NetBSD Problem Report #58133

From rhialto@falu.nl  Tue Apr  9 18:36:36 2024
Return-Path: <rhialto@falu.nl>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id A6B8E1A9239
	for <gnats-bugs@gnats.NetBSD.org>; Tue,  9 Apr 2024 18:36:36 +0000 (UTC)
Message-Id: <ZhWKq3hIpdAjFZ0H@falu.nl>
Date: Tue, 9 Apr 2024 20:36:27 +0200
From: Rhialto <rhialto@falu.nl>
Reply-To: Rhialto <rhialto@falu.nl>
To: gnats-bugs@NetBSD.org
Cc: Rhialto <rhialto@falu.nl>
Subject: X server crashes; radeon 5450; modesetting
X-Send-Pr-Version: 3.95

>Number:         58133
>Category:       xsrc
>Synopsis:       X server crashes; radeon 5450; modesetting
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    xsrc-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Apr 09 18:40:00 +0000 2024
>Last-Modified:  Mon Apr 29 18:40:01 +0000 2024
>Originator:     Rhialto
>Release:        NetBSD 10.0
>Organization:
>Environment:
System: NetBSD murthe.falu.nl 10.0 NetBSD 10.0 (GENERIC) #0: Thu Mar 28 08:33:33 UTC 2024 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
Architecture: x86_64
Machine: amd64
>Description:

Using 10.0/amd64 and native X, and with packages that were compiled for
9.2 and pkgsrc-2023Q4, I got a crash of the X server, and xdm restarted
it successfully.

The crash seemed to be triggered by something that Firefox did. My graphics
card is a Radeon 5450, which always was pretty much the best-suported
hardware. (The exact number doesn't seem to be logged any more)

Here is a stack trace (full-ish log appended later):

[108332.584] (EE) 
[108332.584] (EE) Backtrace:
[108332.695] (EE) 0: /usr/X11R7/bin/X (xorg_backtrace+0x44) [0x1af3b2575]
[108332.695] (EE) 1: /usr/X11R7/bin/X (os_move_fd+0x79) [0x1af3ae315]
[108332.695] (EE) 2: /usr/lib/libc.so.12 (__sigtramp_siginfo_2+0x0) [0x7b307517ee80]
[108332.695] (EE) 3: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0x248) [0x7b306e213595]
[108332.695] (EE) 4: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0xadb) [0x7b306e213e28]
[108332.695] (EE) 5: /usr/X11R7/lib/modules/libglamoregl.so (glamor_image_text8+0x30) [0x7b306e213fa9]
[108332.695] (EE) 6: /usr/X11R7/bin/X (DamageRegionAppend+0x1064) [0x1af35fbbe]
[108332.695] (EE) 7: /usr/X11R7/bin/X (DeliverRawEvent+0x1cf2) [0x1af27e6b5]
[108332.695] (EE) 8: /usr/X11R7/bin/X (ImageText+0x3a) [0x1af27f8df]
[108332.695] (EE) 9: /usr/X11R7/bin/X (ProcImageText8+0xe2) [0x1af28395b]
[108332.695] (EE) 10: /usr/X11R7/bin/X (Dispatch+0x264) [0x1af285c2e]
[108332.695] (EE) 11: /usr/X11R7/bin/X (dix_main+0x36f) [0x1af255e1f]
[108332.695] (EE) 
[108332.695] (EE) Segmentation fault at address 0x7b3070f7e000
[108332.695] (EE) 
Fatal server error:
[108332.695] (EE) Caught signal 11 (Segmentation fault). Server aborting

This seems to be in text-drawing code. Here I use the modesetting
driver, but before that I tried the radeon driver, and with that,
Firefox seemed to have font troubles too (but it didn't result in an
immediate crash; first there was missing text on the screen which got
worse, and after a short time X froze completely). So there may be some
driver-independent problem here which expresses differently with radeon
vs modesetting drivers.

And on NetBSD 9.3 I got occasional messages like these:

Mar 10 22:22:03 murthe /netbsd: [ 4261546.2226100] radeon0: autoconfiguration error: warn: evergreen_cs_track_validate_texture:888 texture bo too small (layer size 9830400, offset 0, max layer 1, depth 1, bo size 9338880) (1920 1280)
Mar 10 22:22:03 murthe /netbsd: [ 4261546.2226100] kern error: [drm:(../../../../external/bsd/drm2/dist/drm/radeon/radeon_cs.c:467)radeon_cs_ib_chunk] *ERROR* Invalid command stream !

Maybe the same issue still exists but is not checked for with the
modesetting driver?

Some source context from the stack frames in libglamoregl:

(gdb) list *(glamor_download_pixmap+0x248)
0x13595 is in glamor_text (/usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:173).
/*
 * Construct quads for the provided list of characters and draw them
 */

static int
glamor_text(DrawablePtr drawable, GCPtr gc,
            glamor_font_t *glamor_font,
            glamor_program *prog,
            int x, int y,
            int count, char *s_chars, CharInfoPtr *charinfo,
            Bool sixteen)
{
...
168     
169                 tx = (col - firstCol) * glyph_spacing_x;
170                 /* adjust for second row layout */
171                 tx += second_row * glamor_font->row_width * 8;
172     
173                 v[ 0] = x1;
174                 v[ 1] = y1;
175                 v[ 2] = width;
176                 v[ 3] = height;
177                 v[ 4] = tx;

Line 173 looks like a plausible place for a segfault. My copy of this
file has not been modified since 2016.

0x13e28 is in glamor_image_text (/usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:470).
465             goto bail;
466     
467         (void) glamor_text(drawable, gc, glamor_font, prog,
468                            x, y, count, chars, charinfo, sixteen);
469     
470         return TRUE;
471     
472     bail:
473         return FALSE;
474     }

(gdb) list *(glamor_image_text8+0x30)
0x13fa9 is in glamor_image_text8 (/usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:480).
475     
476     void
477     glamor_image_text8(DrawablePtr drawable, GCPtr gc,
478                        int x, int y, int count, char *chars)
479     {
480         if (!glamor_image_text(drawable, gc, x, y, count, chars, FALSE))
481             miImageText8(drawable, gc, x, y, count, chars);
482     }

/var/log/Xorg.0.log.old:

[    24.179] 
X.Org X Server 1.21.1.9
X Protocol Version 11, Revision 0
[    24.179] Current Operating System: NetBSD murthe.falu.nl 10.0 NetBSD 10.0 (GENERIC) #0: Thu Mar 28 08:33:33 UTC 2024  mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
[    24.179]  
[    24.179] Current version of pixman: 0.38.4
[    24.179] 	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
[    24.179] Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[    24.179] (==) Log file: "/var/log/Xorg.0.log", Time: Sun Apr  7 16:23:57 2024
[    24.245] (==) Using config file: "/etc/X11/xorg.conf"
[    24.273] (==) ServerLayout "X.org Configured"
[    24.273] (**) |-->Screen "Screen0" (0)
[    24.273] (**) |   |-->Monitor "Monitor0"
[    24.273] (**) |   |-->Device "Card0"
[    24.274] (**) |-->Input Device "Mouse0"
[    24.274] (**) |-->Input Device "Keyboard0"
[    24.274] (**) Option "DontZap" "false"
[    24.274] (**) Option "DontZoom" "false"
[    24.274] (**) Option "DisableVidModeExtension" "false"
[    24.274] (==) Automatically adding devices
[    24.274] (==) Automatically enabling devices
[    24.274] (==) Not automatically adding GPU devices
[    24.274] (==) Automatically binding GPU devices
[    24.302] (==) Max clients allowed: 256, resource mask: 0x1fffff
[    24.344] (WW) The directory "/usr/pkg/lib/X11/fonts/TTF" does not exist.
[    24.344] 	Entry deleted from font path.
[    24.371] (WW) The directory "/usr/pkg/lib/X11/fonts/misc/" does not exist.
[    24.371] 	Entry deleted from font path.
[    24.371] (WW) The directory "/usr/pkg/lib/X11/fonts/Type1/" does not exist.
[    24.371] 	Entry deleted from font path.
[    24.371] (WW) The directory "/usr/pkg/lib/X11/fonts/75dpi/" does not exist.
[    24.371] 	Entry deleted from font path.
[    24.371] (WW) The directory "/usr/pkg/lib/X11/fonts/100dpi/" does not exist.
[    24.371] 	Entry deleted from font path.
[    24.417] (WW) The directory "/usr/pkg/share/fonts/X11/Type1/" does not exist.
[    24.417] 	Entry deleted from font path.
[    24.417] (WW) The directory "/usr/pkg/share/fonts/X11/75dpi/" does not exist.
[    24.417] 	Entry deleted from font path.
[    24.417] (WW) The directory "/usr/pkg/share/fonts/X11/100dpi/" does not exist.
[    24.417] 	Entry deleted from font path.
[    24.417] (**) FontPath set to:
	/usr/X11R7/lib/X11/fonts/misc/,
	/usr/X11R7/lib/X11/fonts/TTF/,
	/usr/X11R7/lib/X11/fonts/Type1/,
	/usr/X11R7/lib/X11/fonts/75dpi/,
	/usr/X11R7/lib/X11/fonts/100dpi/,
	/usr/local/X11/fonts/TrueType/beos,
	/usr/local/X11/fonts/TrueType/enabled,
	/usr/pkg/share/fonts/X11/misc,
	/usr/pkg/share/fonts/X11/TTF,
	/usr/X11R7/lib/X11/fonts/misc/,
	/usr/X11R7/lib/X11/fonts/TTF/,
	/usr/X11R7/lib/X11/fonts/Type1/,
	/usr/X11R7/lib/X11/fonts/75dpi/,
	/usr/X11R7/lib/X11/fonts/100dpi/,
	/usr/pkg/share/fonts/X11/misc/,
	/usr/pkg/share/fonts/X11/TTF/
[    24.417] (**) ModulePath set to "/usr/X11R7/lib/modules"
[    24.418] (WW) Hotplugging is on, devices using drivers 'kbd', 'mouse' or 'vmmouse' will be disabled.
[    24.418] (WW) Disabling Mouse0
[    24.418] (WW) Disabling Keyboard0
[    24.418] (II) Loader magic: 0x1af6687a0
[    24.418] (II) Module ABI versions:
[    24.418] 	X.Org ANSI C Emulation: 0.4
[    24.418] 	X.Org Video Driver: 25.2
[    24.418] 	X.Org XInput driver : 24.4
[    24.418] 	X.Org Server Extension : 10.0
[    24.440] (--) PCI:*(1@1:0:0) 1002:68f9:1002:010a rev 0, Mem @ 0x90000000/268435456, 0xa0220000/131072, I/O @ 0x00003000/256, BIOS @ 0x????????/131072
[    24.440] (II) "glx" will be loaded. This was enabled by default and also specified in the config file.
[    24.440] (II) LoadModule: "dbe"
[    24.440] (II) Module "dbe" already built-in
[    24.440] (II) LoadModule: "dri"
[    24.440] (II) Module "dri" already built-in
[    24.440] (II) LoadModule: "extmod"
[    24.440] (II) Module "extmod" already built-in
[    24.440] (II) LoadModule: "glx"
[    24.468] (II) Loading /usr/X11R7/lib/modules/extensions/libglx.so
[    24.529] (II) Module glx: vendor="X.Org Foundation"
[    24.529] 	compiled for 1.21.1.9, module version = 1.0.0
[    24.529] 	ABI class: X.Org Server Extension, version 10.0
[    24.529] (II) LoadModule: "record"
[    24.529] (II) Module "record" already built-in
[    24.529] (II) LoadModule: "shadow"
[    24.529] (II) Loading /usr/X11R7/lib/modules/extensions/libshadow.so
[    24.530] (II) Module shadow: vendor="X.Org Foundation"
[    24.530] 	compiled for 1.21.1.9, module version = 1.1.0
[    24.530] 	ABI class: X.Org ANSI C Emulation, version 0.4
[    24.530] (II) LoadModule: "dri2"
[    24.530] (II) Module "dri2" already built-in
[    24.530] (II) LoadModule: "modesetting"
[    24.530] (II) Loading /usr/X11R7/lib/modules/drivers/modesetting_drv.so
[    24.533] (II) Module modesetting: vendor="X.Org Foundation"
[    24.533] 	compiled for 1.21.1.9, module version = 1.21.1
[    24.533] 	Module class: X.Org Video Driver
[    24.533] 	ABI class: X.Org Video Driver, version 25.2
[    24.533] (II) modesetting: Driver for Modesetting Kernel Drivers: kms
[    24.534] (--) Using wscons driver on /dev/ttyE4 in pcvt compatibility mode (version 3.32)
[    24.534] (--) using VT number 5
[    24.542] (**) modeset(0): claimed PCI slot 1@1:0:0
[    24.542] (II) modeset(0): using default device
[    24.542] (WW) VGA arbiter: cannot open kernel arbiter, no multi-card support
[    24.542] (==) modeset(0): Depth 24, (==) framebuffer bpp 32
[    24.542] (==) modeset(0): RGB weight 888
[    24.542] (==) modeset(0): Default visual is TrueColor
[    24.542] (II) Loading sub module "glamoregl"
[    24.542] (II) LoadModule: "glamoregl"
[    24.543] (II) Loading /usr/X11R7/lib/modules/libglamoregl.so
[    24.571] (II) Module glamoregl: vendor="X.Org Foundation"
[    24.571] 	compiled for 1.21.1.9, module version = 1.0.1
[    24.571] 	ABI class: X.Org ANSI C Emulation, version 0.4
[    27.871] (II) modeset(0): glamor X acceleration enabled on AMD CEDAR (DRM 2.50.0 / 10.0, LLVM 13.0.0)
[    27.871] (II) modeset(0): glamor initialized
[    27.871] (==) modeset(0): VariableRefresh: disabled
[    27.871] (==) modeset(0): AsyncFlipSecondaries: disabled
[    27.880] (II) modeset(0): Output HDMI-1 using monitor section Monitor0
[    27.903] (II) modeset(0): Output DVI-I-1 has no monitor section
[    27.908] (II) modeset(0): Output VGA-1 has no monitor section
[    27.943] (II) modeset(0): EDID for output HDMI-1
[    27.965] (II) modeset(0): EDID for output DVI-I-1
[    27.965] (II) modeset(0): Manufacturer: ACI  Model: 24d1  Serial#: 16843009
[    27.965] (II) modeset(0): Year: 2014  Week: 44
[    27.965] (II) modeset(0): EDID Version: 1.3
[    27.965] (II) modeset(0): Digital Display Input
[    27.965] (II) modeset(0): Max Image Size [cm]: horiz.: 52  vert.: 32
[    27.965] (II) modeset(0): Gamma: 2.20
[    27.965] (II) modeset(0): DPMS capabilities: StandBy Suspend Off
[    27.965] (II) modeset(0): Supported color encodings: RGB 4:4:4 YCrCb 4:4:4 
[    27.965] (II) modeset(0): First detailed timing is preferred mode
[    27.965] (II) modeset(0): redX: 0.653 redY: 0.332   greenX: 0.304 greenY: 0.633
[    27.965] (II) modeset(0): blueX: 0.150 blueY: 0.064   whiteX: 0.313 whiteY: 0.329
[    27.965] (II) modeset(0): Supported established timings:
[    27.965] (II) modeset(0): 640x480@60Hz
[    27.965] (II) modeset(0): 800x600@56Hz
[    27.965] (II) modeset(0): 800x600@60Hz
[    27.965] (II) modeset(0): 1024x768@60Hz
[    27.965] (II) modeset(0): Manufacturer's mask: 0
[    27.965] (II) modeset(0): Supported standard timings:
[    27.965] (II) modeset(0): #0: hsize: 1280  vsize 1024  refresh: 60  vid: 32897
[    27.965] (II) modeset(0): #1: hsize: 1280  vsize 960  refresh: 60  vid: 16513
[    27.965] (II) modeset(0): #2: hsize: 1440  vsize 900  refresh: 60  vid: 149
[    27.965] (II) modeset(0): #3: hsize: 1600  vsize 1200  refresh: 60  vid: 16553
[    27.965] (II) modeset(0): #4: hsize: 1680  vsize 1050  refresh: 60  vid: 179
[    27.965] (II) modeset(0): #5: hsize: 1920  vsize 1080  refresh: 60  vid: 49361
[    27.965] (II) modeset(0): Supported detailed timing:
[    27.965] (II) modeset(0): clock: 154.0 MHz   Image Size:  518 x 324 mm
[    27.965] (II) modeset(0): h_active: 1920  h_sync: 1968  h_sync_end 2000 h_blank_end 2080 h_border: 0
[    27.965] (II) modeset(0): v_active: 1200  v_sync: 1203  v_sync_end 1209 v_blanking: 1235 v_border: 0
[    27.965] (II) modeset(0): Ranges: V min: 50 V max: 61 Hz, H min: 30 H max: 83 kHz, PixClock max 175 MHz
[    27.965] (II) modeset(0): Monitor name: VS24A
[    27.966] (II) modeset(0): Serial No: EALMQS141527
[    27.966] (II) modeset(0): EDID (in hex):
[    27.966] (II) modeset(0): 	00ffffffffffff000469d12401010101
[    27.966] (II) modeset(0): 	2c18010380342078ea4ca5a7554da226
[    27.966] (II) modeset(0): 	105054230800818081409500a940b300
[    27.966] (II) modeset(0): 	d1c001010101283c80a070b023403020
[    27.966] (II) modeset(0): 	360006442100001a000000fd00323d1e
[    27.966] (II) modeset(0): 	5311000a202020202020000000fc0056
[    27.966] (II) modeset(0): 	533234410a20202020202020000000ff
[    27.966] (II) modeset(0): 	0045414c4d51533134313532370a00b9
[    27.966] (II) modeset(0): Not using default mode "1440x810" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Not using default mode "1600x900" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Not using default mode "1600x900" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Not using default mode "1920x1080" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Not using default mode "1920x1080" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Not using default mode "1920x1200" (bad mode clock/interlace/doublescan)
[    27.966] (II) modeset(0): Printing probed modes for output DVI-I-1
[    27.966] (II) modeset(0): Modeline "1920x1200"x60.0  154.00  1920 1968 2000 2080  1200 1203 1209 1235 +hsync -vsync (74.0 kHz UeP)
[    27.966] (II) modeset(0): Modeline "1920x1080"x60.0  173.00  1920 2048 2248 2576  1080 1083 1088 1120 -hsync +vsync (67.2 kHz d)
[    27.966] (II) modeset(0): Modeline "1920x1080"x60.0  148.50  1920 2008 2052 2200  1080 1084 1089 1125 -hsync -vsync (67.5 kHz e)
[    27.966] (II) modeset(0): Modeline "1920x1080"x59.9  138.50  1920 1968 2000 2080  1080 1083 1088 1111 +hsync -vsync (66.6 kHz d)
[    27.966] (II) modeset(0): Modeline "1600x1200"x60.0  162.00  1600 1664 1856 2160  1200 1201 1204 1250 +hsync +vsync (75.0 kHz e)
[    27.966] (II) modeset(0): Modeline "1680x1050"x60.0  146.25  1680 1784 1960 2240  1050 1053 1059 1089 -hsync +vsync (65.3 kHz d)
[    27.966] (II) modeset(0): Modeline "1680x1050"x59.9  119.00  1680 1728 1760 1840  1050 1053 1059 1080 +hsync -vsync (64.7 kHz e)
[    27.966] (II) modeset(0): Modeline "1400x1050"x60.0  122.00  1400 1488 1640 1880  1050 1052 1064 1082 +hsync +vsync (64.9 kHz d)
[    27.966] (II) modeset(0): Modeline "1600x900"x59.9  118.25  1600 1696 1856 2112  900 903 908 934 -hsync +vsync (56.0 kHz d)
[    27.966] (II) modeset(0): Modeline "1600x900"x59.8   97.50  1600 1648 1680 1760  900 903 908 926 +hsync -vsync (55.4 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x1024"x60.0  108.00  1280 1328 1440 1688  1024 1025 1028 1066 +hsync +vsync (64.0 kHz e)
[    27.966] (II) modeset(0): Modeline "1440x900"x59.9   88.75  1440 1488 1520 1600  900 903 909 926 +hsync -vsync (55.5 kHz e)
[    27.966] (II) modeset(0): Modeline "1400x900"x60.0  103.50  1400 1480 1624 1848  900 903 913 934 -hsync +vsync (56.0 kHz d)
[    27.966] (II) modeset(0): Modeline "1400x900"x59.9   86.50  1400 1448 1480 1560  900 903 913 926 +hsync -vsync (55.4 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x960"x60.0  108.00  1280 1376 1488 1800  960 961 964 1000 +hsync +vsync (60.0 kHz e)
[    27.966] (II) modeset(0): Modeline "1440x810"x60.0  151.88  1440 1464 1480 1520  810 811 814 833 doublescan +hsync -vsync (99.9 kHz d)
[    27.966] (II) modeset(0): Modeline "1368x768"x59.9   85.25  1368 1440 1576 1784  768 771 781 798 -hsync +vsync (47.8 kHz d)
[    27.966] (II) modeset(0): Modeline "1368x768"x59.9   72.25  1368 1416 1448 1528  768 771 781 790 +hsync -vsync (47.3 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x800"x60.0  174.25  1280 1380 1516 1752  800 801 804 829 doublescan -hsync +vsync (99.5 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x800"x60.0  134.25  1280 1304 1320 1360  800 801 804 823 doublescan +hsync -vsync (98.7 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x800"x59.8   83.50  1280 1352 1480 1680  800 803 809 831 -hsync +vsync (49.7 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x800"x59.9   71.00  1280 1328 1360 1440  800 803 809 823 +hsync -vsync (49.3 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x720"x60.0  156.12  1280 1376 1512 1744  720 721 724 746 doublescan -hsync +vsync (89.5 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x720"x60.0  120.75  1280 1304 1320 1360  720 721 724 740 doublescan +hsync -vsync (88.8 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x720"x59.9   74.50  1280 1344 1472 1664  720 723 728 748 -hsync +vsync (44.8 kHz d)
[    27.966] (II) modeset(0): Modeline "1280x720"x59.7   63.75  1280 1328 1360 1440  720 723 728 741 +hsync -vsync (44.3 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x768"x60.0  133.47  1024 1100 1212 1400  768 768 770 794 doublescan -hsync +vsync (95.3 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x768"x60.0   65.00  1024 1048 1184 1344  768 771 777 806 -hsync -vsync (48.4 kHz e)
[    27.966] (II) modeset(0): Modeline "960x720"x60.0  117.00  960 1024 1128 1300  720 720 722 750 doublescan -hsync +vsync (90.0 kHz d)
[    27.966] (II) modeset(0): Modeline "928x696"x60.1  109.15  928 976 1088 1264  696 696 698 719 doublescan -hsync +vsync (86.4 kHz d)
[    27.966] (II) modeset(0): Modeline "896x672"x60.0  102.40  896 960 1060 1224  672 672 674 697 doublescan -hsync +vsync (83.7 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x576"x60.0   98.50  1024 1092 1200 1376  576 577 580 597 doublescan -hsync +vsync (71.6 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x576"x60.0   78.38  1024 1048 1064 1104  576 577 580 592 doublescan +hsync -vsync (71.0 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x576"x59.9   46.50  1024 1064 1160 1296  576 579 584 599 -hsync +vsync (35.9 kHz d)
[    27.966] (II) modeset(0): Modeline "1024x576"x59.8   42.00  1024 1072 1104 1184  576 579 584 593 +hsync -vsync (35.5 kHz d)
[    27.966] (II) modeset(0): Modeline "960x600"x59.9   96.62  960 1028 1128 1296  600 601 604 622 doublescan -hsync +vsync (74.6 kHz d)
[    27.966] (II) modeset(0): Modeline "960x600"x60.0   77.00  960 984 1000 1040  600 601 604 617 doublescan +hsync -vsync (74.0 kHz d)
[    27.966] (II) modeset(0): Modeline "960x540"x60.0   86.50  960 1024 1124 1288  540 541 544 560 doublescan -hsync +vsync (67.2 kHz d)
[    27.966] (II) modeset(0): Modeline "960x540"x60.0   69.25  960 984 1000 1040  540 541 544 555 doublescan +hsync -vsync (66.6 kHz d)
[    27.966] (II) modeset(0): Modeline "960x540"x59.6   40.75  960 992 1088 1216  540 543 548 562 -hsync +vsync (33.5 kHz d)
[    27.966] (II) modeset(0): Modeline "960x540"x59.8   37.25  960 1008 1040 1120  540 543 548 556 +hsync -vsync (33.3 kHz d)
[    27.966] (II) modeset(0): Modeline "800x600"x60.0   81.00  800 832 928 1080  600 600 602 625 doublescan +hsync +vsync (75.0 kHz d)
[    27.966] (II) modeset(0): Modeline "800x600"x60.3   40.00  800 840 968 1056  600 601 605 628 +hsync +vsync (37.9 kHz e)
[    27.966] (II) modeset(0): Modeline "800x600"x56.2   36.00  800 824 896 1024  600 601 603 625 +hsync +vsync (35.2 kHz e)
[    27.966] (II) modeset(0): Modeline "840x525"x60.0   73.12  840 892 980 1120  525 526 529 544 doublescan -hsync +vsync (65.3 kHz d)
[    27.966] (II) modeset(0): Modeline "840x525"x59.9   59.50  840 864 880 920  525 526 529 540 doublescan +hsync -vsync (64.7 kHz d)
[    27.966] (II) modeset(0): Modeline "864x486"x59.9   32.50  864 888 968 1072  486 489 494 506 -hsync +vsync (30.3 kHz d)
[    27.966] (II) modeset(0): Modeline "864x486"x59.6   30.50  864 912 944 1024  486 489 494 500 +hsync -vsync (29.8 kHz d)
[    27.966] (II) modeset(0): Modeline "700x525"x60.0   61.00  700 744 820 940  525 526 532 541 doublescan +hsync +vsync (64.9 kHz d)
[    27.966] (II) modeset(0): Modeline "800x450"x59.9   59.12  800 848 928 1056  450 451 454 467 doublescan -hsync +vsync (56.0 kHz d)
[    27.966] (II) modeset(0): Modeline "800x450"x59.8   48.75  800 824 840 880  450 451 454 463 doublescan +hsync -vsync (55.4 kHz d)
[    27.966] (II) modeset(0): Modeline "640x512"x60.0   54.00  640 664 720 844  512 512 514 533 doublescan +hsync +vsync (64.0 kHz d)
[    27.966] (II) modeset(0): Modeline "700x450"x60.0   51.75  700 740 812 924  450 451 456 467 doublescan -hsync +vsync (56.0 kHz d)
[    27.966] (II) modeset(0): Modeline "700x450"x59.9   43.25  700 724 740 780  450 451 456 463 doublescan +hsync -vsync (55.4 kHz d)
[    27.966] (II) modeset(0): Modeline "640x480"x60.0   54.00  640 688 744 900  480 480 482 500 doublescan +hsync +vsync (60.0 kHz d)
[    27.966] (II) modeset(0): Modeline "640x480"x59.9   25.18  640 656 752 800  480 490 492 525 -hsync -vsync (31.5 kHz e)
[    27.966] (II) modeset(0): Modeline "720x405"x59.5   22.50  720 744 808 896  405 408 413 422 -hsync +vsync (25.1 kHz d)
[    27.966] (II) modeset(0): Modeline "720x405"x59.0   21.75  720 768 800 880  405 408 413 419 +hsync -vsync (24.7 kHz d)
[    27.966] (II) modeset(0): Modeline "684x384"x59.9   42.62  684 720 788 892  384 385 390 399 doublescan -hsync +vsync (47.8 kHz d)
[    27.966] (II) modeset(0): Modeline "684x384"x59.9   36.12  684 708 724 764  384 385 390 395 doublescan +hsync -vsync (47.3 kHz d)
[    27.966] (II) modeset(0): Modeline "640x400"x59.9   41.75  640 676 740 840  400 401 404 415 doublescan -hsync +vsync (49.7 kHz d)
[    27.966] (II) modeset(0): Modeline "640x400"x60.0   35.50  640 664 680 720  400 401 404 411 doublescan +hsync -vsync (49.3 kHz d)
[    27.966] (II) modeset(0): Modeline "640x360"x59.9   37.25  640 672 736 832  360 361 364 374 doublescan -hsync +vsync (44.8 kHz d)
[    27.966] (II) modeset(0): Modeline "640x360"x59.8   31.88  640 664 680 720  360 361 364 370 doublescan +hsync -vsync (44.3 kHz d)
[    27.966] (II) modeset(0): Modeline "640x360"x59.8   18.00  640 664 720 800  360 363 368 376 -hsync +vsync (22.5 kHz d)
[    27.966] (II) modeset(0): Modeline "640x360"x59.3   17.75  640 688 720 800  360 363 368 374 +hsync -vsync (22.2 kHz d)
[    27.966] (II) modeset(0): Modeline "512x384"x60.0   32.50  512 524 592 672  384 385 388 403 doublescan -hsync -vsync (48.4 kHz d)
[    27.966] (II) modeset(0): Modeline "512x288"x60.0   23.25  512 532 580 648  288 289 292 299 doublescan -hsync +vsync (35.9 kHz d)
[    27.966] (II) modeset(0): Modeline "512x288"x59.9   21.00  512 536 552 592  288 289 292 296 doublescan +hsync -vsync (35.5 kHz d)
[    27.966] (II) modeset(0): Modeline "480x270"x59.6   20.38  480 496 544 608  270 271 274 281 doublescan -hsync +vsync (33.5 kHz d)
[    27.966] (II) modeset(0): Modeline "480x270"x59.8   18.62  480 504 520 560  270 271 274 278 doublescan +hsync -vsync (33.3 kHz d)
[    27.966] (II) modeset(0): Modeline "400x300"x60.3   20.00  400 420 484 528  300 300 302 314 doublescan +hsync +vsync (37.9 kHz d)
[    27.966] (II) modeset(0): Modeline "400x300"x56.3   18.00  400 412 448 512  300 300 301 312 doublescan +hsync +vsync (35.2 kHz d)
[    27.966] (II) modeset(0): Modeline "432x243"x59.9   16.25  432 444 484 536  243 244 247 253 doublescan -hsync +vsync (30.3 kHz d)
[    27.966] (II) modeset(0): Modeline "432x243"x59.6   15.25  432 456 472 512  243 244 247 250 doublescan +hsync -vsync (29.8 kHz d)
[    27.966] (II) modeset(0): Modeline "320x240"x60.1   12.59  320 328 376 400  240 245 246 262 doublescan -hsync -vsync (31.5 kHz d)
[    27.966] (II) modeset(0): Modeline "360x202"x59.5   11.25  360 372 404 448  202 204 206 211 doublescan -hsync +vsync (25.1 kHz d)
[    27.966] (II) modeset(0): Modeline "360x202"x59.1   10.88  360 384 400 440  202 204 206 209 doublescan +hsync -vsync (24.7 kHz d)
[    27.966] (II) modeset(0): Modeline "320x180"x59.8    9.00  320 332 360 400  180 181 184 188 doublescan -hsync +vsync (22.5 kHz d)
[    27.966] (II) modeset(0): Modeline "320x180"x59.3    8.88  320 344 360 400  180 181 184 187 doublescan +hsync -vsync (22.2 kHz d)
[    27.972] (II) modeset(0): EDID for output VGA-1
[    27.972] (II) modeset(0): Output HDMI-1 disconnected
[    27.972] (II) modeset(0): Output DVI-I-1 connected
[    27.972] (II) modeset(0): Output VGA-1 disconnected
[    27.972] (II) modeset(0): Using user preference for initial modes
[    27.972] (II) modeset(0): Output DVI-I-1 using initial mode 1920x1200 +0+0
[    27.972] (==) modeset(0): Using gamma correction (1.0, 1.0, 1.0)
[    27.972] (==) modeset(0): DPI set to (96, 96)
[    27.972] (II) Loading sub module "fb"
[    27.972] (II) LoadModule: "fb"
[    27.972] (II) Module "fb" already built-in
[    28.635] (==) modeset(0): Backing store enabled
[    28.635] (==) modeset(0): Silken mouse enabled
[    28.673] (II) modeset(0): Initializing kms color map for depth 24, 8 bpc.
[    28.697] (**) modeset(0): DPMS enabled
[    28.713] (II) modeset(0): [DRI2] Setup complete
[    28.713] (II) modeset(0): [DRI2]   DRI driver: r600
[    28.713] (II) modeset(0): [DRI2]   VDPAU driver: r600
[    28.738] (II) Initializing extension Generic Event Extension
[    28.739] (II) Initializing extension SHAPE
[    28.739] (II) Initializing extension MIT-SHM
[    28.739] (II) Initializing extension XInputExtension
[    28.744] (II) Initializing extension XTEST
[    28.744] (II) Initializing extension BIG-REQUESTS
[    28.744] (II) Initializing extension SYNC
[    28.744] (II) Initializing extension XKEYBOARD
[    28.744] (II) Initializing extension XC-MISC
[    28.744] (II) Initializing extension SECURITY
[    28.745] (II) Initializing extension XFIXES
[    28.745] (II) Initializing extension XFree86-Bigfont
[    28.745] (II) Initializing extension RENDER
[    28.745] (II) Initializing extension RANDR
[    28.745] (II) Initializing extension COMPOSITE
[    28.746] (II) Initializing extension DAMAGE
[    28.746] (II) Initializing extension MIT-SCREEN-SAVER
[    28.746] (II) Initializing extension DOUBLE-BUFFER
[    28.746] (II) Initializing extension RECORD
[    28.746] (II) Initializing extension DPMS
[    28.746] (II) Initializing extension Present
[    28.747] (II) Initializing extension DRI3
[    28.747] (II) Initializing extension X-Resource
[    28.747] (II) Initializing extension XVideo
[    28.747] (II) Initializing extension XVideo-MotionCompensation
[    28.747] (II) Initializing extension GLX
[    28.749] (II) AIGLX: Loaded and initialized r600
[    28.749] (II) GLX: Initialized DRI2 GL provider for screen 0
[    28.749] (II) Initializing extension XFree86-VidModeExtension
[    28.750] (II) Initializing extension XFree86-DGA
[    28.750] (II) Initializing extension XFree86-DRI
[    28.753] (II) Initializing extension DRI2
[    28.865] (II) modeset(0): Damage tracking initialized
[    28.865] (II) modeset(0): Setting screen physical size to 508 x 317
[    30.389] (II) config/wscons: checking input device /dev/wskbd
[    30.389] (II) wskbd: ignoring "user" layout
[    30.389] (**) /dev/wskbd: Applying InputClass "system-keyboard"
[    30.389] (II) LoadModule: "kbd"
[    30.389] (II) Loading /usr/X11R7/lib/modules/drivers/kbd_drv.so
[    30.413] (II) Module kbd: vendor="X.Org Foundation"
[    30.413] 	compiled for 1.21.1.9, module version = 2.0.0
[    30.413] 	Module class: X.Org XInput Driver
[    30.413] 	ABI class: X.Org XInput driver, version 24.4
[    30.413] (II) Using input driver 'kbd' for '/dev/wskbd'
[    30.413] (**) /dev/wskbd: always reports core events
[    30.413] (**) /dev/wskbd: always reports core events
[    30.413] (**) Option "Protocol" "standard"
[    30.413] (**) Option "XkbRules" "base"
[    30.413] (**) Option "XkbModel" "pc105"
[    30.413] (**) Option "XkbLayout" "us"
[    30.413] (**) Option "XkbOptions" "ctrl:swapcaps,compose:menu,terminate:ctrl_alt_bksp"
[    30.413] (II) XINPUT: Adding extended input device "/dev/wskbd" (type: KEYBOARD, id 6)
[    30.510] (II) config/wscons: checking input device /dev/wsmouse
[    30.510] (II) LoadModule: "ws"
[    30.511] (II) Loading /usr/X11R7/lib/modules/drivers/ws_drv.so
[    30.537] (II) Module ws: vendor="X.Org Foundation"
[    30.537] 	compiled for 1.21.1.9, module version = 1.3.0
[    30.537] 	Module class: X.Org XInput Driver
[    30.537] 	ABI class: X.Org XInput driver, version 24.4
[    30.537] (II) Using input driver 'ws' for '/dev/wsmouse'
[    30.537] (**) /dev/wsmouse: always reports core events
[    30.537] (II) /dev/wsmouse: debuglevel 0
[    30.537] (**) /dev/wsmouse: ZAxisMapping: buttons 4 and 5
[    30.537] (**) /dev/wsmouse associated screen: 0
[    30.537] (**) Option "Device" "/dev/wsmouse"
[    30.537] (II) /dev/wsmouse minimum x position: 0
[    30.537] (II) /dev/wsmouse maximum x position: 1919
[    30.537] (II) /dev/wsmouse minimum y position: 0
[    30.537] (II) /dev/wsmouse maximum y position: 1199
[    30.537] (**) /dev/wsmouse: Buttons: 5
[    30.537] (II) XINPUT: Adding extended input device "/dev/wsmouse" (type: MOUSE, id 7)
[    30.537] (**) /dev/wsmouse: (accel) keeping acceleration scheme 1
[    30.537] (**) /dev/wsmouse: (accel) acceleration profile 0
[    30.537] (**) /dev/wsmouse: (accel) acceleration factor: 2.000
[    30.537] (**) /dev/wsmouse: (accel) acceleration threshold: 4
[    31.833] (II) modeset(0): Disabling kernel dirty updates, not required.
[  3013.766] (II) modeset(0): EDID vendor "ACI", prod id 9425
[  3013.772] (II) modeset(0): Using EDID range info for horizontal sync
[  3013.772] (II) modeset(0): Using EDID range info for vertical refresh
[  3013.772] (II) modeset(0): Printing DDC gathered Modelines:
[  3013.772] (II) modeset(0): Modeline "1920x1200"x0.0  154.00  1920 1968 2000 2080  1200 1203 1209 1235 +hsync -vsync (74.0 kHz eP)
[  3013.772] (II) modeset(0): Modeline "800x600"x0.0   40.00  800 840 968 1056  600 601 605 628 +hsync +vsync (37.9 kHz e)
[  3013.772] (II) modeset(0): Modeline "800x600"x0.0   36.00  800 824 896 1024  600 601 603 625 +hsync +vsync (35.2 kHz e)
[  3013.772] (II) modeset(0): Modeline "640x480"x0.0   25.18  640 656 752 800  480 490 492 525 -hsync -vsync (31.5 kHz e)
[  3013.772] (II) modeset(0): Modeline "1024x768"x0.0   65.00  1024 1048 1184 1344  768 771 777 806 -hsync -vsync (48.4 kHz e)
[  3013.772] (II) modeset(0): Modeline "1280x1024"x0.0  108.00  1280 1328 1440 1688  1024 1025 1028 1066 +hsync +vsync (64.0 kHz e)
[  3013.772] (II) modeset(0): Modeline "1280x960"x0.0  108.00  1280 1376 1488 1800  960 961 964 1000 +hsync +vsync (60.0 kHz e)
[  3013.772] (II) modeset(0): Modeline "1440x900"x0.0   88.75  1440 1488 1520 1600  900 903 909 926 +hsync -vsync (55.5 kHz e)
[  3013.772] (II) modeset(0): Modeline "1600x1200"x0.0  162.00  1600 1664 1856 2160  1200 1201 1204 1250 +hsync +vsync (75.0 kHz e)
[  3013.772] (II) modeset(0): Modeline "1680x1050"x0.0  119.00  1680 1728 1760 1840  1050 1053 1059 1080 +hsync -vsync (64.7 kHz e)
[  3013.772] (II) modeset(0): Modeline "1920x1080"x60.0  172.80  1920 2040 2248 2576  1080 1081 1084 1118 -hsync +vsync (67.1 kHz e)
[  3838.421] (II) AIGLX: Suspending AIGLX clients for VT switch
[  3860.232] (II) AIGLX: Resuming AIGLX clients after VT switch

...more copies of modelines at several times...

[108332.584] (EE) 
[108332.584] (EE) Backtrace:
[108332.695] (EE) 0: /usr/X11R7/bin/X (xorg_backtrace+0x44) [0x1af3b2575]
[108332.695] (EE) 1: /usr/X11R7/bin/X (os_move_fd+0x79) [0x1af3ae315]
[108332.695] (EE) 2: /usr/lib/libc.so.12 (__sigtramp_siginfo_2+0x0) [0x7b307517ee80]
[108332.695] (EE) 3: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0x248) [0x7b306e213595]
[108332.695] (EE) 4: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0xadb) [0x7b306e213e28]
[108332.695] (EE) 5: /usr/X11R7/lib/modules/libglamoregl.so (glamor_image_text8+0x30) [0x7b306e213fa9]
[108332.695] (EE) 6: /usr/X11R7/bin/X (DamageRegionAppend+0x1064) [0x1af35fbbe]
[108332.695] (EE) 7: /usr/X11R7/bin/X (DeliverRawEvent+0x1cf2) [0x1af27e6b5]
[108332.695] (EE) 8: /usr/X11R7/bin/X (ImageText+0x3a) [0x1af27f8df]
[108332.695] (EE) 9: /usr/X11R7/bin/X (ProcImageText8+0xe2) [0x1af28395b]
[108332.695] (EE) 10: /usr/X11R7/bin/X (Dispatch+0x264) [0x1af285c2e]
[108332.695] (EE) 11: /usr/X11R7/bin/X (dix_main+0x36f) [0x1af255e1f]
[108332.695] (EE) 
[108332.695] (EE) Segmentation fault at address 0x7b3070f7e000
[108332.695] (EE) 
Fatal server error:
[108332.695] (EE) Caught signal 11 (Segmentation fault). Server aborting
[108332.695] (EE) 
[108332.695] (EE) 
Please consult the The X.Org Foundation support 
	 at http://wiki.x.org
 for help. 
[108332.695] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[108332.695] (EE) 
[108332.715] (EE) WS: unknown command 4
[108332.715] (II) AIGLX: Suspending AIGLX clients for VT switch
[108332.836] (EE) Server terminated with error (1). Closing log file.

Extract from /var/run/dmesg.boot:

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003,
    2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013,
    2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 2023,
    2024
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 10.0 (GENERIC) #0: Thu Mar 28 08:33:33 UTC 2024
	mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC
total memory = 65453 MB
avail memory = 63309 MB

pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0: Intel Core 8G (S) Host Bridge, DRAM (rev. 0x0d)
ppb0 at pci0 dev 1 function 0: Intel Core 6G PCIe x16 (rev. 0x0d)
ppb0: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x16 @ 8.0GT/s
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled, rd/line, wr/inv ok
radeon0 at pci1 dev 0 function 0: ATI Technologies Radeon HD 5000/6000/7350/8350 Series (rev. 0x00)
...
[drm] initializing kernel modesetting (CEDAR 0x1002:0x68F9 0x1002:0x010A 0x00).
[drm] register mmio base: 0xa0220000
[drm] register mmio size: 131072
ATOM BIOS: BASS
radeon0: VRAM: 1024M 0x0000000000000000 - 0x000000003FFFFFFF (1024M used)
radeon0: GTT: 1024M 0x0000000040000000 - 0x000000007FFFFFFF
[drm] Detected VRAM RAM=400M, BAR=256M
[drm] RAM width 64bits DDR
Zone  kernel: Available graphics memory: 9007199252293626 KiB
Zone   dma32: Available graphics memory: 2097152 KiB
[drm] radeon: 1024M of VRAM memory ready
[drm] radeon: 1024M of GTT memory ready.
[drm] Loading CEDAR Microcode
[drm] Internal thermal controller with fan control
[drm] radeon: dpm initialized
[drm] GART: num cpu pages 262144, num gpu pages 262144
[drm] PCIE GART of 1024M enabled (table at 0x000000000014C000).
radeon0: WB enabled
radeon0: fence driver on ring 0 use gpu addr 0x0000000040000c00 and cpu addr 0x0xffffd5d0e86d3c00
radeon0: fence driver on ring 3 use gpu addr 0x0000000040000c0c and cpu addr 0x0xffffd5d0e86d3c0c
radeon0: fence driver on ring 5 use gpu addr 0x000000000005c418 and cpu addr 0x0xffffac90a7b4c418
[drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
[drm] Driver supports precise vblank timestamp query.
radeon0: radeon: MSI limited to 32-bit
radeon0: radeon: using MSI.
radeon0: interrupting at msi6 vec 0 (radeon0)
[drm] radeon: irq initialized.
[drm] ring test on 0 succeeded in 1 usecs
[drm] ring test on 3 succeeded in 2 usecs
[drm] ring test on 5 succeeded in 1 usecs
[drm] UVD initialized successfully.
[drm] ib test on ring 0 succeeded in 0 usecs
[drm] ib test on ring 3 succeeded in 0 usecs
[drm] ib test on ring 5 succeeded
[drm] Radeon Display Connectors
[drm] Connector 0:
[drm]   HDMI-A-1
[drm]   HPD2
[drm]   DDC: 0x6460 0x6460 0x6464 0x6464 0x6468 0x6468 0x646c 0x646c
[drm]   Encoders:
[drm]     DFP1: INTERNAL_UNIPHY1
[drm] Connector 1:
[drm]   DVI-I-1
[drm]   HPD4
[drm]   DDC: 0x6450 0x6450 0x6454 0x6454 0x6458 0x6458 0x645c 0x645c
[drm]   Encoders:
[drm]     DFP2: INTERNAL_UNIPHY
[drm] Connector 2:
[drm]   VGA-1
[drm]   DDC: 0x6430 0x6430 0x6434 0x6434 0x6438 0x6438 0x643c 0x643c
[drm]   Encoders:
[drm]     CRT1: INTERNAL_KLDSCP_DAC1
radeondrmkmsfb0 at radeon0
[drm] Initialized radeon 2.50.0 20080528 for radeon0 on minor 0
radeondrmkmsfb0: framebuffer at 0x9034d000, size 1920x1200, depth 32, stride 7680
wsdisplay0 at radeondrmkmsfb0 kbdmux 1: console (default, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0

>How-To-Repeat:
    Not known...
>Fix:
    Not known...

-Olaf.
-- 
___ Olaf 'Rhialto' Seibert                            <rhialto/at/falu.nl>
\X/ There is no AI. There is just someone else's work.           --I. Rose

>Audit-Trail:
From: matthew green <mrg@eterna23.net>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org,
    netbsd-bugs@netbsd.org
Subject: re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Wed, 10 Apr 2024 14:44:59 +1000

 > glamor_text(DrawablePtr drawable, GCPtr gc,
 >             glamor_font_t *glamor_font,
 >             glamor_program *prog,
 >             int x, int y,
 >             int count, char *s_chars, CharInfoPtr *charinfo,
 >             Bool sixteen)
 > {
 > ...
 > 168     =

 > 169                 tx =3D (col - firstCol) * glyph_spacing_x;
 > 170                 /* adjust for second row layout */
 > 171                 tx +=3D second_row * glamor_font->row_width * 8;
 > 172     =

 > 173                 v[ 0] =3D x1;
 > 174                 v[ 1] =3D y1;
 > 175                 v[ 2] =3D width;
 > 176                 v[ 3] =3D height;
 > 177                 v[ 4] =3D tx;
 >
 > Line 173 looks like a plausible place for a segfault. My copy of this
 > file has not been modified since 2016.
 >
 > 0x13e28 is in glamor_image_text (/usr/xsrc/external/mit/xorg-server/dist=
 /glamor/glamor_text.c:470).
 > 465             goto bail;
 > 466     =

 > 467         (void) glamor_text(drawable, gc, glamor_font, prog,
 > 468                            x, y, count, chars, charinfo, sixteen);
 > 469     =

 > 470         return TRUE;
 > 471     =

 > 472     bail:
 > 473         return FALSE;
 > 474     }
 >
 > (gdb) list *(glamor_image_text8+0x30)
 > 0x13fa9 is in glamor_image_text8 (/usr/xsrc/external/mit/xorg-server/dis=
 t/glamor/glamor_text.c:480).
 > 475     =

 > 476     void
 > 477     glamor_image_text8(DrawablePtr drawable, GCPtr gc,
 > 478                        int x, int y, int count, char *chars)
 > 479     {
 > 480         if (!glamor_image_text(drawable, gc, x, y, count, chars, FAL=
 SE))
 > 481             miImageText8(drawable, gc, x, y, count, chars);
 > 482     }

 this looks like a problem i've seen once or twice.  i think that the
 v array is not properly set but i've not managed to figure out what
 is going wrong.  actually, there's a clear case where it seems bad,
 in that we also have:

 122     v =3D glamor_get_vbo_space(drawable->pScreen, count * (6 * sizeof =
 (GLshort)), &vbo_offset);

 but v is not checked and used at L173 after this call, and looking
 at glamor_get_vbo_space() it seems to be able to return NULL in the
 case that radeon_buffer_object{} has a NULL 'bo' member, which is
 initialisation point.

 if you can reproduce this easily, can you patch the above to do eg:

 	if (v =3D=3D NULL)
 		return x;

 after L122?


 .mrg.

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Wed, 10 Apr 2024 19:46:03 +0200

 So far I have tried to avoid reproducing it, but I can try :)
 I will add some logging, and since the callers^2 seem to have a fallback
 path, I will propagate the error condition a bit better so that that
 path should be taken. Something like this:

 --- glamor_text.c.orig	2024-04-10 19:22:22.286045752 +0200
 +++ glamor_text.c	2024-04-10 19:21:41.815261092 +0200
 @@ -120,6 +120,12 @@
      /* Set up the vertex buffers for the font and destination */

      v = glamor_get_vbo_space(drawable->pScreen, count * (6 * sizeof (GLshort)), &vbo_offset);
 +    if (v == NULL) {
 +	LogMessage(X_ERROR,
 +		   "glamor_text: glamor_get_vbo_space failed (%d)\n",
 +		   count * (6 * sizeof (GLshort)));
 +	return -1;
 +    }

      glEnableVertexAttribArray(GLAMOR_VERTEX_POS);
      glVertexAttribDivisor(GLAMOR_VERTEX_POS, 1);
 @@ -293,10 +299,13 @@
      if (!prog)
          goto bail;

 -    x = glamor_text(drawable, gc, glamor_font, prog,
 +    int new_x = glamor_text(drawable, gc, glamor_font, prog,
                      x, y, count, chars, charinfo, sixteen);

 -    *final_pos = x;
 +    if (new_x != -1) {
 +	*final_pos = new_x;
 +	return TRUE;
 +    }

  bail:
      return FALSE;
 @@ -463,10 +472,12 @@
      if (!glamor_use_program(pixmap, gc, prog, NULL))
          goto bail;

 -    (void) glamor_text(drawable, gc, glamor_font, prog,
 +    int new_x =  glamor_text(drawable, gc, glamor_font, prog,
                         x, y, count, chars, charinfo, sixteen);

 -    return TRUE;
 +    if (new_x != -1) {
 +	return TRUE;
 +    }

  bail:
      return FALSE;

 I noticed that none of the other callers of glamor_get_vbo_space() check
 for NULL, though.

 I do have the core dump available and bzip2-compressed it is only 7.1M
 (64M uncompressed). If you want it I can send it off-gnats. Maybe you
 can examine that radeon_buffer_object that way (I haven't searched hard
 enough to find it yet).

 -Olaf.

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Sat, 13 Apr 2024 14:10:39 +0200

 I had another similar crash, while running with the above patch.
 Unfortunately I neglected to build the debug sets so the stack trace
 from gdb isn't so nice:

 [  4949.604] (EE) 
 [  4949.604] (EE) Backtrace:
 [  4949.701] (EE) 0: /usr/X11R7/bin/X (xorg_backtrace+0x44) [0x8ebb2575]
 [  4949.701] (EE) 1: /usr/X11R7/bin/X (os_move_fd+0x79) [0x8ebae315]
 [  4949.701] (EE) 2: /usr/lib/libc.so.12 (__sigtramp_siginfo_2+0x0) [0x7cc04cb7ee80]
 [  4949.701] (EE) 3: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0x250) [0x7cc045c1359d]
 [  4949.701] (EE) 4: /usr/X11R7/lib/modules/libglamoregl.so (glamor_download_pixmap+0xb17) [0x7cc045c13e64]
 [  4949.701] (EE) 5: /usr/X11R7/lib/modules/libglamoregl.so (glamor_image_text8+0x30) [0x7cc045c13fe9]
 [  4949.701] (EE) 6: /usr/X11R7/bin/X (DamageRegionAppend+0x1064) [0x8eb5fbbe]
 [  4949.701] (EE) 7: /usr/X11R7/bin/X (DeliverRawEvent+0x1cf2) [0x8ea7e6b5]
 [  4949.701] (EE) 8: /usr/X11R7/bin/X (ImageText+0x3a) [0x8ea7f8df]
 [  4949.701] (EE) 9: /usr/X11R7/bin/X (ProcImageText8+0xe2) [0x8ea8395b]
 [  4949.701] (EE) 10: /usr/X11R7/bin/X (Dispatch+0x264) [0x8ea85c2e]
 [  4949.701] (EE) 11: /usr/X11R7/bin/X (dix_main+0x36f) [0x8ea55e1f]
 [  4949.701] (EE) 
 [  4949.701] (EE) Segmentation fault at address 0x7cc04ac77000
 [  4949.701] (EE) 
 Fatal server error:
 [  4949.701] (EE) Caught signal 11 (Segmentation fault). Server aborting

 (gdb) bt
 #0  0x00007cc04cb7e74a in _lwp_kill () from /usr/lib/libc.so.12
 #1  0x00007cc04cb83f00 in abort () at /usr/src/lib/libc/stdlib/abort.c:74
 #2  0x000000008ebad704 in OsAbort ()
 #3  0x000000008eba8a1e in AbortServer ()
 #4  0x000000008eba968e in FatalError ()
 #5  0x000000008ebae382 in OsSigHandler ()
 #6  <signal handler called>
 #7  0x00007cc045c1359d in ?? () from /usr/X11R7/lib/modules/libglamoregl.so
 #8  0x00007cc045c13e64 in ?? () from /usr/X11R7/lib/modules/libglamoregl.so
 #9  0x00007cc045c13fe9 in glamor_image_text8 ()
    from /usr/X11R7/lib/modules/libglamoregl.so
 #10 0x000000008eb5fbbe in damageImageText8 (pDrawable=0x7cc04bc374c0,
     pGC=0x7cc04bc904c0, x=17, y=1170, count=80,
     chars=0x7cc04b861e24 "JavaScript warning: https://www.google.com/js/th/YDyovHw-xwWf1wKdxMBnmF3BGXV9Ywc=")
     at /usr/xsrc/external/mit/xorg-server/dist/miext/damage/damage.c:1377
 #11 0x000000008ea7e6b5 in doImageText ()
 #12 0x000000008ea7f8df in ImageText ()
 #13 0x000000008ea8395b in ProcImageText8 ()
 #14 0x000000008ea85c2e in Dispatch ()
 #15 0x000000008ea55e1f in dix_main ()
 #16 0x000000008ea559cd in ___start (cleanup=<optimized out>,
     ps_strings=0x7f7fffa81fe0) at /usr/src/lib/csu/common/crt0-common.c:350
 #17 0x00007f7fd460baf8 in ?? () from /usr/libexec/ld.elf_so
 #18 0x0000000000000005 in ?? ()
 #19 0x00007f7fffa810c0 in ?? ()
 #20 0x00007f7fffa810d1 in ?? ()
 #21 0x00007f7fffa810d4 in ?? ()
 #22 0x00007f7fffa810d9 in ?? ()
 #23 0x00007f7fffa810df in ?? ()
 #24 0x0000000000000000 in ?? ()

 Like before, the text to print looks like logging output from Firefox.
 It would be printed in the xterm from which it was started. But that was
 hidden behind the Firefox window.

 So not only isn't it Firefox trying to render text, also it's not even
 rendered to the screen (directly)...

 The crash address is nearly the same as before, so most likely it's the
 same code, but it is not guaranteed.

 So one or more of these must be true:

 - the crash is a result of a different call to glamor_get_vbo_space()
 - the v value from glamor_get_vbo_space() is not NULL but some other
   bogus value
 - the crash is even something different than we think.

 For debugging of the first core file I put back the original
 libglamoregl.so.0 (the rebuilt one confused gdb). So this is the
 crash in the previous mail:

 (gdb) up
 #7  glamor_text (drawable=drawable@entry=0x7b3072eddc80,
     gc=gc@entry=0x7b3072ed8780, glamor_font=glamor_font@entry=0x7b3077113320,
     prog=prog@entry=0x7b3079c72268, x=24, x@entry=17, y=y@entry=1170,
     count=count@entry=80,
     s_chars=s_chars@entry=0x7b3076cbbea4 "JavaScript error: https://xkcd.com/2916/client/727.js, line 2: Error: recursive >\001\a", charinfo=0x7f7fffd78888,
     charinfo@entry=0x7f7fffd78880, sixteen=sixteen@entry=0)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:173
 173                 v[ 0] = x1;
 (gdb) info locals
 y1 = 1159
 tx = 592
 x1 = 17
 width = 7
 height = 13
 ty = <optimized out>
 row = <optimized out>
 col = <optimized out>
 second_row = <optimized out>
 chars = 0x7b3076cbbea4 "JavaScript error: https://xkcd.com/2916/client/727.js, line 2: Error: recursive >\001\a"
 font = 0x7b30785b3500
 off_x = 2043093608
 off_y = 31536
 c = 0
 nglyph = 0
 v = 0x7b3070f7e000
 vbo_offset = 0x0
 ci = 0x7b307710c808
 firstRow = 0
 firstCol = 0
 glyph_spacing_x = 8
 glyph_spacing_y = 13
 box_index = <optimized out>
 pixmap = <optimized out>
 pixmap_priv = 0x7b307a02f6d0
 (gdb) print v
 $1 = (GLshort *) 0x7b3070f7e000
 (gdb) print *v
 $2 = 0
 (gdb) print count
 $4 = 80
 (gdb) print charinfo[-1]
 $9 = (CharInfoPtr) 0x7b307710c808
 (gdb) print charinfo[0]
 $10 = (CharInfoPtr) 0x7b307710ca30

 All these values look sensible and gdb doesn's say that *v isn't
 accessible... but yet the segfault occurs in the very first access to
 this space (c == 0, nglyph == 0), and v == 0x7b3070f7e000, the reported
 address of the segfault.

 (gdb) info frame
 Stack level 7, frame at 0x7f7fffd78810:
  rip = 0x7b306e213595 in glamor_text
     (/usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:173); 
     saved rip = 0x7b306e213e28
  called by frame at 0x7f7fffd790c0, caller of frame at 0x7f7fffd783b0
  source language c.
  Arglist at 0x7f7fffd78800, args: drawable=drawable@entry=0x7b3072eddc80, 
     gc=gc@entry=0x7b3072ed8780, glamor_font=glamor_font@entry=0x7b3077113320, 
     prog=prog@entry=0x7b3079c72268, x=24, x@entry=17, y=y@entry=1170, 
     count=count@entry=80, 
     s_chars=s_chars@entry=0x7b3076cbbea4 "JavaScript error: https://xkcd.com/2916/client/727.js, line 2: Error: recursive >\001\a", charinfo=0x7f7fffd78888, 
     charinfo@entry=0x7f7fffd78880, sixteen=sixteen@entry=0
  Locals at 0x7f7fffd78800, Previous frame's sp is 0x7f7fffd78810
  Saved registers:
   rbx at 0x7f7fffd787d8, rbp at 0x7f7fffd78800, r12 at 0x7f7fffd787e0,
   r13 at 0x7f7fffd787e8, r14 at 0x7f7fffd787f0, r15 at 0x7f7fffd787f8,
   rip at 0x7f7fffd78808

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Sat, 13 Apr 2024 16:29:31 +0200

 Another crash. Same place. This time I was in an XTerm and I typed some
 command that produced lots of textual output.

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Sat, 13 Apr 2024 16:34:53 +0200

 Another crash. Different place, but similar source:

 (gdb) bt
 #0  0x000078d7a8f7e74a in _lwp_kill () from /usr/lib/libc.so.12
 #1  0x000078d7a8f83f00 in abort () at /usr/src/lib/libc/stdlib/abort.c:74
 #2  0x00000000c4bad704 in OsAbort ()
 #3  0x00000000c4ba8a1e in AbortServer ()
 #4  0x00000000c4ba968e in FatalError ()
 #5  0x00000000c4bae382 in OsSigHandler ()
 #6  <signal handler called>
 #7  0x000078d7a20216ab in glamor_composite_glyphs (op=3 '\003', 
     src=0x78d7abac0380, dst=0x78d7ab364700, glyph_format=<optimized out>, 
     x_src=0, y_src=<optimized out>, nlist=<optimized out>, 
     list=0x7f7ffff141c0, glyphs=0x7f7ffff145b8)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_composite_glyphs.c:457
 #8  0x00000000c4b5f4b4 in damageGlyphs (op=<optimized out>, 
     pSrc=0x78d7abac0380, pDst=0x78d7ab364700, maskFormat=0x78d7adba6890, 
     xSrc=<optimized out>, ySrc=<optimized out>, nlist=1, list=0x7f7ffff141b0, 
     glyphs=0x7f7ffff145b0)
     at /usr/xsrc/external/mit/xorg-server/dist/miext/damage/damage.c:579
 #9  0x00000000c4b42b25 in ProcRenderCompositeGlyphs ()
 #10 0x00000000c4a85c2e in Dispatch ()
 #11 0x00000000c4a55e1f in dix_main ()
 #12 0x00000000c4a559cd in ___start (cleanup=<optimized out>, 
     ps_strings=0x7f7ffff15fe0) at /usr/src/lib/csu/common/crt0-common.c:350
 #13 0x00007f7e43a0baf8 in ?? () from /usr/libexec/ld.elf_so
 #14 0x0000000000000005 in ?? ()
 #15 0x00007f7ffff15480 in ?? ()
 #16 0x00007f7ffff15491 in ?? ()
 #17 0x00007f7ffff15494 in ?? ()
 #18 0x00007f7ffff15499 in ?? ()
 #19 0x00007f7ffff1549f in ?? ()
 #20 0x0000000000000000 in ?? ()

 (gdb) up
 #7  0x000078d7a20216ab in glamor_composite_glyphs (op=3 '\003', 
     src=0x78d7abac0380, dst=0x78d7ab364700, glyph_format=<optimized out>,
     x_src=0, y_src=<optimized out>, nlist=<optimized out>,
     list=0x7f7ffff141c0, glyphs=0x7f7ffff145b8)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_composite_glyphs.c:457
 457                             v[0] = x - glyph->info.x;
 (gdb) list
 452                         /* Add the glyph
 453                          */
 454
 455                         glyphs_queued++;
 456                         if (_X_LIKELY(glamor_glsl_has_ints(glamor_priv))) {
 457                             v[0] = x - glyph->info.x;
 458                             v[1] = y - glyph->info.y;
 459                             v[2] = glyph_draw->width;
 460                             v[3] = glyph_draw->height;
 461                             v[4] = glyph_priv->x;

 This is getting tiring... if this keeps going I will need to consider
 downgrading to 9.3.

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Sun, 14 Apr 2024 21:24:06 +0200

 I noticed that in the cases where I could check, vbo_offset == 0.
 That means that the flow through glamor_get_vbo_space() must have gone
 like so:

 glamor_get_vbo_space(ScreenPtr screen, unsigned size, char **vbo_offset)
 {
     glamor_screen_private *glamor_priv = glamor_get_screen_private(screen);
     void *data;

     glamor_make_current(glamor_priv);

     glBindBuffer(GL_ARRAY_BUFFER, glamor_priv->vbo);

     if (glamor_priv->has_buffer_storage) {	// YES
       if (glamor_priv->vbo_size < glamor_priv->vbo_offset + size) {
            if (glamor_priv->vbo_size)
                 glUnmapBuffer(GL_ARRAY_BUFFER);

             if (size > glamor_priv->vbo_size) { // NO
 		// allocate a bigger buffer,
 		// glamor_priv->vbo_size = MAX(GLAMOR_VBO_SIZE, size);
             }

             glamor_priv->vbo_offset = 0;
             glamor_priv->vb = glMapBufferRange(GL_ARRAY_BUFFER,
                                                0, glamor_priv->vbo_size,
                                                GL_MAP_WRITE_BIT |
                                                GL_MAP_INVALIDATE_BUFFER_BIT |
                                                GL_MAP_PERSISTENT_BIT |
                                                GL_MAP_COHERENT_BIT);
         }
         *vbo_offset = (void *)(uintptr_t)glamor_priv->vbo_offset;
         data = glamor_priv->vb + glamor_priv->vbo_offset;
         glamor_priv->vbo_offset += size;
     } else // IRRELEVANT
     return data;
 }

 This is consistent with the case where the crash was in
 glamor_composite_glyphs(), where `glamor_screen_private *glamor_priv` is
 available, and I could check for has_buffer_storage etc.

 I couldn't help wondering if glMapBufferRange() (documented at
 https://registry.khronos.org/OpenGL-Refpages/gl4/html/glMapBufferRange.xhtml
 I think) might perhaps work (slightly) async, so that by the time
 `*data` is written to, the mapping is not yet complete. gdb had no
 trouble to read v[0] in the core dump.

 Also I wonder why GL_MAP_READ_BIT is not included. I only see writing to
 the buffer, but who trusts the compiler not to read from it...

 I also wonder why the unmapping and remapping of the buffer isn't moved
 into the inner condition (the one which is false for our case, where a
 bigger buffer is allocated). That ought to be more efficient.

 It is unlikely that this is the first time through
 glamor_get_vbo_space(); many characters have been printed before.

 In case it matters, in most of my xterms I use bitmap fonts,
 lucidasanstypewriter-12, which is as far as I can tell indeed a 7x13
 font (width and height as seen in `info locals` before).

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Sat, 27 Apr 2024 18:50:25 +0200

 I had some more crashes with irregular intervals. Two of them didn't
 leave a core dump; /var/log/messages listed errno 27 (EFBIG).
 The 4 core dumps I have are available for debugging.

 I tried running with a locally modified version of libdrm_radeon.so.0.0
 with logging added to bo_map() and some nearby functions in
 xsrc/external/mit/libdrm/dist/radeon/radeon_bo_gem.c (printf to stderr)
 but I don't see the expected output anywhere. I'm not sure if I'm not
 looking in the right place, the output is getting lost, or X simply
 never gets there (in which case I don't understand why).

From: Rhialto <rhialto@falu.nl>
To: gnats-bugs@netbsd.org
Cc: xsrc-manager@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
	Rhialto <rhialto@falu.nl>
Subject: Re: xsrc/58133: X server crashes; radeon 5450; modesetting
Date: Mon, 29 Apr 2024 20:35:19 +0200

 I tried to gain more insights by attaching gdb to the X server process,
 and setting breakpoints on some key functions, such as
 glamor_get_vbo_space and glamor_text. However they never triggered.

 On further inspection, the breakpoints were marked as <PENDING> and
 therefore not functional:

 (gdb) info break
 Num     Type           Disp Enb Address            What
 1       breakpoint     keep y   <PENDING>          glamor_get_vbo_space
 2       breakpoint     keep y   <PENDING>          glamor_text
 3       breakpoint     keep y   <MULTIPLE>
 3.1                         y   <PENDING>          mmap
 3.2                         y   <PENDING>          mmap
 4       breakpoint     keep y   <MULTIPLE>
 4.1                         y   <PENDING>          poll
 4.2                         y   <PENDING>          poll
 (gdb) break InputThreadDoWork
 Breakpoint 5 at 0xdcbb0722
 (gdb) c
 Continuing.
 Warning:
 Cannot insert breakpoint 5.
 Cannot access memory at address 0xdcbb0722

 Command aborted.

 and trying to set breakpoints at some functions even failed earlier.

 With hardware breakpoints I had slightly more success, but in the end it
 was of no use:

 (gdb) hbreak glamor_text
 Hardware assisted breakpoint 6 at 0x6fb07d41339e: file /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c, line 97.
 (gdb) c
 Continuing.
 [Switching to LWP 28256 of process 28256]

 Thread 4 "" hit Breakpoint 6, glamor_text (
     drawable=drawable@entry=0x6fb0824c98c0, gc=gc@entry=0x6fb082103ac0,
     glamor_font=glamor_font@entry=0x6fb086e3bfb0,
     prog=prog@entry=0x6fb088f24268, x=x@entry=17, y=y@entry=377,
     count=count@entry=6,
     s_chars=s_chars@entry=0x6fb086f52940 "        L\006\006",
     charinfo=charinfo@entry=0x7f7fffd18400, sixteen=sixteen@entry=0)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:97
 97      {
 (gdb) bt
 #0  glamor_text (drawable=drawable@entry=0x6fb0824c98c0,
     gc=gc@entry=0x6fb082103ac0, glamor_font=glamor_font@entry=0x6fb086e3bfb0,
     prog=prog@entry=0x6fb088f24268, x=x@entry=17, y=y@entry=377,
     count=count@entry=6,
     s_chars=s_chars@entry=0x6fb086f52940 "        L\006\006",
     charinfo=charinfo@entry=0x7f7fffd18400, sixteen=sixteen@entry=0)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:97
 #1  0x00006fb07d413e28 in glamor_image_text (
     drawable=drawable@entry=0x6fb0824c98c0, gc=gc@entry=0x6fb082103ac0,
     x=x@entry=17, y=y@entry=377, count=count@entry=6,
     chars=chars@entry=0x6fb086f52940 "        L\006\006",
     sixteen=sixteen@entry=0)
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:467
 #2  0x00006fb07d413fa9 in glamor_image_text8 (drawable=0x6fb0824c98c0,
     gc=0x6fb082103ac0, x=17, y=377, count=6,
     chars=0x6fb086f52940 "        L\006\006")
     at /usr/xsrc/external/mit/xorg-server/dist/glamor/glamor_text.c:480
 #3  0x00000000dcb5fbbe in damageImageText8 ()
 #4  0x00000000dca7e6b5 in doImageText ()
 #5  0x00000000dca7f8df in ImageText ()
 #6  0x00000000dca8395b in ProcImageText8 ()
 #7  0x00000000dca85c2e in Dispatch ()
 #8  0x00000000dca55e1f in dix_main ()
 #9  0x00000000dca559cd in ___start ()
 #10 0x00007f7ee6e0baf8 in ?? () from /usr/libexec/ld.elf_so
 #11 0x0000000000000005 in ?? ()
 #12 0x00007f7fffd19480 in ?? ()
 #13 0x00007f7fffd19491 in ?? ()
 #14 0x00007f7fffd19494 in ?? ()
 #15 0x00007f7fffd19499 in ?? ()
 #16 0x00007f7fffd1949f in ?? ()
 #17 0x0000000000000000 in ?? ()
 (gdb) n
 [New process 28256]
 /usr/src/external/gpl3/gdb/lib/libgdb/../../dist/gdb/infrun.c:5683: internal-error: int finish_step_over(execution_control_state*): Assertion `ecs->event_thread->control.trap_expected' failed.
 A problem internal to GDB has been detected,
 further debugging may prove unreliable.
 Quit this debugging session? (y or n) y

 This is a bug, please report it.  For instructions, see:
 <https://www.gnu.org/software/gdb/bugs/>.

 /usr/src/external/gpl3/gdb/lib/libgdb/../../dist/gdb/infrun.c:5683: internal-error: int finish_step_over(execution_control_state*): Assertion `ecs->event_thread->control.trap_expected' failed.
 A problem internal to GDB has been detected,
 further debugging may prove unreliable.
 Unable to dump core, use `ulimit -c unlimited' before executing GDB next time.
 [ 108164.2883624] sorry, pid 28256 was killed: orphaned traced process

 and X was killed.

 To get a usable machine, I have switched back to /usr/X11R7 from 9.3 and
 changed in /etc/X11/xorg.conf the Driver from "modesetting" to "radeon".
 (The "modesetting" driver with 9.3 doesn't result in working
 accelleration; with 10.0 the "radeon" driver crashed even quicker than
 the "modesetting" driver).

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.47 2022/09/11 19:34:41 kim Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2024 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.