https://bugs.kde.org/show_bug.cgi?id=489764

            Bug ID: 489764
           Summary: kwin_wayland crashed in convert_ubyte_rgba_to_bgra
    Classification: Plasma
           Product: kwin
           Version: 6.1.1
          Platform: Fedora RPMs
                OS: Linux
            Status: REPORTED
          Keywords: qt6
          Severity: normal
          Priority: NOR
         Component: generic-crash
          Assignee: kwin-bugs-n...@kde.org
          Reporter: matt.fagn...@bell.net
  Target Milestone: ---

SUMMARY

I booted the Fedora Rawhide KDE live image
Fedora-KDE-Live-x86_64-Rawhide-20240704.n.0.iso in a QEMU/KVM VM in GNOME Boxes
with 3D acceleration enabled using the virgl driver from mesa 24.1.2 and
virtio-gpu from the 6.10.0-0.rc6.20240703gite9d22f7a6655.53.fc41 kernel. Plasma
6.1.1 on Wayland started. I started Konsole. I ran sudo dnf upgrade
https://kojipkgs.fedoraproject.org//packages/selinux-policy/41.7/1.fc41/noarch/selinux-policy-41.7-1.fc41.noarch.rpm
https://kojipkgs.fedoraproject.org//packages/selinux-policy/41.7/1.fc41/noarch/selinux-policy-targeted-41.7-1.fc41.noarch.rpm
The upgrade took a few minutes because the selinux-policy-targeted-41.7-1.fc41
post-install scriptlet looked like it was relabelling the / filesystem with
restorecon. I might've run journalctl --no-host in another Konsole tab while
the update was happening. The VM's screen went black. drkonqi appeared. I
clicked Developer information. I selected to automatically download debug info
in drkonqi and reloaded. The debuginfod data filled the 1.7 GB / partition
completely so I deleted it. I installed the kwin, mesa, qt6-qtbase debug info
packages manually. I unselected to automatically load the debug info and
reloaded the trace, but drkonqi showed the debuginfod file downloads and the /
partition ran out of space again. I closed drkonqi. gdb crashed and the
kwin_wayland core dump was automatically removed. coredumpctl info showed that
kwin_wayland 6.1.1.2 crashed in convert_ubyte_rgba_to_bgra in virtio_gpu_dri.so
likely in virgl in mesa. The trace seems to involve the virgl driver converting
a texture image from rgba to bgra, so the problem might be in mesa.

Stack trace of thread 1802:
                #0  0x00007fd161abee21 convert_ubyte_rgba_to_bgra
(virtio_gpu_dri.so + 0x2bee21)
                #1  0x00007fd161b6f144 _mesa_GetTexSubImage_sw
(virtio_gpu_dri.so + 0x36f144)
                #2  0x00007fd161901a6c st_GetTexSubImage (virtio_gpu_dri.so +
0x101a6c)
                #3  0x00007fd161b6e4e9 get_texture_image.isra.0
(virtio_gpu_dri.so + 0x36e4e9)
                #4  0x00007fd161b6e6ba _get_texture_image (virtio_gpu_dri.so +
0x36e6ba)
                #5  0x00007fd161b6fc36 _mesa_GetTexImage (virtio_gpu_dri.so +
0x36fc36)
                #6  0x00007fd168c456a0
_ZN4KWinL13doGrabTextureEPNS_9GLTextureEP6QImage (screencast.so + 0xe6a0)
                #7  0x00007fd168c4aa3a
_ZN4KWinL11grabTextureEPNS_9GLTextureEP6QImage.lto_priv.1 (screencast.so +
0x13a3a)
                #8  0x00007fd168c52681
_ZN4KWin22WindowScreenCastSource6renderEP6QImage (screencast.so + 0x1b681)
                #9  0x00007fd168c51572
_ZN4KWin16ScreenCastStream11recordFrameERK7QRegion6QFlagsINS0_7ContentEE
(screencast.so + 0x1a572)
                #10 0x00007fd17f9fc7f2 _Z10doActivateILb0EEvP7QObjectiPPv
(libQt6Core.so.6 + 0x1fc7f2)
                #11 0x00007fd168c52138
_ZN9QtPrivate15QCallableObjectIZN4KWin22WindowScreenCastSourceC4EPNS1_6WindowEP7QObjectEUlvE_NS_4ListIJEEEvE4implEiPNS_15QSlotObjectBaseES6_PPvPb.lto_priv.0
(screencast.so + 0x1b138)
                #12 0x00007fd17f9fc7f2 _Z10doActivateILb0EEvP7QObjectiPPv
(libQt6Core.so.6 + 0x1fc7f2)
                #13 0x00007fd17fa0bb3d _ZN6QTimer7timeoutENS_14QPrivateSignalE
(libQt6Core.so.6 + 0x20bb3d)
                #14 0x00007fd17f9edc5f _ZN7QObject5eventEP6QEvent
(libQt6Core.so.6 + 0x1edc5f)
                #15 0x00007fd180d8b218
_ZN19QApplicationPrivate13notify_helperEP7QObjectP6QEvent (libQt6Widgets.so.6 +
0x18b218)
                #16 0x00007fd17f996d48
_ZN16QCoreApplication15notifyInternal2EP7QObjectP6QEvent (libQt6Core.so.6 +
0x196d48)
                #17 0x00007fd17fb52947 _ZN14QTimerInfoList14activateTimersEv
(libQt6Core.so.6 + 0x352947)
                #18 0x00007fd17fb56f1b
_ZN20QEventDispatcherUNIX13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
(libQt6Core.so.6 + 0x356f1b)
                #19 0x00007fd180763392
_ZN23QUnixEventDispatcherQPA13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
(libQt6Gui.so.6 + 0x763392)
                #20 0x00007fd17f9a3a83
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE (libQt6Core.so.6 +
0x1a3a83)
                #21 0x00007fd17f99f93c _ZN16QCoreApplication4execEv
(libQt6Core.so.6 + 0x19f93c)
                #22 0x000055d3e478d3d1 main (kwin_wayland + 0x473d1)
                #23 0x00007fd17f231248 __libc_start_call_main (libc.so.6 +
0x2a248)
                #24 0x00007fd17f23130b __libc_start_main@@GLIBC_2.34 (libc.so.6
+ 0x2a30b)
                #25 0x000055d3e4793385 _start (kwin_wayland + 0x4d385)

                Stack trace of thread 1887:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29ddb2 pthread_cond_clockwait@GLIBC_2.30
(libc.so.6 + 0x96db2)
                #2  0x00007fd182a2b9ce
_ZNSt17_Function_handlerIFSt10unique_ptrINSt13__future_base12_Result_baseENS2_8_DeleterEEvENS1_12_Task_setterIS0_INS1_7_ResultIvEES3_ENSt6thread8_InvokerISt5tupleIJZN7QThread6createIZN4KWin15DrmCommitThreadC4EPNSF_6DrmGpuERK7QStringEUlvE_JEEEPSD_OT_DpOT0_EUlDpOT_E_EEEEvEEE9_M_invokeERKSt9_Any_data
(libkwin.so.6 + 0x42b9ce)
                #3  0x00007fd182a20926
_ZNSt13__future_base13_State_baseV29_M_do_setEPSt8functionIFSt10unique_ptrINS_12_Result_baseENS3_8_DeleterEEvEEPb
(libkwin.so.6 + 0x420926)
                #4  0x00007fd17f2a398b __pthread_once_slow.isra.0 (libc.so.6 +
0x9c98b)
                #5  0x00007fd17f2a39f9 pthread_once@GLIBC_2.2.5 (libc.so.6 +
0x9c9f9)
                #6  0x00007fd182a29083
_ZNSt13__future_base15_Deferred_stateINSt6thread8_InvokerISt5tupleIJZN7QThread6createIZN4KWin15DrmCommitThreadC4EPNS6_6DrmGpuERK7QStringEUlvE_JEEEPS4_OT_DpOT0_EUlDpOT_E_EEEEvE17_M_complete_asyncEv
(libkwin.so.6 + 0x429083)
                #7  0x00007fd17fab8217 _ZN19QThreadCreateThread3runEv
(libQt6Core.so.6 + 0x2b8217)
                #8  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #9  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #10 0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 1876:
                #0  0x00007fd17f3148bd __poll (libc.so.6 + 0x10d8bd)
                #1  0x00007fd17e4a5eb4 g_main_context_iterate_unlocked.isra.0
(libglib-2.0.so.0 + 0xbeeb4)
                #2  0x00007fd17e4455c3 g_main_context_iteration
(libglib-2.0.so.0 + 0x5e5c3)
                #3  0x00007fd17fc84f23
_ZN20QEventDispatcherGlib13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
(libQt6Core.so.6 + 0x484f23)
                #4  0x00007fd17f9a3a83
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE (libQt6Core.so.6 +
0x1a3a83)
                #5  0x00007fd17fab7d4f _ZN7QThread4execEv (libQt6Core.so.6 +
0x2b7d4f)
                #6  0x00007fd180b6be41 _ZN22QDBusConnectionManager3runEv
(libQt6DBus.so.6 + 0x3ce41)
                #7  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #8  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #9  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 1886:
                #0  0x00007fd17f3148bd __poll (libc.so.6 + 0x10d8bd)
                #1  0x00007fd17e4a5eb4 g_main_context_iterate_unlocked.isra.0
(libglib-2.0.so.0 + 0xbeeb4)
                #2  0x00007fd17e4455c3 g_main_context_iteration
(libglib-2.0.so.0 + 0x5e5c3)
                #3  0x00007fd17fc84f23
_ZN20QEventDispatcherGlib13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
(libQt6Core.so.6 + 0x484f23)
                #4  0x00007fd17f9a3a83
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE (libQt6Core.so.6 +
0x1a3a83)
                #5  0x00007fd17fab7d4f _ZN7QThread4execEv (libQt6Core.so.6 +
0x2b7d4f)
                #6  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #7  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #8  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 5310:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29daa2 pthread_cond_timedwait@@GLIBC_2.3.2
(libc.so.6 + 0x96aa2)
                #2  0x00007fd17fb60d7d
_ZN14QWaitCondition4waitEP6QMutex14QDeadlineTimer (libQt6Core.so.6 + 0x360d7d)
                #3  0x00007fd17fb5db45 _ZN17QThreadPoolThread3runEv
(libQt6Core.so.6 + 0x35db45)
                #4  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #5  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #6  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 5311:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29daa2 pthread_cond_timedwait@@GLIBC_2.3.2
(libc.so.6 + 0x96aa2)
                #2  0x00007fd17fb60d7d
_ZN14QWaitCondition4waitEP6QMutex14QDeadlineTimer (libQt6Core.so.6 + 0x360d7d)
                #3  0x00007fd17fb5db45 _ZN17QThreadPoolThread3runEv
(libQt6Core.so.6 + 0x35db45)
                #4  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #5  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #6  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 5312:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29daa2 pthread_cond_timedwait@@GLIBC_2.3.2
(libc.so.6 + 0x96aa2)
                #2  0x00007fd17fb60d7d
_ZN14QWaitCondition4waitEP6QMutex14QDeadlineTimer (libQt6Core.so.6 + 0x360d7d)
                #3  0x00007fd17fb5db45 _ZN17QThreadPoolThread3runEv
(libQt6Core.so.6 + 0x35db45)
                #4  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #5  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #6  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 5309:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29daa2 pthread_cond_timedwait@@GLIBC_2.3.2
(libc.so.6 + 0x96aa2)
                #2  0x00007fd17fb60d7d
_ZN14QWaitCondition4waitEP6QMutex14QDeadlineTimer (libQt6Core.so.6 + 0x360d7d)
                #3  0x00007fd17fb5db45 _ZN17QThreadPoolThread3runEv
(libQt6Core.so.6 + 0x35db45)
                #4  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #5  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #6  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 1883:
                #0  0x00007fd17f3148bd __poll (libc.so.6 + 0x10d8bd)
                #1  0x00007fd17e4a5eb4 g_main_context_iterate_unlocked.isra.0
(libglib-2.0.so.0 + 0xbeeb4)
                #2  0x00007fd17e4455c3 g_main_context_iteration
(libglib-2.0.so.0 + 0x5e5c3)
                #3  0x00007fd17fc84f23
_ZN20QEventDispatcherGlib13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
(libQt6Core.so.6 + 0x484f23)
                #4  0x00007fd17f9a3a83
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE (libQt6Core.so.6 +
0x1a3a83)
                #5  0x00007fd17fab7d4f _ZN7QThread4execEv (libQt6Core.so.6 +
0x2b7d4f)
                #6  0x00007fd17fb54526 _ZN14QThreadPrivate5startEPv
(libQt6Core.so.6 + 0x354526)
                #7  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #8  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)

                Stack trace of thread 1882:
                #0  0x00007fd17f29ad09 __futex_abstimed_wait_common (libc.so.6
+ 0x93d09)
                #1  0x00007fd17f29d739 pthread_cond_wait@@GLIBC_2.3.2
(libc.so.6 + 0x96739)
                #2  0x00007fd1618a7cfd cnd_wait (virtio_gpu_dri.so + 0xa7cfd)
                #3  0x00007fd161884acb util_queue_thread_func
(virtio_gpu_dri.so + 0x84acb)
                #4  0x00007fd1618a7c2c impl_thrd_routine (virtio_gpu_dri.so +
0xa7c2c)
                #5  0x00007fd17f29e607 start_thread (libc.so.6 + 0x97607)
                #6  0x00007fd17f32260c __clone3 (libc.so.6 + 0x11b60c)
                ELF object binary architecture: AMD x86-64

I tried to reproduce the problem but it didn't happen. I'll try again to get a
trace with debug info.

STEPS TO REPRODUCE
1. boot the Fedora Rawhide KDE live image
Fedora-KDE-Live-x86_64-Rawhide-20240704.n.0.iso
https://koji.fedoraproject.org/koji/buildinfo?buildID=2482412 in a QEMU/KVM VM
in GNOME Boxes with 3D acceleration enabled in a Fedora 40 KDE installation
2. start Konsole
3. Run sudo dnf upgrade
https://kojipkgs.fedoraproject.org//packages/selinux-policy/41.7/1.fc41/noarch/selinux-policy-41.7-1.fc41.noarch.rpm
https://kojipkgs.fedoraproject.org//packages/selinux-policy/41.7/1.fc41/noarch/selinux-policy-targeted-41.7-1.fc41.noarch.rpm
 
4. Open a new Konsole tab
5. run journalctl --no-host in the second Konsole tab and scroll up and down
the journal
6. If the problem didn't happen, repeat 1-5 until it does. I don't know which
of 2-5 are related to the problem, if any.

OBSERVED RESULT
kwin_wayland crashed in convert_ubyte_rgba_to_bgra

EXPECTED RESULT
kwin shouldn't crash

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Fedora Rawhide/41
(available in About System)
KDE Plasma Version: 6.1.1
KDE Frameworks Version: 6.3.0
Qt Version: 6.7.2

ADDITIONAL INFORMATION

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to