Ubuntu
xserver-xorg-video-intel package

Xorg crashed with SIGABRT in list_is_empty()

Bug #1053836 reported by Cartesius on 2012-09-21

This bug affects 8 people

Affects		Status	Importance	Assigned to	Milestone
	X.Org X server	Fix Released	Medium	freedesktop-bugs #55346
	xserver-xorg-video-intel (Ubuntu)	Fix Released	Medium	Timo Aaltonen

Bug Description

On my Lenovo T520 Xorg suddenly crashed 1 minute after X started.

Description: Ubuntu quantal (development branch)
Release: 12.10

xorg:
  Installed: 1:7.7+1ubuntu3
  Candidate: 1:7.7+1ubuntu3
  Version table:
*** 1:7.7+1ubuntu3 0
        500 http://cz.archive.ubuntu.com/ubuntu/ quantal/main amd64 Packages
        100 /var/lib/dpkg/status

ProblemType: Crash
DistroRelease: Ubuntu 12.10
Package: xserver-xorg-core 2:1.13.0-0ubuntu4
ProcVersionSignature: Ubuntu 3.5.0-15.22-generic 3.5.4
Uname: Linux 3.5.0-15-generic x86_64
ApportVersion: 2.5.2-0ubuntu4
Architecture: amd64
Date: Fri Sep 21 08:22:38 2012
DistUpgraded: 2012-09-20 00:55:28,554 DEBUG enabling apt cron job
DistroCodename: quantal
DistroVariant: ubuntu
DkmsStatus: vboxhost, 4.1.22, 3.5.0-15-generic, x86_64: installed
ExecutablePath: /usr/bin/Xorg
GraphicsCard:
Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller [8086:0126] (rev 09) (prog-if 00 [VGA controller])
Subsystem: Lenovo Device [17aa:21d1]
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
MachineType: LENOVO 42404LG
ProcCmdline: /usr/bin/X :1 -core -auth /var/run/lightdm/root/:1 -nolisten tcp vt7 -novtswitch
ProcEnviron:

ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-15-generic root=UUID=5d116784-8575-4c9c-9924-1ade8fc422c0 ro elevator=deadline
Signal: 6
SourcePackage: xorg-server
StacktraceTop:
?? () from /usr/lib/xorg/modules/drivers/intel_drv.so
?? () from /usr/lib/xorg/modules/drivers/intel_drv.so
xf86DeleteScreen ()
InitOutput ()
?? ()
Title: Xorg crashed with SIGABRT in xf86DeleteScreen()
UpgradeStatus: Upgraded to quantal on 2012-09-19 (1 days ago)
UserGroups:

dmi.bios.date: 07/05/2012
dmi.bios.vendor: LENOVO
dmi.bios.version: 8AET58WW (1.38 )
dmi.board.asset.tag: Not Available
dmi.board.name: 42404LG
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr8AET58WW(1.38):bd07/05/2012:svnLENOVO:pn42404LG:pvrThinkPadT520:rvnLENOVO:rn42404LG:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 42404LG
dmi.product.version: ThinkPad T520
dmi.sys.vendor: LENOVO
version.compiz: compiz 1:0.9.8.0-0ubuntu1
version.ia32-libs: ia32-libs 20090808ubuntu36
version.libdrm2: libdrm2 2.4.39-0ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 9.0~git20120917.7cfd42ce-0ubuntu3
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 9.0~git20120917.7cfd42ce-0ubuntu3
version.xserver-xorg-core: xserver-xorg-core 2:1.13.0-0ubuntu4
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.7.3-0ubuntu1
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.99.99~git20120713.6ef1ad6a-0ubuntu1
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.20.8-0ubuntu1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.2-0ubuntu1

Tags:

Related branches

lp:ubuntu/quantal/xserver-xorg-video-intel

Revision history for this message

Cartesius (foo-v) wrote on 2012-09-21:

BootDmesg.txt Edit (57.4 KiB, text/plain; charset="utf-8")
BootLog.txt Edit (2.2 KiB, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (4.8 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (3.2 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (954 bytes, text/plain; charset="utf-8")
DpkgLog.txt Edit (2.7 MiB, text/plain; charset="utf-8")
LightdmDisplayLog.txt Edit (2.2 KiB, text/plain; charset="utf-8")
LightdmGreeterLog.txt Edit (6.6 KiB, text/plain; charset="utf-8")
LightdmGreeterLogOld.txt Edit (6.8 KiB, text/plain; charset="utf-8")
LightdmLog.txt Edit (3.7 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (26.0 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (456 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.5 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.0 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (12.9 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (5.2 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (753 bytes, text/plain; charset="utf-8")
Registers.txt Edit (717 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (2.1 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (2.1 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (145.9 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (345.5 KiB, text/plain; charset="utf-8")
XorgConf.txt Edit (2.5 KiB, text/plain; charset="utf-8")
XorgLog.txt Edit (33.3 KiB, text/plain; charset="utf-8")
XorgLogOld.txt Edit (34.3 KiB, text/plain; charset="utf-8")
Xrandr.txt Edit (3.0 KiB, text/plain; charset="utf-8")
nvidia-installer.log.txt Edit (74.1 KiB, text/plain; charset="utf-8")
xdpyinfo.txt Edit (11.6 KiB, text/plain; charset="utf-8")

Revision history for this message

Apport retracing service (apport) wrote on 2012-09-21:

StacktraceTop:
list_is_empty (head=<optimized out>) at ../../src/intel_list.h:269
intel_mode_fini (intel=intel@entry=0x7f8a1a2ac880) at ../../src/intel_display.c:1774
I830FreeScreen (arg=0x7f8a1a2abae0) at ../../src/intel_driver.c:1077
xf86DeleteScreen (pScrn=0x7f8a1a2abae0) at ../../../../hw/xfree86/common/xf86Helper.c:237
InitOutput (pScreenInfo=pScreenInfo@entry=0x7f8a18f8eda0, argc=argc@entry=9, argv=argv@entry=0x7fff42ad7798) at ../../../../hw/xfree86/common/xf86Init.c:628

Revision history for this message

Apport retracing service (apport) wrote on 2012-09-21: Stacktrace.txt

Stacktrace.txt Edit (2.8 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2012-09-21: StacktraceSource.txt

StacktraceSource.txt Edit (2.3 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2012-09-21: ThreadStacktrace.txt

ThreadStacktrace.txt Edit (2.9 KiB, text/plain)

Changed in xorg-server (Ubuntu):
importance:	Undecided → Medium
summary:	- Xorg crashed with SIGABRT in xf86DeleteScreen() + Xorg crashed with SIGABRT in list_is_empty()
tags:	removed: need-amd64-retrace

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-09-21:

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in xorg-server (Ubuntu):
status:	New → Confirmed

Timo Aaltonen (tjaalton) on 2012-09-21

visibility:

private → public

Revision history for this message

In freedesktop.org Bugzilla #55346, Timo Aaltonen (tjaalton) wrote on 2012-09-26:

Download full text (3.2 KiB)

downstream bug from ubuntu, with several dupes:

https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1053836

we do have the autobind patch from Dave applied, but these machines are not all hybrid ones, and the crash can occur on resume from suspend so it's not related to how the xserver is initialized.

stacktrace:
#0 0x00007f8a16b1a405 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = 0
        pid = <optimized out>
        selftid = 4706
#1 0x00007f8a16b1db6b in __GI_abort () at abort.c:91
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x54, sa_sigaction = 0x54}, sa_mask = {__val = {140231098526174, 140231062760520, 140231096579296, 1, 96, 4294967295, 0, 4294967295, 140231098548268, 4294967295, 1, 4313384, 0, 140231101134304, 140231101134464, 140231096762368}}, sa_flags = 412358532, sa_restorer = 0x7f8a00000001}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007f8a18d06b9e in OsAbort () at ../../os/utils.c:1266
No locals.
#3 0x00007f8a18bedd7c in ddxGiveUp (error=EXIT_ERR_ABORT) at ../../../../hw/xfree86/common/xf86Init.c:1096
        i = <optimized out>
#4 0x00007f8a18d0bb52 in AbortServer () at ../../os/log.c:652
No locals.
#5 0x00007f8a18d0c3ed in FatalError (f=f@entry=0x7f8a18d35668 "Caught signal %d (%s). Server aborting\n") at ../../os/log.c:793
        args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff42ad6fa0, reg_save_area = 0x7fff42ad6ee0}}
        args2 = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7fff42ad6fa0, reg_save_area = 0x7fff42ad6ee0}}
        beenhere = 1
#6 0x00007f8a18d0494e in OsSigHandler (sip=<optimized out>, signo=11, unused=<optimized out>) at ../../os/osinit.c:146
No locals.
#7 OsSigHandler (signo=11, sip=<optimized out>, unused=<optimized out>) at ../../os/osinit.c:107
No locals.
#8 <signal handler called>
No symbol table info available.
#9 list_is_empty (head=<optimized out>) at ../../src/intel_list.h:269
No locals.
#10 intel_mode_fini (intel=intel@entry=0x7f8a1a2ac880) at ../../src/intel_display.c:1774
        mode = 0x0
#11 0x00007f8a158872f5 in I830FreeScreen (arg=0x7f8a1a2abae0) at ../../src/intel_driver.c:1077
        scrn = 0x7f8a1a2abae0
        intel = 0x7f8a1a2ac880
#12 0x00007f8a18bf68b4 in xf86DeleteScreen (pScrn=0x7f8a1a2abae0) at ../../../../hw/xfree86/common/xf86Helper.c:237
        i = <optimized out>
        scrnIndex = 0
        is_gpu = 0
#13 0x00007f8a18befbc3 in InitOutput (pScreenInfo=pScreenInfo@entry=0x7f8a18f8eda0, argc=argc@entry=9, argv=argv@entry=0x7fff42ad7798) at ../../../../hw/xfree86/common/xf86Init.c:628
        i = -1
        j = <optimized out>
        k = <optimized out>
        scr_index = <optimized out>
        modulelist = <optimized out>
        optionlist = 0x7f8a1a29d920
        screenpix24 = <optimized out>
        pix24 = <optimized out>
        pix24From = X_DEFAULT
        pix24Fail = 0
        autoconfig = <optimized out>
        sigio_blocked = 0
        configured_device = <optimized out>
#14 0x00007f8a18b9c386 in main (argc=9, argv=0x7fff42ad7798, envp=<optimized out>) at ../../dix/main.c:204
        i = <optimized out>
      ...

downstream bug from ubuntu, with several dupes:

https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1053836

we do have the autobind patch from Dave applied, but these machines are not all hybrid ones, and the crash can occur on resume from suspend so it's not related to how the xserver is initialized.

stacktrace:
#0  0x00007f8a16b1a405 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = 0
        pid = <optimized out>
        selftid = 4706
#1  0x00007f8a16b1db6b in __GI_abort () at abort.c:91
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x54, sa_sigaction = 0x54}, sa_mask = {__val = {140231098526174, 140231062760520, 140231096579296, 1, 96, 4294967295, 0, 4294967295, 140231098548268, 4294967295, 1, 4313384, 0, 140231101134304, 140231101134464, 140231096762368}}, sa_flags = 412358532, sa_restorer = 0x7f8a00000001}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007f8a18d06b9e in OsAbort () at ../../os/utils.c:1266
No locals.
#3  0x00007f8a18bedd7c in ddxGiveUp (error=EXIT_ERR_ABORT) at ../../../../hw/xfree86/common/xf86Init.c:1096
        i = <optimized out>
#4  0x00007f8a18d0bb52 in AbortServer () at ../../os/log.c:652
No locals.
#5  0x00007f8a18d0c3ed in FatalError (f=f@entry=0x7f8a18d35668 "Caught signal %d (%s). Server aborting\n") at ../../os/log.c:793
        args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff42ad6fa0, reg_save_area = 0x7fff42ad6ee0}}
        args2 = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7fff42ad6fa0, reg_save_area = 0x7fff42ad6ee0}}
        beenhere = 1
#6  0x00007f8a18d0494e in OsSigHandler (sip=<optimized out>, signo=11, unused=<optimized out>) at ../../os/osinit.c:146
No locals.
#7  OsSigHandler (signo=11, sip=<optimized out>, unused=<optimized out>) at ../../os/osinit.c:107
No locals.
#8  <signal handler called>
No symbol table info available.
#9  list_is_empty (head=<optimized out>) at ../../src/intel_list.h:269
No locals.
#10 intel_mode_fini (intel=intel@entry=0x7f8a1a2ac880) at ../../src/intel_display.c:1774
        mode = 0x0
#11 0x00007f8a158872f5 in I830FreeScreen (arg=0x7f8a1a2abae0) at ../../src/intel_driver.c:1077
        scrn = 0x7f8a1a2abae0
        intel = 0x7f8a1a2ac880
#12 0x00007f8a18bf68b4 in xf86DeleteScreen (pScrn=0x7f8a1a2abae0) at ../../../../hw/xfree86/common/xf86Helper.c:237
        i = <optimized out>
        scrnIndex = 0
        is_gpu = 0
#13 0x00007f8a18befbc3 in InitOutput (pScreenInfo=pScreenInfo@entry=0x7f8a18f8eda0, argc=argc@entry=9, argv=argv@entry=0x7fff42ad7798) at ../../../../hw/xfree86/common/xf86Init.c:628
        i = -1
        j = <optimized out>
        k = <optimized out>
        scr_index = <optimized out>
        modulelist = <optimized out>
        optionlist = 0x7f8a1a29d920
        screenpix24 = <optimized out>
        pix24 = <optimized out>
        pix24From = X_DEFAULT
        pix24Fail = 0
        autoconfig = <optimized out>
        sigio_blocked = 0
        configured_device = <optimized out>
#14 0x00007f8a18b9c386 in main (argc=9, argv=0x7fff42ad7798, envp=<optimized out>) at ../../dix/main.c:204
        i = <optimized out>
        alwaysCheckForInput = {0, 1}

Revision history for this message

In freedesktop.org Bugzilla #55346, Timo Aaltonen (tjaalton) wrote on 2012-09-26:

kernel 3.5.4, ddx 2.20.8, xserver 1.13

affects:	xorg-server (Ubuntu) → xserver-xorg-video-intel (Ubuntu)
Changed in xserver-xorg-video-intel (Ubuntu):
assignee:	nobody → Timo Aaltonen (tjaalton)

Revision history for this message

In freedesktop.org Bugzilla #55346, Chris Wilson (ickle) wrote on 2012-09-26:

#10

commit addfa653cf51fa45c7eae49be1fd722aaadf97d6
Author: Chris Wilson <email address hidden>
Date: Wed Sep 26 08:59:18 2012 +0100

uxa: Prevent attempting to call intel_mode_fini() before PreInit runs

    In the Ubuntu xserver it is apparently possible for the Screen to be
    deleted prior to being fully initialised. Make sure we don't crash in
    that situation!

Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=55346
Signed-off-by: Chris Wilson <email address hidden>

bugbot (bugbot) on 2012-09-27

tags:

added: crash

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-09-27:

This bug was fixed in the package xserver-xorg-video-intel - 2:2.20.8-0ubuntu2

---------------
xserver-xorg-video-intel (2:2.20.8-0ubuntu2) quantal; urgency=low

  * dont-run-intel-mode-fini-before-preinit.diff, don't crash if
    Screen is deleted before the driver has fully initialized.
    (LP: #1053836)
-- Timo Aaltonen <email address hidden> Wed, 26 Sep 2012 15:14:07 +0300

Changed in xserver-xorg-video-intel (Ubuntu):
status:	Confirmed → Fix Released

Bug Watch Updater (bug-watch-updater) on 2012-10-04

Changed in xorg-server:
importance:	Unknown → Medium
status:	Unknown → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

Duplicates of this bug

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

freedesktop-bugs #55346
[RESOLVED FIXED] Edit

Bug watches keep track of this bug in other bug trackers.

Ubuntuxserver-xorg-video-intel package

Xorg crashed with SIGABRT in list_is_empty()

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
xserver-xorg-video-intel package