kernel NULL pointer dereference in cvs_dev_fw_dl_data after suspend/resume

Bug #2106502 reported by You-Sheng Yang
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-6.11 (Ubuntu)
Status tracked in Plucky
Noble
In Progress
Undecided
Unassigned
Plucky
Invalid
Undecided
Unassigned
vision-drivers (Ubuntu)
Status tracked in Plucky
Noble
Won't Fix
Undecided
Unassigned
Plucky
Fix Released
High
You-Sheng Yang

Bug Description

kernel: PM: suspend entry (s2idle)
kernel: Filesystems sync: 0.007 seconds
kernel: Freezing user space processes
kernel: Freezing user space processes completed (elapsed 0.001 seconds)
kernel: OOM killer disabled.
kernel: Freezing remaining freezable tasks
kernel: Freezing remaining freezable tasks completed (elapsed 0.000 seconds)
kernel: printk: Suspending console(s) (use no_console_suspend to debug)
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_suspend:entered
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_suspend:wait for fw update cancel
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_suspend:fw update cancelled
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_suspend:completed
kernel: ACPI: EC: interrupt blocked
kernel: ACPI: EC: interrupt unblocked
kernel: pci 0000:00:08.0: Setting to D3hot
kernel: intel-ipu6 0000:00:05.0: IPU6 in secure mode
kernel: i915 0000:00:02.0: [drm] GT0: GuC firmware i915/mtl_guc_70.bin version 70.36.0
kernel: i8042 kbd 00:03: activated
kernel: i8042 aux 00:04: activated
kernel: i915 0000:00:02.0: [drm] GT0: GUC: submission enabled
kernel: i915 0000:00:02.0: [drm] GT0: GUC: SLPC enabled
kernel: i915 0000:00:02.0: [drm] GT0: GUC: RC enabled
kernel: i915 0000:00:02.0: [drm] GT1: GuC firmware i915/mtl_guc_70.bin version 70.36.0
kernel: i915 0000:00:02.0: [drm] GT1: HuC firmware i915/mtl_huc_gsc.bin version 8.5.4
kernel: nvme nvme0: 14/0/0 default/read/poll queues
kernel: nvme nvme1: 14/0/0 default/read/poll queues
kernel: i915 0000:00:02.0: [drm] GT1: GUC: submission enabled
kernel: i915 0000:00:02.0: [drm] GT1: GUC: SLPC enabled
kernel: i915 0000:00:02.0: [drm] GT1: GUC: RC enabled
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_resume entered
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_resume:completed
kernel: mei_gsc_proxy 0000:00:16.0-0f73db04-97ab-4125-b893-e904ad0d5464: bound 0000:00:02.0 (ops i915_gsc_proxy_component_ops [i915])
kernel: OOM killer enabled.
kernel: Restarting tasks ... done.
kernel: random: crng reseeded on system resumption
systemd-resolved[1048]: Clock change detected. Flushing caches.
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_dev_fw_dl:Enter
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_dev_fw_dl_start:fail to enter download state. fwstate:0x2
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_dev_fw_dl:cvs_dev_fw_dl_start() fail
rtkit-daemon[1736]: Successfully made thread 2610 of process 2576 owned by '1000' high priority at nice level 0.
rtkit-daemon[1736]: Supervising 8 threads of 5 processes of 1 users.
kernel: PM: suspend exit
bluetoothd[1313]: Controller resume with wake event 0x0
systemd-sleep[7132]: System returned from sleep operation 'suspend'.
systemd[1]: systemd-suspend.service: Deactivated successfully.
systemd[1]: Finished systemd-suspend.service - System Suspend.
systemd[1]: Stopped target sleep.target - Sleep.
systemd[1]: Reached target suspend.target - Suspend.
systemd-logind[1346]: Operation 'suspend' finished.
NetworkManager[1425]: <info> [1744132969.6574] manager: sleep: wake requested (sleeping: yes enabled: yes)
ModemManager[1493]: <msg> [sleep-monitor-systemd] system is resuming
NetworkManager[1425]: <info> [1744132969.6578] device (enx00e04c6801fa): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
NetworkManager[1425]: <info> [1744132969.6627] device (wlp0s20f3): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
systemd[1]: Starting grub-common.service - Record successful boot for GRUB...
systemd[1]: Stopped target suspend.target - Suspend.
systemd[1]: grub-common.service: Deactivated successfully.
systemd[1]: Finished grub-common.service - Record successful boot for GRUB.
systemd[1]: Starting grub-initrd-fallback.service - GRUB failed boot detection...
kernel: r8152 2-2.3:1.0 enx00e04c6801fa: carrier on
systemd[1]: grub-initrd-fallback.service: Deactivated successfully.
systemd[1]: Finished grub-initrd-fallback.service - GRUB failed boot detection.
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_fw_dl_thread:cvs_dev_fw_dl fail
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_dev_fw_dl:Enter
kernel: Intel CVS driver i2c-INTC10DE:00: cvs_dev_fw_dl_data:Enter
kernel: BUG: kernel NULL pointer dereference, address: 00000000000001f8
kernel: #PF: supervisor read access in kernel mode
kernel: #PF: error_code(0x0000) - not-present page
kernel: PGD 0 P4D 0
kernel: Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
kernel: CPU: 2 UID: 0 PID: 155 Comm: kworker/2:1 Tainted: G W O 6.11.0-1019-oem #19-Ubuntu
kernel: Tainted: [W]=WARN, [O]=OOT_MODULE
kernel: Hardware name: Dell Inc. Dell Pro Max 16 Premium MA16250/0PFK1W, BIOS 0.1.9 09/30/2024
kernel: Workqueue: events cvs_fw_dl_thread [intel_cvs]
kernel: RIP: 0010:cvs_dev_fw_dl_data+0x1e7/0x430 [intel_cvs]
kernel: Code: 04 00 89 d9 48 c7 c6 20 bc c6 c0 48 8b 3a 48 c7 c2 70 b4 c6 c0 e8 e9 03 9a e8 e9 b3 00 00 00 89 c8 83 e9 01 48 89 df 4c 89 ee <49> 8b 54 05 f8 c1 e9 03 48 89 54 03 f8 f3 48 a5 e9 f7 fe ff ff 41
kernel: RSP: 0018:ffffa9764082fc60 EFLAGS: 00010216
kernel: RAX: 0000000000000100 RBX: ffffa9764082fc70 RCX: 00000000000000ff
kernel: RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffffa9764082fc70
kernel: RBP: ffffa9764082fda0 R08: 0000000000000000 R09: 0000000000000002
kernel: R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffff00
kernel: R13: 0000000000000100 R14: 0000000000000005 R15: ffff9097cca0b428
kernel: FS: 0000000000000000(0000) GS:ffff909f2fd00000(0000) knlGS:0000000000000000
kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kernel: CR2: 00000000000001f8 CR3: 000000012a506006 CR4: 0000000000f70ef0
kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
kernel: DR3: 0000000000000000 DR6: 00000000ffff07f0 DR7: 0000000000000400
kernel: PKRU: 55555554
kernel: Call Trace:
kernel: <TASK>
kernel: ? show_regs+0x6c/0x80
kernel: ? __die+0x24/0x80
kernel: ? page_fault_oops+0x96/0x1b0
kernel: ? do_user_addr_fault+0x4b2/0x870
kernel: ? exc_page_fault+0x85/0x1c0
kernel: ? asm_exc_page_fault+0x27/0x30
kernel: ? cvs_dev_fw_dl_data+0x1e7/0x430 [intel_cvs]
kernel: cvs_dev_fw_dl+0xaf/0x3c0 [intel_cvs]
kernel: cvs_fw_dl_thread+0xc2/0x2b0 [intel_cvs]
kernel: process_one_work+0x178/0x3d0
kernel: worker_thread+0x2de/0x410
kernel: ? _raw_spin_lock_irqsave+0xe/0x20
kernel: ? __pfx_worker_thread+0x10/0x10
kernel: kthread+0xe1/0x110
kernel: ? __pfx_kthread+0x10/0x10
kernel: ret_from_fork+0x44/0x70
kernel: ? __pfx_kthread+0x10/0x10
kernel: ret_from_fork_asm+0x1a/0x30
kernel: </TASK>
kernel: Modules linked in: ccm snd_seq_dummy snd_hrtimer rfcomm cmac algif_hash algif_skcipher af_alg qrtr bnep intel_rapl_msr intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common x86_pkg_temp_thermal xe snd_soc_cs35l56_sdw snd_soc_cs35l56 snd_soc_wm_adsp cs42l43_sdw snd_soc_cs35l56_shared snd_soc_cs_amp_lib regmap_sdw snd_hda_codec_hdmi cs_dsp cs42l43 snd_soc_dmic gpu_sched drm_gpuvm drm_exec drm_suballoc_helper drm_ttm_helper snd_sof_pci_intel_mtl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_core snd_compress ac97_bus snd_pcm_dmaengine intel_powerclamp coretemp snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec kvm_intel snd_hda_core snd_hwdep snd_pcm binfmt_misc kvm snd_seq_midi snd_seq_midi_event iwlmvm crct10dif_pclmul
kernel: dell_pc polyval_clmulni snd_rawmidi polyval_generic platform_profile intel_ipu6_psys(O) ghash_clmulni_intel i915 snd_ctl_led snd_seq mac80211 sha256_ssse3 dell_laptop snd_seq_device intel_ipu6_isys sha1_ssse3 btusb aesni_intel videobuf2_dma_sg snd_timer hid_sensor_custom_intel_hinge hid_sensor_als hid_sensor_prox btrtl videobuf2_memops crypto_simd hid_sensor_trigger mei_gsc_proxy btintel videobuf2_v4l2 cryptd dell_wmi drm_buddy libarc4 iwlwifi snd btbcm industrialio_triggered_buffer ttm videobuf2_common mei_me i2c_i801 btmtk rapl kfifo_buf dell_smbios dcdbas intel_cstate bluetooth dell_wmi_sysman hid_sensor_iio_common i2c_mux soundcore dell_wmi_descriptor dell_smm_hwmon dell_wmi_ddv drm_display_helper firmware_attributes_class wmi_bmof i2c_smbus cfg80211 industrialio mei cec rc_core intel_vpu i2c_algo_bit intel_ipu6 ipu_bridge igen6_edac intel_cvs(O) intel_skl_int3472_tps68470 i2c_usbio(O) ov08x40(O) intel_pmc_core tps68470_regulator v4l2_fwnode gpio_usbio(O) v4l2_async clk_tps68470 intel_vsec
kernel: pmt_telemetry usbio(O) intel_hid acpi_tad intel_skl_int3472_discrete sparse_keymap pmt_class acpi_pad joydev input_leds sch_fq_codel mac_hid serio_raw v4l2loopback(O) videodev mc msr parport_pc ppdev lp parport nvme_fabrics efi_pstore nvme_keyring nfnetlink dmi_sysfs ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 cdc_ether usbnet r8152 mii hid_sensor_custom hid_sensor_hub intel_ishtp_hid hid_multitouch hid_generic 8250_dw rtsx_pci_sdmmc crc32_pclmul psmouse nvme video i2c_hid_acpi ucsi_acpi intel_ish_ipc rtsx_pci intel_lpss_pci i2c_hid thunderbolt xhci_pci nvme_core typec_ucsi intel_lpss intel_ishtp xhci_pci_renesas idma64 nvme_auth typec hid wmi pinctrl_meteorlake
kernel: CR2: 00000000000001f8
kernel: ---[ end trace 0000000000000000 ]---
---
ProblemType: Bug
ApportVersion: 2.28.1-0ubuntu3.5
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/seq: ubuntu 2284 F.... pipewire
CasperMD5CheckResult: pass
DistroRelease: Ubuntu 24.04
InstallationDate: Installed on 2024-12-17 (112 days ago)
InstallationMedia: Ubuntu 24.04 LTS "Noble Numbat" - Release amd64 (20240424)
IwConfig:
 lo no wireless extensions.

 enx00e04c6801fa no wireless extensions.

 wlp0s20f3 no wireless extensions.
MachineType: Dell Inc. Dell Pro Max 16 Premium MA16250
Package: vision-drivers (not installed)
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/rootfs/noble/boot/vmlinuz-6.11.0-1019-oem root=UUID=3b5acd1e-5d2b-49b2-a54b-85f0eba00f21 ro rootflags=subvol=rootfs/noble quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 6.11.0-1019.19-oem 6.11.11
RelatedPackageVersions:
 linux-restricted-modules-6.11.0-1019-oem N/A
 linux-backports-modules-6.11.0-1019-oem N/A
 linux-firmware 20240318.git3b128b60-0ubuntu2.11+staging.7
Tags: noble
Uname: Linux 6.11.0-1019-oem x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: N/A
_MarkForUpload: True
dmi.bios.date: 09/30/2024
dmi.bios.release: 0.1
dmi.bios.vendor: Dell Inc.
dmi.bios.version: 0.1.9
dmi.board.name: 0PFK1W
dmi.board.vendor: Dell Inc.
dmi.board.version: X01
dmi.chassis.type: 10
dmi.chassis.vendor: Dell Inc.
dmi.ec.firmware.release: 0.0
dmi.modalias: dmi:bvnDellInc.:bvr0.1.9:bd09/30/2024:br0.1:efr0.0:svnDellInc.:pnDellProMax16PremiumMA16250:pvr:rvnDellInc.:rn0PFK1W:rvrX01:cvnDellInc.:ct10:cvr:sku0D33:
dmi.product.family: Dell Pro Max Laptops
dmi.product.name: Dell Pro Max 16 Premium MA16250
dmi.product.sku: 0D33
dmi.sys.vendor: Dell Inc.

Revision history for this message
You-Sheng Yang (vicamo) wrote :
tags: added: apport-collected noble
Revision history for this message
You-Sheng Yang (vicamo) wrote : AlsaInfo.txt

apport information

description: updated
Revision history for this message
You-Sheng Yang (vicamo) wrote : CRDA.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : CurrentDmesg.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : Lspci.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : Lspci-vt.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : Lsusb.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : Lsusb-t.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : Lsusb-v.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : ProcCpuinfo.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : ProcCpuinfoMinimal.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : ProcEnviron.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : ProcInterrupts.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : ProcModules.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : RfKill.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : UdevDb.txt

apport information

Revision history for this message
You-Sheng Yang (vicamo) wrote : WifiSyslog.txt

apport information

no longer affects: linux-oem-6.11 (Ubuntu)
Changed in vision-drivers (Ubuntu Plucky):
status: New → In Progress
importance: Undecided → High
assignee: nobody → You-Sheng Yang (vicamo)
Revision history for this message
You-Sheng Yang (vicamo) wrote :

Attach debdiff for Plucky. Also uploaded to https://launchpad.net/~vicamo/+archive/ubuntu/sru for review and verification.

Need sponsor.

Revision history for this message
Timo Aaltonen (tjaalton) wrote :

note to the release team, that this will not affect the release kernel

Revision history for this message
Utkarsh Gupta (utkarsh) wrote :

Thanks, Timo. That's helpful. Accepted.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package vision-drivers - 0~git202503130554.feab312c-0ubuntu1

---------------
vision-drivers (0~git202503130554.feab312c-0ubuntu1) plucky; urgency=medium

  * New upstream ww10_25_ptl_post_alpha tag release (LP: #2106502)

 -- You-Sheng Yang <email address hidden> Wed, 09 Apr 2025 01:07:19 +0800

Changed in vision-drivers (Ubuntu Plucky):
status: In Progress → Fix Released
You-Sheng Yang (vicamo)
Changed in linux-oem-6.11 (Ubuntu Plucky):
status: New → Invalid
Changed in linux-oem-6.11 (Ubuntu Noble):
status: New → In Progress
Changed in vision-drivers (Ubuntu Noble):
status: New → Won't Fix
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-oem-6.11/6.11.0-1020.20 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux-oem-6.11' to 'verification-done-noble-linux-oem-6.11'. If the problem still exists, change the tag 'verification-needed-noble-linux-oem-6.11' to 'verification-failed-noble-linux-oem-6.11'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-noble-linux-oem-6.11-v2 verification-needed-noble-linux-oem-6.11
Revision history for this message
You-Sheng Yang (vicamo) wrote :

Verified linux-oem-6.11/6.11.0-1020.20 on RENEG16-DVT-C1-202412-36062.

tags: added: verification-done-noble-linux-oem-6.11
removed: verification-needed-noble-linux-oem-6.11
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.