Xorg indefinitely hangs in kernelspace

Xorg indefinitely hangs in kernelspace

[Jaak Ristioja]

Hello!

I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
I originally filed the issue on LaunchPad and more details can be found
there, although I doubt whether these details are useful.

  https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1813620

I first experienced these issues with:

* Ubuntu 18.04 (probably kernel 4.15.something)
* Ubuntu 18.10 (kernel 4.18.0-13)
* Ubuntu 19.04 (kernel 5.0.0-13-generic)
* Ubuntu 19.04 (mainline kernel 5.1-rc7)
* Ubuntu 19.04 (mainline kernel 5.2.0-050200rc1-generic)

Here is the crash output from dmesg:

[354073.713350] INFO: task Xorg:920 blocked for more than 120 seconds.
[354073.717755]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354073.722277] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354073.738332] Xorg            D    0   920    854 0x00404004
[354073.738334] Call Trace:
[354073.738340]  __schedule+0x2ba/0x650
[354073.738342]  schedule+0x2d/0x90
[354073.738343]  schedule_preempt_disabled+0xe/0x10
[354073.738345]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354073.738346]  __ww_mutex_lock_slowpath+0x16/0x20
[354073.738347]  ww_mutex_lock+0x34/0x50
[354073.738352]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
[354073.738356]  qxl_release_reserve_list+0x67/0x150 [qxl]
[354073.738358]  ? qxl_bo_pin+0xaa/0x190 [qxl]
[354073.738359]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
[354073.738367]  drm_atomic_helper_commit_planes+0xb9/0x220 [drm_kms_helper]
[354073.738371]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
[354073.738374]  commit_tail+0x67/0x70 [drm_kms_helper]
[354073.738378]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
[354073.738390]  drm_atomic_commit+0x4a/0x50 [drm]
[354073.738394]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
[354073.738402]  __setplane_atomic+0xd3/0x120 [drm]
[354073.738410]  drm_mode_cursor_universal+0x142/0x270 [drm]
[354073.738418]  drm_mode_cursor_common+0xcb/0x220 [drm]
[354073.738425]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354073.738432]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[354073.738438]  drm_ioctl_kernel+0xb0/0x100 [drm]
[354073.738440]  ? ___sys_recvmsg+0x16c/0x200
[354073.738445]  drm_ioctl+0x233/0x410 [drm]
[354073.738452]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354073.738454]  ? timerqueue_add+0x57/0x90
[354073.738456]  ? enqueue_hrtimer+0x3c/0x90
[354073.738458]  do_vfs_ioctl+0xa9/0x640
[354073.738459]  ? fput+0x13/0x20
[354073.738461]  ? __sys_recvmsg+0x88/0xa0
[354073.738462]  ksys_ioctl+0x67/0x90
[354073.738463]  __x64_sys_ioctl+0x1a/0x20
[354073.738465]  do_syscall_64+0x5a/0x140
[354073.738467]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[354073.738468] RIP: 0033:0x7ffad14d3417
[354073.738472] Code: Bad RIP value.
[354073.738472] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[354073.738473] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
00007ffad14d3417
[354073.738474] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
000000000000000e
[354073.738474] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
0000000000000010
[354073.738475] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[354073.738475] R13: 000000000000000e R14: 0000000000000000 R15:
000056428a4721d0
[354073.738511] INFO: task kworker/1:0:27625 blocked for more than 120
seconds.
[354073.745154]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354073.751900] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354073.762197] kworker/1:0     D    0 27625      2 0x80004000
[354073.762205] Workqueue: events qxl_client_monitors_config_work_func [qxl]
[354073.762206] Call Trace:
[354073.762211]  __schedule+0x2ba/0x650
[354073.762214]  schedule+0x2d/0x90
[354073.762215]  schedule_preempt_disabled+0xe/0x10
[354073.762216]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354073.762217]  ? __switch_to_asm+0x34/0x70
[354073.762218]  ? __switch_to_asm+0x40/0x70
[354073.762219]  ? __switch_to_asm+0x40/0x70
[354073.762220]  __ww_mutex_lock_slowpath+0x16/0x20
[354073.762221]  ww_mutex_lock+0x34/0x50
[354073.762235]  drm_modeset_lock+0x35/0xb0 [drm]
[354073.762243]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
[354073.762251]  drm_modeset_lock_all+0x5e/0xb0 [drm]
[354073.762252]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
[354073.762254]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
[354073.762256]  process_one_work+0x20f/0x410
[354073.762257]  worker_thread+0x34/0x400
[354073.762259]  kthread+0x120/0x140
[354073.762260]  ? process_one_work+0x410/0x410
[354073.762261]  ? __kthread_parkme+0x70/0x70
[354073.762262]  ret_from_fork+0x35/0x40
[354194.557095] INFO: task Xorg:920 blocked for more than 241 seconds.
[354194.558311]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354194.559484] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354194.560936] Xorg            D    0   920    854 0x00404004
[354194.560938] Call Trace:
[354194.560944]  __schedule+0x2ba/0x650
[354194.560946]  schedule+0x2d/0x90
[354194.560947]  schedule_preempt_disabled+0xe/0x10
[354194.560948]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354194.560950]  __ww_mutex_lock_slowpath+0x16/0x20
[354194.560950]  ww_mutex_lock+0x34/0x50
[354194.560956]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
[354194.560959]  qxl_release_reserve_list+0x67/0x150 [qxl]
[354194.560961]  ? qxl_bo_pin+0xaa/0x190 [qxl]
[354194.560963]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
[354194.560971]  drm_atomic_helper_commit_planes+0xb9/0x220 [drm_kms_helper]
[354194.560975]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
[354194.560979]  commit_tail+0x67/0x70 [drm_kms_helper]
[354194.560982]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
[354194.560993]  drm_atomic_commit+0x4a/0x50 [drm]
[354194.560997]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
[354194.561011]  __setplane_atomic+0xd3/0x120 [drm]
[354194.561019]  drm_mode_cursor_universal+0x142/0x270 [drm]
[354194.561027]  drm_mode_cursor_common+0xcb/0x220 [drm]
[354194.561034]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354194.561041]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[354194.561047]  drm_ioctl_kernel+0xb0/0x100 [drm]
[354194.561049]  ? ___sys_recvmsg+0x16c/0x200
[354194.561057]  drm_ioctl+0x233/0x410 [drm]
[354194.561080]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354194.561082]  ? timerqueue_add+0x57/0x90
[354194.561084]  ? enqueue_hrtimer+0x3c/0x90
[354194.561086]  do_vfs_ioctl+0xa9/0x640
[354194.561088]  ? fput+0x13/0x20
[354194.561089]  ? __sys_recvmsg+0x88/0xa0
[354194.561090]  ksys_ioctl+0x67/0x90
[354194.561091]  __x64_sys_ioctl+0x1a/0x20
[354194.561093]  do_syscall_64+0x5a/0x140
[354194.561094]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[354194.561096] RIP: 0033:0x7ffad14d3417
[354194.561100] Code: Bad RIP value.
[354194.561100] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[354194.561101] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
00007ffad14d3417
[354194.561102] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
000000000000000e
[354194.561102] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
0000000000000010
[354194.561103] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[354194.561103] R13: 000000000000000e R14: 0000000000000000 R15:
000056428a4721d0
[354194.561163] INFO: task kworker/1:0:27625 blocked for more than 241
seconds.
[354194.562474]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354194.563994] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354194.565474] kworker/1:0     D    0 27625      2 0x80004000
[354194.565479] Workqueue: events qxl_client_monitors_config_work_func [qxl]
[354194.565480] Call Trace:
[354194.565483]  __schedule+0x2ba/0x650
[354194.565484]  schedule+0x2d/0x90
[354194.565486]  schedule_preempt_disabled+0xe/0x10
[354194.565486]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354194.565488]  ? __switch_to_asm+0x34/0x70
[354194.565489]  ? __switch_to_asm+0x40/0x70
[354194.565490]  ? __switch_to_asm+0x40/0x70
[354194.565490]  __ww_mutex_lock_slowpath+0x16/0x20
[354194.565491]  ww_mutex_lock+0x34/0x50
[354194.565499]  drm_modeset_lock+0x35/0xb0 [drm]
[354194.565507]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
[354194.565514]  drm_modeset_lock_all+0x5e/0xb0 [drm]
[354194.565516]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
[354194.565518]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
[354194.565519]  process_one_work+0x20f/0x410
[354194.565521]  worker_thread+0x34/0x400
[354194.565522]  kthread+0x120/0x140
[354194.565523]  ? process_one_work+0x410/0x410
[354194.565524]  ? __kthread_parkme+0x70/0x70
[354194.565525]  ret_from_fork+0x35/0x40
[354315.400956] INFO: task Xorg:920 blocked for more than 362 seconds.
[354315.411626]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354315.422647] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354315.435897] Xorg            D    0   920    854 0x00404004
[354315.435899] Call Trace:
[354315.435923]  __schedule+0x2ba/0x650
[354315.435925]  schedule+0x2d/0x90
[354315.435927]  schedule_preempt_disabled+0xe/0x10
[354315.435928]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354315.435929]  __ww_mutex_lock_slowpath+0x16/0x20
[354315.435930]  ww_mutex_lock+0x34/0x50
[354315.435935]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
[354315.435939]  qxl_release_reserve_list+0x67/0x150 [qxl]
[354315.435941]  ? qxl_bo_pin+0xaa/0x190 [qxl]
[354315.435943]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
[354315.435951]  drm_atomic_helper_commit_planes+0xb9/0x220 [drm_kms_helper]
[354315.435955]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
[354315.435958]  commit_tail+0x67/0x70 [drm_kms_helper]
[354315.435962]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
[354315.435974]  drm_atomic_commit+0x4a/0x50 [drm]
[354315.435977]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
[354315.435985]  __setplane_atomic+0xd3/0x120 [drm]
[354315.435993]  drm_mode_cursor_universal+0x142/0x270 [drm]
[354315.436001]  drm_mode_cursor_common+0xcb/0x220 [drm]
[354315.436009]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354315.436016]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[354315.436021]  drm_ioctl_kernel+0xb0/0x100 [drm]
[354315.436023]  ? ___sys_recvmsg+0x16c/0x200
[354315.436029]  drm_ioctl+0x233/0x410 [drm]
[354315.436036]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354315.436038]  ? timerqueue_add+0x57/0x90
[354315.436040]  ? enqueue_hrtimer+0x3c/0x90
[354315.436042]  do_vfs_ioctl+0xa9/0x640
[354315.436043]  ? fput+0x13/0x20
[354315.436045]  ? __sys_recvmsg+0x88/0xa0
[354315.436046]  ksys_ioctl+0x67/0x90
[354315.436047]  __x64_sys_ioctl+0x1a/0x20
[354315.436049]  do_syscall_64+0x5a/0x140
[354315.436050]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[354315.436051] RIP: 0033:0x7ffad14d3417
[354315.436069] Code: Bad RIP value.
[354315.436070] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[354315.436071] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
00007ffad14d3417
[354315.436071] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
000000000000000e
[354315.436072] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
0000000000000010
[354315.436072] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[354315.436073] R13: 000000000000000e R14: 0000000000000000 R15:
000056428a4721d0
[354315.436103] INFO: task kworker/1:0:27625 blocked for more than 362
seconds.
[354315.451103]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354315.461927] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354315.477908] kworker/1:0     D    0 27625      2 0x80004000
[354315.477916] Workqueue: events qxl_client_monitors_config_work_func [qxl]
[354315.477918] Call Trace:
[354315.477924]  __schedule+0x2ba/0x650
[354315.477925]  schedule+0x2d/0x90
[354315.477927]  schedule_preempt_disabled+0xe/0x10
[354315.477928]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354315.477930]  ? __switch_to_asm+0x34/0x70
[354315.477931]  ? __switch_to_asm+0x40/0x70
[354315.477932]  ? __switch_to_asm+0x40/0x70
[354315.477933]  __ww_mutex_lock_slowpath+0x16/0x20
[354315.477933]  ww_mutex_lock+0x34/0x50
[354315.477947]  drm_modeset_lock+0x35/0xb0 [drm]
[354315.477955]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
[354315.477963]  drm_modeset_lock_all+0x5e/0xb0 [drm]
[354315.477965]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
[354315.477967]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
[354315.477969]  process_one_work+0x20f/0x410
[354315.477970]  worker_thread+0x34/0x400
[354315.477972]  kthread+0x120/0x140
[354315.477973]  ? process_one_work+0x410/0x410
[354315.477973]  ? __kthread_parkme+0x70/0x70
[354315.477975]  ret_from_fork+0x35/0x40
[354436.251965] INFO: task Xorg:920 blocked for more than 483 seconds.
[354436.253054]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354436.254109] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354436.255421] Xorg            D    0   920    854 0x00404004
[354436.255423] Call Trace:
[354436.255429]  __schedule+0x2ba/0x650
[354436.255431]  schedule+0x2d/0x90
[354436.255433]  schedule_preempt_disabled+0xe/0x10
[354436.255434]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354436.255435]  __ww_mutex_lock_slowpath+0x16/0x20
[354436.255435]  ww_mutex_lock+0x34/0x50
[354436.255441]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
[354436.255445]  qxl_release_reserve_list+0x67/0x150 [qxl]
[354436.255446]  ? qxl_bo_pin+0xaa/0x190 [qxl]
[354436.255448]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
[354436.255456]  drm_atomic_helper_commit_planes+0xb9/0x220 [drm_kms_helper]
[354436.255459]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
[354436.255463]  commit_tail+0x67/0x70 [drm_kms_helper]
[354436.255467]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
[354436.255479]  drm_atomic_commit+0x4a/0x50 [drm]
[354436.255482]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
[354436.255490]  __setplane_atomic+0xd3/0x120 [drm]
[354436.255498]  drm_mode_cursor_universal+0x142/0x270 [drm]
[354436.255506]  drm_mode_cursor_common+0xcb/0x220 [drm]
[354436.255513]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354436.255520]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[354436.255526]  drm_ioctl_kernel+0xb0/0x100 [drm]
[354436.255527]  ? ___sys_recvmsg+0x16c/0x200
[354436.255533]  drm_ioctl+0x233/0x410 [drm]
[354436.255540]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354436.255542]  ? timerqueue_add+0x57/0x90
[354436.255544]  ? enqueue_hrtimer+0x3c/0x90
[354436.255546]  do_vfs_ioctl+0xa9/0x640
[354436.255547]  ? fput+0x13/0x20
[354436.255548]  ? __sys_recvmsg+0x88/0xa0
[354436.255550]  ksys_ioctl+0x67/0x90
[354436.255551]  __x64_sys_ioctl+0x1a/0x20
[354436.255553]  do_syscall_64+0x5a/0x140
[354436.255554]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[354436.255555] RIP: 0033:0x7ffad14d3417
[354436.255559] Code: Bad RIP value.
[354436.255560] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[354436.255561] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
00007ffad14d3417
[354436.255561] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
000000000000000e
[354436.255562] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
0000000000000010
[354436.255562] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[354436.255563] R13: 000000000000000e R14: 0000000000000000 R15:
000056428a4721d0
[354436.255599] INFO: task kworker/1:0:27625 blocked for more than 483
seconds.
[354436.256802]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354436.257874] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354436.278727] kworker/1:0     D    0 27625      2 0x80004000
[354436.278735] Workqueue: events qxl_client_monitors_config_work_func [qxl]
[354436.278736] Call Trace:
[354436.278742]  __schedule+0x2ba/0x650
[354436.278743]  schedule+0x2d/0x90
[354436.278745]  schedule_preempt_disabled+0xe/0x10
[354436.278746]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354436.278747]  ? __switch_to_asm+0x34/0x70
[354436.278748]  ? __switch_to_asm+0x40/0x70
[354436.278749]  ? __switch_to_asm+0x40/0x70
[354436.278750]  __ww_mutex_lock_slowpath+0x16/0x20
[354436.278751]  ww_mutex_lock+0x34/0x50
[354436.278764]  drm_modeset_lock+0x35/0xb0 [drm]
[354436.278772]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
[354436.278779]  drm_modeset_lock_all+0x5e/0xb0 [drm]
[354436.278781]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
[354436.278783]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
[354436.278785]  process_one_work+0x20f/0x410
[354436.278786]  worker_thread+0x34/0x400
[354436.278787]  kthread+0x120/0x140
[354436.278788]  ? process_one_work+0x410/0x410
[354436.278789]  ? __kthread_parkme+0x70/0x70
[354436.278790]  ret_from_fork+0x35/0x40
[354557.088600] INFO: task Xorg:920 blocked for more than 604 seconds.
[354557.089689]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354557.090759] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354557.092075] Xorg            D    0   920    854 0x00404004
[354557.092077] Call Trace:
[354557.092083]  __schedule+0x2ba/0x650
[354557.092085]  schedule+0x2d/0x90
[354557.092086]  schedule_preempt_disabled+0xe/0x10
[354557.092087]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354557.092089]  __ww_mutex_lock_slowpath+0x16/0x20
[354557.092089]  ww_mutex_lock+0x34/0x50
[354557.092095]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
[354557.092098]  qxl_release_reserve_list+0x67/0x150 [qxl]
[354557.092100]  ? qxl_bo_pin+0xaa/0x190 [qxl]
[354557.092102]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
[354557.092110]  drm_atomic_helper_commit_planes+0xb9/0x220 [drm_kms_helper]
[354557.092114]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
[354557.092117]  commit_tail+0x67/0x70 [drm_kms_helper]
[354557.092121]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
[354557.092133]  drm_atomic_commit+0x4a/0x50 [drm]
[354557.092137]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
[354557.092145]  __setplane_atomic+0xd3/0x120 [drm]
[354557.092154]  drm_mode_cursor_universal+0x142/0x270 [drm]
[354557.092162]  drm_mode_cursor_common+0xcb/0x220 [drm]
[354557.092170]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354557.092179]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[354557.092185]  drm_ioctl_kernel+0xb0/0x100 [drm]
[354557.092187]  ? ___sys_recvmsg+0x16c/0x200
[354557.092193]  drm_ioctl+0x233/0x410 [drm]
[354557.092201]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[354557.092203]  ? timerqueue_add+0x57/0x90
[354557.092205]  ? enqueue_hrtimer+0x3c/0x90
[354557.092207]  do_vfs_ioctl+0xa9/0x640
[354557.092208]  ? fput+0x13/0x20
[354557.092209]  ? __sys_recvmsg+0x88/0xa0
[354557.092210]  ksys_ioctl+0x67/0x90
[354557.092212]  __x64_sys_ioctl+0x1a/0x20
[354557.092213]  do_syscall_64+0x5a/0x140
[354557.092215]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[354557.092216] RIP: 0033:0x7ffad14d3417
[354557.092220] Code: Bad RIP value.
[354557.092221] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[354557.092222] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
00007ffad14d3417
[354557.092223] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
000000000000000e
[354557.092223] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
0000000000000010
[354557.092223] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[354557.092224] R13: 000000000000000e R14: 0000000000000000 R15:
000056428a4721d0
[354557.092259] INFO: task kworker/1:0:27625 blocked for more than 604
seconds.
[354557.093464]       Not tainted 5.2.0-050200rc1-generic #201905191930
[354557.094520] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[354557.095834] kworker/1:0     D    0 27625      2 0x80004000
[354557.095838] Workqueue: events qxl_client_monitors_config_work_func [qxl]
[354557.095839] Call Trace:
[354557.095841]  __schedule+0x2ba/0x650
[354557.095843]  schedule+0x2d/0x90
[354557.095844]  schedule_preempt_disabled+0xe/0x10
[354557.095845]  __ww_mutex_lock.isra.11+0x3e0/0x750
[354557.095846]  ? __switch_to_asm+0x34/0x70
[354557.095847]  ? __switch_to_asm+0x40/0x70
[354557.095848]  ? __switch_to_asm+0x40/0x70
[354557.095849]  __ww_mutex_lock_slowpath+0x16/0x20
[354557.095850]  ww_mutex_lock+0x34/0x50
[354557.095858]  drm_modeset_lock+0x35/0xb0 [drm]
[354557.095866]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
[354557.095874]  drm_modeset_lock_all+0x5e/0xb0 [drm]
[354557.095876]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
[354557.095878]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
[354557.095880]  process_one_work+0x20f/0x410
[354557.095881]  worker_thread+0x34/0x400
[354557.095882]  kthread+0x120/0x140
[354557.095883]  ? process_one_work+0x410/0x410
[354557.095884]  ? __kthread_parkme+0x70/0x70
[354557.095885]  ret_from_fork+0x35/0x40

Please contact me if more information is needed.


Best regards,
Jaak Ristioja

Re: Xorg indefinitely hangs in kernelspace

[Gerd Hoffmann]

On Tue, Aug 06, 2019 at 09:00:10PM +0300, Jaak Ristioja wrote:
> Hello!
> 
> I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
> I originally filed the issue on LaunchPad and more details can be found
> there, although I doubt whether these details are useful.

Any change with kernel 5.3-rc7 ?

cheers,
  Gerd

Re: Xorg indefinitely hangs in kernelspace

[Jaak Ristioja]

On 05.09.19 10:14, Gerd Hoffmann wrote:
> On Tue, Aug 06, 2019 at 09:00:10PM +0300, Jaak Ristioja wrote:
>> Hello!
>>
>> I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
>> I originally filed the issue on LaunchPad and more details can be found
>> there, although I doubt whether these details are useful.
> 
> Any change with kernel 5.3-rc7 ?

Didn't try. Did you change something? I could try, but I've done so
before and every time this bug manifests itself with MAJOR.MINOR-rc# I
get asked to try version MAJOR.(MINOR+1)-rc# so I guess I could as well
give up?

Alright, I'll install 5.3-rc7, but once more it might take some time for
this bug to expose itself.

One thing to note though, is that this occurred much more often with
older kernels (or older versions of the Kubuntu desktop/Firefox in my
VM), sometimes even several times in an hour of use.


Best regards,
J

Re: Xorg indefinitely hangs in kernelspace

[Jaak Ristioja]

On 05.09.19 15:34, Jaak Ristioja wrote:
> On 05.09.19 10:14, Gerd Hoffmann wrote:
>> On Tue, Aug 06, 2019 at 09:00:10PM +0300, Jaak Ristioja wrote:
>>> Hello!
>>>
>>> I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
>>> I originally filed the issue on LaunchPad and more details can be found
>>> there, although I doubt whether these details are useful.
>>
>> Any change with kernel 5.3-rc7 ?
> 
> Didn't try. Did you change something? I could try, but I've done so
> before and every time this bug manifests itself with MAJOR.MINOR-rc# I
> get asked to try version MAJOR.(MINOR+1)-rc# so I guess I could as well
> give up?
> 
> Alright, I'll install 5.3-rc7, but once more it might take some time for
> this bug to expose itself.

Just got the issue with 5.3.0-050300rc7-generic:

[124212.547403] INFO: task Xorg:797 blocked for more than 120 seconds.
[124212.548639]       Not tainted 5.3.0-050300rc7-generic #201909021831
[124212.549839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[124212.547403] INFO: task Xorg:797 blocked for more than 120 seconds.
[124212.548639]       Not tainted 5.3.0-050300rc7-generic #201909021831
[124212.549839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[124212.551329] Xorg            D    0   797    773 0x00404004
[124212.551331] Call Trace:
[124212.551336]  __schedule+0x2b9/0x6c0
[124212.551337]  schedule+0x42/0xb0
[124212.551338]  schedule_preempt_disabled+0xe/0x10
[124212.551340]  __ww_mutex_lock.isra.0+0x261/0x7f0
[124212.551345]  ? ttm_bo_init+0x6b/0x100 [ttm]
[124212.551346]  __ww_mutex_lock_slowpath+0x16/0x20
[124212.551347]  ww_mutex_lock+0x38/0x90
[124212.551352]  ttm_eu_reserve_buffers+0x1cc/0x2f0 [ttm]
[124212.551371]  qxl_release_reserve_list+0x6d/0x150 [qxl]
[124212.551373]  ? qxl_bo_pin+0xf4/0x190 [qxl]
[124212.551375]  qxl_cursor_atomic_update+0x1ab/0x2e0 [qxl]
[124212.551376]  ? qxl_bo_pin+0xf4/0x190 [qxl]
[124212.551384]  drm_atomic_helper_commit_planes+0xd5/0x220 [drm_kms_helper]
[124212.551388]  drm_atomic_helper_commit_tail+0x2c/0x70 [drm_kms_helper]
[124212.551392]  commit_tail+0x68/0x70 [drm_kms_helper]
[124212.551395]  drm_atomic_helper_commit+0x118/0x120 [drm_kms_helper]
[124212.551407]  drm_atomic_commit+0x4a/0x50 [drm]
[124212.551411]  drm_atomic_helper_update_plane+0xea/0x100 [drm_kms_helper]
[124212.551418]  __setplane_atomic+0xcb/0x110 [drm]
[124212.551428]  drm_mode_cursor_universal+0x140/0x260 [drm]
[124212.551435]  drm_mode_cursor_common+0xcc/0x220 [drm]
[124212.551441]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[124212.551447]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[124212.551452]  drm_ioctl_kernel+0xae/0xf0 [drm]
[124212.551458]  drm_ioctl+0x234/0x3d0 [drm]
[124212.551464]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[124212.551466]  ? timerqueue_add+0x5f/0xa0
[124212.551469]  ? enqueue_hrtimer+0x3d/0x90
[124212.551471]  do_vfs_ioctl+0x407/0x670
[124212.551473]  ? fput+0x13/0x20
[124212.551475]  ? __sys_recvmsg+0x88/0xa0
[124212.551476]  ksys_ioctl+0x67/0x90
[124212.551477]  __x64_sys_ioctl+0x1a/0x20
[124212.551479]  do_syscall_64+0x5a/0x130
[124212.551480]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[124212.551481] RIP: 0033:0x7f07c79ee417
[124212.551485] Code: Bad RIP value.
[124212.551485] RSP: 002b:00007ffc6b1de1a8 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[124212.551486] RAX: ffffffffffffffda RBX: 00005612f109a610 RCX:
00007f07c79ee417
[124212.551487] RDX: 00007ffc6b1de1e0 RSI: 00000000c02464bb RDI:
000000000000000e
[124212.551487] RBP: 00007ffc6b1de1e0 R08: 0000000000000040 R09:
0000000000000004
[124212.551488] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[124212.551488] R13: 000000000000000e R14: 0000000000000000 R15:
00005612f10981d0
[124333.376328] INFO: task Xorg:797 blocked for more than 241 seconds.
[124333.377474]       Not tainted 5.3.0-050300rc7-generic #201909021831
[124333.378609] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[124333.376328] INFO: task Xorg:797 blocked for more than 241 seconds.
[124333.377474]       Not tainted 5.3.0-050300rc7-generic #201909021831
[124333.378609] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
disables this message.
[124333.380060] Xorg            D    0   797    773 0x00404004
[124333.380062] Call Trace:
[124333.380067]  __schedule+0x2b9/0x6c0
[124333.380068]  schedule+0x42/0xb0
[124333.380069]  schedule_preempt_disabled+0xe/0x10
[124333.380070]  __ww_mutex_lock.isra.0+0x261/0x7f0
[124333.380076]  ? ttm_bo_init+0x6b/0x100 [ttm]
[124333.380077]  __ww_mutex_lock_slowpath+0x16/0x20
[124333.380077]  ww_mutex_lock+0x38/0x90
[124333.380080]  ttm_eu_reserve_buffers+0x1cc/0x2f0 [ttm]
[124333.380083]  qxl_release_reserve_list+0x6d/0x150 [qxl]
[124333.380085]  ? qxl_bo_pin+0xf4/0x190 [qxl]
[124333.380087]  qxl_cursor_atomic_update+0x1ab/0x2e0 [qxl]
[124333.380088]  ? qxl_bo_pin+0xf4/0x190 [qxl]
[124333.380096]  drm_atomic_helper_commit_planes+0xd5/0x220 [drm_kms_helper]
[124333.380101]  drm_atomic_helper_commit_tail+0x2c/0x70 [drm_kms_helper]
[124333.380105]  commit_tail+0x68/0x70 [drm_kms_helper]
[124333.380109]  drm_atomic_helper_commit+0x118/0x120 [drm_kms_helper]
[124333.380128]  drm_atomic_commit+0x4a/0x50 [drm]
[124333.380132]  drm_atomic_helper_update_plane+0xea/0x100 [drm_kms_helper]
[124333.380140]  __setplane_atomic+0xcb/0x110 [drm]
[124333.380147]  drm_mode_cursor_universal+0x140/0x260 [drm]
[124333.380153]  drm_mode_cursor_common+0xcc/0x220 [drm]
[124333.380160]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[124333.380166]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
[124333.380171]  drm_ioctl_kernel+0xae/0xf0 [drm]
[124333.380176]  drm_ioctl+0x234/0x3d0 [drm]
[124333.380182]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
[124333.380184]  ? timerqueue_add+0x5f/0xa0
[124333.380186]  ? enqueue_hrtimer+0x3d/0x90
[124333.380188]  do_vfs_ioctl+0x407/0x670
[124333.380190]  ? fput+0x13/0x20
[124333.380192]  ? __sys_recvmsg+0x88/0xa0
[124333.380193]  ksys_ioctl+0x67/0x90
[124333.380194]  __x64_sys_ioctl+0x1a/0x20
[124333.380195]  do_syscall_64+0x5a/0x130
[124333.380197]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[124333.380198] RIP: 0033:0x7f07c79ee417
[124333.380202] Code: Bad RIP value.
[124333.380203] RSP: 002b:00007ffc6b1de1a8 EFLAGS: 00003246 ORIG_RAX:
0000000000000010
[124333.380204] RAX: ffffffffffffffda RBX: 00005612f109a610 RCX:
00007f07c79ee417
[124333.380204] RDX: 00007ffc6b1de1e0 RSI: 00000000c02464bb RDI:
000000000000000e
[124333.380205] RBP: 00007ffc6b1de1e0 R08: 0000000000000040 R09:
0000000000000004
[124333.380205] R10: 000000000000003f R11: 0000000000003246 R12:
00000000c02464bb
[124333.380206] R13: 000000000000000e R14: 0000000000000000 R15:
00005612f10981d0


Best regards,
J

Re: [Spice-devel] Xorg indefinitely hangs in kernelspace

[Frediano Ziglio]

> 
> On 05.09.19 15:34, Jaak Ristioja wrote:
> > On 05.09.19 10:14, Gerd Hoffmann wrote:
> >> On Tue, Aug 06, 2019 at 09:00:10PM +0300, Jaak Ristioja wrote:
> >>> Hello!
> >>>
> >>> I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
> >>> I originally filed the issue on LaunchPad and more details can be found
> >>> there, although I doubt whether these details are useful.
> >>
> >> Any change with kernel 5.3-rc7 ?
> > 
> > Didn't try. Did you change something? I could try, but I've done so
> > before and every time this bug manifests itself with MAJOR.MINOR-rc# I
> > get asked to try version MAJOR.(MINOR+1)-rc# so I guess I could as well
> > give up?
> > 
> > Alright, I'll install 5.3-rc7, but once more it might take some time for
> > this bug to expose itself.
> 
> Just got the issue with 5.3.0-050300rc7-generic:
> 
> [124212.547403] INFO: task Xorg:797 blocked for more than 120 seconds.
> [124212.548639]       Not tainted 5.3.0-050300rc7-generic #201909021831
> [124212.549839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> disables this message.
> [124212.547403] INFO: task Xorg:797 blocked for more than 120 seconds.
> [124212.548639]       Not tainted 5.3.0-050300rc7-generic #201909021831
> [124212.549839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> disables this message.
> [124212.551329] Xorg            D    0   797    773 0x00404004
> [124212.551331] Call Trace:
> [124212.551336]  __schedule+0x2b9/0x6c0
> [124212.551337]  schedule+0x42/0xb0
> [124212.551338]  schedule_preempt_disabled+0xe/0x10
> [124212.551340]  __ww_mutex_lock.isra.0+0x261/0x7f0
> [124212.551345]  ? ttm_bo_init+0x6b/0x100 [ttm]
> [124212.551346]  __ww_mutex_lock_slowpath+0x16/0x20
> [124212.551347]  ww_mutex_lock+0x38/0x90
> [124212.551352]  ttm_eu_reserve_buffers+0x1cc/0x2f0 [ttm]
> [124212.551371]  qxl_release_reserve_list+0x6d/0x150 [qxl]
> [124212.551373]  ? qxl_bo_pin+0xf4/0x190 [qxl]
> [124212.551375]  qxl_cursor_atomic_update+0x1ab/0x2e0 [qxl]
> [124212.551376]  ? qxl_bo_pin+0xf4/0x190 [qxl]
> [124212.551384]  drm_atomic_helper_commit_planes+0xd5/0x220 [drm_kms_helper]
> [124212.551388]  drm_atomic_helper_commit_tail+0x2c/0x70 [drm_kms_helper]
> [124212.551392]  commit_tail+0x68/0x70 [drm_kms_helper]
> [124212.551395]  drm_atomic_helper_commit+0x118/0x120 [drm_kms_helper]
> [124212.551407]  drm_atomic_commit+0x4a/0x50 [drm]
> [124212.551411]  drm_atomic_helper_update_plane+0xea/0x100 [drm_kms_helper]
> [124212.551418]  __setplane_atomic+0xcb/0x110 [drm]
> [124212.551428]  drm_mode_cursor_universal+0x140/0x260 [drm]
> [124212.551435]  drm_mode_cursor_common+0xcc/0x220 [drm]
> [124212.551441]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> [124212.551447]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
> [124212.551452]  drm_ioctl_kernel+0xae/0xf0 [drm]
> [124212.551458]  drm_ioctl+0x234/0x3d0 [drm]
> [124212.551464]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> [124212.551466]  ? timerqueue_add+0x5f/0xa0
> [124212.551469]  ? enqueue_hrtimer+0x3d/0x90
> [124212.551471]  do_vfs_ioctl+0x407/0x670
> [124212.551473]  ? fput+0x13/0x20
> [124212.551475]  ? __sys_recvmsg+0x88/0xa0
> [124212.551476]  ksys_ioctl+0x67/0x90
> [124212.551477]  __x64_sys_ioctl+0x1a/0x20
> [124212.551479]  do_syscall_64+0x5a/0x130
> [124212.551480]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [124212.551481] RIP: 0033:0x7f07c79ee417
> [124212.551485] Code: Bad RIP value.
> [124212.551485] RSP: 002b:00007ffc6b1de1a8 EFLAGS: 00003246 ORIG_RAX:
> 0000000000000010
> [124212.551486] RAX: ffffffffffffffda RBX: 00005612f109a610 RCX:
> 00007f07c79ee417
> [124212.551487] RDX: 00007ffc6b1de1e0 RSI: 00000000c02464bb RDI:
> 000000000000000e
> [124212.551487] RBP: 00007ffc6b1de1e0 R08: 0000000000000040 R09:
> 0000000000000004
> [124212.551488] R10: 000000000000003f R11: 0000000000003246 R12:
> 00000000c02464bb
> [124212.551488] R13: 000000000000000e R14: 0000000000000000 R15:
> 00005612f10981d0
> [124333.376328] INFO: task Xorg:797 blocked for more than 241 seconds.
> [124333.377474]       Not tainted 5.3.0-050300rc7-generic #201909021831
> [124333.378609] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> disables this message.
> [124333.376328] INFO: task Xorg:797 blocked for more than 241 seconds.
> [124333.377474]       Not tainted 5.3.0-050300rc7-generic #201909021831
> [124333.378609] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> disables this message.
> [124333.380060] Xorg            D    0   797    773 0x00404004
> [124333.380062] Call Trace:
> [124333.380067]  __schedule+0x2b9/0x6c0
> [124333.380068]  schedule+0x42/0xb0
> [124333.380069]  schedule_preempt_disabled+0xe/0x10
> [124333.380070]  __ww_mutex_lock.isra.0+0x261/0x7f0
> [124333.380076]  ? ttm_bo_init+0x6b/0x100 [ttm]
> [124333.380077]  __ww_mutex_lock_slowpath+0x16/0x20
> [124333.380077]  ww_mutex_lock+0x38/0x90
> [124333.380080]  ttm_eu_reserve_buffers+0x1cc/0x2f0 [ttm]
> [124333.380083]  qxl_release_reserve_list+0x6d/0x150 [qxl]
> [124333.380085]  ? qxl_bo_pin+0xf4/0x190 [qxl]
> [124333.380087]  qxl_cursor_atomic_update+0x1ab/0x2e0 [qxl]
> [124333.380088]  ? qxl_bo_pin+0xf4/0x190 [qxl]
> [124333.380096]  drm_atomic_helper_commit_planes+0xd5/0x220 [drm_kms_helper]
> [124333.380101]  drm_atomic_helper_commit_tail+0x2c/0x70 [drm_kms_helper]
> [124333.380105]  commit_tail+0x68/0x70 [drm_kms_helper]
> [124333.380109]  drm_atomic_helper_commit+0x118/0x120 [drm_kms_helper]
> [124333.380128]  drm_atomic_commit+0x4a/0x50 [drm]
> [124333.380132]  drm_atomic_helper_update_plane+0xea/0x100 [drm_kms_helper]
> [124333.380140]  __setplane_atomic+0xcb/0x110 [drm]
> [124333.380147]  drm_mode_cursor_universal+0x140/0x260 [drm]
> [124333.380153]  drm_mode_cursor_common+0xcc/0x220 [drm]
> [124333.380160]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> [124333.380166]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
> [124333.380171]  drm_ioctl_kernel+0xae/0xf0 [drm]
> [124333.380176]  drm_ioctl+0x234/0x3d0 [drm]
> [124333.380182]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> [124333.380184]  ? timerqueue_add+0x5f/0xa0
> [124333.380186]  ? enqueue_hrtimer+0x3d/0x90
> [124333.380188]  do_vfs_ioctl+0x407/0x670
> [124333.380190]  ? fput+0x13/0x20
> [124333.380192]  ? __sys_recvmsg+0x88/0xa0
> [124333.380193]  ksys_ioctl+0x67/0x90
> [124333.380194]  __x64_sys_ioctl+0x1a/0x20
> [124333.380195]  do_syscall_64+0x5a/0x130
> [124333.380197]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [124333.380198] RIP: 0033:0x7f07c79ee417
> [124333.380202] Code: Bad RIP value.
> [124333.380203] RSP: 002b:00007ffc6b1de1a8 EFLAGS: 00003246 ORIG_RAX:
> 0000000000000010
> [124333.380204] RAX: ffffffffffffffda RBX: 00005612f109a610 RCX:
> 00007f07c79ee417
> [124333.380204] RDX: 00007ffc6b1de1e0 RSI: 00000000c02464bb RDI:
> 000000000000000e
> [124333.380205] RBP: 00007ffc6b1de1e0 R08: 0000000000000040 R09:
> 0000000000000004
> [124333.380205] R10: 000000000000003f R11: 0000000000003246 R12:
> 00000000c02464bb
> [124333.380206] R13: 000000000000000e R14: 0000000000000000 R15:
> 00005612f10981d0
> 
> 
> Best regards,
> J

Hi Jaak,
  Why didn't you update bug at https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1813620?
I know it can seem tedious but would help tracking it.
It seems you are having this issue since quite some time and with
multiple kernel versions.
Are you still using Kubuntu? Maybe it happens more with KDE.
From the Kernel log looks like a dead lock.

Frediano

Re: [Spice-devel] Xorg indefinitely hangs in kernelspace

[Jaak Ristioja]

On 30.09.19 16:29, Frediano Ziglio wrote:
>   Why didn't you update bug at https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1813620?
> I know it can seem tedious but would help tracking it.

I suppose the lack on centralized tracking and handling of Linux kernel
bugs is a delicate topic, so I don't want to rant much more on that.
Updating that bug would tedious and time-consuming indeed, which is why
I haven't done that. To be honest, I don't have enough time and motivation.

I would have posted a link to the upstream (kernel) bug tracker for
this, but being confined I only posted a link to my original e-mail on
the virtualization list Pipermail archive. Can you please provide a
better URL to a reasonably browsable index of this whole e-mail thread
in some web-based mailing list archive? Perhaps posting that to
Launchpad would suffice.


> It seems you are having this issue since quite some time and with
> multiple kernel versions.
> Are you still using Kubuntu? Maybe it happens more with KDE.
> From the Kernel log looks like a dead lock.

Yes, I'm using Kubuntu 19.04.


Best regards,
Jaak Ristioja

Re: [Spice-devel] Xorg indefinitely hangs in kernelspace

[Frediano Ziglio]

> 
> On Tue, 6 Aug 2019 21:00:10 +0300 From:   Jaak Ristioja <jaak@ristioja.ee>
> > Hello!
> > 
> > I'm writing to report a crash in the QXL / DRM code in the Linux kernel.
> > I originally filed the issue on LaunchPad and more details can be found
> > there, although I doubt whether these details are useful.
> > 
> >   https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1813620
> > 
> > I first experienced these issues with:
> > 
> > * Ubuntu 18.04 (probably kernel 4.15.something)
> > * Ubuntu 18.10 (kernel 4.18.0-13)
> > * Ubuntu 19.04 (kernel 5.0.0-13-generic)
> > * Ubuntu 19.04 (mainline kernel 5.1-rc7)
> > * Ubuntu 19.04 (mainline kernel 5.2.0-050200rc1-generic)
> > 
> > Here is the crash output from dmesg:
> > 
> > [354073.713350] INFO: task Xorg:920 blocked for more than 120 seconds.
> > [354073.717755]       Not tainted 5.2.0-050200rc1-generic #201905191930
> > [354073.722277] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> > disables this message.
> > [354073.738332] Xorg            D    0   920    854 0x00404004
> > [354073.738334] Call Trace:
> > [354073.738340]  __schedule+0x2ba/0x650
> > [354073.738342]  schedule+0x2d/0x90
> > [354073.738343]  schedule_preempt_disabled+0xe/0x10
> > [354073.738345]  __ww_mutex_lock.isra.11+0x3e0/0x750
> > [354073.738346]  __ww_mutex_lock_slowpath+0x16/0x20
> > [354073.738347]  ww_mutex_lock+0x34/0x50
> > [354073.738352]  ttm_eu_reserve_buffers+0x1f9/0x2e0 [ttm]
> > [354073.738356]  qxl_release_reserve_list+0x67/0x150 [qxl]
> > [354073.738358]  ? qxl_bo_pin+0xaa/0x190 [qxl]
> > [354073.738359]  qxl_cursor_atomic_update+0x1b0/0x2e0 [qxl]
> > [354073.738367]  drm_atomic_helper_commit_planes+0xb9/0x220
> > [drm_kms_helper]
> > [354073.738371]  drm_atomic_helper_commit_tail+0x2b/0x70 [drm_kms_helper]
> > [354073.738374]  commit_tail+0x67/0x70 [drm_kms_helper]
> > [354073.738378]  drm_atomic_helper_commit+0x113/0x120 [drm_kms_helper]
> > [354073.738390]  drm_atomic_commit+0x4a/0x50 [drm]
> > [354073.738394]  drm_atomic_helper_update_plane+0xe9/0x100 [drm_kms_helper]
> > [354073.738402]  __setplane_atomic+0xd3/0x120 [drm]
> > [354073.738410]  drm_mode_cursor_universal+0x142/0x270 [drm]
> > [354073.738418]  drm_mode_cursor_common+0xcb/0x220 [drm]
> > [354073.738425]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> > [354073.738432]  drm_mode_cursor2_ioctl+0xe/0x10 [drm]
> > [354073.738438]  drm_ioctl_kernel+0xb0/0x100 [drm]
> > [354073.738440]  ? ___sys_recvmsg+0x16c/0x200
> > [354073.738445]  drm_ioctl+0x233/0x410 [drm]
> > [354073.738452]  ? drm_mode_cursor_ioctl+0x60/0x60 [drm]
> > [354073.738454]  ? timerqueue_add+0x57/0x90
> > [354073.738456]  ? enqueue_hrtimer+0x3c/0x90
> > [354073.738458]  do_vfs_ioctl+0xa9/0x640
> > [354073.738459]  ? fput+0x13/0x20
> > [354073.738461]  ? __sys_recvmsg+0x88/0xa0
> > [354073.738462]  ksys_ioctl+0x67/0x90
> > [354073.738463]  __x64_sys_ioctl+0x1a/0x20
> > [354073.738465]  do_syscall_64+0x5a/0x140
> > [354073.738467]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> > [354073.738468] RIP: 0033:0x7ffad14d3417
> > [354073.738472] Code: Bad RIP value.
> > [354073.738472] RSP: 002b:00007ffdd5679978 EFLAGS: 00003246 ORIG_RAX:
> > 0000000000000010
> > [354073.738473] RAX: ffffffffffffffda RBX: 000056428a474610 RCX:
> > 00007ffad14d3417
> > [354073.738474] RDX: 00007ffdd56799b0 RSI: 00000000c02464bb RDI:
> > 000000000000000e
> > [354073.738474] RBP: 00007ffdd56799b0 R08: 0000000000000040 R09:
> > 0000000000000010
> > [354073.738475] R10: 000000000000003f R11: 0000000000003246 R12:
> > 00000000c02464bb
> > [354073.738475] R13: 000000000000000e R14: 0000000000000000 R15:
> > 000056428a4721d0
> > [354073.738511] INFO: task kworker/1:0:27625 blocked for more than 120
> > seconds.
> > [354073.745154]       Not tainted 5.2.0-050200rc1-generic #201905191930
> > [354073.751900] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs"
> > disables this message.
> > [354073.762197] kworker/1:0     D    0 27625      2 0x80004000
> > [354073.762205] Workqueue: events qxl_client_monitors_config_work_func
> > [qxl]
> > [354073.762206] Call Trace:
> > [354073.762211]  __schedule+0x2ba/0x650
> > [354073.762214]  schedule+0x2d/0x90
> > [354073.762215]  schedule_preempt_disabled+0xe/0x10
> > [354073.762216]  __ww_mutex_lock.isra.11+0x3e0/0x750
> > [354073.762217]  ? __switch_to_asm+0x34/0x70
> > [354073.762218]  ? __switch_to_asm+0x40/0x70
> > [354073.762219]  ? __switch_to_asm+0x40/0x70
> > [354073.762220]  __ww_mutex_lock_slowpath+0x16/0x20
> > [354073.762221]  ww_mutex_lock+0x34/0x50
> > [354073.762235]  drm_modeset_lock+0x35/0xb0 [drm]
> > [354073.762243]  drm_modeset_lock_all_ctx+0x5d/0xe0 [drm]
> > [354073.762251]  drm_modeset_lock_all+0x5e/0xb0 [drm]
> > [354073.762252]  qxl_display_read_client_monitors_config+0x1e1/0x370 [qxl]
> > [354073.762254]  qxl_client_monitors_config_work_func+0x15/0x20 [qxl]
> > [354073.762256]  process_one_work+0x20f/0x410
> > [354073.762257]  worker_thread+0x34/0x400
> > [354073.762259]  kthread+0x120/0x140
> > [354073.762260]  ? process_one_work+0x410/0x410
> > [354073.762261]  ? __kthread_parkme+0x70/0x70
> > [354073.762262]  ret_from_fork+0x35/0x40
> > 
> 
> --- a/drivers/gpu/drm/ttm/ttm_execbuf_util.c
> +++ b/drivers/gpu/drm/ttm/ttm_execbuf_util.c
> @@ -97,8 +97,9 @@ int ttm_eu_reserve_buffers(struct ww_acq
>  			   struct list_head *dups, bool del_lru)
>  {
>  	struct ttm_bo_global *glob;
> -	struct ttm_validate_buffer *entry;
> +	struct ttm_validate_buffer *entry, *last_entry;
>  	int ret;
> +	bool locked = false;
>  
>  	if (list_empty(list))
>  		return 0;
> @@ -112,7 +113,10 @@ int ttm_eu_reserve_buffers(struct ww_acq
>  	list_for_each_entry(entry, list, head) {
>  		struct ttm_buffer_object *bo = entry->bo;
>  
> +		last_entry = entry;
>  		ret = __ttm_bo_reserve(bo, intr, (ticket == NULL), ticket);
> +		if (!ret)
> +			locked = true;
>  		if (!ret && unlikely(atomic_read(&bo->cpu_writers) > 0)) {
>  			reservation_object_unlock(bo->resv);
>  
> @@ -151,6 +155,10 @@ int ttm_eu_reserve_buffers(struct ww_acq
>  				ret = 0;
>  			}
>  		}
> +		if (!ret)
> +			locked = true;
> +		else
> +			locked = false;
>  

locked = !ret; 

?

>  		if (!ret && entry->num_shared)
>  			ret = reservation_object_reserve_shared(bo->resv,
> @@ -163,6 +171,8 @@ int ttm_eu_reserve_buffers(struct ww_acq
>  				ww_acquire_done(ticket);
>  				ww_acquire_fini(ticket);
>  			}
> +			if (locked)
> +				ttm_eu_backoff_reservation_reverse(list, entry);
>  			return ret;
>  		}
>  
> @@ -172,6 +182,8 @@ int ttm_eu_reserve_buffers(struct ww_acq
>  		list_del(&entry->head);
>  		list_add(&entry->head, list);
>  	}
> +	if (locked)
> +		ttm_eu_backoff_reservation_reverse(list, last_entry);
>  
>  	if (del_lru) {
>  		spin_lock(&glob->lru_lock);

Where does it came this patch? Is it already somewhere?
Is it supposed to fix this issue?
Does it affect some other card beside QXL?

Frediano