kernel panic when X server terminates

Bug #34697 reported by Lei Ming
32
Affects Status Importance Assigned to Milestone
linux-source-2.6.20 (Ubuntu)
Fix Released
Medium
Unassigned
xorg (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Dapper Drake x86_64 flight's i810 X driver causes kernel panic when terminates X server on i945G system (DELL GX620).

This bug has also been reported to Freedesktop's bugzilla as bug# 5085.

I'm using Dapper Drakes' latest flight (x86_64 version) on a DELL GX620 machine, which has a Intel 945G chipset. I use the "i810" X driver, and everytime when I terminate X, either by logging out GNOME, shutting down/restart system or killing X server manually, I get kernel panic for paging fault. The problem won't appear if I use "vesa" driver.

I've tried Ubuntu 5.10 and SLES 9 SP3 and both have the same problem. It seems only RHEL 4 U2 has fixed it.

I can provide the screenshot of the kernel panic if you want to see it.

kernel version:

Linux b 2.6.15-17-amd64-generic #1 SMP PREEMPT Tue Mar 7 05:53:18 UTC 2006 x86_64 GNU/Linux

lspci:

0000:00:00.0 Host bridge: Intel Corporation 945G/P Memory Controller Hub (rev 02 )
0000:00:01.0 PCI bridge: Intel Corporation 945G/P PCI Express Graphics Port (rev 02)
0000:00:02.0 VGA compatible controller: Intel Corporation 945G Integrated Graphi cs Controller (rev 02)
0000:00:02.1 Display controller: Intel Corporation 945G Integrated Graphics Cont roller (rev 02)
0000:00:1c.0 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port 1 (rev 01)
0000:00:1c.1 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port 2 (rev 01)
0000:00:1d.0 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #1 (rev 01)
0000:00:1d.1 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #2 (rev 01)
0000:00:1d.2 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #3 (rev 01)
0000:00:1d.3 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #4 (rev 01)
0000:00:1d.7 USB Controller: Intel Corporation 82801G (ICH7 Family) USB2 EHCI Co ntroller (rev 01)
0000:00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev e1)
0000:00:1e.2 Multimedia audio controller: Intel Corporation 82801G (ICH7 Family) AC'97 Audio Controller (rev 01)
0000:00:1f.0 ISA bridge: Intel Corporation 82801GB/GR (ICH7 Family) LPC Interfac e Bridge (rev 01)
0000:00:1f.1 IDE interface: Intel Corporation 82801G (ICH7 Family) IDE Controlle r (rev 01)
0000:00:1f.2 IDE interface: Intel Corporation 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controllers cc=IDE (rev 01)
0000:00:1f.3 SMBus: Intel Corporation 82801G (ICH7 Family) SMBus Controller (rev 01)
0000:02:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5751 Gigabit Ethernet PCI Express (rev 01)

lsmod:

Module Size Used by
ipv6 300416 12
rfcomm 45600 0
l2cap 30464 5 rfcomm
bluetooth 59268 4 rfcomm,l2cap
cpufreq_userspace 9184 0
cpufreq_stats 8264 0
freq_table 6464 1 cpufreq_stats
cpufreq_powersave 3328 0
cpufreq_ondemand 9768 0
cpufreq_conservative 10984 0
video 18824 0
tc1100_wmi 9096 0
sony_acpi 7060 0
pcc_acpi 14848 0
hotkey 13768 0
dev_acpi 15364 0
container 6272 0
button 8864 0
acpi_sbs 24600 0
battery 12296 1 acpi_sbs
i2c_acpi_ec 7040 1 acpi_sbs
i2c_core 26624 1 i2c_acpi_ec
ac 7176 1 acpi_sbs
ext2 74640 1
dm_mod 63048 1
af_packet 28172 2
md_mod 76792 0
rtc 16760 0
parport_pc 40816 1
lp 15040 0
parport 44172 2 parport_pc,lp
snd_intel8x0 38184 1
snd_ac97_codec 109884 1 snd_intel8x0
snd_ac97_bus 3968 1 snd_ac97_codec
snd_pcm_oss 59424 0
snd_mixer_oss 20608 1 snd_pcm_oss
snd_pcm 104712 3 snd_intel8x0,snd_ac97_codec,snd_pcm_oss
snd_timer 29064 1 snd_pcm
psmouse 40452 0
serio_raw 9732 0
snd 68576 8 snd_intel8x0,snd_ac97_codec,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_timer
tg3 106500 0
soundcore 13216 1 snd
snd_page_alloc 13968 2 snd_intel8x0,snd_pcm
intel_agp 27448 1
hw_random 7200 0
shpchp 51360 0
pci_hotplug 33168 1 shpchp
sg 43568 0
tsdev 10240 0
evdev 14464 1
usbhid 43040 0
xfs 547168 4
exportfs 8064 1 xfs
uhci_hcd 36640 0
ehci_hcd 34568 0
usbcore 145980 4 usbhid,uhci_hcd,ehci_hcd
sd_mod 21376 7
ata_piix 13188 12
libata 67344 1 ata_piix
scsi_mod 159992 3 sg,sd_mod,libata
ide_cd 35744 0
cdrom 41144 1 ide_cd
piix 14084 1
generic 7300 0
thermal 16524 0
processor 29224 1 thermal
fan 6408 0
capability 7176 0
commoncap 9728 1 capability
vesafb 10920 1
cfbcopyarea 5120 1 vesafb
cfbimgblt 4224 1 vesafb
cfbfillrect 5760 1 vesafb
fbcon 43136 72
tileblit 4096 1 fbcon
font 9984 1 fbcon
bitblit 7424 1 fbcon
softcursor 3712 1 bitblit

Tags: i810 video
Lei Ming (ming-lei)
description: updated
summary: + Dapper Drake x86_64 flight's i810 X driver causes kernel panic when
+ terminates X server on i945G system (DELL GX620).
Revision history for this message
Paul Sladen (sladen) wrote : Re: [Bug 34697] kernel panic when X server terminates

> It seems only RHEL 4 U2 has fixed it.

It could be that RHEL may have a more conservative configuration (eg. no
DRI). Are you able to copy across the config from the Ubuntu/SLES install
and try that under RHEL?

Any differences between them may well show up a workaround/solution; or
otherwise we can start patch hunting.

BTW, could you report the fact that you think it's fixed in the RH release
to the upstream FD.org bugzilla---that may give them clues too, and they're
in a much better position to follow that up directly.

Revision history for this message
Lei Ming (ming-lei) wrote :
Download full text (6.1 KiB)

Disabling DRI doesn't help. I copied Ubuntu's xorg.conf to RHEL4U2 and
it's X still works with no problem.
I will comment on Freedesktop.org's bugzilla.
Thanks!

On Tue, 2006-03-14 at 01:09 +0000, Paul Sladen wrote:
> Public bug report changed:
> https://launchpad.net/malone/bugs/34697
>
> Comment:
> > It seems only RHEL 4 U2 has fixed it.
>
> It could be that RHEL may have a more conservative configuration (eg. no
> DRI). Are you able to copy across the config from the Ubuntu/SLES install
> and try that under RHEL?
>
> Any differences between them may well show up a workaround/solution; or
> otherwise we can start patch hunting.
>
> BTW, could you report the fact that you think it's fixed in the RH release
> to the upstream FD.org bugzilla---that may give them clues too, and they're
> in a much better position to follow that up directly.

# /etc/X11/xorg.conf (xorg X Window System server configuration file)
#
# This file was generated by dexconf, the Debian X Configuration tool, using
# values from the debconf database.
#
# Edit this file with caution, and see the /etc/X11/xorg.conf manual page.
# (Type "man /etc/X11/xorg.conf" at the shell prompt.)
#
# This file is automatically updated on xserver-xorg package upgrades *only*
# if it has not been modified since the last upgrade of the xserver-xorg
# package.
#
# If you have edited this file but would like it to be automatically updated
# again, run the following command:
# sudo dpkg-reconfigure -phigh xserver-xorg

Section "Files"
 FontPath "/usr/share/X11/fonts/misc"
 FontPath "/usr/share/X11/fonts/cyrillic"
 FontPath "/usr/share/X11/fonts/100dpi/:unscaled"
 FontPath "/usr/share/X11/fonts/75dpi/:unscaled"
 FontPath "/usr/share/X11/fonts/Type1"
 FontPath "/usr/share/X11/fonts/100dpi"
 FontPath "/usr/share/X11/fonts/75dpi"
 # path to defoma fonts
 FontPath "/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType"
EndSection

Section "Module"
 Load "i2c"
 Load "bitmap"
 Load "ddc"
 Load "dri"
 Load "extmod"
 Load "freetype"
 Load "glx"
 Load "int10"
 Load "type1"
 Load "vbe"
EndSection

Section "InputDevice"
 Identifier "Generic Keyboard"
 Driver "kbd"
 Option "CoreKeyboard"
 Option "XkbRules" "xorg"
 Option "XkbModel" "pc104"
 Option "XkbLayout" "us"
EndSection

Section "InputDevice"
 Identifier "Configured Mouse"
 Driver "mouse"
 Option "CorePointer"
 Option "Device" "/dev/input/mice"
 Option "Protocol" "ExplorerPS/2"
 Option "Emulate3Buttons" "true"
EndSection

Section "Device"
 Identifier "Generic Video Card"
 Driver "i810"
 BusID "PCI:0:2:0"
EndSection

Section "Monitor"
 Identifier "Generic Monitor"
 Option "DPMS"
 HorizSync 28-64
 VertRefresh 43-60
EndSection

Section "Screen"
 Identifier "Default Screen"
 Device "Generic Video Card"
 Monitor "Generic Monitor"
 DefaultDepth 24
 SubSection "Display"
  Depth 1
  Modes "1280x1024"
 EndSubSection
 SubSection "Display"
  Depth 4
  Modes "1280x1024"
 EndSubSection
 SubSection "Display"
  Depth 8
  Modes "1280x1024"
 EndSubSection
 SubSection "Display"
  Depth 15
  Modes "1280x1024"
 EndSubSection
 SubSection "Display"
  Depth 16
  Modes "1280x1024"
 EndSubSection
 SubSection "Display"
  Depth 24
  Modes "1280x1...

Read more...

Revision history for this message
Lei Ming (ming-lei) wrote :

This is a snapshot of the kernel panic. I'm sorry it's not very clear.

http://www.flickr.com/photo_zoom.gne?id=112755726&size=o

Revision history for this message
Baishampayan Ghose (b.ghose) wrote :

Assigning the bug to the X-Swat team.

Changed in xserver-xorg-driver-i810:
assignee: nobody → ubuntu-x-swat
Revision history for this message
Lei Ming (ming-lei) wrote : Kernel Panic Stack Trace
Download full text (41.4 KiB)

Finally I got a serial port cable and captured the kernel panic output!

I don't know if I can use a paste bin so I just attached it here.

The first one is by manually kill the X process when running an AMD64
generic kenrel. The second one is by reboot the system when running an
AMD64 Xeon kernel, which is my default kernel.

sudo kill 4271
Password:
childe@b:~$ [ 194.072558] Unable to handle kernel paging request at ffff810077f2ece8 RIP:
[ 194.077262] <ffffffff80262dba>{agp_free_memory+122}
[ 194.084724] PGD 8063 PUD a063 PMD 8000000077e001e3 BAD
[ 194.089967] Oops: 0009 [1] PREEMPT SMP
[ 194.093890] CPU 0
[ 194.095936] Modules linked in: rfcomm l2cap bluetooth i915 drm ipv6 cpufreq_userspace cpufreq_stats freq_table cpufreq_powersave cpufreq_ondemand cpufreq_conservative video tc1100_wmi sony_acpi pcc_acpi hotkey dev_acpi container button acpi_sbs battery i2c_acpi_ec i2c_core ac ext2 af_packet dm_mod md_mod rtc parport_pc lp parport psmouse tg3 tsdev serio_raw snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm_oss snd_mixer_oss usbhid snd_pcm snd_timer intel_agp snd soundcore snd_page_alloc hw_random shpchp pci_hotplug evdev sg xfs exportfs ehci_hcd uhci_hcd usbcore sd_mod ata_piix libata scsi_mod ide_cd cdrom piix generic thermal processor fan capability commoncap vesafb cfbcopyarea cfbimgblt cfbfillrect fbcon tileblit font bitblit softcursor
[ 194.163071] Pid: 4271, comm: Xorg Not tainted 2.6.15-19-amd64-generic #1
[ 194.169889] RIP: 0010:[<ffffffff80262dba>] <ffffffff80262dba>{agp_free_memory+122}
[ 194.177427] RSP: 0018:ffff810077d2fea8 EFLAGS: 00010246
[ 194.183015] RAX: 000000000000004c RBX: ffff810077f2ecc0 RCX: 000000000000004b
[ 194.190278] RDX: ffff810078923b00 RSI: ffff810001000000 RDI: ffff810078923b00
[ 194.197537] RBP: 0000000000000800 R08: 0000000000000008 R09: 0000000000000207
[ 194.204804] R10: 0000000000000000 R11: 0000000000003246 R12: ffff810000000000
[ 194.212065] R13: ffff8100779a9dc0 R14: ffffffff80426d40 R15: ffff81007a9f4280
[ 194.219327] FS: 00002aaaab7acce0(0000) GS:ffffffff80446800(0000) knlGS:0000000000000000
[ 194.227560] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 194.233411] CR2: ffff810077e00970 CR3: 000000007e9f2000 CR4: 00000000000006e0
[ 194.240669] Process Xorg (pid: 4271, threadinfo ffff810077d2e000, task ffff81007e6f87e0)
[ 194.248899] Stack: ffff810077f2ef40 ffff81007a9f4280 ffff810078923e20 ffffffff80261cb8
[ 194.256895] ffff81007dd9a4f0 0000000000000008 ffff81007a9f4280 ffff81007daa4e48
[ 194.265072] ffff81007aada518 ffff81007e7d86c0
[ 194.270232] Call Trace:<ffffffff80261cb8>{agp_release+200} <ffffffff8018e482>{__fput+178}
[ 194.278612] <ffffffff8018b338>{filp_close+104} <ffffffff8018b9b3>{sys_close+163}
[ 194.286805] <ffffffff8010fede>{system_call+126}
[ 194.292372]
[ 194.292373] Code: 8b 7b 28 e8 3e ff ff ff 48 8b 7b 18 e8 15 ed f1 ff 48 89 df
[ 194.301360] RIP <ffffffff80262dba>{agp_free_memory+122} RSP <ffff810077d2fea8>
[ 194.308725] CR2: ffff810077f2ece8
[ 194.312097] <1>Unable to handle kernel paging request at ffff810077f82178 RIP:
[ 194.317227] <ffffffff802bf845>{ip_route_input+101}
[ 194.324619] PGD 8063 PUD...

Revision history for this message
Chris James (mail-chrisjames) wrote :

I am seeing this bug also (at least, I have not been able to capture the exact text of the crash but the last few lines are the same).

My system is Asus P5GV-MX motherboard (i915 chipset) with Intel Celeron running amd64 kernel. Please advise if you need more info (and how to get it :)

Revision history for this message
Chris James (mail-chrisjames) wrote :

I have been able to work around this bug by setting Execute Disable Function to
ENABLED in BIOS (Advanced -> CPU Configuration).

X now terminates and restarts without issue

Matt Zimmerman (mdz)
Changed in xserver-xorg-driver-i810:
assignee: ubuntu-x-swat → nobody
Revision history for this message
absurdist (absurdist81) wrote :

Thanks for that solution, I would like to report that it worked for me also. I had reported this bug at: https://launchpad.net/bugs/54495

I also entered my BIOS setup and set
Advanced ->
CPU Configuration ->
Execute Disable Function = Enabled

My setup is:
mobo: ASUS P5P800-VM
integrated graphics: Intel 865G
driver: i810
OS: kubuntu (dapper drake)

Revision history for this message
holzbit1 (saenger-a) wrote :

I´m also affected.

mobo: ASUS P5LD2-TVM SE/S
integrated graphics: Intel 945G
driver: i810
os: Kubuntu 6.06 LTS 64bit, Kubuntu 6.10 64bit, OpenSuSE 10.1 64bit

Many thanks to Chris James for the hint. Enabling Execute Disable in the Bios works for me too.

Is there any other bugfix around?

Changed in linux-source-2.6.15:
status: Unconfirmed → Confirmed
Changed in xorg:
status: Unconfirmed → Confirmed
Revision history for this message
Timo Aaltonen (tjaalton) wrote :

This has been fixed in kernel some time ago.

Changed in xorg:
status: Confirmed → Rejected
Changed in linux-source-2.6.15:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.