This bug is present in 18.04 and is triggered by specific actions, in particular, paging through image galleries in Eye of Gnome. When the bug is triggered, Xorg freezes completely and goes into the D (uninterruptible sleep) state. The machine continues to respond to ping and ssh. When triggering a shutdown or reboot over ssh, the shutdown process continues normally until most userspace processes (including systemd-journald) have been stopped, but then hangs. The system can still be rebooted with the magic sysrq technique.
Here's some dmesg output:
[ 0.000000] Linux version 4.15.0-45-generic (buildd@lgw01-amd64-031) (gcc version 7.3.0 (Ubuntu 7.3.0-16ubuntu3)) #48-Ubuntu SMP Tue Jan 29 16:28:13 UTC 2019 (Ubuntu 4.15.0-45.48-generic 4.15.18)
[ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-4.15.0-45-generic root=/dev/mapper/good--fortune--vg-root ro intel_iommu=igfx_off
###
# This error happens regularly and may be irrelevant:
###
[ 345.680936] ------------[ cut here ]------------
[ 345.680938] Failed to release pages: bind_count=1, pages_pin_count=1, pin_global=0
[ 345.680998] WARNING: CPU: 1 PID: 241 at /build/linux-uQJ2um/linux-4.15.0/drivers/gpu/drm/i915/i915_gem_userptr.c:89 cancel_userptr+0xe8/0xf0 [i915]
[ 345.680999] Modules linked in: zfs(PO) zunicode(PO) zavl(PO) icp(PO) zcommon(PO) znvpair(PO) spl(O) nls_iso8859_1 xt_hl ip6t_rt intel_rapl x86_pkg_temp_thermal intel_powerclamp kvm_intel kvm irqbypass intel_cstate intel_rapl_perf eeepc_wmi asus_wmi sparse_keymap wmi_bmof nf_conntrack_ipv6 snd_hda_codec_hdmi nf_defrag_ipv6 snd_hda_codec_realtek snd_hda_codec_generic xt_limit uvcvideo xt_tcpudp xt_addrtype videobuf2_vmalloc snd_hda_intel snd_hda_codec videobuf2_memops videobuf2_v4l2 snd_hda_core snd_usb_audio videobuf2_core snd_usbmidi_lib joydev snd_hwdep videodev snd_rawmidi shpchp snd_seq_device media snd_pcm snd_timer input_leds usblp snd soundcore mei_me mei acpi_pad mac_hid sch_fq_codel nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack ib_iser rdma_cm iw_cm ib_cm ib_core iscsi_tcp libiscsi_tcp libiscsi
[ 345.681028] scsi_transport_iscsi coretemp ip6table_filter ip6_tables nf_conntrack_netbios_ns nf_conntrack_broadcast nf_nat_ftp nf_nat nf_conntrack_ftp nf_conntrack parport_pc ppdev lp parport iptable_filter ip_tables x_tables autofs4 btrfs zstd_compress algif_skcipher af_alg dm_crypt hid_microsoft raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor hid_generic usbhid hid raid6_pq libcrc32c raid1 raid0 multipath linear i915 crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc i2c_algo_bit drm_kms_helper syscopyarea sysfillrect aesni_intel mxm_wmi sysimgblt fb_sys_fops e1000e aes_x86_64 crypto_simd ptp glue_helper nvme cryptd drm pps_core ahci nvme_core libahci wmi video
[ 345.681059] CPU: 1 PID: 241 Comm: kworker/u8:5 Tainted: P O 4.15.0-45-generic #48-Ubuntu
[ 345.681059] Hardware name: System manufacturer System Product Name/PRIME B250M-C, BIOS 1402 11/16/2018
[ 345.681081] Workqueue: i915-userptr-release cancel_userptr [i915]
[ 345.681096] RIP: 0010:cancel_userptr+0xe8/0xf0 [i915]
[ 345.681097] RSP: 0018:ffffafc441edbe60 EFLAGS: 00010282
[ 345.681098] RAX: 0000000000000000 RBX: ffff8fb681b17600 RCX: 0000000000000006
[ 345.681099] RDX: 0000000000000007 RSI: 0000000000000082 RDI: ffff8fb6b6c96490
[ 345.681100] RBP: ffffafc441edbe78 R08: 0000000000000001 R09: 00000000000003c4
[ 345.681101] R10: ffffe28d5018ef80 R11: 0000000000000000 R12: ffff8fb681b177a8
[ 345.681101] R13: 0000000000000000 R14: ffff8fb698eba500 R15: 0000000000000000
[ 345.681102] FS: 0000000000000000(0000) GS:ffff8fb6b6c80000(0000) knlGS:0000000000000000
[ 345.681103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 345.681104] CR2: 00007f18205d3857 CR3: 0000000022e0a002 CR4: 00000000003606e0
[ 345.681105] Call Trace:
[ 345.681110] process_one_work+0x1de/0x410
[ 345.681111] worker_thread+0x32/0x410
[ 345.681113] kthread+0x121/0x140
[ 345.681115] ? process_one_work+0x410/0x410
[ 345.681116] ? kthread_create_worker_on_cpu+0x70/0x70
[ 345.681119] ret_from_fork+0x35/0x40
[ 345.681120] Code: bf 46 ff ff eb c9 8b 93 c8 01 00 00 8b 8b a4 01 00 00 48 c7 c7 40 44 7a c0 8b b3 9c 01 00 00 c6 05 b5 56 10 00 01 e8 e8 2a fc fa <0f> 0b eb bc 0f 1f 40 00 0f 1f 44 00 00 55 ba 08 00 00 00 48 89
[ 345.681144] ---[ end trace f92d63918dad1269 ]---
###
# This is the hang. 2 minutes before this happened, X became completely unresponsive and
# went into the D (uninterruptible sleep) state. The machine still responded to ping and ssh.
###
[110684.322375] INFO: task Xorg:13866 blocked for more than 120 seconds.
[110684.322384] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110684.322388] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110684.322393] Xorg D 0 13866 13865 0x00000004
[110684.322399] Call Trace:
[110684.322411] __schedule+0x291/0x8a0
[110684.322420] ? resched_curr+0x5d/0xc0
[110684.322426] schedule+0x2c/0x80
[110684.322431] schedule_timeout+0x1cf/0x350
[110684.322436] ? check_preempt_curr+0x2d/0x90
[110684.322439] ? ttwu_do_wakeup+0x1e/0x140
[110684.322445] wait_for_completion+0xba/0x140
[110684.322449] ? wake_up_q+0x80/0x80
[110684.322455] flush_workqueue+0x126/0x3c0
[110684.322459] ? wake_up_process+0x15/0x20
[110684.322531] i915_gem_userptr_mn_invalidate_range_start+0x15c/0x1b0 [i915]
[110684.322588] ? i915_gem_userptr_mn_invalidate_range_start+0x15c/0x1b0 [i915]
[110684.322597] __mmu_notifier_invalidate_range_start+0x58/0x80
[110684.322603] try_to_unmap_one+0x98d/0xa20
[110684.322609] rmap_walk_file+0xf9/0x250
[110684.322613] rmap_walk+0x41/0x60
[110684.322617] try_to_unmap+0x93/0xf0
[110684.322621] ? page_remove_rmap+0x2a0/0x2a0
[110684.322629] ? page_not_mapped+0x20/0x20
[110684.322633] ? page_get_anon_vma+0x90/0x90
[110684.322640] migrate_pages+0x79f/0xb40
[110684.322646] ? __ClearPageMovable+0x10/0x10
[110684.322652] ? isolate_freepages_block+0x3b0/0x3b0
[110684.322659] compact_zone+0x64d/0x920
[110684.322666] compact_zone_order+0xa0/0xd0
[110684.322674] try_to_compact_pages+0xa9/0x270
[110684.322680] ? try_to_compact_pages+0xa9/0x270
[110684.322686] __alloc_pages_direct_compact+0x51/0x100
[110684.322692] __alloc_pages_slowpath+0xba1/0xe20
[110684.322699] ? __enqueue_entity+0x5c/0x60
[110684.322706] ? enqueue_entity+0x10e/0x6b0
[110684.322712] __alloc_pages_nodemask+0x263/0x280
[110684.322718] kmalloc_large_node+0x3b/0x60
[110684.322722] __kmalloc_node+0x229/0x2c0
[110684.322727] ? ___slab_alloc+0xf2/0x4b0
[110684.322733] kvmalloc_node+0x4b/0x80
[110684.322783] i915_gem_userptr_get_pages+0x164/0x1d0 [i915]
[110684.322832] ____i915_gem_object_get_pages+0x22/0x50 [i915]
[110684.322878] __i915_gem_object_get_pages+0x5b/0x70 [i915]
[110684.322928] __i915_vma_do_pin+0x3f8/0x490 [i915]
[110684.322974] eb_lookup_vmas+0x7b3/0xb40 [i915]
[110684.322981] ? __pm_runtime_resume+0x5b/0x80
[110684.323025] i915_gem_do_execbuffer+0x49c/0x1120 [i915]
[110684.323035] ? __radix_tree_replace+0x78/0xe0
[110684.323040] ? _cond_resched+0x19/0x40
[110684.323045] ? kmem_cache_alloc_trace+0x14e/0x1b0
[110684.323081] ? drm_vma_node_allow+0x2a/0xd0 [drm]
[110684.323108] ? drm_vma_node_allow+0xa7/0xd0 [drm]
[110684.323156] i915_gem_execbuffer2+0x1b8/0x390 [i915]
[110684.323205] ? i915_gem_userptr_ioctl+0x27b/0x2c0 [i915]
[110684.323248] ? i915_gem_execbuffer+0x2d0/0x2d0 [i915]
[110684.323272] drm_ioctl_kernel+0x5f/0xb0 [drm]
[110684.323295] drm_ioctl+0x31b/0x3d0 [drm]
[110684.323337] ? i915_gem_execbuffer+0x2d0/0x2d0 [i915]
[110684.323346] ? __switch_to_asm+0x34/0x70
[110684.323351] ? __switch_to_asm+0x40/0x70
[110684.323356] ? __switch_to_asm+0x34/0x70
[110684.323362] ? __switch_to_asm+0x40/0x70
[110684.323367] ? __switch_to_asm+0x34/0x70
[110684.323372] ? __switch_to_asm+0x40/0x70
[110684.323377] ? __switch_to_asm+0x34/0x70
[110684.323385] do_vfs_ioctl+0xa8/0x630
[110684.323390] ? __schedule+0x299/0x8a0
[110684.323397] SyS_ioctl+0x79/0x90
[110684.323404] do_syscall_64+0x73/0x130
[110684.323410] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[110684.323415] RIP: 0033:0x7f3f418a55d7
[110684.323418] RSP: 002b:00007fff9fa5fcb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[110684.323423] RAX: ffffffffffffffda RBX: 00007f3f4440b000 RCX: 00007f3f418a55d7
[110684.323426] RDX: 00007fff9fa5fce0 RSI: 0000000040406469 RDI: 000000000000000b
[110684.323428] RBP: 000000000000000b R08: 0000000000003a80 R09: 0000000000000000
[110684.323431] R10: ff000000ff000000 R11: 0000000000000246 R12: 00007fff9fa5fce0
[110684.323433] R13: 0000000000000040 R14: 0000000000000010 R15: 0000000000000000
[110684.323473] INFO: task kworker/u8:3:26372 blocked for more than 120 seconds.
[110684.323479] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110684.323483] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110684.323487] kworker/u8:3 D 0 26372 2 0x80000000
[110684.323542] Workqueue: i915-userptr-release cancel_userptr [i915]
[110684.323544] Call Trace:
[110684.323551] __schedule+0x291/0x8a0
[110684.323557] ? krealloc+0x70/0xd0
[110684.323562] schedule+0x2c/0x80
[110684.323567] schedule_preempt_disabled+0xe/0x10
[110684.323572] __mutex_lock.isra.2+0x18c/0x4d0
[110684.323579] __mutex_lock_slowpath+0x13/0x20
[110684.323583] ? __mutex_lock_slowpath+0x13/0x20
[110684.323588] mutex_lock+0x2f/0x40
[110684.323632] cancel_userptr+0x80/0xf0 [i915]
[110684.323638] process_one_work+0x1de/0x410
[110684.323643] worker_thread+0x32/0x410
[110684.323650] kthread+0x121/0x140
[110684.323654] ? process_one_work+0x410/0x410
[110684.323661] ? kthread_create_worker_on_cpu+0x70/0x70
[110684.323666] ? do_syscall_64+0x73/0x130
[110684.323671] ? SyS_exit+0x17/0x20
[110684.323677] ret_from_fork+0x35/0x40
[110684.323716] INFO: task kworker/2:1:590 blocked for more than 120 seconds.
[110684.323721] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110684.323724] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110684.323728] kworker/2:1 D 0 590 2 0x80000000
[110684.323780] Workqueue: events __i915_gem_free_work [i915]
[110684.323783] Call Trace:
[110684.323789] __schedule+0x291/0x8a0
[110684.323794] schedule+0x2c/0x80
[110684.323799] schedule_preempt_disabled+0xe/0x10
[110684.323804] __mutex_lock.isra.2+0x18c/0x4d0
[110684.323811] ? __switch_to_asm+0x34/0x70
[110684.323816] ? __switch_to_asm+0x34/0x70
[110684.323822] __mutex_lock_slowpath+0x13/0x20
[110684.323827] ? __mutex_lock_slowpath+0x13/0x20
[110684.323831] mutex_lock+0x2f/0x40
[110684.323887] __i915_gem_free_objects+0x79/0x2c0 [i915]
[110684.323938] __i915_gem_free_work+0x60/0x90 [i915]
[110684.323944] process_one_work+0x1de/0x410
[110684.323949] worker_thread+0x32/0x410
[110684.323955] kthread+0x121/0x140
[110684.323959] ? process_one_work+0x410/0x410
[110684.323965] ? kthread_create_worker_on_cpu+0x70/0x70
[110684.323971] ? do_syscall_64+0x73/0x130
[110684.323975] ? SyS_exit_group+0x14/0x20
[110684.323982] ret_from_fork+0x35/0x40
[110805.155674] INFO: task Xorg:13866 blocked for more than 120 seconds.
[110805.155683] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110805.155687] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110805.155691] Xorg D 0 13866 13865 0x00000004
[110805.155698] Call Trace:
[110805.155711] __schedule+0x291/0x8a0
[110805.155720] ? resched_curr+0x5d/0xc0
[110805.155726] schedule+0x2c/0x80
[110805.155731] schedule_timeout+0x1cf/0x350
[110805.155735] ? check_preempt_curr+0x2d/0x90
[110805.155739] ? ttwu_do_wakeup+0x1e/0x140
[110805.155745] wait_for_completion+0xba/0x140
[110805.155749] ? wake_up_q+0x80/0x80
[110805.155755] flush_workqueue+0x126/0x3c0
[110805.155759] ? wake_up_process+0x15/0x20
[110805.155831] i915_gem_userptr_mn_invalidate_range_start+0x15c/0x1b0 [i915]
[110805.155888] ? i915_gem_userptr_mn_invalidate_range_start+0x15c/0x1b0 [i915]
[110805.155897] __mmu_notifier_invalidate_range_start+0x58/0x80
[110805.155902] try_to_unmap_one+0x98d/0xa20
[110805.155908] rmap_walk_file+0xf9/0x250
[110805.155913] rmap_walk+0x41/0x60
[110805.155917] try_to_unmap+0x93/0xf0
[110805.155921] ? page_remove_rmap+0x2a0/0x2a0
[110805.155928] ? page_not_mapped+0x20/0x20
[110805.155932] ? page_get_anon_vma+0x90/0x90
[110805.155939] migrate_pages+0x79f/0xb40
[110805.155945] ? __ClearPageMovable+0x10/0x10
[110805.155951] ? isolate_freepages_block+0x3b0/0x3b0
[110805.155957] compact_zone+0x64d/0x920
[110805.155964] compact_zone_order+0xa0/0xd0
[110805.155972] try_to_compact_pages+0xa9/0x270
[110805.155978] ? try_to_compact_pages+0xa9/0x270
[110805.155985] __alloc_pages_direct_compact+0x51/0x100
[110805.155991] __alloc_pages_slowpath+0xba1/0xe20
[110805.155998] ? __enqueue_entity+0x5c/0x60
[110805.156004] ? enqueue_entity+0x10e/0x6b0
[110805.156011] __alloc_pages_nodemask+0x263/0x280
[110805.156016] kmalloc_large_node+0x3b/0x60
[110805.156021] __kmalloc_node+0x229/0x2c0
[110805.156026] ? ___slab_alloc+0xf2/0x4b0
[110805.156032] kvmalloc_node+0x4b/0x80
[110805.156083] i915_gem_userptr_get_pages+0x164/0x1d0 [i915]
[110805.156132] ____i915_gem_object_get_pages+0x22/0x50 [i915]
[110805.156179] __i915_gem_object_get_pages+0x5b/0x70 [i915]
[110805.156229] __i915_vma_do_pin+0x3f8/0x490 [i915]
[110805.156275] eb_lookup_vmas+0x7b3/0xb40 [i915]
[110805.156283] ? __pm_runtime_resume+0x5b/0x80
[110805.156327] i915_gem_do_execbuffer+0x49c/0x1120 [i915]
[110805.156336] ? __radix_tree_replace+0x78/0xe0
[110805.156342] ? _cond_resched+0x19/0x40
[110805.156347] ? kmem_cache_alloc_trace+0x14e/0x1b0
[110805.156382] ? drm_vma_node_allow+0x2a/0xd0 [drm]
[110805.156409] ? drm_vma_node_allow+0xa7/0xd0 [drm]
[110805.156457] i915_gem_execbuffer2+0x1b8/0x390 [i915]
[110805.156507] ? i915_gem_userptr_ioctl+0x27b/0x2c0 [i915]
[110805.156549] ? i915_gem_execbuffer+0x2d0/0x2d0 [i915]
[110805.156573] drm_ioctl_kernel+0x5f/0xb0 [drm]
[110805.156595] drm_ioctl+0x31b/0x3d0 [drm]
[110805.156638] ? i915_gem_execbuffer+0x2d0/0x2d0 [i915]
[110805.156646] ? __switch_to_asm+0x34/0x70
[110805.156652] ? __switch_to_asm+0x40/0x70
[110805.156657] ? __switch_to_asm+0x34/0x70
[110805.156662] ? __switch_to_asm+0x40/0x70
[110805.156668] ? __switch_to_asm+0x34/0x70
[110805.156673] ? __switch_to_asm+0x40/0x70
[110805.156678] ? __switch_to_asm+0x34/0x70
[110805.156686] do_vfs_ioctl+0xa8/0x630
[110805.156691] ? __schedule+0x299/0x8a0
[110805.156697] SyS_ioctl+0x79/0x90
[110805.156704] do_syscall_64+0x73/0x130
[110805.156711] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[110805.156715] RIP: 0033:0x7f3f418a55d7
[110805.156719] RSP: 002b:00007fff9fa5fcb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[110805.156727] RAX: ffffffffffffffda RBX: 00007f3f4440b000 RCX: 00007f3f418a55d7
[110805.156730] RDX: 00007fff9fa5fce0 RSI: 0000000040406469 RDI: 000000000000000b
[110805.156733] RBP: 000000000000000b R08: 0000000000003a80 R09: 0000000000000000
[110805.156735] R10: ff000000ff000000 R11: 0000000000000246 R12: 00007fff9fa5fce0
[110805.156738] R13: 0000000000000040 R14: 0000000000000010 R15: 0000000000000000
[110805.156773] INFO: task kworker/u8:3:26372 blocked for more than 120 seconds.
[110805.156779] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110805.156782] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110805.156786] kworker/u8:3 D 0 26372 2 0x80000000
[110805.156841] Workqueue: i915-userptr-release cancel_userptr [i915]
[110805.156844] Call Trace:
[110805.156851] __schedule+0x291/0x8a0
[110805.156857] ? krealloc+0x70/0xd0
[110805.156862] schedule+0x2c/0x80
[110805.156867] schedule_preempt_disabled+0xe/0x10
[110805.156872] __mutex_lock.isra.2+0x18c/0x4d0
[110805.156879] __mutex_lock_slowpath+0x13/0x20
[110805.156883] ? __mutex_lock_slowpath+0x13/0x20
[110805.156888] mutex_lock+0x2f/0x40
[110805.156932] cancel_userptr+0x80/0xf0 [i915]
[110805.156938] process_one_work+0x1de/0x410
[110805.156943] worker_thread+0x32/0x410
[110805.156950] kthread+0x121/0x140
[110805.156955] ? process_one_work+0x410/0x410
[110805.156961] ? kthread_create_worker_on_cpu+0x70/0x70
[110805.156966] ? do_syscall_64+0x73/0x130
[110805.156971] ? SyS_exit+0x17/0x20
[110805.156978] ret_from_fork+0x35/0x40
[110805.157013] INFO: task kworker/2:1:590 blocked for more than 120 seconds.
[110805.157018] Tainted: P W O 4.15.0-45-generic #48-Ubuntu
[110805.157021] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[110805.157025] kworker/2:1 D 0 590 2 0x80000000
[110805.157077] Workqueue: events __i915_gem_free_work [i915]
[110805.157079] Call Trace:
[110805.157085] __schedule+0x291/0x8a0
[110805.157091] schedule+0x2c/0x80
[110805.157096] schedule_preempt_disabled+0xe/0x10
[110805.157101] __mutex_lock.isra.2+0x18c/0x4d0
[110805.157107] ? __switch_to_asm+0x34/0x70
[110805.157113] ? __switch_to_asm+0x34/0x70
[110805.157118] __mutex_lock_slowpath+0x13/0x20
[110805.157123] ? __mutex_lock_slowpath+0x13/0x20
[110805.157128] mutex_lock+0x2f/0x40
[110805.157171] __i915_gem_free_objects+0x79/0x2c0 [i915]
[110805.157212] __i915_gem_free_work+0x60/0x90 [i915]
[110805.157218] process_one_work+0x1de/0x410
[110805.157223] worker_thread+0x32/0x410
[110805.157229] kthread+0x121/0x140
[110805.157234] ? process_one_work+0x410/0x410
[110805.157240] ? kthread_create_worker_on_cpu+0x70/0x70
[110805.157245] ? do_syscall_64+0x73/0x130
[110805.157250] ? SyS_exit_group+0x14/0x20
[110805.157256] ret_from_fork+0x35/0x40
This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:
apport-collect 1815508
and then change the status of the bug to 'Confirmed'.
If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.
This change has been made by an automated script, maintained by the Ubuntu Kernel Team.