Xorg crashing in pci_device_vgaarb_set_target

Peter Kasza peter.kasza at itinsight.hu
Fri Oct 13 06:59:30 UTC 2017


On Tue, Oct 10, 2017 at 06:30:03PM +0000, Peter Kasza wrote:
> On Tue, Oct 10, 2017 at 05:19:05PM +0000, Adam Jackson wrote:
> > On Mon, 2017-10-09 at 13:07 +0200, Peter Kasza wrote:
> > > Hi all,
> > > 
> > > I'm getting itermittent crashes on a vfio enabled machine. I'm not
> > > able to recreate it on purpose, but it seems to be occurring when
> > > virtualbox VMs and Firefox are running.
> > > 
> > > From the backtrace I suspect that some bogus parameter is passed to
> > > the snprintf call, but other than that I'm not sure.
> > > 
> > > The crash occurs in libpciaccess - pci_device_vgaarb_set_target. I
> > > have the latest release installed (0.13.5).
> > > 
> > > Program terminated with signal SIGSEGV, Segmentation fault.
> > > #0  0x00007f17082667a3 in __GI__IO_default_xsputn () from /usr/lib/libc.so.6
> > > [Current thread is 1 (Thread 0x7f170aa11940 (LWP 491))]
> > > (gdb) bt
> > > #0  0x00007f17082667a3 in __GI__IO_default_xsputn () at /usr/lib/libc.so.6
> > > #1  0x00007f1708259b2d in __GI__IO_padn () at /usr/lib/libc.so.6
> > > #2  0x00007f1708239938 in vfprintf () at /usr/lib/libc.so.6
> > > #3  0x00007f17082efcbb in __vsnprintf_chk () at /usr/lib/libc.so.6
> > > #4  0x00007f17082efbe5 in __snprintf_chk () at /usr/lib/libc.so.6
> > > #5  0x00007f1709a966b8 in pci_device_vgaarb_set_target () at /usr/lib/libpciaccess.so.0
> > > #6  0x00005616427d1fc8 in  ()
> > 
> > Any chance you can (install debuginfo and) see the rest of this call
> > trace? I suspect the value of 'dev' being passed into
> > pci_device_vgaarb_set_target is just bogus, but without the call trace
> > up through Xorg it's hard to see how that could happen.
> > 
> > - ajax
> 
> Hey,
> 
> Thanks for the suggestion. I've compiled a debug version of X. I'll
> reply back once I've reproduced the issue with more info.

Ok, it seems to have crashed again. I've attached the trace with debug
symbols.

-- 
Best Regards,
Peter Kasza

http://www.itinsight.hu
peter.kasza at itinsight.hu

()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments
-------------- next part --------------
           PID: 490 (Xorg)
           UID: 0 (root)
           GID: 0 (root)
        Signal: 11 (SEGV)
     Timestamp: Fri 2017-10-13 08:54:06 CEST (29s ago)
  Command Line: /usr/lib/xorg-server/Xorg :0 -seat seat0 -auth /run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
    Executable: /usr/lib/xorg-server/Xorg
 Control Group: /system.slice/lightdm.service
          Unit: lightdm.service
         Slice: system.slice
       Boot ID: 355208da23c349a6b7175496f7116e14
    Machine ID: a2e626d14dfa4543a40db60829aa8b55
      Hostname: phoenix
       Storage: /var/lib/systemd/coredump/core.Xorg.0.355208da23c349a6b7175496f7116e14.490.1507877646000000.lz4 (inaccessible)
       Message: Process 490 (Xorg) of user 0 dumped core.

                Stack trace of thread 490:
                #0  0x00007f8765449b29 _IO_padn (libc.so.6)
                #1  0x00007f8765429938 vfprintf (libc.so.6)
                #2  0x00007f87654dfcbb __vsnprintf_chk (libc.so.6)
                #3  0x00007f87654dfbe5 __snprintf_chk (libc.so.6)
                #4  0x00007f8766e9b6b8 pci_device_vgaarb_set_target (libpciaccess.so.0)
                #5  0x000055f36babd67d VGAGet (Xorg)
                #6  0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #7  0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #8  0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #9  0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #10 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #11 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #12 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #13 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #14 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #15 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #16 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #17 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #18 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #19 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #20 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #21 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #22 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #23 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #24 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #25 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #26 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #27 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #28 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #29 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #30 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #31 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #32 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #33 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #34 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #35 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #36 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #37 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #38 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #39 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #40 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #41 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #42 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #43 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #44 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #45 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #46 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #47 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #48 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #49 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #50 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #51 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #52 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #53 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #54 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #55 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #56 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #57 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #58 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #59 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #60 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #61 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #62 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)
                #63 0x000055f36babd699 VGAarbiterSpriteSetCursor (Xorg)

                Stack trace of thread 3292:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3293:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3287:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3289:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3290:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3296:
                #0  0x00007f87657a2958 read (libpthread.so.0)
                #1  0x00007f8766e9b70d pci_device_vgaarb_set_target (libpciaccess.so.0)
                #2  0x000055f36babd078 VGAGet (Xorg)
                #3  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #4  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #5  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #6  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #7  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #8  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #9  0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #10 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #11 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #12 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #13 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #14 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #15 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #16 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #17 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #18 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #19 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #20 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #21 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #22 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #23 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #24 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #25 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #26 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #27 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #28 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #29 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #30 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #31 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #32 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #33 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #34 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #35 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #36 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #37 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #38 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #39 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #40 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #41 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #42 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #43 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #44 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #45 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #46 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #47 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #48 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #49 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #50 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #51 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #52 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #53 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #54 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #55 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #56 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #57 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #58 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #59 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #60 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #61 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #62 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)
                #63 0x000055f36babd08f VGAarbiterSpriteMoveCursor (Xorg)

                Stack trace of thread 3288:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3286:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)

                Stack trace of thread 3291:
                #0  0x00007f876579f38d pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                #1  0x00007f875fef477c n/a (radeonsi_dri.so)
                #2  0x00007f875fef4688 n/a (radeonsi_dri.so)
                #3  0x00007f876579908a start_thread (libpthread.so.0)
                #4  0x00007f87654d11bf __clone (libc.so.6)



More information about the xorg mailing list