Opened 7 years ago

Last modified 5 years ago

#13580 in-progress bug

Black Screen on Thinkpad T400 with Intel graphics and Coreboot — at Version 1

Reported by: johkra Owned by: nobody
Priority: low Milestone: Unscheduled
Component: Drivers/Graphics/intel_extreme/g45 Version: R1/Development
Keywords: Cc: pulkomandy, kallisti5
Blocked By: Blocking:
Platform: All

Description (last modified by waddlesplash)

Haiku (nightly hrev51243, both 32bit and 64 bit) fails to boot on a Lenovo Thinkpad T400 (Core 2 Duo P8600, integrated Intel graphics) with Coreboot 4.6.

After initial messages on the screen, the boot ends at a black screen. When attaching to the serial console, the following trace is shown with default boot options:

intel_extreme: CALLED status_t intel_get_frame_buffer_config(frame_buffer_config*)
PANIC: _mutex_lock(): using unitialized lock 0xffffffff801c83e0
Welcome to Kernel Debugging Land...
Thread 457 "app_server" running on CPU 1
stack trace for thread 457 "app_server"
    kernel stack: 0xffffffff81430000 to 0xffffffff81435000
      user stack: 0x00007ff7fa566000 to 0x00007ff7fb566000
frame                       caller             <image>:function + offset
 0 ffffffff81434c18 (+  16) ffffffff80140299   <kernel_x86_64> arch_debug_stack_trace + 0x13
 1 ffffffff81434c28 (+  16) ffffffff800a471d   <kernel_x86_64> stack_trace_trampoline(void*) + 0x09
 2 ffffffff81434c38 (+  24) ffffffff8012ffac   <kernel_x86_64> arch_debug_call_with_fault_handler + 0x16
 3 ffffffff81434c50 (+  96) ffffffff800a50b8   <kernel_x86_64> debug_call_with_fault_handler + 0x68
 4 ffffffff81434cb0 (+  96) ffffffff800a6068   <kernel_x86_64> kernel_debugger_loop(char const*, char const*, __va_list_tag*, int) + 0x225
 5 ffffffff81434d10 (+  80) ffffffff800a6323   <kernel_x86_64> kernel_debugger_internal(char const*, char const*, __va_list_tag*, int) + 0x137
 6 ffffffff81434d60 (+ 240) ffffffff800a6580   <kernel_x86_64> panic + 0xc1
 7 ffffffff81434e50 (+  80) ffffffff8008c68b   <kernel_x86_64> _mutex_lock + 0xf0
 8 ffffffff81434ea0 (+  64) ffffffff800af3bc   <kernel_x86_64> frame_buffer_update + 0x30
 9 ffffffff81434ee0 (+  64) ffffffff800af68f   <kernel_x86_64> _user_frame_buffer_update + 0x5a
10 ffffffff81434f20 (+  24) ffffffff8013a485   <kernel_x86_64> x86_64_syscall_entry + 0xfb
user iframe at 0xffffffff81434f38 (end = 0xffffffff81435000)
 rax 0xf4                  rbx 0x1e476307460         rcx 0x1b29b90a89c
 rdx 0x320                 rsi 0x500                 rdi 0xffffffff90010000
 rbp 0x7ff7fb564880         r8 0x1400                 r9 0x104000
 r10 0x20                  r11 0x3202                r12 0x20
 r13 0x1                   r14 0x320                 r15 0x1400
 rip 0x1b29b90a89c         rsp 0x7ff7fb564818     rflags 0x3202
 vector: 0x63, error code: 0x0
11 ffffffff81434f38 (+140705176680776) 000001b29b90a89c   <libroot.so> _kern_frame_buffer_update + 0x0c
12 00007ff7fb564880 (+  96) 000001834dc10c7b   <_APP_> Screen::SetMode(display_mode const&) + 0x53
13 00007ff7fb5648e0 (+  80) 000001834dc10d08   <_APP_> Screen::SetPreferredMode() + 0x2a
14 00007ff7fb564930 (+ 112) 000001834dc344a4   <_APP_> VirtualScreen::AddScreen(Screen*, ScreenConfigurations&) + 0x94
15 00007ff7fb5649a0 (+ 304) 000001834dc3494c   <_APP_> VirtualScreen::SetConfiguration(Desktop&, ScreenConfigurations&, unsigned int*) + 0x294
16 00007ff7fb564ad0 (+ 240) 000001834dc00ed7   <_APP_> Desktop::Init() + 0x119
17 00007ff7fb564bc0 (+  80) 000001834dbf51ae   <_APP_> AppServer::_CreateDesktop(unsigned int, char const*) + 0x56
18 00007ff7fb564c10 (+ 176) 000001834dbf537f   <_APP_> AppServer::MessageReceived(BMessage*) + 0xc3
19 00007ff7fb564cc0 (+  16) 000000899296bd40   <libbe.so> BLooper::DispatchMessage(BMessage*, BHandler*) + 0x34
20 00007ff7fb564cd0 (+ 576) 0000008992965219   <libbe.so> BApplication::DispatchMessage(BMessage*, BHandler*) + 0x39b
21 00007ff7fb564f10 (+  96) 000000899296c0cc   <libbe.so> BLooper::task_looper() + 0x1dc
22 00007ff7fb564f70 (+  32) 0000008992961eee   <libbe.so> BApplication::Run() + 0x50
23 00007ff7fb564f90 (+  48) 000001834dbf56e7   <_APP_> main + 0x42
24 00007ff7fb564fc0 (+  48) 000001834dbf495e   <_APP_> _start + 0x54
25 00007ff7fb564ff0 (+  48) 000001a21b1abe48   </boot/system/runtime_loader@0x000001a21b198000> <unknown> + 0x13e48
26 00007ff7fb565020 (+   0) 00007f70db2aa260   <commpage> commpage_thread_exit + 0x00

In safemode (all safe mode options enabled), the following trace is shown:

vm_soft_fault: va 0x0 not covered by area in address space
vm_page_fault: vm_soft_fault returned error 'Bad address' on fault at 0x0, ip 0xffffffff815096e1, write 0, user 0, thread 0x61
PANIC: vm_page_fault: unhandled page fault in kernel space at 0x0, ip 0xffffffff815096e1

Welcome to Kernel Debugging Land...
Thread 97 "app_server" running on CPU 0
stack trace for thread 97 "app_server"
    kernel stack: 0xffffffff813c7000 to 0xffffffff813cc000
      user stack: 0x00007f9cc11fe000 to 0x00007f9cc21fe000
frame                       caller             <image>:function + offset
 0 ffffffff813cb648 (+  16) ffffffff80140299   <kernel_x86_64> arch_debug_stack_trace + 0x13
 1 ffffffff813cb658 (+  16) ffffffff800a471d   <kernel_x86_64> stack_trace_trampoline(void*) + 0x09
 2 ffffffff813cb668 (+  24) ffffffff8012ffac   <kernel_x86_64> arch_debug_call_with_fault_handler + 0x16
 3 ffffffff813cb680 (+  96) ffffffff800a50b8   <kernel_x86_64> debug_call_with_fault_handler + 0x68
 4 ffffffff813cb6e0 (+  96) ffffffff800a6068   <kernel_x86_64> kernel_debugger_loop(char const*, char const*, __va_list_tag*, int) + 0x225
 5 ffffffff813cb740 (+  80) ffffffff800a6323   <kernel_x86_64> kernel_debugger_internal(char const*, char const*, __va_list_tag*, int) + 0x137
 6 ffffffff813cb790 (+ 240) ffffffff800a6580   <kernel_x86_64> panic + 0xc1
 7 ffffffff813cb880 (+ 240) ffffffff8011b7e8   <kernel_x86_64> vm_page_fault + 0x161
 8 ffffffff813cb970 (+  64) ffffffff8014155f   <kernel_x86_64> x86_page_fault_exception + 0x1c4
 9 ffffffff813cb9b0 (+ 536) ffffffff8013a1df   <kernel_x86_64> int_bottom + 0x56
kernel iframe at 0xffffffff813cbbc8 (end = 0xffffffff813cbc90)
 rax 0x0                   rbx 0x80001301            rcx 0x8
 rdx 0x3ce                 rsi 0x4                   rdi 0x3ce
 rbp 0xffffffff813cbd10     r8 0x0                    r9 0x27f
 r10 0x0                   r11 0x3206                r12 0x0
 r13 0x7f9cc21fd4e0        r14 0x7f9cc21fd4e0        r15 0x27f
 rip 0xffffffff815096e1    rsp 0xffffffff813cbc90 rflags 0x13202
 vector: 0xe, error code: 0x0
10 ffffffff813cbbc8 (+ 328) ffffffff815096e1   </boot/system/add-ons/kernel/drivers/dev/graphics/vesa> vga_planar_blit(vesa_shared_info*, unsigned char*, int, int, int, int, int) + 0xbc
11 ffffffff813cbd10 (+  96) ffffffff8150851d   </boot/system/add-ons/kernel/drivers/dev/graphics/vesa> device_ioctl(void*, unsigned int, void*, unsigned long) + 0x294
12 ffffffff813cbd70 (+  16) ffffffff800b95d7   <kernel_x86_64> BPrivate::AbstractModuleDevice::Control(void*, int, void*, unsigned long) + 0x19
13 ffffffff813cbd80 (+ 304) ffffffff800bffea   <kernel_x86_64> devfs_ioctl(fs_volume*, fs_vnode*, void*, unsigned int, void*, unsigned long) + 0x218
14 ffffffff813cbeb0 (+  16) ffffffff800e6d44   <kernel_x86_64> common_ioctl(file_descriptor*, unsigned long, void*, unsigned long) + 0x30
15 ffffffff813cbec0 (+  64) ffffffff800dbd6b   <kernel_x86_64> fd_ioctl(bool, int, unsigned int, void*, unsigned long) + 0x7b
16 ffffffff813cbf00 (+  32) ffffffff800dc941   <kernel_x86_64> _user_ioctl + 0x45
17 ffffffff813cbf20 (+  24) ffffffff8013a485   <kernel_x86_64> x86_64_syscall_entry + 0xfb
user iframe at 0xffffffff813cbf38 (end = 0xffffffff813cc000)
 rax 0x92                  rbx 0x27f                 rcx 0x73e5b1d27c
 rdx 0x7f9cc21fd4e0        rsi 0x2716                rdi 0x4
 rbp 0x7f9cc21fd4b0         r8 0x0                    r9 0x27f
 r10 0x20                  r11 0x3206                r12 0x0
 r13 0x1c8f599f870         r14 0x1c8f58e4ce0         r15 0x0
 rip 0x73e5b1d27c          rsp 0x7f9cc21fd448     rflags 0x3206
 vector: 0x63, error code: 0x0
18 ffffffff813cbf38 (+140313375217016) 00000073e5b1d27c   <libroot.so> _kern_ioctl + 0x0c
19 00007f9cc21fd4b0 (+ 128) 0000015b65013375   <_APP_> HWInterface::_CopyToFront const(unsigned char*, unsigned int, int, int, int, int) + 0x3f1
20 00007f9cc21fd530 (+  96) 0000015b6501359b   <_APP_> HWInterface::_CopyBackToFront(BRegion&) + 0x95
21 00007f9cc21fd590 (+ 112) 0000015b650087fa   <_APP_> AccelerantHWInterface::_CopyBackToFront(BRegion&) + 0xd8
22 00007f9cc21fd600 (+ 192) 0000015b65014f0f   <_APP_> HWInterface::CopyBackToFront(BRect const&) + 0x193
23 00007f9cc21fd6c0 (+  32) 0000015b65012a96   <_APP_> HWInterface::Invalidate(BRect const&) + 0x2e
24 00007f9cc21fd6e0 (+ 160) 0000015b6500bbca   <_APP_> DrawingEngine::FillRegion(BRegion&, rgb_color const&) + 0x13c
25 00007f9cc21fd780 (+ 112) 0000015b64fb310b   <_APP_> Desktop::_SetBackground(BRegion&) + 0x9b
26 00007f9cc21fd7f0 (+ 240) 0000015b64fb7064   <_APP_> Desktop::Init() + 0x2a6
27 00007f9cc21fd8e0 (+  80) 0000015b64fab1ae   <_APP_> AppServer::_CreateDesktop(unsigned int, char const*) + 0x56
28 00007f9cc21fd930 (+ 176) 0000015b64fab37f   <_APP_> AppServer::MessageReceived(BMessage*) + 0xc3
29 00007f9cc21fd9e0 (+  16) 00000129afb16d40   <libbe.so> BLooper::DispatchMessage(BMessage*, BHandler*) + 0x34
30 00007f9cc21fd9f0 (+ 576) 00000129afb10219   <libbe.so> BApplication::DispatchMessage(BMessage*, BHandler*) + 0x39b
31 00007f9cc21fdc30 (+  96) 00000129afb170cc   <libbe.so> BLooper::task_looper() + 0x1dc
32 00007f9cc21fdc90 (+  32) 00000129afb0ceee   <libbe.so> BApplication::Run() + 0x50
33 00007f9cc21fdcb0 (+  48) 0000015b64fab6e7   <_APP_> main + 0x42
34 00007f9cc21fdce0 (+  48) 0000015b64faa95e   <_APP_> _start + 0x54
35 00007f9cc21fdd10 (+  48) 000001dfbd55be48   </boot/system/runtime_loader@0x000001dfbd548000> <unknown> + 0x13e48
36 00007f9cc21fdd40 (+   0) 00007f74d2220260   <commpage> commpage_thread_exit + 0x00

I'll attach full serial output for different configurations to the ticket. Please tell me if I can provide any further information or run any tests to help investigate this issue.

Change History (5)

by johkra, 7 years ago

Attachment: safemode_64b.txt added

by johkra, 7 years ago

Attachment: default_64b.txt added

by johkra, 7 years ago

Attachment: safemode_32b.txt added

by johkra, 7 years ago

Attachment: default_32b.txt added

comment:1 by waddlesplash, 7 years ago

Component: - GeneralDrivers/Graphics
Description: modified (diff)

Woah, a VESA crash. I've never seen one of those before.

Note: See TracTickets for help on using tickets.