_cprng algif_skcipher af_al
g dm_crypt crct10dif_pclmul crc32_pclmul rtsx_pci_sdmmc aesni_intel aes_x86_64 lrw i915_bpo gf128mul glue_helper ablk_he
lper cryptd intel_ips psmouse e1000e i2c_algo_bit drm_kms_helper ptp syscopyarea pps_core sysfillrect sysimgblt fb_sys_f
ops nvme drm rtsx_pci wmi video fjes
[ 377.342209] CPU: 1 PID: 5361 Comm: systemd-udevd Tainted: G D 4.4.0-21-generic #37-Ubuntu
[ 377.342234] Hardware name: LENOVO 20FB0043MS/20FB0043MS, BIOS N1FET37W (1.11 ) 03/15/2016
[ 377.342256] task: ffff8803b7958000 ti: ffff88040b654000 task.ti: ffff88040b654000
[ 377.342277] RIP: 0010:[<ffffffff811cb86f>] [<ffffffff811cb86f>] unlink_anon_vmas+0x17f/0x1f0
[ 377.342304] RSP: 0018:ffff88040b657d58 EFLAGS: 00010202
[ 377.342318] RAX: ffff88040d26ddb0 RBX: ffff88040b4c1e00 RCX: 0000000180400007
[ 377.342337] RDX: 000000000000001a RSI: ffffea00102d3040 RDI: ffff880035132c80
[ 377.342356] RBP: ffff88040b657d90 R08: 000000000b4c1d01 R09: 0000000180400007
[ 377.342375] R10: ffff88040b4c1dc0 R11: ffff88040b4c1e20 R12: ffff88040b4c1e00
[ 377.342394] R13: ffff88040d26ddb0 R14: ffff88040d26ddc0 R15: ffff880035132c80
[ 377.342414] FS: 0000000000000000(0000) GS:ffff880421440000(0000) knlGS:0000000000000000
[ 377.342435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 377.342451] CR2: 000055d1d1b6f160 CR3: 000000040b67d000 CR4: 00000000003406e0
[ 377.342470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 377.342489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 377.342508] Stack:
[ 377.342514] ffffffff811c4002 ffff88040d26dd48 ffff88040d26de10 00007f62d4277000
[ 377.342539] 0000000000000000 ffff88040b657de8 ffff88040d26dd48 ffff88040b657dd0
[ 377.342562] ffffffff811bd1b1 0000000000000000 0000000000000000 ffff88040901a1c0
[ 377.342586] Call Trace:
[ 377.342594] [<ffffffff811c4002>] ? __remove_shared_vm_struct+0x32/0x40
[ 377.342615] [<ffffffff811bd1b1>] free_pgtables+0xa1/0x120
[ 377.342630] [<ffffffff811c7c71>] exit_mmap+0xc1/0x170
[ 377.342646] [<ffffffff8107de07>] mmput+0x57/0x130
[ 377.342661] [<ffffffff81083b3d>] do_exit+0x27d/0xae0
[ 377.342676] [<ffffffff81084423>] do_group_exit+0x43/0xb0
[ 377.342691] [<ffffffff810844a4>] SyS_exit_group+0x14/0x20
[ 377.342710] [<ffffffff818244f2>] entry_SYSCALL_64_fastpath+0x16/0x71
[ 377.342727] Code: 48 89 43 18 e8 43 06 02 00 49 8b 44 24 10 49 8d 54 24 10 48 83 e8 10 49 39 d6 74 2f 49 8b 7c 24 08
4c 89 e3 8b 57 34 85 d2 74 9b <0f> 0b e8 ba fd ff ff eb 9b 48 8b 45 d0 45 31 e4 48 8b 80 88 00
[ 377.342833] RIP [<ffffffff811cb86f>] unlink_anon_vmas+0x17f/0x1f0
[ 377.342852] RSP <ffff88040b657d58>
[ 377.342863] ---[ end trace 89ca45209ebd1854 ]---
[ 377.342864] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
[ 377.342866] IP: [<ffffffff811b8cc3>] anon_vma_interval_tree_remove+0x133/0x250
[ 377.342867] PGD 0
[ 377.342868] Oops: 0000 [#3] SMP
[ 377.342888] Modules linked in: ctr ccm rfcomm bnep nls_iso8859_1 arc4 intel_rapl x86_pkg_temp_thermal intel_powerclam
p snd_soc_skl snd_hda_codec_hdmi acer_wmi snd_soc_skl_ipc snd_hda_ext_core snd_hda_codec_conexant sparse_keymap snd_hda_
codec_generic snd_soc_sst_ipc coretemp snd_soc_sst_dsp snd_soc_core kvm snd_compress ac97_bus snd_pcm_dmaengine dw_dmac_
core irqbypass snd_hda_intel input_leds snd_hda_codec iwlmvm joydev snd_hda_core mac80211 snd_hwdep serio_raw snd_pcm uv
cvideo videobuf2_vmalloc videobuf2_memops qcserial cdc_mbim cdc_wdm usb_wwan iwlwifi cdc_ncm videobuf2_v4l2 usbnet usbse
rial mii videobuf2_core rtsx_pci_ms v4l2_common cfg80211 videodev memstick media btusb snd_seq_midi btrtl snd_seq_midi_e
vent thinkpad_acpi btbcm btintel nvram bluetooth snd_rawmidi mei_me shpchp mei snd_seq snd_seq_device
[ 377.342898] snd_timer snd soundcore mac_hid parport_pc ppdev lp parport autofs4 drbg ansi_cprng algif_skcipher af_al
g dm_crypt crct10dif_pclmul crc32_pclmul rtsx_pci_sdmmc aesni_intel aes_x86_64 lrw i915_bpo gf128mul glue_helper ablk_he
lper cryptd intel_ips psmouse e1000e i2c_algo_bit drm_kms_helper ptp syscopyarea pps_core sysfillrect sysimgblt fb_sys_f
ops nvme drm rtsx_pci wmi video fjes
[ 377.342900] CPU: 3 PID: 5352 Comm: systemd-udevd Tainted: G D 4.4.0-21-generic #37-Ubuntu
[ 377.342901] Hardware name: LENOVO 20FB0043MS/20FB0043MS, BIOS N1FET37W (1.11 ) 03/15/2016
[ 377.342901] task: ffff8803f1d61d80 ti: ffff8803b7a54000 task.ti: ffff8803b7a54000
[ 377.342903] RIP: 0010:[<ffffffff811b8cc3>] [<ffffffff811b8cc3>] anon_vma_interval_tree_remove+0x133/0x250
[ 377.342904] RSP: 0018:ffff8803b7a57d40 EFLAGS: 00010286
[ 377.342905] RAX: ffff8800357503a0 RBX: ffff8800357503a0 RCX: 0000000000000000
[ 377.342905] RDX: ffff880409bd23e1 RSI: ffff880035132cc0 RDI: ffff8803b79a5900
[ 377.342906] RBP: ffff8803b7a57d48 R08: 0000000000000000 R09: 000000000000003f
[ 377.342906] R10: 0000000000000000 R11: ffff8803b79a5920 R12: ffff880035132c80
[ 377.342907] R13: ffff8803c23049c8 R14: ffff8803c23049d8 R15: ffff880035132c80
[ 377.342908] FS: 0000000000000000(0000) GS:ffff8804214c0000(0000) knlGS:0000000000000000
[ 377.342909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 377.342909] CR2: 0000000000000008 CR3: 00000003b7904000 CR4: 00000000003406e0
[ 377.342910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 377.342911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 377.342911] Stack:
[ 377.342912] ffff8803b79a5900 ffff8803b7a57d90 ffffffff811cb7a9 ffffffff811c4002
[ 377.342914] ffff8803c2304960 ffff8803c2304a28 00007f62d4277000 0000000000000000
[ 377.342915] ffff8803b7a57de8 ffff8803c2304960 ffff8803b7a57dd0 ffffffff811bd1b1
[ 377.342915] Call Trace:
[ 377.342917] [<ffffffff811cb7a9>] unlink_anon_vmas+0xb9/0x1f0
[ 377.342918] [<ffffffff811c4002>] ? __remove_shared_vm_struct+0x32/0x40
[ 377.342920] [<ffffffff811bd1b1>] free_pgtables+0xa1/0x120
[ 377.342921] [<ffffffff811c7c71>] exit_mmap+0xc1/0x170
[ 377.342922] [<ffffffff8107de07>] mmput+0x57/0x130
[ 377.342924] [<ffffffff81083b3d>] do_exit+0x27d/0xae0
[ 377.342925] [<ffffffff81084423>] do_group_exit+0x43/0xb0
[ 377.342927] [<ffffffff810844a4>] SyS_exit_group+0x14/0x20
[ 377.342929] [<ffffffff818244f2>] entry_SYSCALL_64_fastpath+0x16/0x71
[ 377.342944] Code: 0f 84 cf 00 00 00 49 83 c8 01 48 89 10 4d 89 02 45 31 c0 48 85 c0 75 0f eb 6a 48 89 50 18 48 8b 00 48 83 e0 fc 74 49 48 8b 48 e0 <48> 8b 51 08 48 2b 11 48 8b 89 98 00 00 00 48 c1 ea 0c 48 8d 54
[ 377.342945] RIP [<ffffffff811b8cc3>] anon_vma_interval_tree_remove+0x133/0x250
[ 377.342946] RSP <ffff8803b7a57d40>
[ 377.342946] CR2: 0000000000000008
[ 377.342947] ---[ end trace 89ca45209ebd1855 ]---
[ 377.342948] Fixing recursive fault but reboot is needed!
[ 377.342964] Fixing recursive fault but reboot is needed!
[ 377.344253] BUG: unable to handle kernel NULL pointer dereference at (null)
[ 377.344292] IP: [<ffffffff811bd61b>] unmap_page_range+0xeb/0x7a0
[ 377.346069] PGD 0
[ 377.347813] Oops: 0000 [#4] SMP
[ 377.349534] Modules linked in: ctr ccm rfcomm bnep nls_iso8859_1 arc4 intel_rapl x86_pkg_temp_thermal intel_powerclamp snd_soc_skl snd_hda_codec_hdmi acer_wmi snd_soc_skl_ipc snd_hda_ext_core snd_hda_codec_conexant sparse_keymap snd_hda_codec_generic snd_soc_sst_ipc coretemp snd_soc_sst_dsp snd_soc_core kvm snd_compress ac97_bus snd_pcm_dmaengine dw_dmac_core irqbypass snd_hda_intel input_leds snd_hda_codec iwlmvm joydev snd_hda_core mac80211 snd_hwdep serio_raw snd_pcm uvcvideo videobuf2_vmalloc videobuf2_memops qcserial cdc_mbim cdc_wdm usb_wwan iwlwifi cdc_ncm videobuf2_v4l2 usbnet usbserial mii videobuf2_core rtsx_pci_ms v4l2_common cfg80211 videodev memstick media btusb snd_seq_midi btrtl snd_seq_midi_event thinkpad_acpi btbcm btintel nvram bluetooth snd_rawmidi mei_me shpchp mei snd_seq snd_seq_device
[ 377.352911] snd_timer snd soundcore mac_hid parport_pc ppdev lp parport autofs4 drbg ansi_cprng algif_skcipher af_alg dm_crypt crct10dif_pclmul crc32_pclmul rtsx_pci_sdmmc aesni_intel aes_x86_64 lrw i915_bpo gf128mul glue_helper ablk_helper cryptd intel_ips psmouse e1000e i2c_algo_bit drm_kms_helper ptp syscopyarea pps_core sysfillrect sysimgblt fb_sys_fops nvme drm rtsx_pci wmi video fjes
[ 377.356099] CPU: 3 PID: 5356 Comm: systemd-udevd Tainted: G D 4.4.0-21-generic #37-Ubuntu
[ 377.357568] Hardware name: LENOVO 20FB0043MS/20FB0043MS, BIOS N1FET37W (1.11 ) 03/15/2016
[ 377.359011] task: ffff8803f1e1bb00 ti: ffff8800be7e4000 task.ti: ffff8800be7e4000
[ 377.360464] RIP: 0010:[<ffffffff811bd61b>] [<ffffffff811bd61b>] unmap_page_range+0xeb/0x7a0
[ 377.361920] RSP: 0018:ffff8800be7e7c88 EFLAGS: 00010287
[ 377.363358] RAX: 0000000000000000 RBX: 0000008000000000 RCX: 0000000000000000
[ 377.364797] RDX: ffff88040d8b8780 RSI: ffff88040bdfda28 RDI: ffff8800be7e7de8
[ 377.366242] RBP: ffff8800be7e7d60 R08: 0000000000000000 R09: 00007fe8792c8000
[ 377.367673] R10: 0000000000000000 R11: ffffffff81ccc462 R12: 00007fe8792c8000
[ 377.369084] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8800be7e7de8
[ 377.370437] FS: 0000000000000000(0000) GS:ffff8804214c0000(0000) knlGS:0000000000000000
[ 377.371831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 377.373190] CR2: 0000000000000000 CR3: 0000000035243000 CR4: 00000000003406e0
[ 377.374552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 377.376017] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 377.377374] Stack:
[ 377.378733] ffffffff811bdacb 00007fe8792c7fff ffff8803f1e1bb00 00007f62d5738fff
[ 377.380168] 00007f62d5738fff 0000000000000000 ffff8800be79ac60 00003ffffffff000
[ 377.381574] ffffea0002f80530 00007fe8792c8000 0000008000000000 00007f62d5739000
[ 377.382941] Call Trace:
[ 377.384335] [<ffffffff811bdacb>] ? unmap_page_range+0x59b/0x7a0
[ 377.385685] [<ffffffff811bdd4d>] unmap_single_vma+0x7d/0xe0
[ 377.387045] [<ffffffff811be741>] unmap_vmas+0x51/0xa0
[ 377.388437] [<ffffffff811c7c57>] exit_mmap+0xa7/0x170
[ 377.389791] [<ffffffff8107de07>] mmput+0x57/0x130
[ 377.391133] [<ffffffff81083b3d>] do_exit+0x27d/0xae0
[ 377.392528] [<ffffffff81084423>] do_group_exit+0x43/0xb0
[ 377.393882] [<ffffffff810844a4>] SyS_exit_group+0x14/0x20
[ 377.395274] [<ffffffff818244f2>] entry_SYSCALL_64_fastpath+0x16/0x71
[ 377.396661] Code: e8 48 21 d8 48 89 c3 48 83 e8 01 48 3b 85 30 ff ff ff 48 89 d8 48 0f 43 85 70 ff ff ff 48 89 85 78 ff ff ff 48 8b 85 50 ff ff ff <48> 8b 38 48 85 ff 0f 84 b9 05 00 00 48 b8 fb 0f 00 00 00 c0 ff
[ 377.398184] RIP [<ffffffff811bd61b>] unmap_page_range+0xeb/0x7a0
[ 377.399631] RSP <ffff8800be7e7c88>
[ 377.401037] CR2: 0000000000000000
[ 377.402440] ---[ end trace 89ca45209ebd1856 ]---
[ 377.402441] Fixing recursive fault but reboot is needed!
[ 379.574857] wlp4s0: authenticate with 00:1d:73:9f:06:d8
[ 379.585926] wlp4s0: send auth to 00:1d:73:9f:06:d8 (try 1/3)
[ 379.591789] wlp4s0: authenticated
[ 379.594068] wlp4s0: associate with 00:1d:73:9f:06:d8 (try 1/3)
[ 379.597911] wlp4s0: RX AssocResp from 00:1d:73:9f:06:d8 (capab=0x431 status=0 aid=6)
[ 379.610175] wlp4s0: associated
[ 379.610212] IPv6: ADDRCONF(NETDEV_CHANGE): wlp4s0: link becomes ready

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: linux-image-4.4.0-21-generic 4.4.0-21.37
ProcVersionSignature: Ubuntu 4.4.0-21.37-generic 4.4.6
Uname: Linux 4.4.0-21-generic x86_64
ApportVersion: 2.20.1-0ubuntu2
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: jarno 1752 F.... pulseaudio
CurrentDesktop: Unity
Date: Thu May 5 17:06:03 2016
HibernationDevice: RESUME=UUID=c11e0bbb-92c6-4f66-8d67-23fe0ebf1fcc
InstallationDate: Installed on 2016-04-21 (13 days ago)
InstallationMedia: Ubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420.1)
MachineType: LENOVO 20FB0043MS
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-4.4.0-21-generic.efi.signed root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
RelatedPackageVersions:
 linux-restricted-modules-4.4.0-21-generic N/A
 linux-backports-modules-4.4.0-21-generic N/A
 linux-firmware 1.157
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 03/15/2016
dmi.bios.vendor: LENOVO
dmi.bios.version: N1FET37W (1.11 )
dmi.board.asset.tag: Not Available
dmi.board.name: 20FB0043MS
dmi.board.vendor: LENOVO
dmi.board.version: SDK0J40705 WIN
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: None
dmi.modalias: dmi:bvnLENOVO:bvrN1FET37W(1.11):bd03/15/2016:svnLENOVO:pn20FB0043MS:pvrThinkPadX1Carbon4th:rvnLENOVO:rn20FB0043MS:rvrSDK0J40705WIN:cvnLENOVO:ct10:cvrNone:
dmi.product.name: 20FB0043MS
dmi.product.version: ThinkPad X1 Carbon 4th
dmi.sys.vendor: LENOVO

[Brad Figg (brad-figg)]

This change was made by a bot.

[Jarno Seppänen (u-ubuptu-2)]

I tested the v4.6-rc6-wily mainline kernel from http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.6-rc6-wily/ and that fixes the problem, suspend-resume works without freezing! I repeated the suspend-resume cycle five times without problems.

The kernel is: 4.6.0-040600rc6-generic #201605012031 SMP Mon May 2 00:33:26 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Adding kernel-fixed-upstream tag as suggested in https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1570484/comments/3

[Joseph Salisbury (jsalisbury)]

I'd like to perform a reverse bisect to identify the commit that fixes this bug in 4.6-rc6. To do that, we first need to identify the last bad kernel and first good kernel. Can you test the v4.6-rc5 kernel next and see if it also fixes the bug? If it does, we would next need to test 4.6-rc4, etc.

The 4.6-rc5 kernel can be downloaded from:
http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.6-rc5-wily/

The other 4.6 release candidates and earlier upstream kernels can all be downloaded from:
http://kernel.ubuntu.com/~kernel-ppa/mainline/

[Jarno Seppänen (u-ubuptu-2)]

Hi,
suspend-resume works in v4.6-rc2-wily. Unfortunately, v4.6-rc1-wily doesn't boot on my machine; after grub, the screen is just black and CPU fan starts spinning with max speed. I have UEFI boot and LVM full disk encryption, if that helps.

Jarno

[Joseph Salisbury (jsalisbury)]

Can you test v4.5 final? It can be downloaded from:
http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.5-wily/

[Jarno Seppänen (u-ubuptu-2)]

Tested v4.5-wily, and it doesn't boot either, same symptoms as with v4.6-rc1-wily: black screen, CPU fan spinning.

[Eric Desrochers (slashd)]

Is anyone still impacted by this bug wit later Ubuntu-4.4.0-*-generic kernel ?