[GM965] X11 ring buffer crash due to paraview with DRI disabled

[Andrew King]

Binary package hint: xorg

X randomly crashes with SIGSEGV.
has happened a couple of times for no apparent reason.
graphics card is an intel X3100 GMA965 (SIGSEGV) - this is with DRI disabled (due to bug #180015) using the intel driver.

Xserver restarts after crash, no reboot is required.

(II) intel(0): [DRI] installation complete
(II) intel(0): xf86BindGARTMemory: bind key 0 at 0x0077f000 (pgoffset 1919)
(II) intel(0): xf86BindGARTMemory: bind key 1 at 0x01a00000 (pgoffset 6656)
(II) intel(0): xf86BindGARTMemory: bind key 2 at 0x02040000 (pgoffset 8256)
(II) intel(0): xf86BindGARTMemory: bind key 3 at 0x02680000 (pgoffset 9856)
(II) intel(0): Fixed memory allocation layout:
(II) intel(0): 0x00000000-0x0001ffff: ring buffer (128 kB)
(II) intel(0): 0x00020000-0x00029fff: HW cursors (40 kB)
(II) intel(0): 0x0002a000-0x00031fff: logical 3D context (32 kB)
(II) intel(0): 0x00032000-0x00041fff: exa G965 state buffer (64 kB)
(II) intel(0): 0x00042000-0x00042fff: overlay registers (4 kB)
(II) intel(0): 0x00100000-0x0073ffff: front buffer (6400 kB) X tiled
(II) intel(0): 0x00740000-0x019fffff: exa offscreen (19200 kB)
(II) intel(0): 0x0077f000: end of stolen memory
(II) intel(0): 0x01a00000-0x0203ffff: back buffer (6400 kB) X tiled
(II) intel(0): 0x02040000-0x0267ffff: depth buffer (6400 kB) Y tiled
(II) intel(0): 0x02680000-0x0467ffff: classic textures (32768 kB)
(II) intel(0): 0x10000000: end of aperture
(WW) intel(0): ESR is 0x00000001
(WW) intel(0): PRB0_CTL (0x0001f001) indicates ring buffer enabled
(WW) intel(0): PRB0_HEAD (0x00c1c760) and PRB0_TAIL (0x0001cd78) indicate ring buffer not flushed
(WW) intel(0): Existing errors found in hardware state.

Error in I830WaitLpRing(), timeout for 2 seconds
pgetbl_ctl: 0x7ff80001 pgetbl_err: 0x0
ipeir: 0 iphdr: be1ee1a2
LP ring tail: 2ad0 head: 2400 len: 1f001 start 0
Err ID (eir): 0 Err Status (esr): 1 Err Mask (emr): ffffffdf
instdone: ffe5fafd instdone_1: fffff
instpm: 0
memmode: 0 instps: 8001e022
HW Status mask (hwstam): fff8dffe
IRQ enable (ier): a2 imr: fff80000 iir: 10
acthd: 27ac888 dma_fadd_p: 27ac940
ecoskpd: 307 excc: 0
cache_mode: 6800/180
mi_arb_state: 44
IA_VERTICES_COUNT_QW 0/0
IA_PRIMITIVES_COUNT_QW 0/0
VS_INVOCATION_COUNT_QW 0/0
GS_INVOCATION_COUNT_QW 0/0
GS_PRIMITIVES_COUNT_QW 0/0
CL_INVOCATION_COUNT_QW 0/0
CL_PRIMITIVES_COUNT_QW 0/0
PS_INVOCATION_COUNT_QW 0/0
PS_DEPTH_COUNT_QW 0/0
WIZ_CTL 0
TS_CTL 0 TS_DEBUG_DATA 97df4fff
TD_CTL 0 / 0
space: 129320 wanted 131064

Fatal server error:
lockup

Error in I830WaitLpRing(), timeout for 2 seconds
pgetbl_ctl: 0x7ff80001 pgetbl_err: 0x0
ipeir: 0 iphdr: be1ee1a2
LP ring tail: 2ad8 head: 2400 len: 1f001 start 0
Err ID (eir): 0 Err Status (esr): 1 Err Mask (emr): ffffffdf
instdone: ffe5fafd instdone_1: fffff
instpm: 0
memmode: 0 instps: 8001e022
HW Status mask (hwstam): fff8dffe
IRQ enable (ier): a2 imr: fff80000 iir: 10
acthd: 27ac888 dma_fadd_p: 27ac940
ecoskpd: 307 excc: 0
cache_mode: 6800/180
mi_arb_state: 44
IA_VERTICES_COUNT_QW 0/0
IA_PRIMITIVES_COUNT_QW 0/0
VS_INVOCATION_COUNT_QW 0/0
GS_INVOCATION_COUNT_QW 0/0
GS_PRIMITIVES_COUNT_QW 0/0
CL_INVOCATION_COUNT_QW 0/0
CL_PRIMITIVES_COUNT_QW 0/0
PS_INVOCATION_COUNT_QW 0/0
PS_DEPTH_COUNT_QW 0/0
WIZ_CTL 0
TS_CTL 0 TS_DEBUG_DATA 97df4fff
TD_CTL 0 / 0
space: 129312 wanted 131064

FatalError re-entered, aborting
lockup

xinit: connection to X server lost.

waiting for X server to shut down

[Timo Aaltonen (tjaalton)]

Please attach your /etc/X11/xorg.conf.

[Andrew King (anders-king-00)]

I have attached xorg.conf.

[Timo Aaltonen (tjaalton)]

Backtrace:
0: /usr/bin/X(xf86SigHandler+0x81) [0x80c9581]
1: [0xffffe420]
2: /usr/lib/xorg/modules/extensions//libglx.so [0xb7c319d8]
3: /usr/lib/xorg/modules/extensions//libglx.so(DoRender+0x155) [0xb7c2a625]
4: /usr/lib/xorg/modules/extensions//libglx.so [0xb7c2a6bc]
5: /usr/lib/xorg/modules/extensions//libglx.so [0xb7c2eb2c]
6: /usr/bin/X [0x815754e]
7: /usr/bin/X(Dispatch+0x1aa) [0x808f47a]
8: /usr/bin/X(main+0x495) [0x8076f05]
9: /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0) [0xb7d90050]
10: /usr/bin/X(FontFileCompleteXLFD+0x1e1) [0x8076241]

what apps are you using when it crashes?

[Andrew King (anders-king-00)]

I'm not sure offhand. I'll make a note next time it happens.
I think most likely some specialist CFD software (paraview or gmsh or netgen).

[Bryce Harrington (bryce)]

Hi Andrew, just checking in to see if you've been able to determine what generates the crash so far?

[Bryce Harrington (bryce)]

Btw, I've written some tips on how to debug "random" X crashes on this page:
https://wiki.ubuntu.com/X/Debugging#head-dd5d05d65cb460f557561969144947e8287896b3

[Andrew King (anders-king-00)]

It has happened a few more times, and i've narrowed it down to paraview. Unfortunately due to the random nature of the crashes i havent been able to obtain a backtrace.

This application relies heavily on opengl (and i'm assuming direct rendering?). I have DRI disabled due to bug #180015 / bug #160309. I'm not sure if this could be the cause of the problem though. Should it be possible for an application to crash the Xserver due to this.

If its likely to be a problem with the application, then I'm quite happy for this one to be closed. Bug #160309 is much more of a showstopper for me

(If it helps, I have attached a backtrace to bug #180015 - I'm not sure if this is related to the current bug though).

[Bryce Harrington (bryce)]

Well, even if it is an application causing the crash, still X should not crash. We can leave this one open in the case that you can obtain a backtrace. For bug #180015 / bug #160309 I posted a package with a patch to fix the latter. If it turns out that that patch makes this crash go away too, let us know and we can dupe this bug to those.

(We'll leave this bug open for a few months, and if we don't hear anything from you we'll assume the above resolved the issue and close it.)

[Andrew King (anders-king-00)]

Hi Bryce,

I've had a chance to look at this with the livecd (just briefly). It appears to be fixed. (both with and without DRI - bug 160309 seems to be fixed too).

Good work.

If it reoccurs, Ill add to this bug.

Cheers
Andrew

[Andrew King (anders-king-00)]

Hi,

This bug is still present in hardy, using the current version in hardy-updates (2:2.2.1-1ubuntu13).

I have attached Xorg.0.log, and xorg.conf.

I will see if i can get a backtrace if (when?) it happens next.

Regards,
Andrew

[Andrew King (anders-king-00)]

Hi again,

I can reliably reproduce this crash, unfortunately I have been unable to get a backtrace. The closest I have is part of the log from starting in a terminal. Please see the attached file.

Regards,
Andrew

[Bryce Harrington (bryce)]

Setting back to incomplete since we're still needing a backtrace

[Andrew King (anders-king-00)]

Hi,
I haven't come across this bug for a while, and am no longer running Hardy (Jaunty instead). Also, this bug hasn't reoccurred while running Intrepid.

I'm think that It has been fixed in the later releases. (As is TV out).

Thanks for the good work

[Bryce Harrington (bryce)]

Thanks for letting us know the issue is resolved.