Bug 16123

Summary:	[i915] Crash after suspending (NULL pointer dereference in intel_crt_detect())
Product:	Drivers	Reporter:	Manoj Iyer (manjo.ubuntu)
Component:	Video(DRI - Intel)	Assignee:	drivers_video-dri-intel (drivers_video-dri-intel)
Status:	RESOLVED CODE_FIX
Severity:	high	CC:	chris, jbarnes
Priority:	P1
Hardware:	All
OS:	Linux
URL:	http://launchpad.net/bugs/553176
Kernel Version:	2.6.34, and also on Ubuntu 2.6.32-19.28-generic	Subsystem:
Regression:	No	Bisected commit-id:

Description Manoj Iyer 2010-06-04 15:53:15 UTC

http://launchpad.net/bugs/553176 

This happens about one hour after returning from suspend, and makes X crash. See bug 553174 for the X crash report, where I have put the informations and the link to upstream report.

ProblemType: KernelOops
DistroRelease: Ubuntu 10.04
Package: linux-image-2.6.32-19-generic
Regression: No
Reproducible: Yes (just suspend and resume)
TestedUpstream: Yes (drm-intel-next branch, see upstream report)
ProcVersionSignature: Ubuntu 2.6.32-19.28-generic 2.6.32.10+drm33.1
Uname: Linux 2.6.32-19-generic i686
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
Annotation: Your system might become unstable now and might need to be restarted.
Architecture: i386
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: milan 1445 F.... pulseaudio
 /dev/snd/seq: timidity 1186 F.... timidity
CRDA: Error: [Errno 2] Aucun fichier ou dossier de ce type
Card0.Amixer.info:
 Card hw:0 'ICH6'/'Intel ICH6 with ALC250 at irq 17'
   Mixer name : 'Realtek ALC250 rev 2'
   Components : 'AC97a:414c4752'
   Controls : 33
   Simple ctrls : 21
CurrentDmesg:
 [ 59.755859] lib80211_crypt: registered algorithm 'TKIP'
 [ 66.656439] apm: BIOS not found.
 [ 67.324827] ppdev: user-space parallel port driver
 [ 69.416020] eth1: no IPv6 routers present
 [ 99.487128] padlock: VIA PadLock not detected.
Date: Thu Apr 1 11:53:06 2010
Failure: oops
Frequency: This has only happened once.
HibernationDevice: RESUME=UUID=dd37abed-09dd-499f-bbbe-c2c3866cb9cf
Lsusb:
 Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
MachineType: TOSHIBA Satellite A80
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcCmdLine: BOOT_IMAGE=/vmlinuz-2.6.32-19-generic root=UUID=2dcc00f7-0fad-4823-9469-9e4e8dd841d0 ro crashkernel=384M-2G:64M,2G-:128M quiet splash
RelatedPackageVersions: linux-firmware 1.33
RfKill:

SourcePackage: linux
Title: BUG: unable to handle kernel NULL pointer dereference at 00000108
WpaSupplicantLog:

dmi.bios.date: 02/23/2005
dmi.bios.vendor: TOSHIBA
dmi.bios.version: V1.40
dmi.board.name: EAT10/EAT20
dmi.board.vendor: TOSHIBA
dmi.board.version: Null
dmi.chassis.asset.tag: *
dmi.chassis.type: 10
dmi.chassis.vendor: TOSHIBA
dmi.chassis.version: N/A
dmi.modalias: dmi:bvnTOSHIBA:bvrV1.40:bd02/23/2005:svnTOSHIBA:pnSatelliteA80:pvrPSA80E-02V024FR:rvnTOSHIBA:rnEAT10/EAT20:rvrNull:cvnTOSHIBA:ct10:cvrN/A:
dmi.product.name: Satellite A80
dmi.product.version: PSA80E-02V024FR
dmi.sys.vendor: TOSHIBA

Comment 1 Jesse Barnes 2010-07-23 20:14:05 UTC

Does this still occur with 2.6.35-rc6?

Comment 2 Chris Wilson 2010-07-24 08:58:54 UTC

I spent a long time searching for possible NULL derefs in this code and my conclusion was that it was most likely the memory corruption from the now infamous i915 suspend bug.