Recently I started having Xorg crash while using firefox.
This is f34 in a libvirt kvm, host (also f34) uses internal i915 video.
Kernel is 5.12.14-300.fc34.x86_64 but saw this with earlier 5.12.12/13 kernels.
an example crash:
=================
### note: many repeats of the following line precede the crash ###
Jul 9 16:28:47 e4 kernel: f 4026531864#104645: failed to wait on release 24 after
spincount 301
Jul 9 16:28:47 e4 kernel: [TTM] Buffer eviction failed
Jul 9 16:28:47 e4 kernel: qxl 0000:00:01.0: object_init failed for (458752, 0x00000001)
Jul 9 16:28:47 e4 kernel: [drm:qxl_gem_object_create [qxl]] *ERROR* Failed to allocate
GEM object (454760, 1, 4096, -12)
Jul 9 16:28:47 e4 kernel: [drm:qxl_alloc_ioctl [qxl]] *ERROR* qxl_alloc_ioctl: failed to
create gem ret=-12
Jul 9 16:28:47 e4 kernel: kauditd_printk_skb: 16 callbacks suppressed
Jul 9 16:28:47 e4 kernel: audit: type=1701 audit(1625812127.806:325): auid=4294967295
uid=0 gid=0 ses=4294967295 subj=kernel pid=1035 comm="Xorg"
exe="/usr/libexec/Xorg" sig=6 res=1
Jul 9 16:28:47 e4 audit[1035]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295
subj=kernel pid=1035 comm="Xorg" exe="/usr/libexec/Xorg" sig=6 res=1
Jul 9 16:28:48 e4 systemd[1]: Created slice system-systemd\x2dcoredump.slice.
Jul 9 16:28:48 e4 audit: BPF prog-id=49 op=LOAD
Jul 9 16:28:48 e4 kernel: audit: type=1334 audit(1625812128.526:326): prog-id=49 op=LOAD
Jul 9 16:28:48 e4 audit: BPF prog-id=50 op=LOAD
Jul 9 16:28:48 e4 audit: BPF prog-id=51 op=LOAD
Jul 9 16:28:48 e4 kernel: audit: type=1334 audit(1625812128.528:327): prog-id=50 op=LOAD
Jul 9 16:28:48 e4 kernel: audit: type=1334 audit(1625812128.528:328): prog-id=51 op=LOAD
Jul 9 16:28:48 e4 systemd[1]: Started Process Core Dump (PID 134753/UID 0).
Jul 9 16:28:48 e4 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295
subj=kernel msg='unit=systemd-coredump@0-134753-0 comm="systemd"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jul 9 16:28:48 e4 kernel: audit: type=1130 audit(1625812128.593:329): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-coredump@0-134753-0
comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=?
terminal=? res=success'
Jul 9 16:28:52 e4 systemd-coredump[134754]: Process 1035 (Xorg) of user 0 dumped core.
Stack trace of thread 1035:
#0 0x00007f3c01fda2a2 n/a (libc.so.6 + 0x3d2a2)
#1 0x00007f3c01fc38a4 n/a (libc.so.6 + 0x268a4)
#2 0x00005595780f7170 OsAbort (Xorg + 0x1ba170)
#3 0x00005595780ff446 FatalError (Xorg + 0x1c2446)
#4 0x00005595780f5d3a OsSigHandler (Xorg + 0x1b8d3a)
#5 0x00007f3c0217fa20 __restore_rt (libpthread.so.0 + 0x13a20)
#6 0x00007f3c01716a35 qxl_image_create (qxl_drv.so + 0x8a35)
#7 0x00007f3c01716e66 qxl_surface_put_image_for_reals (qxl_drv.so + 0x8e66)
#8 0x00007f3c01723350 uxa_copy_n_to_n (qxl_drv.so + 0x15350)
#9 0x00005595780d475b miCopyRegion (Xorg + 0x19775b)
#10 0x00005595780d735c miDoCopy (Xorg + 0x19a35c)
#11 0x00007f3c01723552 uxa_copy_area (qxl_drv.so + 0x15552)
#12 0x00005595780831e9 damageCopyArea (Xorg + 0x1461e9)
#13 0x0000559577f964af ProcCopyArea (Xorg + 0x594af)
#14 0x0000559577f862d7 main (Xorg + 0x492d7)
#15 0x00007f3c01fc4b75 n/a (libc.so.6 + 0x27b75)
#16 0x0000559577f8667e _start (Xorg + 0x4967e)
Stack trace of thread 1038:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfc296c43 thread_function (swrast_dri.so + 0x7b8c43)
#3 0x00007f3bfc29653b impl_thrd_routine (swrast_dri.so + 0x7b853b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1040:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfc293edb lp_cs_tpool_worker (swrast_dri.so + 0x7b5edb)
#3 0x00007f3bfc293e5b impl_thrd_routine (swrast_dri.so + 0x7b5e5b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1042:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfbc960db util_queue_thread_func (swrast_dri.so + 0x1b80db)
#3 0x00007f3bfbc95b9b impl_thrd_routine (swrast_dri.so + 0x1b7b9b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1044:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfbc960db util_queue_thread_func (swrast_dri.so + 0x1b80db)
#3 0x00007f3bfbc95b9b impl_thrd_routine (swrast_dri.so + 0x1b7b9b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1048:
#0 0x00007f3c0209d69e n/a (libc.so.6 + 0x10069e)
#1 0x00005595780f8c28 ospoll_wait (Xorg + 0x1bbc28)
#2 0x00005595780f8d90 InputThreadDoWork (Xorg + 0x1bbd90)
#3 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#4 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1041:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfc293edb lp_cs_tpool_worker (swrast_dri.so + 0x7b5edb)
#3 0x00007f3bfc293e5b impl_thrd_routine (swrast_dri.so + 0x7b5e5b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1039:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfc296c43 thread_function (swrast_dri.so + 0x7b8c43)
#3 0x00007f3bfc29653b impl_thrd_routine (swrast_dri.so + 0x7b853b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1043:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfbc960db util_queue_thread_func (swrast_dri.so + 0x1b80db)
#3 0x00007f3bfbc95b9b impl_thrd_routine (swrast_dri.so + 0x1b7b9b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Stack trace of thread 1045:
#0 0x00007f3c02181a8a __futex_abstimed_wait_common64 (libpthread.so.0 + 0x15a8a)
#1 0x00007f3c0217b2c0 pthread_cond_wait (libpthread.so.0 + 0xf2c0)
#2 0x00007f3bfbc960db util_queue_thread_func (swrast_dri.so + 0x1b80db)
#3 0x00007f3bfbc95b9b impl_thrd_routine (swrast_dri.so + 0x1b7b9b)
#4 0x00007f3c02175299 start_thread (libpthread.so.0 + 0x9299)
#5 0x00007f3c0209d353 n/a (libc.so.6 + 0x100353)
Xorg log has this:
==================
[ 25259.974] (EE) qxl(0): error doing QXL_ALLOC
[ 25259.974] (EE)
[ 25259.974] (EE) Backtrace:
[ 25260.034] (EE) 0: /usr/libexec/Xorg (OsLookupColor+0x139) [0x555f449f7cd9]
[ 25260.100] (EE) 1: /lib64/libpthread.so.0 (funlockfile+0x60) [0x7eff83c1ea20]
[ 25260.137] (EE) unw_get_proc_name failed: no unwind info found [-10]
[ 25260.137] (EE) 2: /usr/lib64/xorg/modules/drivers/qxl_drv.so (?+0x0) [0x7eff831b5a35]
[ 25260.137] (EE) unw_get_proc_name failed: no unwind info found [-10]
[ 25260.138] (EE) 3: /usr/lib64/xorg/modules/drivers/qxl_drv.so (?+0x0) [0x7eff831b5e66]
[ 25260.139] (EE) unw_get_proc_name failed: no unwind info found [-10]
[ 25260.139] (EE) 4: /usr/lib64/xorg/modules/drivers/qxl_drv.so (?+0x0) [0x7eff831c2350]
[ 25260.140] (EE) 5: /usr/libexec/Xorg (miCopyRegion+0x9b) [0x555f449d675b]
[ 25260.141] (EE) 6: /usr/libexec/Xorg (miDoCopy+0x43c) [0x555f449d935c]
[ 25260.141] (EE) unw_get_proc_name failed: no unwind info found [-10]
[ 25260.142] (EE) 7: /usr/lib64/xorg/modules/drivers/qxl_drv.so (?+0x0) [0x7eff831c2552]
[ 25260.142] (EE) 8: /usr/libexec/Xorg (DamageDamageRegion+0x1a39) [0x555f449851e9]
[ 25260.143] (EE) 9: /usr/libexec/Xorg (SendGraphicsExpose+0x2bf) [0x555f448984af]
[ 25260.143] (EE) 10: /usr/libexec/Xorg (miPutImage+0x1591) [0x555f448882d7]
[ 25260.145] (EE) 11: /lib64/libc.so.6 (__libc_start_main+0xd5) [0x7eff83a63b75]
[ 25260.145] (EE) 12: /usr/libexec/Xorg (_start+0x2e) [0x555f4488867e]
[ 25260.145] (EE)
[ 25260.146] (EE) Segmentation fault at address 0x0
--
Eyal Lebedinsky (fedora(a)eyal.emu.id.au)