Bug 656228

Summary: Occasional X lock up on core i5 and dual display
Product: [Fedora] Fedora Reporter: Igor Mammedov <qwerty0987654321>
Component: pixmanAssignee: Adam Jackson <ajax>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: medium    
Version: 14CC: ajax, mcepl, xgl-maint
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-16 16:43:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
hw config/ lspci output
none
Xorg.0.log
none
dual monitor config file
none
gdb stack trace in a more readable form none

Description Igor Mammedov 2010-11-23 09:52:40 UTC
Description of problem:
X randomly locks up both screens and do not respond to keyboard.
At that time X server consumes ~100% of CPU time.

However, remote login affected PC via ssh works and after reboot
PC works for some time (days).

Sending 'kill -6 ...' didn't affect X process at all end even kill -9 ...
had  no any effect on it (only reboot helped).


Version-Release number of selected component (if applicable):
xorg-x11-drv-intel-2.12.0-6.fc14.1.x86_64
xorg-x11-server-Xorg-1.9.1-2.fc14.x86_64
kernel-2.6.35.6-48.fc14.x86_64

How reproducible:
N/A, it happens "randomly" for now. 

Additional info:
core i5/ MB Asus P7H55D-M EVO / 8Gb RAM/ no swap / 2 monitors (1 vga + 1 DVI)

pstack output
#0  0x00000035020490b4 in pixman_blt_sse2 () from /usr/lib64/libpixman-1.so.0
#1  0x0000003502051628 in sse2_blt () from /usr/lib64/libpixman-1.so.0
#2  0x0000003502032868 in pixman_blt () from /usr/lib64/libpixman-1.so.0
#3  0x00007fa2cd525c42 in fbCopyNtoN () from /usr/lib64/xorg/modules/libfb.so
#4  0x000000000050438b in miCopyRegion ()
#5  0x00000000005046c9 in miDoCopy ()
#6  0x00007fa2cd525d7a in fbCopyArea () from /usr/lib64/xorg/modules/libfb.so
#7  0x00007fa2cd9936c1 in uxa_check_copy_area () from /usr/lib64/xorg/modules/drivers/intel_drv.so
#8  0x00000000004adcda in damageCopyArea ()
#9  0x0000000000427b01 in ProcCopyArea ()
#10 0x000000000042b02e in Dispatch ()
#11 0x00000000004215da in main ()

top output
top - 08:41:14 up 2 days, 21:22,  8 users,  load average: 1.40, 1.42, 1.43
Tasks: 215 total,   2 running, 213 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.1%us, 25.0%sy,  0.0%ni, 74.9%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:   7994588k total,  4412208k used,  3582380k free,   227132k buffers
Swap:        0k total,        0k used,        0k free,  2734252k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                                                                                             
 1530 root      20   0  405m  48m  25m R 100.0  0.6  85:31.30 Xorg                                                                                                                                
gdb output
_mm_store_si128 (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=13824, dst_stride=13824, src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=<value optimized out>) at /usr/lib/gcc/x86_64-redhat-linux/4.5.0/include/emmintrin.h:697
697     /usr/lib/gcc/x86_64-redhat-linux/4.5.0/include/emmintrin.h: No such file or directory.
        in /usr/lib/gcc/x86_64-redhat-linux/4.5.0/include/emmintrin.h
(gdb) bt
#0  _mm_store_si128 (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=13824, dst_stride=13824, src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=<value optimized out>) at /usr/lib/gcc/x86_64-redhat-linux/4.5.0/include/emmintrin.h:697
#1  save_128_aligned (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=13824, dst_stride=13824, src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=<value optimized out>) at pixman-sse2.c:416
#2  pixman_blt_sse2 (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=13824, dst_stride=13824, src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=<value optimized out>) at pixman-sse2.c:5380
#3  0x0000003502051628 in sse2_blt (imp=0x3a2c580, src_bits=0x7fa2bbc3a000, dst_bits=0x7fa2bd93a000, src_stride=3456, dst_stride=3456, src_bpp=<value optimized out>, dst_bpp=32, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=1050) at pixman-sse2.c:5860
#4  0x0000003502032868 in pixman_blt (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=<value optimized out>, dst_stride=<value optimized out>, 
    src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, src_y=0, dst_x=0, dst_y=0, width=3360, height=1050) at pixman.c:844
#5  0x00007fa2cd525c42 in fbCopyNtoN (pSrcDrawable=<value optimized out>, pDstDrawable=<value optimized out>, pGC=<value optimized out>, pbox=0x7fffe7d86120, nbox=<value optimized out>, dx=0, 
    dy=0, reverse=0, upsidedown=0, bitplane=0, closure=0x0) at fbcopy.c:97
#6  0x000000000050438b in miCopyRegion (pSrcDrawable=0x41637a0, pDstDrawable=0x3c76b70, pGC=0x3c75610, pDstRegion=<value optimized out>, dx=<value optimized out>, dy=<value optimized out>, 
    copyProc=0x7fa2cd525a95 <fbCopyNtoN>, bitPlane=0, closure=0x0) at micopy.c:137
#7  0x00000000005046c9 in miDoCopy (pSrcDrawable=0x41637a0, pDstDrawable=0x3c76b70, pGC=0x3c75610, xIn=0, yIn=0, widthSrc=3360, heightSrc=1050, xOut=0, yOut=0, 
    copyProc=0x7fa2cd525a95 <fbCopyNtoN>, bitPlane=0, closure=0x0) at micopy.c:334
#8  0x00007fa2cd525d7a in fbCopyArea (pSrcDrawable=<value optimized out>, pDstDrawable=<value optimized out>, pGC=<value optimized out>, xIn=<value optimized out>, yIn=<value optimized out>, 
    widthSrc=<value optimized out>, heightSrc=1050, xOut=0, yOut=0) at fbcopy.c:344
#9  0x00007fa2cd9936c1 in uxa_check_copy_area (pSrc=0x41637a0, pDst=0x3c76b70, pGC=0x3c75610, srcx=0, srcy=0, w=3360, h=1050, dstx=0, dsty=0) at uxa-unaccel.c:135
#10 0x00000000004adcda in damageCopyArea (pSrc=0x41637a0, pDst=0x3c76b70, pGC=0x3c75610, srcx=0, srcy=0, width=3360, height=1050, dstx=0, dsty=0) at damage.c:941
#11 0x0000000000427b01 in ProcCopyArea (client=0x3bda7c0) at dispatch.c:1654
#12 0x000000000042b02e in Dispatch () at dispatch.c:432
#13 0x00000000004215da in main (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>) at main.c:291
(gdb) n
pixman_blt_sse2 (src_bits=<value optimized out>, dst_bits=<value optimized out>, src_stride=13824, dst_stride=13824, src_bpp=<value optimized out>, dst_bpp=<value optimized out>, src_x=0, 
    src_y=0, dst_x=0, dst_y=0, width=3360, height=<value optimized out>) at pixman-sse2.c:5387
5387                w -= 64;
(gdb) info local
xmm0 = {-62404530500646040, -62404530500646040}
xmm1 = {-62404530500646040, -62404530500646040}
xmm2 = {-62404530500646040, -62404530500646040}
xmm3 = {-62404530500646040, -62404530500646040}
w = 9536
s = 0x7fa2bc195340 <Address 0x7fa2bc195340 out of bounds>
d = <value optimized out>
src_bytes = 0x7fa2bc197a00 <Address 0x7fa2bc197a00 out of bounds>
dst_bytes = 0x7fa2bde97a00 <Address 0x7fa2bde97a00 out of bounds>
byte_width = 13440
(gdb)

Comment 1 Igor Mammedov 2010-11-23 09:53:25 UTC
Created attachment 462288 [details]
hw config/ lspci output

Comment 2 Igor Mammedov 2010-11-23 09:54:19 UTC
Created attachment 462289 [details]
Xorg.0.log

Comment 3 Igor Mammedov 2010-11-23 09:55:16 UTC
Created attachment 462290 [details]
dual monitor config file

Comment 4 Igor Mammedov 2010-11-23 09:57:43 UTC
Created attachment 462291 [details]
gdb stack trace in a more readable form

Comment 5 Matěj Cepl 2010-11-23 23:58:51 UTC
Looks most of all like a pixman crash, reassigning there.

Comment 6 Igor Mammedov 2010-11-24 06:42:12 UTC
pixman-0.18.4-1.fc14.x86_64

Probably it is, but why then simple copy loop in pixman made process unkillable
and switching to console stopped to work as well?

Comment 7 Fedora End Of Life 2012-08-16 16:43:47 UTC
This message is a notice that Fedora 14 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 14. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained.  At this time, all open bugs with a Fedora 'version'
of '14' have been closed as WONTFIX.

(Please note: Our normal process is to give advanced warning of this 
occurring, but we forgot to do that. A thousand apologies.)

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, feel free to reopen 
this bug and simply change the 'version' to a later Fedora version.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we were unable to fix it before Fedora 14 reached end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" (top right of this page) and open it against that 
version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping