Bug 104709

Summary:	Segfault (perhaps due to low free memory?)
Product:	xorg	Reporter:	kolorafa <freedesktop_org>
Component:	Server/General	Assignee:	Xorg Project Team <xorg-team>
Status:	RESOLVED INVALID	QA Contact:	Xorg Project Team <xorg-team>
Severity:	major
Priority:	medium	CC:	freedesktop_org
Version:	unspecified
Hardware:	x86-64 (AMD64)
OS:	Linux (All)
Whiteboard:
i915 platform:		i915 features:

Description kolorafa 2018-01-19 22:00:42 UTC

I can easily reproduce it, I just need to fill my physical memory full, for example open a lot of google spreadsheets tabs and/or at 95% start minecraft game and I will get an instant crash.


It might be related to https://bugs.freedesktop.org/show_bug.cgi?id=91412
but there is no intel driver to look into.

It was like that for a long long time, and it happen to me a lot while playing games (as the memory gets full with open browsers and stuff in the background), while doing normal stuff 16GB of ram was enough to always have some memory left.

Also the last crashtest show some "SwapShorts" in backtrace.

Is there a way to fix/mitigate it like tell OS to swap more aggressively (swappines on 90 does not help at all).


OS: Arch Up-To-Date
GTX 960 with nvidia proprietary drivers
Kernel: 4.14.13-1-ARCH, xorg-server 1.19.6
16GB RAM / i7-5930K


[178630.668] (EE)
[178630.668] (EE) Backtrace:
[178630.692] (EE) 0: /usr/lib/xorg-server/Xorg (OsLookupColor+0x139) [0x55adf3472169]
[178630.693] (EE) 1: /usr/lib/libpthread.so.0 (funlockfile+0x50) [0x7fceae3d0dff]
[178630.694] (EE) 2: /usr/lib/libc.so.6 (_int_malloc+0xb99) [0x7fceae088ef9]
[178630.694] (EE) 3: /usr/lib/libc.so.6 (_int_realloc+0x145) [0x7fceae089ab5]
[178630.695] (EE) 4: /usr/lib/libc.so.6 (realloc+0x2eb) [0x7fceae08acdb]
[178630.695] (EE) 5: /usr/lib/xorg-server/Xorg (ReadRequestFromClient+0x40c) [0x55adf3470efc]
[178630.695] (EE) 6: /usr/lib/xorg-server/Xorg (SendErrorToClient+0x305) [0x55adf330c235]
[178630.695] (EE) 7: /usr/lib/xorg-server/Xorg (InitFonts+0x420) [0x55adf33102c0]
[178630.695] (EE) 8: /usr/lib/libc.so.6 (__libc_start_main+0xea) [0x7fceae028f4a]
[178630.695] (EE) 9: /usr/lib/xorg-server/Xorg (_start+0x2a) [0x55adf32f9f2a]
[178630.695] (EE)
[178630.695] (EE) Segmentation fault at address 0x0
[178630.695] (EE)
Fatal server error:
[178630.695] (EE) Caught signal 11 (Segmentation fault). Server aborting
[178630.695] (EE)
[178630.696] (EE)


[   854.815] (EE)
[   854.815] (EE) Backtrace:
[   854.817] (EE) 0: /usr/lib/xorg-server/Xorg (OsLookupColor+0x139) [0x558984987169]
[   854.817] (EE) 1: /usr/lib/libpthread.so.0 (funlockfile+0x50) [0x7f3a94714dff]
[   854.821] (EE) 2: ? (?+0x50) [0xffffffcb0000001a]
[   854.821] (EE)
[   854.821] (EE) Segmentation fault at address 0xffffffcaffffffca
[   854.821] (EE)
Fatal server error:
[   854.821] (EE) Caught signal 11 (Segmentation fault). Server aborting
[   854.821] (EE)
[   854.821] (EE)


[  1843.669] (EE)
[  1843.815] (EE) Backtrace:
[  1844.861] (EE) 0: /usr/lib/xorg-server/Xorg (OsLookupColor+0x139) [0x563b64201169]
[  1844.862] (EE) 1: /usr/lib/libpthread.so.0 (funlockfile+0x50) [0x7f1864f7fdff]
[  1844.970] (EE) 2: /usr/lib/libc.so.6 (gsignal+0x110) [0x7f1864beb860]
[  1844.971] (EE) 3: /usr/lib/libc.so.6 (abort+0x1c9) [0x7f1864becec9]
[  1844.971] (EE) 4: /usr/lib/libc.so.6 (__malloc_assert+0x59) [0x7f1864c34849]
[  1844.972] (EE) 5: /usr/lib/libc.so.6 (_int_malloc+0xcb1) [0x7f1864c38011]
[  1844.973] (EE) 6: /usr/lib/libc.so.6 (__libc_calloc+0x7e) [0x7f1864c39f6e]
[  1844.973] (EE) 7: /usr/lib/xorg-server/Xorg (SwapShorts+0x3c8e) [0x563b640cb45e]
[  1844.973] (EE) 8: /usr/lib/xorg-server/Xorg (CloseDownClient+0x67) [0x563b6409a5e7]
[  1844.973] (EE) 9: /usr/lib/xorg-server/Xorg (OsCleanup+0x621) [0x563b642020d1]
[  1844.974] (EE) 10: /usr/lib/xorg-server/Xorg (WaitForSomething+0x1fb) [0x563b641fa9db]
[  1844.974] (EE) 11: /usr/lib/xorg-server/Xorg (SendErrorToClient+0x113) [0x563b6409b043]
[  1844.974] (EE) 12: /usr/lib/xorg-server/Xorg (InitFonts+0x420) [0x563b6409f2c0]
[  1844.975] (EE) 13: /usr/lib/libc.so.6 (__libc_start_main+0xea) [0x7f1864bd7f4a]
[  1844.975] (EE) 14: /usr/lib/xorg-server/Xorg (_start+0x2a) [0x563b64088f2a]
[  1844.975] (EE)
[  1844.975] (EE)
Fatal server error:
[  1844.975] (EE) Caught signal 6 (Aborted). Server aborting
[  1844.975] (EE)
[  1844.989] (EE)

Comment 1 kolorafa 2018-01-23 13:54:14 UTC

Just got the same error on my second pc while starting a VM (while having 80% physical memory usage and like 500MB of swap (3%) used).

Is there a way to debug it other than watch memory and manually kill apps to decrease it before doing any hungry-memory operation?

It looks like threads race-condition. Should I recompile from sources to get more info?


(...)
[    28.102] (II) modeset(0): EDID vendor "DEL", prod id 41055
[    28.102] (II) modeset(0): Using hsync ranges from config file
[    28.102] (II) modeset(0): Using vrefresh ranges from config file
[    28.102] (II) modeset(0): Printing DDC gathered Modelines:
[    28.102] (II) modeset(0): Modeline "1920x1080"x0.0  148.50  1920 2008 2052 2200  1080 1084 1089 1125 +hsync +vsync (67.5 kHz eP)
[    28.102] (II) modeset(0): Modeline "800x600"x0.0   40.00  800 840 968 1056  600 601 605 628 +hsync +vsync (37.9 kHz e)
[    28.102] (II) modeset(0): Modeline "640x480"x0.0   31.50  640 656 720 840  480 481 484 500 -hsync -vsync (37.5 kHz e)
[    28.102] (II) modeset(0): Modeline "640x480"x0.0   25.18  640 656 752 800  480 490 492 525 -hsync -vsync (31.5 kHz e)
[    28.102] (II) modeset(0): Modeline "720x400"x0.0   28.32  720 738 846 900  400 412 414 449 -hsync +vsync (31.5 kHz e)
[    28.102] (II) modeset(0): Modeline "1280x1024"x0.0  135.00  1280 1296 1440 1688  1024 1025 1028 1066 +hsync +vsync (80.0 kHz e)
[    28.102] (II) modeset(0): Modeline "1024x768"x0.0   78.75  1024 1040 1136 1312  768 769 772 800 +hsync +vsync (60.0 kHz e)
[    28.102] (II) modeset(0): Modeline "1024x768"x0.0   65.00  1024 1048 1184 1344  768 771 777 806 -hsync -vsync (48.4 kHz e)
[    28.102] (II) modeset(0): Modeline "800x600"x0.0   49.50  800 816 896 1056  600 601 604 625 +hsync +vsync (46.9 kHz e)
[    28.102] (II) modeset(0): Modeline "1152x864"x0.0  108.00  1152 1216 1344 1600  864 865 868 900 +hsync +vsync (67.5 kHz e)
[    28.102] (II) modeset(0): Modeline "1280x1024"x0.0  108.00  1280 1328 1440 1688  1024 1025 1028 1066 +hsync +vsync (64.0 kHz e)
[    28.102] (II) modeset(0): Modeline "1920x1080"x60.0  172.80  1920 2040 2248 2576  1080 1081 1084 1118 -hsync +vsync (67.1 kHz e)
[601381.866] (II) modeset(0): EDID vendor "DEL", prod id 41055
[601381.866] (II) modeset(0): Using hsync ranges from config file
[601381.866] (II) modeset(0): Using vrefresh ranges from config file
[601381.866] (II) modeset(0): Printing DDC gathered Modelines:
[601381.866] (II) modeset(0): Modeline "1920x1080"x0.0  148.50  1920 2008 2052 2200  1080 1084 1089 1125 +hsync +vsync (67.5 kHz eP)
[601381.866] (II) modeset(0): Modeline "800x600"x0.0   40.00  800 840 968 1056  600 601 605 628 +hsync +vsync (37.9 kHz e)
[601381.866] (II) modeset(0): Modeline "640x480"x0.0   31.50  640 656 720 840  480 481 484 500 -hsync -vsync (37.5 kHz e)
[601381.866] (II) modeset(0): Modeline "640x480"x0.0   25.18  640 656 752 800  480 490 492 525 -hsync -vsync (31.5 kHz e)
[601381.866] (II) modeset(0): Modeline "720x400"x0.0   28.32  720 738 846 900  400 412 414 449 -hsync +vsync (31.5 kHz e)
[601381.866] (II) modeset(0): Modeline "1280x1024"x0.0  135.00  1280 1296 1440 1688  1024 1025 1028 1066 +hsync +vsync (80.0 kHz e)
[601381.866] (II) modeset(0): Modeline "1024x768"x0.0   78.75  1024 1040 1136 1312  768 769 772 800 +hsync +vsync (60.0 kHz e)
[601381.866] (II) modeset(0): Modeline "1024x768"x0.0   65.00  1024 1048 1184 1344  768 771 777 806 -hsync -vsync (48.4 kHz e)
[601381.866] (II) modeset(0): Modeline "800x600"x0.0   49.50  800 816 896 1056  600 601 604 625 +hsync +vsync (46.9 kHz e)
[601381.866] (II) modeset(0): Modeline "1152x864"x0.0  108.00  1152 1216 1344 1600  864 865 868 900 +hsync +vsync (67.5 kHz e)
[601381.866] (II) modeset(0): Modeline "1280x1024"x0.0  108.00  1280 1328 1440 1688  1024 1025 1028 1066 +hsync +vsync (64.0 kHz e)
[601381.866] (II) modeset(0): Modeline "1920x1080"x60.0  172.80  1920 2040 2248 2576  1080 1081 1084 1118 -hsync +vsync (67.1 kHz e)
[621035.538] (EE)
[621035.538] (EE) Backtrace:
[621035.552] (EE) 0: /usr/lib/xorg-server/Xorg (OsLookupColor+0x139) [0x5597b0ecf169]
[621035.554] (EE) 1: /usr/lib/libpthread.so.0 (funlockfile+0x50) [0x7f4d0e80cdef]
[621035.554] (EE) 2: /usr/lib/xorg-server/Xorg (ProcBadRequest+0xb68) [0x5597b0d64278]
[621035.554] (EE) 3: /usr/lib/xorg-server/Xorg (SendErrorToClient+0x368) [0x5597b0d69298]
[621035.554] (EE) 4: /usr/lib/xorg-server/Xorg (InitFonts+0x420) [0x5597b0d6d2c0]
[621035.555] (EE) 5: /usr/lib/libc.so.6 (__libc_start_main+0xea) [0x7f4d0e463f4a]
[621035.555] (EE) 6: /usr/lib/xorg-server/Xorg (_start+0x2a) [0x5597b0d56f2a]
[621035.555] (EE)
[621035.555] (EE) Segmentation fault at address 0x0
[621035.555] (EE)
Fatal server error:
[621035.555] (EE) Caught signal 11 (Segmentation fault). Server aborting
[621035.555] (EE)
[621035.555] (EE)
Please consult the The X.Org Foundation support
         at http://wiki.x.org
 for help.
[621035.555] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[621035.555] (EE)
[621035.557] (II) AIGLX: Suspending AIGLX clients for VT switch
[621035.627] (EE) Server terminated with error (1). Closing log file.

----------------

$ lspci | grep VGA ; lsmod | grep "kms\|drm" ; find /dev -group video ; cat /proc/cmdline ; find /etc/modprobe.d/; cat /etc/modprobe.d/*kms* ; ls /etc/X11/xorg.conf ; glxinfo | grep -i "vendor\|rendering" ; grep LoadModule /var/log/Xorg.0.log.old
00:02.0 VGA compatible controller: Intel Corporation HD Graphics 5600 (rev 0a)
drm_kms_helper        192512  1 i915
drm                   434176  20 i915,drm_kms_helper
agpgart                49152  2 intel_gtt,drm
syscopyarea            16384  1 drm_kms_helper
sysfillrect            16384  1 drm_kms_helper
sysimgblt              16384  1 drm_kms_helper
fb_sys_fops            16384  1 drm_kms_helper
/dev/fb0
/dev/media0
/dev/video0
/dev/dri/card0
find: ‘/dev/vboxusb’: Brak dostępu
BOOT_IMAGE=/boot/vmlinuz-linux root=UUID=1b56d573-d877-4193-8d36-43b9bcb1ae33 rw quiet
/etc/modprobe.d/
/etc/modprobe.d/firewalld-sysctls.conf
/etc/modprobe.d/nouveau.conf
/etc/modprobe.d/i915.conf
cat: '/etc/modprobe.d/*kms*': Nie ma takiego pliku ani katalogu
ls: nie ma dostępu do '/etc/X11/xorg.conf': Nie ma takiego pliku ani katalogu
direct rendering: Yes
server glx vendor string: SGI
client glx vendor string: Mesa Project and SGI
    Vendor: Intel Open Source Technology Center (0x8086)
OpenGL vendor string: Intel Open Source Technology Center
[     4.446] (II) LoadModule: "glx"
[     4.460] (II) LoadModule: "modesetting"
[     4.463] (II) LoadModule: "intel"
[     4.466] (II) LoadModule: "fbdev"
[     4.467] (II) LoadModule: "vesa"
[     4.494] (II) LoadModule: "fbdevhw"
[     4.495] (II) LoadModule: "glamoregl"
[     5.177] (II) LoadModule: "fb"
[     5.517] (II) LoadModule: "libinput"
[     6.011] (II) LoadModule: "synaptics"



-------------------------------------------


kernel: 4.14.11-1-ARCH, xorg 1.19.6
16GB RAM / i7-5700HQ / MSI QE72 2QC
Working on Intel GPU - Intel Corporation HD Graphics 5600 - (discrete/nvidia card - not used)
Also 3 monitor setup.

Comment 2 kolorafa 2018-01-30 18:47:14 UTC

Found the cause -> zswap.

After disabling zswap crashes stopped.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.