Bug 1534012 - Removing radeon module results in BUG: unable to handle kernel NULL pointer dereference at 0000000000000258
Summary: Removing radeon module results in BUG: unable to handle kernel NULL pointer d...
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: xorg-x11-drv-ati
Version: 27
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: X/OpenGL Maintenance List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-01-12 18:56 UTC by Vedran Miletić
Modified: 2018-11-30 19:16 UTC (History)
26 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2018-11-30 19:16:49 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
dmesg (73.69 KB, text/plain)
2018-01-12 19:04 UTC, Vedran Miletić
no flags Details

Description Vedran Miletić 2018-01-12 18:56:51 UTC
Description of problem:
Removing radeon module using modprobe -r results in BUG: unable to handle kernel NULL pointer dereference at 0000000000000258

Version-Release number of selected component (if applicable):
4.14.13-300.fc27.x86_64

How reproducible:
Didn't try.

Steps to Reproduce:
1. sudo modprobe -r radeon
2.
3.

Actual results:
[115942.917095] BUG: unable to handle kernel NULL pointer dereference at 0000000000000258                              
[115942.917144] IP: mutex_lock+0x1d/0x40                   
[115942.917174] PGD 0 P4D 0                                
[115942.917207] Oops: 0002 [#1] SMP PTI                    
[115942.917238] Modules linked in: tun ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw iptable_security ebtable_filter ebtables ip6table_filter ip6_tables snd_hda_codec_realtek snd_hda_codec_generic sunrpc snd_hda_codec_hdmi ppdev snd_hda_intel iTCO_wdt iTCO_vendor_support snd_hda_codec snd_hda_core coretemp snd_hwdep snd_pcm i2c_i801 snd_timer snd parport_pc lpc_ich soundcore parport asus_atk0110 shpchp acpi_cpufreq xfs libcrc32c ata_generic pata_acpi amdkfd amd_iommu_v2 radeon(-) serio_raw r8169 firewire_ohci i2c_algo_bit firewire_core
[115942.917377]  pata_marvell mii crc_itu_t drm_kms_helper ttm drm                                                     
[115942.917417] CPU: 0 PID: 6778 Comm: modprobe Not tainted 4.14.13-300.fc27.x86_64 #1                                 
[115942.917488] Hardware name: System manufacturer System Product Name/P5QL-EM, BIOS 0802    05/12/2010                
[115942.917558] task: ffff96b09a4b3c00 task.stack: ffffb500c13b4000                                                    
[115942.917610] RIP: 0010:mutex_lock+0x1d/0x40             
[115942.917659] RSP: 0018:ffffb500c13b7cf0 EFLAGS: 00010246
[115942.917710] RAX: 0000000000000000 RBX: 0000000000000258 RCX: 000000010020000f                                      
[115942.917779] RDX: ffff96b09a4b3c00 RSI: ffff96b095a0ef20 RDI: 0000000000000258                                      
[115942.917849] RBP: ffffb500c13b7cf8 R08: ffff96b093a19a80 R09: 000000010020000f                                      
[115942.917918] R10: ffffb500c13b7cc8 R11: 0000000000000000 R12: 0000000000000258                                      
[115942.917987] R13: ffff96b095a0ef20 R14: ffffffffc0625210 R15: ffff96b09a50f100                                      
[115942.918064] FS:  00007faa7058c0c0(0000) GS:ffff96b09fc00000(0000) knlGS:0000000000000000                           
[115942.918065] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033                                                      
[115942.918065] CR2: 0000000000000258 CR3: 0000000050256000 CR4: 00000000000006f0                                      
[115942.918065] Call Trace:                                
[115942.918065]  drm_mode_object_unregister+0x23/0x50 [drm]
[115942.918065]  drm_framebuffer_unregister_private+0x1a/0x20 [drm]                                                    
[115942.918065]  radeon_fbdev_fini+0x56/0x80 [radeon]      
[115942.918065]  radeon_modeset_fini+0x72/0xb0 [radeon]    
[115942.918065]  radeon_driver_unload_kms+0x43/0x80 [radeon]                                                           
[115942.918065]  drm_dev_unregister+0x43/0xf0 [drm]        
[115942.918065]  drm_put_dev+0x32/0x70 [drm]               
[115942.918065]  radeon_pci_remove+0x15/0x20 [radeon]      
[115942.918065]  pci_device_remove+0x39/0xb0               
[115942.918065]  device_release_driver_internal+0x158/0x210
[115942.918065]  driver_detach+0x38/0x70                   
[115942.918065]  bus_remove_driver+0x59/0xd0               
[115942.918065]  driver_unregister+0x2c/0x40               
[115942.918065]  pci_unregister_driver+0x22/0xb0           
[115942.918065]  radeon_exit+0x15/0x6f [radeon]            
[115942.918065]  SyS_delete_module+0x1a8/0x2b0             
[115942.918065]  ? exit_to_usermode_loop+0x8f/0xb0         
[115942.918065]  entry_SYSCALL_64_fastpath+0x20/0x83       
[115942.918065] RIP: 0033:0x7faa6fa54077                   
[115942.918065] RSP: 002b:00007ffd42b9ccc8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0                                 
[115942.918065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faa6fa54077                                      
[115942.918065] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000559fc225dd98                                      
[115942.918065] RBP: 0000000000000000 R08: 00007ffd42b9bc71 R09: 0000000000000000                                      
[115942.918065] R10: 00007faa6face100 R11: 0000000000000206 R12: 0000559fc225dd30                                      
[115942.918065] R13: 00007ffd42b9bce0 R14: 0000559fc225dd98 R15: 00007ffd42b9e0b0                                      
[115942.918065] Code: ff 5d c3 90 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 48 89 e5 53 48 89 fb e8 ce e2 ff ff 65 48 8b 14 25 00 5c 01 00 31 c0 <f0> 48 0f b1 13 48 85 c0 74 08 48 89 df e8 b1 ff ff ff 5b 5d c3                       
[115942.918065] RIP: mutex_lock+0x1d/0x40 RSP: ffffb500c13b7cf0                                                        
[115942.918065] CR2: 0000000000000258                      
[115942.920031] ---[ end trace c2bf9af6c48b5a97 ]---

Expected results:
No error.

Additional info:
01:00.0 VGA compatible controller [0300]: Advanced Micro Devices, Inc. [AMD/ATI] RV635 [Radeon HD 3650/3750/4570/4580] [1002:9598]

Comment 1 Vedran Miletić 2018-01-12 19:04:44 UTC
Created attachment 1380498 [details]
dmesg

Comment 2 Jeremy Cline 2018-01-15 15:22:02 UTC
Thanks for the bug report. This bug is in a video subsystem that has a kernel part. We track and work on these bugs via the driver package name instead of leaving them assigned to the kernel.

Additionally, it would be helpful to know when this started happening. Is it new in 4.14.11, or has it always been broken?

Comment 3 Vedran Miletić 2018-01-17 13:44:25 UTC
Thanks for getting back to me. I reported this upstream as well and it seems that there is a fix for this bug in 4.15: https://bugs.freedesktop.org/show_bug.cgi?id=104608#c2

I will recheck if it still happens when 4.15 lands to F27.

Comment 4 Ben Cotton 2018-11-27 17:26:47 UTC
This message is a reminder that Fedora 27 is nearing its end of life.
On 2018-Nov-30  Fedora will stop maintaining and issuing updates for
Fedora 27. It is Fedora's policy to close all bug reports from releases
that are no longer maintained. At that time this bug will be closed as
EOL if it remains open with a Fedora  'version' of '27'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 27 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 5 Ben Cotton 2018-11-30 19:16:49 UTC
Fedora 27 changed to end-of-life (EOL) status on 2018-11-30. Fedora 27 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.