NULL pointer dereference on 32-bit Acer Aspire One ZG5 using gnome-shell+wayland+kernel-4.10.8

NULL pointer dereference on 32-bit Acer Aspire One ZG5 using gnome-shell+wayland+kernel-4.10.8

[Alex Villací­s Lasso]

[-- Attachment #1: Type: text/plain, Size: 7724 bytes --]

I have this Acer Aspire One ZG5 with 1 GB of RAM running 32-bit Fedora 25 with the latest updates (as of 2017/04/12) with kernel-PAE-core-4.10.8-200.fc25.i686 . This laptop has the integrated flat panel display plus a VGA output (normally unused). 
According to lspci, the graphics chipsets are:

00:02.0 VGA compatible controller: Intel Corporation Mobile 945GSE Express Integrated Graphics Controller (rev 03) (prog-if 00 [VGA controller])
         Subsystem: Acer Incorporated [ALI] Device 015b
         Flags: bus master, fast devsel, latency 0, IRQ 16
         Memory at 58480000 (32-bit, non-prefetchable) [size=512K]
         I/O ports at 60c0 [size=8]
         Memory at 40000000 (32-bit, prefetchable) [size=256M]
         Memory at 58500000 (32-bit, non-prefetchable) [size=256K]
         [virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
         Capabilities: [90] MSI: Enable- Count=1/1 Maskable- 64bit-
         Capabilities: [d0] Power Management version 2
         Kernel driver in use: i915
         Kernel modules: i915

00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)
         Subsystem: Acer Incorporated [ALI] Device 015b
         Flags: bus master, fast devsel, latency 0
         Memory at 58400000 (32-bit, non-prefetchable) [size=512K]
         Capabilities: [d0] Power Management version 2


Lately I have been experimenting screen lockups when using the gnome-shell desktop, but only under Wayland, not under X11. First, early on boot, before I can even log into the desktop, I get this backtrace:

abr 09 17:37:00 karlalex-acer.palosanto.com kernel: ------------[ cut here ]------------
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: WARNING: CPU: 1 PID: 92 at drivers/gpu/drm/i915/intel_fbdev.c:411 intel_fb_initial_config+0x3fc/0x5f0 [i915]
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: WARN_ON(!connector->state->crtc)
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: Modules linked in: i915 i2c_algo_bit ata_generic drm_kms_helper pata_acpi serio_raw drm r8169 mii fjes video
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: CPU: 1 PID: 92 Comm: kworker/u4:2 Not tainted 4.10.8-200.fc25.i686+PAE #1
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: Hardware name: Acer AOA150/        , BIOS v0.3301 05/09/2008
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: Workqueue: events_unbound async_run_entry_fn
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: Call Trace:
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: dump_stack+0x58/0x78
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: __warn+0xea/0x110
abr 09 17:37:00 karlalex-acer.palosanto.com kernel:  ? intel_fb_initial_config+0x3fc/0x5f0 [i915]
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: warn_slowpath_fmt+0x46/0x60
abr 09 17:37:00 karlalex-acer.palosanto.com kernel: intel_fb_initial_config+0x3fc/0x5f0 [i915]
abr 09 17:37:00 karlalex-acer.palosanto.com kernel:  ? drm_helper_probe_single_connector_modes+0x1f4/0x520 [drm_kms_helper]
...

Then, during normal desktop use, I get (only under Wayland, not X11), messages like the following:

abr 09 18:32:17 karlalex-acer.palosanto.com kernel: gnome-shell: page allocation failure: order:6, mode:0x14040c0(GFP_KERNEL|__GFP_COMP)
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: CPU: 1 PID: 1077 Comm: gnome-shell Tainted: G        W 4.10.8-200.fc25.i686+PAE #1
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: Hardware name: Acer AOA150/        , BIOS v0.3301 05/09/2008
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: Call Trace:
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: dump_stack+0x58/0x78
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: warn_alloc+0xf6/0x110
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: __alloc_pages_nodemask+0x446/0xc10
abr 09 18:32:17 karlalex-acer.palosanto.com kernel:  ? irq_exit+0x68/0xd0
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: dma_generic_alloc_coherent+0x76/0x130
abr 09 18:32:17 karlalex-acer.palosanto.com kernel:  ? drm_pci_alloc+0x39/0x130 [drm]
abr 09 18:32:17 karlalex-acer.palosanto.com kernel:  ? via_no_dac+0x40/0x40
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: drm_pci_alloc+0x10c/0x130 [drm]
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: i915_gem_object_get_pages_phys+0x54/0x250 [i915]
abr 09 18:32:17 karlalex-acer.palosanto.com kernel:  ? i915_gem_object_put_pages_gtt+0x104/0x1d0 [i915]
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: ____i915_gem_object_get_pages+0x1d/0x60 [i915]
abr 09 18:32:17 karlalex-acer.palosanto.com kernel:  ? mutex_lock_interruptible+0x10/0x30
abr 09 18:32:17 karlalex-acer.palosanto.com kernel: __i915_gem_object_get_pages+0x47/0x60 [i915]

...

When the screen locks up, the logs contain this:

abr 09 18:32:23 karlalex-acer.palosanto.com kernel: BUG: unable to handle kernel NULL pointer dereference at   (null)
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: IP: intel_update_cursor_plane+0x2a/0x60 [i915]
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: *pdpt = 0000000031658001 *pde = 0000000000000000
abr 09 18:32:23 karlalex-acer.palosanto.com kernel:
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: Oops: 0000 [#1] SMP
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: Modules linked in: uinput nls_utf8 isofs usb_storage cmac rfcomm btusb btrtl btbcm btintel bnep bluetooth fuse uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_core arc4 videodev media 
ath5k iTCO_wdt iTCO_vendor_support sparse_keymap mac80211 coretemp acerhdf joydev ath cfg80211 lpc_ich i2c_i801 snd_hda_codec_realtek snd_hda_codec_generic snd_hda_intel snd_hda_codec rfkill snd_hda_core snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer 
snd acpi_cpufreq wmi soundcore tpm_tis tpm_tis_core tpm binfmt_misc i915 i2c_algo_bit ata_generic drm_kms_helper pata_acpi serio_raw drm r8169 mii fjes video
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: CPU: 0 PID: 1077 Comm: gnome-shell Tainted: G        W 4.10.8-200.fc25.i686+PAE #1
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: Hardware name: Acer AOA150/        , BIOS v0.3301 05/09/2008
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: task: f1634200 task.stack: f1654000
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: EIP: intel_update_cursor_plane+0x2a/0x60 [i915]
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: EFLAGS: 00210002 CPU: 0
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: EAX: 00000000 EBX: f4be9000 ECX: d1acb540 EDX: f4b9c000
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: ESI: d9092540 EDI: f861c484 EBP: f1655b6c ESP: f1655b68
abr 09 18:32:23 karlalex-acer.palosanto.com kernel:  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: CR0: 80050033 CR2: 00000000 CR3: 31618c80 CR4: 000006f0
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: Call Trace:
abr 09 18:32:23 karlalex-acer.palosanto.com kernel: intel_plane_atomic_update+0x3e/0x50 [i915]
abr 09 18:32:24 karlalex-acer.palosanto.com kernel: drm_atomic_helper_commit_planes_on_crtc+0xd6/0x1f0 [drm_kms_helper]
abr 09 18:32:24 karlalex-acer.palosanto.com kernel: intel_update_crtc+0x63/0xb0 [i915]
abr 09 18:32:24 karlalex-acer.palosanto.com kernel: intel_update_crtcs+0x60/0x80 [i915]
abr 09 18:32:24 karlalex-acer.palosanto.com kernel: intel_atomic_commit_tail+0x2bc/0xea0 [i915]
abr 09 18:32:24 karlalex-acer.palosanto.com kernel:  ? __switch_to+0xaa/0x2f0
abr 09 18:32:24 karlalex-acer.palosanto.com kernel: intel_atomic_commit+0x390/0x4b0 [i915]
...


I have already reported this as two Fedora bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1438258

https://bugzilla.redhat.com/show_bug.cgi?id=1441034


[-- Attachment #2: lspci.txt --]
[-- Type: text/plain, Size: 9050 bytes --]

00:00.0 Host bridge: Intel Corporation Mobile 945GSE Express Memory Controller Hub (rev 03)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, fast devsel, latency 0
	Capabilities: [e0] Vendor Specific Information: Len=09 <?>

00:02.0 VGA compatible controller: Intel Corporation Mobile 945GSE Express Integrated Graphics Controller (rev 03) (prog-if 00 [VGA controller])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, fast devsel, latency 0, IRQ 16
	Memory at 58480000 (32-bit, non-prefetchable) [size=512K]
	I/O ports at 60c0 [size=8]
	Memory at 40000000 (32-bit, prefetchable) [size=256M]
	Memory at 58500000 (32-bit, non-prefetchable) [size=256K]
	[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
	Capabilities: [90] MSI: Enable- Count=1/1 Maskable- 64bit-
	Capabilities: [d0] Power Management version 2
	Kernel driver in use: i915
	Kernel modules: i915

00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, fast devsel, latency 0
	Memory at 58400000 (32-bit, non-prefetchable) [size=512K]
	Capabilities: [d0] Power Management version 2

00:1b.0 Audio device: Intel Corporation NM10/ICH7 Family High Definition Audio Controller (rev 02)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, fast devsel, latency 0, IRQ 29
	Memory at 58540000 (64-bit, non-prefetchable) [size=16K]
	Capabilities: [50] Power Management version 2
	Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+
	Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00
	Capabilities: [100] Virtual Channel
	Capabilities: [130] Root Complex Link
	Kernel driver in use: snd_hda_intel
	Kernel modules: snd_hda_intel

00:1c.0 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 1 (rev 02) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 24
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	I/O behind bridge: 00005000-00005fff [size=4K]
	Memory behind bridge: 57300000-583fffff [size=17M]
	Prefetchable memory behind bridge: 0000000050000000-0000000050ffffff [size=16M]
	Capabilities: [40] Express Root Port (Slot+), MSI 00
	Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit-
	Capabilities: [90] Subsystem: Acer Incorporated [ALI] Device 015b
	Capabilities: [a0] Power Management version 2
	Capabilities: [100] Virtual Channel
	Capabilities: [180] Root Complex Link
	Kernel driver in use: pcieport

00:1c.1 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 2 (rev 02) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 25
	Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
	I/O behind bridge: 00003000-00004fff [size=8K]
	Memory behind bridge: 56300000-572fffff [size=16M]
	Prefetchable memory behind bridge: 0000000051000000-00000000520fffff [size=17M]
	Capabilities: [40] Express Root Port (Slot+), MSI 00
	Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit-
	Capabilities: [90] Subsystem: Acer Incorporated [ALI] Device 015b
	Capabilities: [a0] Power Management version 2
	Capabilities: [100] Virtual Channel
	Capabilities: [180] Root Complex Link
	Kernel driver in use: pcieport

00:1c.2 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 3 (rev 02) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 26
	Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
	I/O behind bridge: 00002000-00002fff [size=4K]
	Memory behind bridge: 55200000-562fffff [size=17M]
	Prefetchable memory behind bridge: 0000000052100000-00000000530fffff [size=16M]
	Capabilities: [40] Express Root Port (Slot+), MSI 00
	Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit-
	Capabilities: [90] Subsystem: Acer Incorporated [ALI] Device 015b
	Capabilities: [a0] Power Management version 2
	Capabilities: [100] Virtual Channel
	Capabilities: [180] Root Complex Link
	Kernel driver in use: pcieport

00:1c.3 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 4 (rev 02) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 27
	Bus: primary=00, secondary=04, subordinate=04, sec-latency=0
	I/O behind bridge: 00001000-00001fff [size=4K]
	Memory behind bridge: 54100000-551fffff [size=17M]
	Prefetchable memory behind bridge: 0000000053100000-00000000540fffff [size=16M]
	Capabilities: [40] Express Root Port (Slot+), MSI 00
	Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit-
	Capabilities: [90] Subsystem: Acer Incorporated [ALI] Device 015b
	Capabilities: [a0] Power Management version 2
	Capabilities: [100] Virtual Channel
	Capabilities: [180] Root Complex Link
	Kernel driver in use: pcieport

00:1d.0 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #1 (rev 02) (prog-if 00 [UHCI])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 16
	I/O ports at 6080 [size=32]
	Kernel driver in use: uhci_hcd

00:1d.1 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #2 (rev 02) (prog-if 00 [UHCI])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 17
	I/O ports at 6060 [size=32]
	Kernel driver in use: uhci_hcd

00:1d.2 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #3 (rev 02) (prog-if 00 [UHCI])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 18
	I/O ports at 6040 [size=32]
	Kernel driver in use: uhci_hcd

00:1d.3 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #4 (rev 02) (prog-if 00 [UHCI])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 19
	I/O ports at 6020 [size=32]
	Kernel driver in use: uhci_hcd

00:1d.7 USB controller: Intel Corporation NM10/ICH7 Family USB2 EHCI Controller (rev 02) (prog-if 20 [EHCI])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 16
	Memory at 58544400 (32-bit, non-prefetchable) [size=1K]
	Capabilities: [50] Power Management version 2
	Capabilities: [58] Debug port: BAR=1 offset=00a0
	Kernel driver in use: ehci-pci

00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev e2) (prog-if 01 [Subtractive decode])
	Flags: bus master, fast devsel, latency 0
	Bus: primary=00, secondary=05, subordinate=05, sec-latency=32
	I/O behind bridge: None
	Memory behind bridge: None
	Prefetchable memory behind bridge: None
	Capabilities: [50] Subsystem: Acer Incorporated [ALI] Device 015b

00:1f.0 ISA bridge: Intel Corporation 82801GBM (ICH7-M) LPC Interface Bridge (rev 02)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, medium devsel, latency 0
	Capabilities: [e0] Vendor Specific Information: Len=0c <?>
	Kernel driver in use: lpc_ich
	Kernel modules: intel_rng, lpc_ich, leds_ss4200

00:1f.2 IDE interface: Intel Corporation 82801GBM/GHM (ICH7-M Family) SATA Controller [IDE mode] (rev 02) (prog-if 80 [Master])
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 17
	I/O ports at 01f0 [size=8]
	I/O ports at 03f4
	I/O ports at 0170 [size=8]
	I/O ports at 0374
	I/O ports at 60a0 [size=16]
	Capabilities: [70] Power Management version 2
	Kernel driver in use: ata_piix
	Kernel modules: pata_acpi, ata_generic

00:1f.3 SMBus: Intel Corporation NM10/ICH7 Family SMBus Controller (rev 02)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: medium devsel, IRQ 17
	I/O ports at 6000 [size=32]
	Kernel driver in use: i801_smbus
	Kernel modules: i2c_i801

02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8101/2/6E PCI Express Fast/Gigabit Ethernet controller (rev 02)
	Subsystem: Acer Incorporated [ALI] Device 015b
	Flags: bus master, fast devsel, latency 0, IRQ 28
	I/O ports at 3000 [size=256]
	Memory at 51010000 (64-bit, prefetchable) [size=4K]
	Memory at 51000000 (64-bit, prefetchable) [size=64K]
	Expansion ROM at 56300000 [disabled] [size=128K]
	Capabilities: [40] Power Management version 3
	Capabilities: [50] MSI: Enable+ Count=1/1 Maskable- 64bit+
	Capabilities: [70] Express Endpoint, MSI 01
	Capabilities: [ac] MSI-X: Enable- Count=2 Masked-
	Capabilities: [cc] Vital Product Data
	Capabilities: [100] Advanced Error Reporting
	Capabilities: [140] Virtual Channel
	Capabilities: [160] Device Serial Number 04-00-00-00-ff-ff-00-00
	Kernel driver in use: r8169
	Kernel modules: r8169

03:00.0 Ethernet controller: Qualcomm Atheros AR242x / AR542x Wireless Network Adapter (PCI-Express) (rev 01)
	Subsystem: Foxconn International, Inc. Device e008
	Flags: bus master, fast devsel, latency 0, IRQ 18
	Memory at 55200000 (64-bit, non-prefetchable) [size=64K]
	Capabilities: [40] Power Management version 2
	Capabilities: [50] MSI: Enable- Count=1/1 Maskable- 64bit-
	Capabilities: [60] Express Legacy Endpoint, MSI 00
	Capabilities: [90] MSI-X: Enable- Count=1 Masked-
	Capabilities: [100] Advanced Error Reporting
	Capabilities: [140] Virtual Channel
	Kernel driver in use: ath5k
	Kernel modules: ath5k


[-- Attachment #3: journalctl-kernel-null-access.txt.bz2 --]
[-- Type: application/x-bzip, Size: 18572 bytes --]

[-- Attachment #4: Type: text/plain, Size: 160 bytes --]

_______________________________________________
Intel-gfx mailing list
Intel-gfx@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/intel-gfx