Bug 1548737

Summary: [abrt] xorg-x11-server-Xwayland: _Uelf64_lookup_symbol(): Xwayland killed by SIGBUS
Product: [Fedora] Fedora Reporter: Ron Smith <ron.smith>
Component: xorg-x11-serverAssignee: X/OpenGL Maintenance List <xgl-maint>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 27CC: alan.christopher.jenkins, alexl, awilliam, bskeggs, caillon+fedoraproject, frankbourdeau, jglisse, john.j5live, ofourdan, rhughes, rstrode, sandmann, xgl-maint
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/6d93b3c988c23b4d26992d2d08060cf5039820bc
Whiteboard: abrt_hash:8adff4a8cdb20920984f3126bf2e131f469d8d40;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-12 19:34:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status none

Description Ron Smith 2018-02-24 16:09:07 UTC
Description of problem:
I opened my laptop, it took longer than usual to wake up, then it said some process had to be killed

Version-Release number of selected component:
xorg-x11-server-Xwayland-1.19.6-5.fc27

Additional info:
reporter:       libreport-2.9.3
backtrace_rating: 4
cmdline:        /usr/bin/Xwayland :0 -rootless -terminate -core -listen 4 -listen 5 -displayfd 6
crash_function: _Uelf64_lookup_symbol
executable:     /usr/bin/Xwayland
journald_cursor: s=a076843b874b4f0c9e0bda8adbf2d1fe;i=537a;b=de5adee6f892423d87f102620642dcba;m=71024228;t=565f75be3b726;x=49f89a5efa89b3c7
kernel:         4.15.3-300.fc27.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 _Uelf64_lookup_symbol at elfxx.c:109
 #1 _Uelf64_get_proc_name_in_image at elfxx.c:315
 #2 _Uelf64_get_proc_name at elfxx.c:353
 #3 get_proc_name at mi/Gget_proc_name.c:93
 #4 _ULx86_64_get_proc_name at mi/Gget_proc_name.c:109
 #5 xorg_backtrace at backtrace.c:81
 #8 XkbGeomRealloc at XKBGAlloc.c:405
 #9 _XkbCopyGeom at xkbUtils.c:1439
 #10 XkbCopyKeymap at xkbUtils.c:1992
 #12 XkbDeviceApplyKeymap at xkbUtils.c:2025

Comment 1 Ron Smith 2018-02-24 16:09:13 UTC
Created attachment 1400326 [details]
File: backtrace

Comment 2 Ron Smith 2018-02-24 16:09:14 UTC
Created attachment 1400327 [details]
File: cgroup

Comment 3 Ron Smith 2018-02-24 16:09:15 UTC
Created attachment 1400328 [details]
File: core_backtrace

Comment 4 Ron Smith 2018-02-24 16:09:16 UTC
Created attachment 1400329 [details]
File: cpuinfo

Comment 5 Ron Smith 2018-02-24 16:09:17 UTC
Created attachment 1400330 [details]
File: dso_list

Comment 6 Ron Smith 2018-02-24 16:09:18 UTC
Created attachment 1400331 [details]
File: environ

Comment 7 Ron Smith 2018-02-24 16:09:19 UTC
Created attachment 1400332 [details]
File: exploitable

Comment 8 Ron Smith 2018-02-24 16:09:20 UTC
Created attachment 1400333 [details]
File: limits

Comment 9 Ron Smith 2018-02-24 16:09:21 UTC
Created attachment 1400334 [details]
File: maps

Comment 10 Ron Smith 2018-02-24 16:09:23 UTC
Created attachment 1400335 [details]
File: mountinfo

Comment 11 Ron Smith 2018-02-24 16:09:24 UTC
Created attachment 1400336 [details]
File: open_fds

Comment 12 Ron Smith 2018-02-24 16:09:26 UTC
Created attachment 1400337 [details]
File: proc_pid_status

Comment 13 frank 2018-02-27 10:22:35 UTC
*** Bug 1549516 has been marked as a duplicate of this bug. ***

Comment 14 Alan Jenkins 2018-03-21 11:40:03 UTC
I am getting a similar-looking backtrace, repeatedly.  I wrote an analysis of the backtrace which is mostly me going "impossible!".

"SIGBUS apparently at first instruction in XkbGeomRealloc(), when resuming from suspend"
https://bugzilla.redhat.com/show_bug.cgi?id=1557682

Sadly it looks like xorg_backtrace() is also crashing in different places, this means there's ABRT reports that aren't getting merged correctly.

I have followed "https://wiki.ubuntu.com/X/Backtracing#Untrap_signals" to disable xorg_backtrace().  Maybe the next time, a cleaner backtrace will help me analyze better.  (DISCLAIMER.  The manpage warns about consequences from this.  Because X doesn't get to clean up if you do this.  However with unprivileged X, _and_ me using XWayland rather than X accessing devices directly, I think it's fine.  And if it's not, I should still get the backtrace saved to disk nicely and be able to reboot cleanly enough with sysrqs, because I have enabled sysrq).

Google "Xwayland XkbGeomRealloc" is bringing this report up nice and prominently, so I'll mark mine as a duplicate.

Comment 15 Alan Jenkins 2018-03-21 11:40:54 UTC
*** Bug 1557682 has been marked as a duplicate of this bug. ***

Comment 16 Alan Jenkins 2018-03-21 11:43:25 UTC
Although, if you would like to click on [edit] next the title of this bug, and change it to refer XkbGeomRealloc() instead of _Uelf54_lookup_symbol(), that might also help highlight the *real* problem.  I don't have permission to do that on this bug.

Comment 17 Alan Jenkins 2018-03-23 22:47:01 UTC
Similar problem has been detected:

This happened on resume from suspend.
It does not always happen on resume from suspend.
AFAIK this is the second time I've seen this backtrace.
I have seen one other backtrace more frequently (and reported it).

On this occasion I believe it affected my foreground GNOME session.
It did not affect gdm, nor the GNOME session I had on a different tty (as a different user).

reporter:       libreport-2.9.3
backtrace_rating: 3
cmdline:        /usr/bin/Xwayland :0 -rootless -terminate -core -listen 4 -listen 5 -displayfd 6
crash_function: _dl_fixup
executable:     /usr/bin/Xwayland
journald_cursor: s=2dfd4bfd0b9c49e7bf8baeec3ec3ffc7;i=4e804b;b=23af529241b647dca1b9b199402b28f6;m=17420cf1d7;t=5681ae2205ed5;x=1e12814d65fea71b
kernel:         4.15.10-300.fc27.x86_64
package:        xorg-x11-server-Xwayland-1.19.6-5.fc27
reason:         Xwayland killed by SIGBUS
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1001

Comment 18 Alan Jenkins 2018-03-24 12:27:00 UTC
I found the elusive developer who's looking at this :).  This bug should be marked as a duplicate of the following:

https://bugzilla.redhat.com/show_bug.cgi?id=1553979

Comment 19 Adam Williamson 2018-04-12 19:34:04 UTC

*** This bug has been marked as a duplicate of bug 1553979 ***