Xorg crashed with SIGSEGV in pushbuf_flush()

[Drew Walton]

I modified the Lock settings to not turn off the display while installing, when I tried to close Settings, the whole system crashed.

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: xserver-xorg-core 2:1.15.0-1ubuntu7
ProcVersionSignature: Ubuntu 3.13.0-19.40-generic 3.13.6
Uname: Linux 3.13.0-19-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 2.13.3-0ubuntu1
Architecture: amd64
CasperVersion: 1.339
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: None
Date: Mon Mar 31 13:50:36 2014
DistUpgraded: Fresh install
DistroCodename: trusty
DistroVariant: ubuntu
DkmsStatus:
 bbswitch, 0.7, 3.13.0-19-generic, x86_64: installed
 nvidia-331, 331.38, 3.13.0-19-generic, x86_64: installed
ExecutablePath: /usr/bin/Xorg
GraphicsCard:
 NVIDIA Corporation GK106 [GeForce GTX 650 Ti] [10de:11c6] (rev a1) (prog-if 00 [VGA controller])
   Subsystem: Gigabyte Technology Co., Ltd Device [1458:3557]
LiveMediaBuild: Ubuntu 14.04 LTS "Trusty Tahr" - Beta amd64 (20140326)
MachineType: MICRO-STAR INTERNATIONAL CO.,LTD MS-7549
ProcCmdline: /usr/bin/X -core :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
ProcEnviron:

ProcKernelCmdLine: file=/cdrom/preseed/hostname.seed boot=casper initrd=/casper/initrd.lz quiet splash --
SegvAnalysis:
 Segfault happened at: 0x7f24ee7ef8ac <IgnoreClient+12>: mov (%rax),%ebp
 PC (0x7f24ee7ef8ac) ok
 source "(%rax)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%ebp" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: xorg-server
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libdrm_nouveau.so.2
 nouveau_pushbuf_kick () from /usr/lib/x86_64-linux-gnu/libdrm_nouveau.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
 ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
 ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
Title: Xorg crashed with SIGSEGV in nouveau_pushbuf_kick()
UnitySupportTest:
 Error: command ['/usr/lib/nux/unity_support_test', '-p', '-f'] failed with exit code 5: Xlib: extension "GLX" missing on display ":0".
 Error: GLX is not available on the system
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups:

dmi.bios.date: 12/02/2010
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: V8.8
dmi.board.asset.tag: To Be Filled By O.E.M.
dmi.board.name: 785GTM-E45 (MS-7549)
dmi.board.vendor: MICRO-STAR INTERNATIONAL CO.,LTD
dmi.board.version: 1.0
dmi.chassis.asset.tag: To Be Filled By O.E.M.
dmi.chassis.type: 3
dmi.chassis.vendor: MICRO-STAR INTERNATIONAL CO.,LTD
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrV8.8:bd12/02/2010:svnMICRO-STARINTERNATIONALCO.,LTD:pnMS-7549:pvr1.0:rvnMICRO-STARINTERNATIONALCO.,LTD:rn785GTM-E45(MS-7549):rvr1.0:cvnMICRO-STARINTERNATIONALCO.,LTD:ct3:cvr1.0:
dmi.product.name: MS-7549
dmi.product.version: 1.0
dmi.sys.vendor: MICRO-STAR INTERNATIONAL CO.,LTD
version.compiz: compiz 1:0.9.11+14.04.20140320.1-0ubuntu1
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.52-1
version.libgl1-mesa-dri: libgl1-mesa-dri 10.1.0-1ubuntu1
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 10.1.0-1ubuntu1
version.xserver-xorg-core: xserver-xorg-core 2:1.15.0-1ubuntu7
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.8.2-1ubuntu2
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:7.3.0-1ubuntu3
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.99.910-0ubuntu1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.10-1ubuntu2
xserver.bootTime: Mon Mar 31 13:50:43 2014
xserver.configfile: default
xserver.devices:
 input Power Button KEYBOARD, id 6
 input Power Button KEYBOARD, id 7
 input Logitech Unifying Device. Wireless PID:4004 KEYBOARD, id 8
 input Microsoft Microsoft Basic Optical Mouse v2.0 MOUSE, id 9
 input USB 2.0 Camera KEYBOARD, id 10
xserver.errors:
 NVIDIA: Failed to load the NVIDIA kernel module. Please check your
 NVIDIA: system's kernel log for additional error messages.
 NVIDIA: Failed to load the NVIDIA kernel module. Please check your
 NVIDIA: system's kernel log for additional error messages.
 Failed to initialize GLX extension (Compatible NVIDIA X driver not found)
xserver.logfile: /var/log/Xorg.0.log
xserver.version: 2:1.15.0-1ubuntu7
xserver.video_driver: nouveau

[Apport retracing service (apport)]

StacktraceTop:
 pushbuf_flush (push=push@entry=0x7f24ef8d17e0) at ../../nouveau/pushbuf.c:425
 nouveau_pushbuf_kick (push=0x7f24ef8d17e0, chan=<optimized out>) at ../../nouveau/pushbuf.c:774
 PUSH_KICK (push=<optimized out>) at ../../../../../../src/gallium/drivers/nouveau/nouveau_winsys.h:56
 nvc0_flush (pipe=0x7f24eff43b80, fence=<optimized out>, flags=<optimized out>) at ../../../../../../src/gallium/drivers/nouveau/nvc0/nvc0_context.c:45
 st_context_flush (stctxi=0x7f24effd5920, flags=0, fence=<optimized out>) at ../../../../src/mesa/state_tracker/st_manager.c:459

[Maarten Lankhorst (mlankhorst)]

I ran into this when debugging laney's webapp issue.

==6587== Thread 21 Chrome_InProcGpuThread:
==6587== Invalid write of size 8
==6587== at 0x1C033982: pushbuf_validate (in /usr/lib/x86_64-linux-gnu/libdrm_nouveau.so.2.0.0)
==6587== by 0x1B751A4A: nvc0_m2mf_transfer_rect (nvc0_transfer.c:37)
==6587== by 0x1B7525C0: nvc0_miptree_transfer_unmap (nvc0_transfer.c:489)
==6587== by 0x1B5BAB24: st_texture_image_unmap (u_inlines.h:481)
==6587== by 0x1B53D612: store_texsubimage (texstore.c:4108)
==6587== by 0x1B594439: st_TexSubImage (st_cb_texture.c:787)
==6587== by 0x1B594EC2: st_TexImage (st_cb_texture.c:811)
==6587== by 0x1B52AD48: teximage (teximage.c:3250)
==6587== by 0x1B52C06F: _mesa_TexImage2D (teximage.c:3289)
==6587== by 0x2B40723C: ??? (in /usr/lib/x86_64-linux-gnu/libOxideQtCore.so.0)
==6587== by 0x2B407291: ??? (in /usr/lib/x86_64-linux-gnu/libOxideQtCore.so.0)
==6587== by 0x2B39AAA8: ??? (in /usr/lib/x86_64-linux-gnu/libOxideQtCore.so.0)
==6587== Address 0x24462bc8 is 8 bytes inside a block of size 112 free'd
==6587== at 0x4C2BDEC: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==6587== by 0x1C033DAD: nouveau_bufctx_del (in /usr/lib/x86_64-linux-gnu/libdrm_nouveau.so.2.0.0)
==6587== by 0x1B741DE9: nvc0_destroy (nvc0_context.c:65)
==6587== by 0x1B595F01: st_destroy_context (st_context.c:341)
==6587== by 0x1B6618EE: dri_destroy_context (dri_context.c:192)
==6587== by 0x1B476912: driDestroyContext (dri_util.c:486)
==6587== by 0x96A1A5E: dri2_destroy_context (dri2_glx.c:132)
==6587== by 0x967B288: glXDestroyContext (glxcmds.c:473)
==6587== by 0xE3A8CA5: ??? (in /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so)
==6587== by 0xE3A8CC8: ??? (in /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so)
==6587== by 0x63A31A2: QOpenGLContext::destroy() (in /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5.2.1)
==6587== by 0x63A3406: QOpenGLContext::~QOpenGLContext() (in /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5.2.1)
==6587== block was alloc'd at
==6587== at 0x4C2CC70: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==6587== by 0x1C033C90: nouveau_bufctx_new (in /usr/lib/x86_64-linux-gnu/libdrm_nouveau.so.2.0.0)
==6587== by 0x1B7421F4: nvc0_create (nvc0_context.c:242)
==6587== by 0x1B5B1081: st_api_create_context (st_manager.c:615)
==6587== by 0x1B6616F2: dri_create_context (dri_context.c:130)
==6587== by 0x1B476C33: driCreateContextAttribs (dri_util.c:434)
==6587== by 0x96A18C4: dri2_create_context_attribs (dri2_glx.c:320)
==6587== by 0x9679A01: glXCreateContextAttribsARB (create_context.c:78)
==6587== by 0xE3A9BD1: ??? (in /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so)
==6587== by 0xE38C3F3: ??? (in /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so)
==6587== by 0x63A3362: QOpenGLContext::create() (in /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5.2.1)
==6587== by 0xE3AA203: ??? (in /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so)