[nvidia] Xorg crashes in ?? from FreeCursor() from ChangeWindowAttributes()

[Sebastien Foucher]

Crash is caused when visiting websites that attempt to customize the cursor layout. (Tested with Firefox 76.0 (64-bit))

The website on which the crash first occurred was the following:
https://www.yellibeanz.com/
the crash is triggered after moving the cursor around.

To test the hypothesis of the cursor causing the bug I also tested the following website with identical outcome:

http://www.flockofsiegel.tv/

I am sure that one can find more examples here:

https://onextrapixel.com/10-websites-that-replace-mouse-cursors-for-a-better-cause/

lsb_release -rd
Description: Ubuntu 20.04 LTS
Release: 20.04

apt-cache policy xorg
xorg:
  Installed: 1:7.7+19ubuntu14
  Candidate: 1:7.7+19ubuntu14
  Version table:
 *** 1:7.7+19ubuntu14 500
        500 http://nl.archive.ubuntu.com/ubuntu focal/main amd64 Packages
        100 /var/lib/dpkg/status

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: xorg 1:7.7+19ubuntu14
ProcVersionSignature: Ubuntu 5.4.0-29.33-generic 5.4.30
Uname: Linux 5.4.0-29-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
.proc.driver.nvidia.gpus.0000.01.00.0: Error: [Errno 21] Is a directory: '/proc/driver/nvidia/gpus/0000:01:00.0'
.proc.driver.nvidia.registry: Binary: ""
.proc.driver.nvidia.suspend: suspend hibernate resume
.proc.driver.nvidia.suspend_depth: default modeset uvm
.proc.driver.nvidia.version:
 NVRM version: NVIDIA UNIX x86_64 Kernel Module 440.64 Fri Feb 21 01:17:26 UTC 2020
 GCC version: gcc version 9.3.0 (Ubuntu 9.3.0-10ubuntu2)
ApportVersion: 2.20.11-0ubuntu27
Architecture: amd64
BootLog: Error: [Errno 13] Permission denied: '/var/log/boot.log'
CasperMD5CheckResult: skip
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: None
CurrentDesktop: ubuntu:GNOME
Date: Mon May 11 23:58:41 2020
DistUpgraded: Fresh install
DistroCodename: focal
DistroVariant: ubuntu
DkmsStatus:
 nvidia, 440.64, 5.4.0-28-generic, x86_64: installed
 nvidia, 440.64, 5.4.0-29-generic, x86_64: installed
ExtraDebuggingInterest: Yes, if not too technical
GraphicsCard:
 Intel Corporation UHD Graphics 630 (Mobile) [8086:3e9b] (prog-if 00 [VGA controller])
   Subsystem: ASUSTeK Computer Inc. UHD Graphics 630 (Mobile) [1043:1fc0]
   Subsystem: ASUSTeK Computer Inc. GP107M [GeForce GTX 1050 Mobile] [1043:1fc0]
InstallationDate: Installed on 2020-05-03 (8 days ago)
InstallationMedia: Ubuntu 20.04 LTS "Focal Fossa" - Release amd64 (20200423)
Lsusb:
 Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
 Bus 001 Device 003: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller
 Bus 001 Device 002: ID 13d3:56a2 IMC Networks USB2.0 HD UVC WebCam
 Bus 001 Device 004: ID 8087:0aaa Intel Corp.
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
MachineType: ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X580GD_N580GD
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.4.0-29-generic root=UUID=04dedfb2-c5a9-4447-af72-16999d76fce2 ro quiet splash vt.handoff=7
SourcePackage: xorg
Symptom: display
Title: Xorg crash
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 10/18/2018
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: X580GD.309
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: X580GD
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: 1.0
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK COMPUTER INC.
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrX580GD.309:bd10/18/2018:svnASUSTeKCOMPUTERINC.:pnVivoBook_ASUSLaptopX580GD_N580GD:pvr1.0:rvnASUSTeKCOMPUTERINC.:rnX580GD:rvr1.0:cvnASUSTeKCOMPUTERINC.:ct10:cvr1.0:
dmi.product.family: VivoBook
dmi.product.name: VivoBook_ASUSLaptop X580GD_N580GD
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK COMPUTER INC.
version.compiz: compiz N/A
version.libdrm2: libdrm2 2.4.101-2
version.libgl1-mesa-dri: libgl1-mesa-dri 20.0.4-2ubuntu1
version.libgl1-mesa-glx: libgl1-mesa-glx N/A
version.nvidia-graphics-drivers: nvidia-graphics-drivers-* N/A
version.xserver-xorg-core: xserver-xorg-core 2:1.20.8-2ubuntu2
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev N/A
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:19.1.0-1
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.99.917+git20200226-1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.16-1

[Daniel van Vugt (vanvugt)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. It sounds like some part of the system has crashed. To help us find the cause of the crash please follow these steps:

1. Look in /var/crash for crash files and if found run:
    ubuntu-bug YOURFILE.crash
Then tell us the ID of the newly-created bug.

2. If step 1 failed then look at https://errors.ubuntu.com/user/ID where ID is the content of file /var/lib/whoopsie/whoopsie-id on the machine. Do you find any links to recent problems on that page? If so then please send the links to us.

3. If step 2 also failed then apply the workaround from bug 994921, reboot, reproduce the crash, and retry step 1.

Please take care to avoid attaching .crash files to bugs as we are unable to process them as file attachments. It would also be a security risk for yourself.

[Sebastien Foucher (pardalote)]

Hello,

Bellow is link to the reproduced crash:

https://errors.ubuntu.com/oops/8d27672b-9413-11ea-a435-fa163e6cac46

On 12-05-2020 05:41, Daniel van Vugt wrote:
> Thank you for taking the time to report this bug and helping to make
> Ubuntu better. It sounds like some part of the system has crashed. To
> help us find the cause of the crash please follow these steps:
>
> 1. Look in /var/crash for crash files and if found run:
> ubuntu-bug YOURFILE.crash
> Then tell us the ID of the newly-created bug.
>
> 2. If step 1 failed then look at https://errors.ubuntu.com/user/ID where
> ID is the content of file /var/lib/whoopsie/whoopsie-id on the machine.
> Do you find any links to recent problems on that page? If so then please
> send the links to us.
>
> 3. If step 2 also failed then apply the workaround from bug 994921,
> reboot, reproduce the crash, and retry step 1.
>
> Please take care to avoid attaching .crash files to bugs as we are
> unable to process them as file attachments. It would also be a security
> risk for yourself.
>
> ** Package changed: xorg (Ubuntu) => xorg-server (Ubuntu)
>
> ** Changed in: xorg-server (Ubuntu)
> Status: New => Incomplete
>

[Daniel van Vugt (vanvugt)]

Thanks. That crash seems to be incomplete and I can't find any other crashes like it. So please continue submitting more crashes' info here, following the steps in comment #2.

[Daniel van Vugt (vanvugt)]

From duplicate bug 1878278:

[ 1552.380] (EE) Backtrace:
[ 1552.380] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x13c) [0x563325a93dec]
[ 1552.381] (EE) 1: /lib/x86_64-linux-gnu/libpthread.so.0 (funlockfile+0x60) [0x7f2f998ab41f]
[ 1552.381] (EE) 2: /usr/lib/xorg/Xorg (RamDacHandleColormaps+0xb2f) [0x5633259b337f]
[ 1552.381] (EE) 3: /usr/lib/xorg/Xorg (AddTraps+0x5d58) [0x563325a11648]
[ 1552.382] (EE) 4: /usr/lib/xorg/Xorg (FreeCursor+0x67) [0x563325926267]
[ 1552.382] (EE) 5: /usr/lib/xorg/Xorg (ChangeWindowAttributes+0xa41) [0x563325960cf1]
[ 1552.382] (EE) 6: /usr/lib/xorg/Xorg (ProcBadRequest+0x223) [0x56332592cad3]
[ 1552.382] (EE) 7: /usr/lib/xorg/Xorg (SendErrorToClient+0x354) [0x563325932f44]
[ 1552.382] (EE) 8: /usr/lib/xorg/Xorg (InitFonts+0x3b4) [0x563325936fd4]
[ 1552.382] (EE) 9: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0xf3) [0x7f2f996c90b3]
[ 1552.383] (EE) 10: /usr/lib/xorg/Xorg (_start+0x2e) [0x563325920a3e]
[ 1552.383] (EE)
[ 1552.383] (EE) Segmentation fault at address 0x7

[Peter Sabaini (peter-sabaini)]

I've just uploaded my _usr_lib_xorg_Xorg.0.crash:

https://errors.ubuntu.com/oops/b3edc438-9500-11ea-ad46-fa163e983629

[Daniel van Vugt (vanvugt)]

Thanks. Unfortunately that only shows:

OsAbort ()
FatalError ()
?? () from /usr/lib/x86_64-linux-gnu/nvidia/xorg/nvidia_drv.so
?? () from /usr/lib/x86_64-linux-gnu/nvidia/xorg/nvidia_drv.so
?? () from /usr/lib/x86_64-linux-gnu/nvidia/xorg/nvidia_drv.so

[SR (esserre)]

Looks like it the crash has been prevented, at least in 450.66 from Ubuntu repository, 20.04.1.
But the cursor size setting looks limited now :

If I use Setting GUI and go to the Universal Access > Cursor Size setting, I’m displayed five cursors to choose from. If I select one of the three smallest, the cursor size is immediately set to the selected size. If I select one of the two biggest, the cursor size remains the biggest of the three previous sizes (named « large »).

[SR (esserre)]

I must add to the previous comment : when I am in UHD resolution, with 200% zoom.