MST Dock Connect results in crash v6.1-rc1
Happens on Lenovo Thinkpad T14s G2 with Lenovo 40AS MST Hub Dock. Machine still reachable ofter Network after the crash.
100% reproducable, no Standby or other conditions needed before connecting the Dock.
AMD Ryzen 7 PRO 5850U
Using following Kernel Version https://github.com/torvalds/linux/releases/tag/v6.1-rc1
[ 70.390472] [drm] DP Alt mode state on HPD: 1
[ 70.490696] [drm] DM_MST: starting TM on aconnector: 00000000c64638a7 [id: 94]
[ 70.518948] usb 5-1.2: New USB device found, idVendor=0451, idProduct=8442, bcdDevice= 1.00
[ 70.518956] usb 5-1.2: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 70.518961] usb 5-1.2: SerialNumber: D30808XXXXXX
[ 70.579883] hub 5-1.2:1.0: USB hub found
[ 70.580157] hub 5-1.2:1.0: 6 ports detected
[ 70.766320] usb 5-1.3: new high-speed USB device number 6 using xhci_hcd
[ 70.844124] [drm] Downstream port present 1, type 2
[ 70.923027] usb 5-1.3: New USB device found, idVendor=17ef, idProduct=a394, bcdDevice= d.23
[ 70.923034] usb 5-1.3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 70.923036] usb 5-1.3: Product: USB2.0 Hub
[ 70.923038] usb 5-1.3: Manufacturer: VIA Labs, Inc.
[ 71.010402] usb 6-1.1: new SuperSpeed USB device number 4 using xhci_hcd
[ 71.010682] hub 5-1.3:1.0: USB hub found
[ 71.011151] hub 5-1.3:1.0: 4 ports detected
[ 71.018054] [drm] Downstream port present 1, type 2
[ 71.026849] usb 6-1.1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=31.03
[ 71.026853] usb 6-1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=6
[ 71.026855] usb 6-1.1: Product: USB-C Dock Ethernet
[ 71.026857] usb 6-1.1: Manufacturer: Realtek
[ 71.026859] usb 6-1.1: SerialNumber: 301XXXXXX
[ 71.113250] usb 5-1.2.1: new high-speed USB device number 7 using xhci_hcd
[ 71.228355] [drm] Downstream port present 1, type 2
[ 71.249894] usb 5-1.2.1: New USB device found, idVendor=0bda, idProduct=5187, bcdDevice= 0.04
[ 71.249898] usb 5-1.2.1: New USB device strings: Mfr=3, Product=1, SerialNumber=2
[ 71.249900] usb 5-1.2.1: Product: Full HD webcam
[ 71.249901] usb 5-1.2.1: Manufacturer: ASD_651_Camera
[ 71.249902] usb 5-1.2.1: SerialNumber: 200901XXXXXX
[ 71.298418] usb 6-1.2: new SuperSpeed USB device number 5 using xhci_hcd
[ 71.300926] usb 5-1.2.1: Found UVC 1.00 device Full HD webcam (0bda:5187)
[ 71.305261] ------------[ cut here ]------------
[ 71.305263] WARNING: CPU: 2 PID: 1461 at drivers/gpu/drm/drm_modeset_lock.c:317 drm_modeset_lock+0xcd/0xe0
[ 71.305271] Modules linked in: rpcrdma rdma_cm iw_cm ib_cm ib_core ccm rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 xt_tcpudp ip6table_mangle ip6table_nat ip6table_filter ip6_tables iptable_mangle iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_filter bridge stp llc cmac algif_hash algif_skcipher qrtr af_alg bnep intel_rapl_msr snd_acp3x_rn snd_soc_dmic snd_acp3x_pdm_dma snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof joydev intel_rapl_common mousedev snd_sof_utils snd_ctl_led hid_multitouch nls_iso8859_1 edac_mce_amd snd_soc_core snd_hda_codec_realtek think_lmi vfat fat firmware_attributes_class wmi_bmof snd_hda_codec_generic snd_hda_codec_hdmi iwlmvm snd_compress kvm_amd amdgpu mac80211 snd_hda_intel ac97_bus snd_intel_dspcfg snd_pcm_dmaengine snd_intel_sdw_acpi libarc4 kvm snd_rpl_pci_acp6x snd_hda_codec btusb uvcvideo snd_acp_pci gpu_sched irqbypass btrtl snd_pci_acp6x
[ 71.305323] snd_hda_core videobuf2_vmalloc drm_buddy btbcm rapl snd_hwdep drm_ttm_helper snd_pci_acp5x sp5100_tco videobuf2_memops r8169 btintel psmouse pcspkr k10temp i2c_piix4 thinkpad_acpi iwlwifi nxp_nci_i2c videobuf2_v4l2 snd_pcm snd_rn_pci_acp3x ttm realtek btmtk ledtrig_audio nxp_nci videobuf2_common snd_acp_config nci videodev drm_display_helper platform_profile mdio_devres snd_timer tpm_crb snd_soc_acpi ucsi_acpi bluetooth snd video cfg80211 mc ecdh_generic libphy snd_pci_acp3x cec soundcore typec_ucsi nfc i2c_hid_acpi tpm_tis typec i2c_hid rfkill mac_hid tpm_tis_core roles wmi acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd usbip_host grace usbip_core dm_multipath sg sunrpc crypto_user fuse bpf_preload ip_tables x_tables ext4 crc32c_generic crc16 mbcache jbd2 dm_crypt cbc encrypted_keys trusted asn1_encoder tee tpm dm_mod crct10dif_pclmul serio_raw crc32_pclmul atkbd crc32c_intel libps2 polyval_clmulni polyval_generic vivaldi_fmap gf128mul ghash_clmulni_intel sha512_ssse3 nvme
[ 71.305381] aesni_intel crypto_simd nvme_core ccp xhci_pci cryptd i8042 rng_core xhci_pci_renesas nvme_common serio
[ 71.305389] CPU: 2 PID: 1461 Comm: Xorg Not tainted 6.1.0-rc1-1-mainline #1 82d773077933de28a35522aee6ff7b5c863e81fd
[ 71.305392] Hardware name: LENOVO 20XGS01100/20XGS01100, BIOS R1NET50W (1.20) 04/14/2022
[ 71.305394] RIP: 0010:drm_modeset_lock+0xcd/0xe0
[ 71.305398] Code: ff ff ff eb d5 e8 83 54 49 00 eb 91 0f 0b e9 75 ff ff ff 83 f8 8e 74 c0 83 f8 dd 75 bd 48 89 6b 18 c7 43 20 00 00 00 00 eb b0 <0f> 0b eb 80 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e
[ 71.305400] RSP: 0018:ffffabb683d3f6e0 EFLAGS: 00010286
[ 71.305402] RAX: 0000000000000000 RBX: ffffabb683d3fc70 RCX: 0000000000000000
[ 71.305403] RDX: ffff94a019fc8000 RSI: ffffabb683d3fc70 RDI: ffff94a006f1c550
[ 71.305404] RBP: ffff94a006f1c550 R08: ffff94a006f1c540 R09: ffffabb683d3f9cc
[ 71.305405] R10: ffff94a0ca661f00 R11: ffff94a006f1c850 R12: ffff94a006f1c578
[ 71.305406] R13: ffff94a005fa0800 R14: ffff94a0d27c0000 R15: 0000000000000001
[ 71.305407] FS: 00007f128807c0c0(0000) GS:ffff94a6cee80000(0000) knlGS:0000000000000000
[ 71.305409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.305410] CR2: 00005617f33b8330 CR3: 0000000156cb6000 CR4: 0000000000750ee0
[ 71.305411] PKRU: 55555554
[ 71.305412] Call Trace:
[ 71.305414] <TASK>
[ 71.305418] drm_atomic_get_private_obj_state+0x5c/0x160
[ 71.305423] compute_mst_dsc_configs_for_link+0x59/0x9e0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.305706] ? setup_dsc_config+0x370/0x7c0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.305943] ? create_stream_for_sink+0x411/0xad0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306088] pre_validate_dsc+0x410/0x4a0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306228] amdgpu_dm_atomic_check+0x440/0x1220 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306370] ? idr_alloc_u32+0xa3/0xe0
[ 71.306373] drm_atomic_check_only+0x537/0xba0
[ 71.306375] drm_atomic_commit+0x5c/0x100
[ 71.306377] ? drm_plane_get_damage_clips.cold+0x1c/0x1c
[ 71.306380] drm_atomic_helper_set_config+0x74/0xb0
[ 71.306382] drm_mode_setcrtc+0x43d/0x860
[ 71.306385] ? drm_mode_getcrtc+0x180/0x180
[ 71.306386] drm_ioctl_kernel+0xcd/0x170
[ 71.306388] drm_ioctl+0x1eb/0x450
[ 71.306389] ? drm_mode_getcrtc+0x180/0x180
[ 71.306391] amdgpu_drm_ioctl+0x4e/0x90 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306503] __x64_sys_ioctl+0x94/0xd0
[ 71.306507] do_syscall_64+0x5f/0x90
[ 71.306510] ? do_syscall_64+0x6b/0x90
[ 71.306512] ? exit_to_user_mode_prepare+0x145/0x1d0
[ 71.306514] ? syscall_exit_to_user_mode+0x1b/0x40
[ 71.306516] ? do_syscall_64+0x6b/0x90
[ 71.306517] ? syscall_exit_to_user_mode+0x1b/0x40
[ 71.306518] ? do_syscall_64+0x6b/0x90
[ 71.306519] ? do_syscall_64+0x6b/0x90
[ 71.306520] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.306523] RIP: 0033:0x7f12889f2c0f
[ 71.306524] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 71.306525] RSP: 002b:00007fff6a615050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 71.306526] RAX: ffffffffffffffda RBX: 00007f1274001fd0 RCX: 00007f12889f2c0f
[ 71.306527] RDX: 00007fff6a6150e0 RSI: 00000000c06864a2 RDI: 000000000000000f
[ 71.306527] RBP: 00007fff6a6150e0 R08: 0000000000000000 R09: 00005617f46b72f0
[ 71.306528] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000c06864a2
[ 71.306528] R13: 000000000000000f R14: 00005617f46b72f0 R15: 0000000000000000
[ 71.306530] </TASK>
[ 71.306530] ---[ end trace 0000000000000000 ]---
[ 71.306533] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 71.306534] #PF: supervisor read access in kernel mode
[ 71.306535] #PF: error_code(0x0000) - not-present page
[ 71.306537] PGD 0 P4D 0
[ 71.306538] Oops: 0000 [#1] PREEMPT SMP NOPTI
[ 71.306539] CPU: 2 PID: 1461 Comm: Xorg Tainted: G W 6.1.0-rc1-1-mainline #1 82d773077933de28a35522aee6ff7b5c863e81fd
[ 71.306541] Hardware name: LENOVO 20XGS01100/20XGS01100, BIOS R1NET50W (1.20) 04/14/2022
[ 71.306541] RIP: 0010:drm_atomic_get_private_obj_state+0xcb/0x160
[ 71.306543] Code: 49 c1 e5 05 4c 01 e8 48 c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 48 c7 40 10 00 00 00 00 48 c7 40 18 00 00 00 00 48 8b 43 50 <48> 8b 00 e8 ed 10 88 00 48 85 c0 74 70 48 8b 55 40 4a 89 44 2a 08
[ 71.306544] RSP: 0018:ffffabb683d3f710 EFLAGS: 00010282
[ 71.306545] RAX: 0000000000000000 RBX: ffff94a006f1c540 RCX: 000000000135a202
[ 71.306546] RDX: 000000000135a002 RSI: cdc57fd5d73f921f RDI: ffff94a006f1c540
[ 71.306546] RBP: ffff94a0ca661f00 R08: 0000000000000060 R09: ffff94a005c428a0
[ 71.306547] R10: ffff94a0ca661f00 R11: ffff94a006f1c850 R12: 0000000000000003
[ 71.306547] R13: 0000000000000040 R14: ffff94a0d27c0000 R15: 0000000000000001
[ 71.306548] FS: 00007f128807c0c0(0000) GS:ffff94a6cee80000(0000) knlGS:0000000000000000
[ 71.306549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.306550] CR2: 0000000000000000 CR3: 0000000156cb6000 CR4: 0000000000750ee0
[ 71.306551] PKRU: 55555554
[ 71.306551] Call Trace:
[ 71.306552] <TASK>
[ 71.306552] compute_mst_dsc_configs_for_link+0x59/0x9e0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306692] ? setup_dsc_config+0x370/0x7c0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306839] ? create_stream_for_sink+0x411/0xad0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.306976] pre_validate_dsc+0x410/0x4a0 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.307105] amdgpu_dm_atomic_check+0x440/0x1220 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.307240] ? idr_alloc_u32+0xa3/0xe0
[ 71.307243] drm_atomic_check_only+0x537/0xba0
[ 71.307244] drm_atomic_commit+0x5c/0x100
[ 71.307245] ? drm_plane_get_damage_clips.cold+0x1c/0x1c
[ 71.307247] drm_atomic_helper_set_config+0x74/0xb0
[ 71.307249] drm_mode_setcrtc+0x43d/0x860
[ 71.307252] ? drm_mode_getcrtc+0x180/0x180
[ 71.307253] drm_ioctl_kernel+0xcd/0x170
[ 71.307255] drm_ioctl+0x1eb/0x450
[ 71.307257] ? drm_mode_getcrtc+0x180/0x180
[ 71.307258] amdgpu_drm_ioctl+0x4e/0x90 [amdgpu a7516b459dbd46d2971c8a423a3ef20f2f5285e9]
[ 71.307353] __x64_sys_ioctl+0x94/0xd0
[ 71.307355] do_syscall_64+0x5f/0x90
[ 71.307358] ? do_syscall_64+0x6b/0x90
[ 71.307359] ? exit_to_user_mode_prepare+0x145/0x1d0
[ 71.307361] ? syscall_exit_to_user_mode+0x1b/0x40
[ 71.307362] ? do_syscall_64+0x6b/0x90
[ 71.307364] ? syscall_exit_to_user_mode+0x1b/0x40
[ 71.307365] ? do_syscall_64+0x6b/0x90
[ 71.307366] ? do_syscall_64+0x6b/0x90
[ 71.307367] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.307369] RIP: 0033:0x7f12889f2c0f
[ 71.307370] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 71.307371] RSP: 002b:00007fff6a615050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 71.307372] RAX: ffffffffffffffda RBX: 00007f1274001fd0 RCX: 00007f12889f2c0f
[ 71.307372] RDX: 00007fff6a6150e0 RSI: 00000000c06864a2 RDI: 000000000000000f
[ 71.307373] RBP: 00007fff6a6150e0 R08: 0000000000000000 R09: 00005617f46b72f0
[ 71.307374] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000c06864a2
[ 71.307374] R13: 000000000000000f R14: 00005617f46b72f0 R15: 0000000000000000
[ 71.307375] </TASK>
[ 71.307376] Modules linked in: rpcrdma rdma_cm iw_cm ib_cm ib_core ccm rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 xt_tcpudp ip6table_mangle ip6table_nat ip6table_filter ip6_tables iptable_mangle iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_filter bridge stp llc cmac algif_hash algif_skcipher qrtr af_alg bnep intel_rapl_msr snd_acp3x_rn snd_soc_dmic snd_acp3x_pdm_dma snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof joydev intel_rapl_common mousedev snd_sof_utils snd_ctl_led hid_multitouch nls_iso8859_1 edac_mce_amd snd_soc_core snd_hda_codec_realtek think_lmi vfat fat firmware_attributes_class wmi_bmof snd_hda_codec_generic snd_hda_codec_hdmi iwlmvm snd_compress kvm_amd amdgpu mac80211 snd_hda_intel ac97_bus snd_intel_dspcfg snd_pcm_dmaengine snd_intel_sdw_acpi libarc4 kvm snd_rpl_pci_acp6x snd_hda_codec btusb uvcvideo snd_acp_pci gpu_sched irqbypass btrtl snd_pci_acp6x
[ 71.307399] snd_hda_core videobuf2_vmalloc drm_buddy btbcm rapl snd_hwdep drm_ttm_helper snd_pci_acp5x sp5100_tco videobuf2_memops r8169 btintel psmouse pcspkr k10temp i2c_piix4 thinkpad_acpi iwlwifi nxp_nci_i2c videobuf2_v4l2 snd_pcm snd_rn_pci_acp3x ttm realtek btmtk ledtrig_audio nxp_nci videobuf2_common snd_acp_config nci videodev drm_display_helper platform_profile mdio_devres snd_timer tpm_crb snd_soc_acpi ucsi_acpi bluetooth snd video cfg80211 mc ecdh_generic libphy snd_pci_acp3x cec soundcore typec_ucsi nfc i2c_hid_acpi tpm_tis typec i2c_hid rfkill mac_hid tpm_tis_core roles wmi acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd usbip_host grace usbip_core dm_multipath sg sunrpc crypto_user fuse bpf_preload ip_tables x_tables ext4 crc32c_generic crc16 mbcache jbd2 dm_crypt cbc encrypted_keys trusted asn1_encoder tee tpm dm_mod crct10dif_pclmul serio_raw crc32_pclmul atkbd crc32c_intel libps2 polyval_clmulni polyval_generic vivaldi_fmap gf128mul ghash_clmulni_intel sha512_ssse3 nvme
[ 71.307429] aesni_intel crypto_simd nvme_core ccp xhci_pci cryptd i8042 rng_core xhci_pci_renesas nvme_common serio
[ 71.307434] CR2: 0000000000000000
[ 71.307435] ---[ end trace 0000000000000000 ]---
[ 71.307436] RIP: 0010:drm_atomic_get_private_obj_state+0xcb/0x160
[ 71.307437] Code: 49 c1 e5 05 4c 01 e8 48 c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 48 c7 40 10 00 00 00 00 48 c7 40 18 00 00 00 00 48 8b 43 50 <48> 8b 00 e8 ed 10 88 00 48 85 c0 74 70 48 8b 55 40 4a 89 44 2a 08
[ 71.307438] RSP: 0018:ffffabb683d3f710 EFLAGS: 00010282
[ 71.307439] RAX: 0000000000000000 RBX: ffff94a006f1c540 RCX: 000000000135a202
[ 71.307439] RDX: 000000000135a002 RSI: cdc57fd5d73f921f RDI: ffff94a006f1c540
[ 71.307440] RBP: ffff94a0ca661f00 R08: 0000000000000060 R09: ffff94a005c428a0
[ 71.307440] R10: ffff94a0ca661f00 R11: ffff94a006f1c850 R12: 0000000000000003
[ 71.307441] R13: 0000000000000040 R14: ffff94a0d27c0000 R15: 0000000000000001
[ 71.307442] FS: 00007f128807c0c0(0000) GS:ffff94a6cee80000(0000) knlGS:0000000000000000
[ 71.307442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.307443] CR2: 0000000000000000 CR3: 0000000156cb6000 CR4: 0000000000750ee0
[ 71.307444] PKRU: 55555554