I appear to be seeing the same issue. Below is output from Claude after
long debugging session. Please let me know if I can provide additional
debug info:
Reproducing this same TTM bulk-move list corruption / NULL pointer crash on
different
hardware — Framework Laptop 13 (AMD Ryzen AI 300 Series), Ryzen AI 7 350,
Radeon 860M
(gfx_v11 / DCN 3.5), same kernel build 7.0.0-29-generic on Ubuntu 26.04.
Linux Freya 7.0.0-29-generic #29-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 17 20:52:35
UTC 2026 x86_64 GNU/Linux
Description: Ubuntu 26.04 LTS
ii linux-image-7.0.0-29-generic 7.0.0-29.29
amd64 Signed kernel image generic
Multiple independent crashes so far, both NULL derefs in ttm_lru_bulk_move_tail
via the
same amdgpu command-submission path:
Crash 1 (triggered by Papers/PDF viewer during normal use):
RIP: ttm_lru_bulk_move_tail+0x1a5/0x360 [ttm]
CR2: 0000000000000008
Call Trace:
amdgpu_vm_move_to_lru_tail -> amdgpu_cs_submit -> amdgpu_cs_ioctl ->
amdgpu_drm_ioctl
Crash 2 (triggered by a terminal app (ptyxis), immediately after resuming from
suspend-then-hibernate):
RIP: ttm_lru_bulk_move_tail+0x15c/0x360 [ttm]
CR2: 0000000000000180
Call Trace:
amdgpu_vm_move_to_lru_tail -> amdgpu_cs_submit -> amdgpu_cs_ioctl ->
amdgpu_drm_ioctl
Same crash site, different offset/address each time, different triggering app
both
times — looks like a race rather than a deterministic bug. Notably, in my case
the
crash appears strongly correlated with resume from suspend/hibernate: the first
GPU
command submitted by whatever app happens to run right after resume is what
crashes,
which fits ttm_lru_bulk_move_pos_tail/ttm_lru_bulk_move_tail sharing the same
underlying bulk-move list corruption this bug describes, just hit via a
different
sibling function.
Happy to test a kernel with Thomas Hellstrom's candidate patch
(https://lore.kernel.org/all/[email protected]/)
if that would help move this forward — let me know how to build/obtain a test
kernel.
Full crash reports (apport) attached:
linux-image-7.0.0-29-generic-202608161036.crash,
linux-image-7.0.0-29-generic-202608182014.crash
** Attachment added: "linux-image-7.0.0-29-generic-202608112328.crash"
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2163363/+attachment/5993399/+files/linux-image-7.0.0-29-generic-202608112328.crash
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163363
Title:
[amdgpu/ttm] TTM list corruption and NULL dereference under GPU memory
pressure on ASUS ProArt PX13 (7.0.0-29)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2163363/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
