kernel NULL pointer dereference on displayport connection loss

Bug #2025152 reported by Michal Petrucha
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

I run this laptop with two external screens, using displayport daisy chaining, connected over USB-C. This crash happens when the daisy-chained screen loses connection. Here's a trace from the syslog:

2023-06-27T14:03:46.539822+02:00 parahippus kernel: [518130.334914] [drm] DM_MST: stopping TM on aconnector: 00000000b0b244c1 [id: 90]
2023-06-27T14:03:47.315820+02:00 parahippus kernel: [518131.110966] [drm] DP Alt mode state on HPD: 1
2023-06-27T14:03:47.439805+02:00 parahippus kernel: [518131.235885] [drm] DM_MST: starting TM on aconnector: 00000000b0b244c1 [id: 90]
2023-06-27T14:03:50.898600+02:00 parahippus kernel: [518132.646219] BUG: kernel NULL pointer dereference, address: 0000000000000008
2023-06-27T14:03:50.898614+02:00 parahippus kernel: [518132.646229] #PF: supervisor read access in kernel mode
2023-06-27T14:03:50.898616+02:00 parahippus kernel: [518132.646234] #PF: error_code(0x0000) - not-present page
2023-06-27T14:03:50.898619+02:00 parahippus kernel: [518132.646238] PGD 0 P4D 0
2023-06-27T14:03:50.898621+02:00 parahippus kernel: [518132.646244] Oops: 0000 [#1] PREEMPT SMP NOPTI
2023-06-27T14:03:50.898623+02:00 parahippus kernel: [518132.646250] CPU: 0 PID: 1130 Comm: Xorg Tainted: G OE 6.2.0-23-generic #23-Ubuntu
2023-06-27T14:03:50.898625+02:00 parahippus kernel: [518132.646256] Hardware name: TUXEDO TUXEDO Aura 15 Gen1/NL5xRU, BIOS 1.07.11RTR2 01/30/2023
2023-06-27T14:03:50.898627+02:00 parahippus kernel: [518132.646260] RIP: 0010:drm_dp_add_payload_part2+0xfe/0x130 [drm_display_helper]
2023-06-27T14:03:50.898629+02:00 parahippus kernel: [518132.646297] Code: e8 37 7e 2c f0 44 89 f0 5b 41 5c 41 5d 41 5e 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 e9 b9 c2 8b f0 48 8b 80 58 05 00 00 <48> 8b 76 08 4c 8b 40 60 48 85 f6 74 04 48 8b 76 08 48 c7 c1 08 87
2023-06-27T14:03:50.898630+02:00 parahippus kernel: [518132.646302] RSP: 0018:ffffb8250307b5b8 EFLAGS: 00010246
2023-06-27T14:03:50.898632+02:00 parahippus kernel: [518132.646307] RAX: ffff900132cf6000 RBX: ffff900132cf6000 RCX: 0000000000000000
2023-06-27T14:03:50.898633+02:00 parahippus kernel: [518132.646311] RDX: ffff90013937e980 RSI: 0000000000000000 RDI: ffff900022a8a568
2023-06-27T14:03:50.898635+02:00 parahippus kernel: [518132.646314] RBP: ffffb8250307b5d8 R08: 0000000000000000 R09: 0000000000000000
2023-06-27T14:03:50.898637+02:00 parahippus kernel: [518132.646317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
2023-06-27T14:03:50.898638+02:00 parahippus kernel: [518132.646320] R13: ffff900022a8a000 R14: ffff900021bb48a0 R15: 0000000000000006
2023-06-27T14:03:50.898639+02:00 parahippus kernel: [518132.646324] FS: 00007f26efa1ca80(0000) GS:ffff9006ef600000(0000) knlGS:0000000000000000
2023-06-27T14:03:50.898641+02:00 parahippus kernel: [518132.646328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2023-06-27T14:03:50.898642+02:00 parahippus kernel: [518132.646332] CR2: 0000000000000008 CR3: 000000010e9a6000 CR4: 0000000000350ef0
2023-06-27T14:03:50.898644+02:00 parahippus kernel: [518132.646336] Call Trace:
2023-06-27T14:03:50.898645+02:00 parahippus kernel: [518132.646339] <TASK>
2023-06-27T14:03:50.898646+02:00 parahippus kernel: [518132.646346] dm_helpers_dp_mst_send_payload_allocation+0x90/0xd0 [amdgpu]
2023-06-27T14:03:50.898647+02:00 parahippus kernel: [518132.647146] dc_link_allocate_mst_payload+0x1a9/0x360 [amdgpu]
2023-06-27T14:03:50.898648+02:00 parahippus kernel: [518132.647911] core_link_enable_stream+0x5fc/0x650 [amdgpu]
2023-06-27T14:03:50.898650+02:00 parahippus kernel: [518132.647995] apply_single_controller_ctx_to_hw+0x416/0x4c0 [amdgpu]
2023-06-27T14:03:50.898651+02:00 parahippus kernel: [518132.647995] dce110_apply_ctx_to_hw+0x1f1/0x360 [amdgpu]
2023-06-27T14:03:50.898653+02:00 parahippus kernel: [518132.647995] ? dcn10_wait_for_mpcc_disconnect+0x51/0x220 [amdgpu]
2023-06-27T14:03:50.898654+02:00 parahippus kernel: [518132.647995] ? dcn20_prepare_bandwidth+0xc7/0x1c0 [amdgpu]
2023-06-27T14:03:50.898655+02:00 parahippus kernel: [518132.647995] dc_commit_state_no_check+0x313/0xd20 [amdgpu]
2023-06-27T14:03:50.898657+02:00 parahippus kernel: [518132.647995] dc_commit_state+0x127/0x160 [amdgpu]
2023-06-27T14:03:50.898658+02:00 parahippus kernel: [518132.647995] amdgpu_dm_atomic_commit_tail+0x60b/0x13e0 [amdgpu]
2023-06-27T14:03:50.898659+02:00 parahippus kernel: [518132.647995] ? dcn21_fast_validate_bw+0x4c4/0x6f0 [amdgpu]
2023-06-27T14:03:50.898661+02:00 parahippus kernel: [518132.647995] ? __kmem_cache_alloc_node+0x19d/0x340
2023-06-27T14:03:50.898662+02:00 parahippus kernel: [518132.647995] ? dcn21_validate_bandwidth_fp+0x15f/0x380 [amdgpu]
2023-06-27T14:03:50.898664+02:00 parahippus kernel: [518132.647995] ? kfree+0x78/0x120
2023-06-27T14:03:50.898665+02:00 parahippus kernel: [518132.647995] ? dcn21_validate_bandwidth_fp+0x15f/0x380 [amdgpu]
2023-06-27T14:03:50.898667+02:00 parahippus kernel: [518132.647995] ? dc_fpu_end+0xa7/0xd0 [amdgpu]
2023-06-27T14:03:50.898668+02:00 parahippus kernel: [518132.647995] ? dma_resv_iter_first_unlocked+0x66/0x80
2023-06-27T14:03:50.898669+02:00 parahippus kernel: [518132.647995] ? dma_resv_get_fences+0x5e/0x240
2023-06-27T14:03:50.898670+02:00 parahippus kernel: [518132.647995] ? fill_plane_buffer_attributes+0x188/0x2d0 [amdgpu]
2023-06-27T14:03:50.898671+02:00 parahippus kernel: [518132.647995] ? wait_for_completion_timeout+0x119/0x150
2023-06-27T14:03:50.898673+02:00 parahippus kernel: [518132.647995] ? dm_plane_helper_prepare_fb+0x1a9/0x330 [amdgpu]
2023-06-27T14:03:50.898674+02:00 parahippus kernel: [518132.647995] commit_tail+0xc2/0x190 [drm_kms_helper]
2023-06-27T14:03:50.898675+02:00 parahippus kernel: [518132.647995] ? drm_atomic_helper_swap_state+0x246/0x380 [drm_kms_helper]
2023-06-27T14:03:50.898676+02:00 parahippus kernel: [518132.647995] drm_atomic_helper_commit+0x11d/0x150 [drm_kms_helper]
2023-06-27T14:03:50.898678+02:00 parahippus kernel: [518132.647995] drm_atomic_commit+0x99/0xd0 [drm]
2023-06-27T14:03:50.898679+02:00 parahippus kernel: [518132.647995] ? __pfx___drm_printfn_info+0x10/0x10 [drm]
2023-06-27T14:03:50.898680+02:00 parahippus kernel: [518132.647995] drm_mode_obj_set_property_ioctl+0x17d/0x440 [drm]
2023-06-27T14:03:50.898681+02:00 parahippus kernel: [518132.647995] ? drm_ioctl_kernel+0xd6/0x180 [drm]
2023-06-27T14:03:50.898683+02:00 parahippus kernel: [518132.647995] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [drm]
2023-06-27T14:03:50.898684+02:00 parahippus kernel: [518132.647995] drm_ioctl_kernel+0xd6/0x180 [drm]
2023-06-27T14:03:50.898686+02:00 parahippus kernel: [518132.647995] drm_ioctl+0x2a0/0x4b0 [drm]
2023-06-27T14:03:50.898687+02:00 parahippus kernel: [518132.647995] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [drm]
2023-06-27T14:03:50.898688+02:00 parahippus kernel: [518132.647995] amdgpu_drm_ioctl+0x4e/0x90 [amdgpu]
2023-06-27T14:03:50.898689+02:00 parahippus kernel: [518132.647995] __x64_sys_ioctl+0xa0/0xe0
2023-06-27T14:03:50.898691+02:00 parahippus kernel: [518132.647995] do_syscall_64+0x5b/0x90
2023-06-27T14:03:50.898692+02:00 parahippus kernel: [518132.647995] ? exit_to_user_mode_prepare+0x91/0xb0
2023-06-27T14:03:50.898694+02:00 parahippus kernel: [518132.647995] ? irqentry_exit_to_user_mode+0x9/0x20
2023-06-27T14:03:50.898695+02:00 parahippus kernel: [518132.647995] ? irqentry_exit+0x43/0x50
2023-06-27T14:03:50.898696+02:00 parahippus kernel: [518132.647995] ? exc_page_fault+0x91/0x1b0
2023-06-27T14:03:50.898698+02:00 parahippus kernel: [518132.647995] entry_SYSCALL_64_after_hwframe+0x72/0xdc
2023-06-27T14:03:50.898699+02:00 parahippus kernel: [518132.647995] RIP: 0033:0x7f26ef9119ef
2023-06-27T14:03:50.898701+02:00 parahippus kernel: [518132.647995] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
2023-06-27T14:03:50.898702+02:00 parahippus kernel: [518132.647995] RSP: 002b:00007ffe540570d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
2023-06-27T14:03:50.898703+02:00 parahippus kernel: [518132.647995] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f26ef9119ef
2023-06-27T14:03:50.898705+02:00 parahippus kernel: [518132.647995] RDX: 00007ffe54057160 RSI: 00000000c01864ba RDI: 000000000000000f
2023-06-27T14:03:50.898707+02:00 parahippus kernel: [518132.647995] RBP: 00007ffe54057160 R08: 000000000000007d R09: 00000000000000ff
2023-06-27T14:03:50.898708+02:00 parahippus kernel: [518132.647995] R10: 000000000ffb0040 R11: 0000000000000246 R12: 00000000c01864ba
2023-06-27T14:03:50.898710+02:00 parahippus kernel: [518132.647995] R13: 000000000000000f R14: 000055a2b9afc0b0 R15: 0000000000000fff
2023-06-27T14:03:50.898711+02:00 parahippus kernel: [518132.647995] </TASK>
2023-06-27T14:03:50.898713+02:00 parahippus kernel: [518132.647995] Modules linked in: r8153_ecm cdc_ether usbnet r8152 mii snd_usb_audio snd_usbmidi_lib snd_rawmidi usbhid snd_seq_device xt_nat xt_tcpudp veth xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat
 nf_tables libcrc32c nfnetlink br_netfilter bridge stp llc nvme_fabrics rfcomm overlay cmac algif_hash algif_skcipher af_alg bnep binfmt_misc snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_realtek snd_sof_utils snd_hda_codec_generic ledtrig_audio snd_soc_core snd_hda_codec_hdmi snd_compress ac97_bus
snd_pcm_dmaengine uvcvideo snd_hda_intel btusb iwlmvm snd_intel_dspcfg btrtl btbcm intel_rapl_msr snd_intel_sdw_acpi videobuf2_vmalloc snd_pci_ps intel_rapl_common btintel snd_hda_codec snd_rpl_pci_acp6x videobuf2_memops btmtk edac_mce_amd videobuf2_v4l2 snd_acp_pci snd_hda_core mac80211 bluetooth kvm_amd ecdh_generic libarc4
2023-06-27T14:03:50.898714+02:00 parahippus kernel: [518132.647995] snd_pci_acp6x snd_hwdep videobuf2_common ecc kvm snd_pci_acp5x snd_pcm iwlwifi irqbypass nls_iso8859_1 snd_timer snd_rn_pci_acp3x snd_acp_config clevo_wmi(OE) snd rapl snd_soc_acpi ccp snd_pci_acp3x soundcore cfg80211 k10temp clevo_acpi(OE) tuxedo_io(OE) tuxedo_keyboard(OE) led_class_multicolor
 sparse_keymap joydev input_leds hid_multitouch serio_raw mac_hid v4l2loopback(O) videodev mc msr parport_pc ppdev lp parport efi_pstore dmi_sysfs ip_tables x_tables autofs4 dm_crypt amdgpu iommu_v2 drm_buddy gpu_sched i2c_algo_bit drm_ttm_helper ttm drm_display_helper cec rc_core nvme drm_kms_helper crct10dif_pclmul crc32_pclmul sdhci_pci syscopyarea polyval_cl
mulni sysfillrect polyval_generic cqhci r8169 nvme_core ghash_clmulni_intel sysimgblt sha512_ssse3 hid_generic aesni_intel crypto_simd cryptd psmouse xhci_pci i2c_piix4 drm xhci_pci_renesas nvme_common realtek sdhci i2c_hid_acpi video i2c_hid wmi hid
2023-06-27T14:03:50.898716+02:00 parahippus kernel: [518132.647995] CR2: 0000000000000008
2023-06-27T14:03:50.898718+02:00 parahippus kernel: [518132.647995] ---[ end trace 0000000000000000 ]---
2023-06-27T14:03:50.898719+02:00 parahippus kernel: [518134.578998] RIP: 0010:drm_dp_add_payload_part2+0xfe/0x130 [drm_display_helper]
2023-06-27T14:03:50.898721+02:00 parahippus kernel: [518134.578998] Code: e8 37 7e 2c f0 44 89 f0 5b 41 5c 41 5d 41 5e 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 e9 b9 c2 8b f0 48 8b 80 58 05 00 00 <48> 8b 76 08 4c 8b 40 60 48 85 f6 74 04 48 8b 76 08 48 c7 c1 08 87
2023-06-27T14:03:50.898722+02:00 parahippus kernel: [518134.578998] RSP: 0018:ffffb8250307b5b8 EFLAGS: 00010246
2023-06-27T14:03:50.898723+02:00 parahippus kernel: [518134.694658] RAX: ffff900132cf6000 RBX: ffff900132cf6000 RCX: 0000000000000000
2023-06-27T14:03:50.898725+02:00 parahippus kernel: [518134.694658] RDX: ffff90013937e980 RSI: 0000000000000000 RDI: ffff900022a8a568
2023-06-27T14:03:50.898726+02:00 parahippus kernel: [518134.694658] RBP: ffffb8250307b5d8 R08: 0000000000000000 R09: 0000000000000000
2023-06-27T14:03:50.898727+02:00 parahippus kernel: [518134.694658] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
2023-06-27T14:03:50.898730+02:00 parahippus kernel: [518134.694658] R13: ffff900022a8a000 R14: ffff900021bb48a0 R15: 0000000000000006
2023-06-27T14:03:50.898731+02:00 parahippus kernel: [518134.694658] FS: 00007f26efa1ca80(0000) GS:ffff9006ef600000(0000) knlGS:0000000000000000
2023-06-27T14:03:50.898732+02:00 parahippus kernel: [518134.694658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2023-06-27T14:03:50.898733+02:00 parahippus kernel: [518134.694658] CR2: 0000000000000008 CR3: 000000010e9a6000 CR4: 0000000000350ef0

The same crash was also happening on Ubuntu 22.04 with basically every version of the kernel that I tried.

ProblemType: Bug
DistroRelease: Ubuntu 23.04
Package: linux-image-6.2.0-23-generic 6.2.0-23.23
ProcVersionSignature: Ubuntu 6.2.0-23.23-generic 6.2.12
Uname: Linux 6.2.0-23-generic x86_64
ApportVersion: 2.26.1-0ubuntu2
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: koniiiik 3070 F.... pulseaudio
 /dev/snd/controlC0: koniiiik 3070 F.... pulseaudio
CRDA: N/A
CasperMD5CheckResult: unknown
Date: Tue Jun 27 15:17:08 2023
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig'
MachineType: TUXEDO TUXEDO Aura 15 Gen1
ProcFB: 0 amdgpudrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-6.2.0-23-generic root=/dev/mapper/vg0-root ro nosplash
RelatedPackageVersions:
 linux-restricted-modules-6.2.0-23-generic N/A
 linux-backports-modules-6.2.0-23-generic N/A
 linux-firmware 20230323.gitbcdcfbcf-0ubuntu1.1
SourcePackage: linux
UpgradeStatus: Upgraded to lunar on 2023-06-12 (15 days ago)
WifiSyslog:

dmi.bios.date: 01/30/2023
dmi.bios.release: 7.11
dmi.bios.vendor: INSYDE Corp.
dmi.bios.version: 1.07.11RTR2
dmi.board.asset.tag: Tag 12345
dmi.board.name: NL5xRU
dmi.board.vendor: NB01
dmi.board.version: Not Applicable
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: TUXEDO
dmi.chassis.version: N/A
dmi.modalias: dmi:bvnINSYDECorp.:bvr1.07.11RTR2:bd01/30/2023:br7.11:svnTUXEDO:pnTUXEDOAura15Gen1:pvrNotApplicable:rvnNB01:rnNL5xRU:rvrNotApplicable:cvnTUXEDO:ct10:cvrN/A:skuAURA1501:
dmi.product.family: Not Applicable
dmi.product.name: TUXEDO Aura 15 Gen1
dmi.product.sku: AURA1501
dmi.product.version: Not Applicable
dmi.sys.vendor: TUXEDO

Revision history for this message
Michal Petrucha (michal-petrucha) wrote :
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Status changed to Confirmed

This change was made by a bot.

Changed in linux (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.