Bug 325796

Application: plasma-desktop (4.11.1)
KDE Platform Version: 4.11.1
Qt Version: 4.8.5
Operating System: Linux 3.11.3-201.fc19.x86_64 x86_64
Distribution: "Fedora release 19 (Schrödinger’s Cat)"

-- Information about the crash:
- What I was doing when the application crashed: Tried to run Wine Boot which triggered an SElinux error (mmap_zero access). Then executed (as root) "setsebool wine_mmap_zero_ignore=1". KDE appeared to immediately crash and restart.

- Unusual behavior I noticed: KDE desktop and panel went black, some apps were left running on the virtual desktop (e.g. Konsole). Desktop apparently rebuilt itself.

- Custom settings of the application: Wine had already quit/crashed. SELinux is enabled and enforcing. The only change made subsequent to Wine quit/crash was to run 

"restorecon /usr/bin/wine-preloader" and  "setsebool wine_mmap_zero_ignore=1" as root.

-- Backtrace:
Application: Plasma Desktop Shell (plasma-desktop), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
81	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7fcf985888c0 (LWP 1556))]

Thread 4 (Thread 0x7fcf890fd700 (LWP 1558)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x0000003926f860bb in QTWTF::TCMalloc_PageHeap::scavengerThread (this=0x3927283f00 <QTWTF::pageheap_memory>) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2359
#2  0x0000003926f860f9 in QTWTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1464
#3  0x0000003900607c53 in start_thread (arg=0x7fcf890fd700) at pthread_create.c:308
#4  0x00000038ffaf5e1d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 3 (Thread 0x7fcefb10c700 (LWP 1559)):
#0  0x000000390060aa6c in __pthread_mutex_unlock_usercnt (decr=1, mutex=0x7fcef4000a80) at pthread_mutex_unlock.c:52
#1  __GI___pthread_mutex_unlock (mutex=0x7fcef4000a80) at pthread_mutex_unlock.c:297
#2  0x0000003902e87281 in g_mutex_unlock (mutex=mutex@entry=0x7fcef40009c0) at gthread-posix.c:229
#3  0x0000003902e480e9 in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7fcef4002bc0, timeout=-1, context=0x7fcef40009c0) at gmain.c:3994
#4  g_main_context_iterate (context=context@entry=0x7fcef40009c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3696
#5  0x0000003902e481fc in g_main_context_iteration (context=0x7fcef40009c0, may_block=1) at gmain.c:3762
#6  0x000000390e9a7166 in QEventDispatcherGlib::processEvents (this=0x7fcef40008e0, flags=...) at kernel/qeventdispatcher_glib.cpp:427
#7  0x000000390e978ecf in QEventLoop::processEvents (this=this@entry=0x7fcefb10bce0, flags=...) at kernel/qeventloop.cpp:149
#8  0x000000390e9791c5 in QEventLoop::exec (this=this@entry=0x7fcefb10bce0, flags=...) at kernel/qeventloop.cpp:204
#9  0x000000390e87866f in QThread::exec (this=this@entry=0x3240ee0) at thread/qthread.cpp:536
#10 0x000000390e95a733 in QInotifyFileSystemWatcherEngine::run (this=0x3240ee0) at io/qfilesystemwatcher_inotify.cpp:256
#11 0x000000390e87ad0f in QThreadPrivate::start (arg=0x3240ee0) at thread/qthread_unix.cpp:338
#12 0x0000003900607c53 in start_thread (arg=0x7fcefb10c700) at pthread_create.c:308
#13 0x00000038ffaf5e1d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 2 (Thread 0x7fcef0879700 (LWP 14690)):
#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1  0x000000390e8797e3 in _q_futex (val2=0, addr2=0x0, timeout=0x0, val=2, op=0, addr=0x5b75270) at thread/qmutex_unix.cpp:99
#2  QMutexPrivate::wait (this=this@entry=0x5b75270, timeout=timeout@entry=-1) at thread/qmutex_unix.cpp:113
#3  0x000000390e875c95 in QMutex::lockInternal (this=this@entry=0x575b808) at thread/qmutex.cpp:450
#4  0x000000390e87ad80 in lockInline (this=0x575b808) at ../../src/corelib/thread/qmutex.h:190
#5  QMutexLocker (m=0x575b808, this=<synthetic pointer>) at ../../src/corelib/thread/qmutex.h:109
#6  QThreadPrivate::start (arg=0x5055cb0) at thread/qthread_unix.cpp:317
#7  0x0000003900607c53 in start_thread (arg=0x7fcef0879700) at pthread_create.c:308
#8  0x00000038ffaf5e1d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 1 (Thread 0x7fcf985888c0 (LWP 1556)):
[KCrash Handler]
#6  0x00000038ffa35a19 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#7  0x00000038ffa37128 in __GI_abort () at abort.c:90
#8  0x00000038ffa75d47 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x38ffb7e628 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:196
#9  0x00000038ffa7d0e8 in malloc_printerr (ptr=<optimized out>, str=0x38ffb7e700 "double free or corruption (!prev)", action=3) at malloc.c:4937
#10 _int_free (av=0x38ffdba780 <main_arena>, p=<optimized out>, have_lock=0) at malloc.c:3789
#11 0x0000003fdb0ad4dc in ?? () from /usr/lib64/nvidia/libGL.so.1
#12 0x0000003fdb40117a in ?? () from /usr/lib64/nvidia/tls/libnvidia-tls.so.325.15
#13 0x000000390e87a3bb in QThread::start (this=this@entry=0x5055cb0, priority=priority@entry=QThread::InheritPriority) at thread/qthread_unix.cpp:658
#14 0x00007fcf8a48f16d in Kickoff::SystemModel::startUsageInfoFetch (this=0x3237010) at /usr/src/debug/kde-workspace-4.11.1/plasma/desktop/applets/kickoff/core/systemmodel.cpp:416
#15 0x000000390e98df78 in QMetaObject::activate (sender=sender@entry=0x55beed0, m=m@entry=0x390ecdae20 <QSingleShotTimer::staticMetaObject>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x0) at kernel/qobject.cpp:3547
#16 0x000000390e996d9a in timeout (this=0x55beed0) at .moc/release-shared/qtimer.moc:96
#17 QSingleShotTimer::timerEvent (this=0x55beed0) at kernel/qtimer.cpp:317
#18 0x000000390e992141 in QObject::event (this=0x55beed0, e=<optimized out>) at kernel/qobject.cpp:1156
#19 0x0000003914dc84dc in QApplicationPrivate::notify_helper (this=this@entry=0x23d41a0, receiver=receiver@entry=0x55beed0, e=e@entry=0x7fff653b63e0) at kernel/qapplication.cpp:4562
#20 0x0000003914dceaa0 in QApplication::notify (this=this@entry=0x23bd870, receiver=receiver@entry=0x55beed0, e=e@entry=0x7fff653b63e0) at kernel/qapplication.cpp:4348
#21 0x000000391843fd2a in KApplication::notify (this=0x23bd870, receiver=0x55beed0, event=0x7fff653b63e0) at /usr/src/debug/kdelibs-4.11.1/kdeui/kernel/kapplication.cpp:311
#22 0x000000390e97a26d in QCoreApplication::notifyInternal (this=0x23bd870, receiver=0x55beed0, event=0x7fff653b63e0) at kernel/qcoreapplication.cpp:949
#23 0x000000390e9a9c13 in sendEvent (event=<optimized out>, receiver=<optimized out>) at kernel/qcoreapplication.h:231
#24 QTimerInfoList::activateTimers (this=0x23dacc0) at kernel/qeventdispatcher_unix.cpp:621
#25 0x000000390e9a6f49 in timerSourceDispatch (source=<optimized out>) at kernel/qeventdispatcher_glib.cpp:186
#26 idleTimerSourceDispatch (source=source@entry=0x23dad10) at kernel/qeventdispatcher_glib.cpp:233
#27 0x0000003902e47e06 in g_main_dispatch (context=0x23d4530) at gmain.c:3054
#28 g_main_context_dispatch (context=context@entry=0x23d4530) at gmain.c:3630
#29 0x0000003902e48158 in g_main_context_iterate (context=context@entry=0x23d4530, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3701
#30 0x0000003902e481fc in g_main_context_iteration (context=0x23d4530, may_block=1) at gmain.c:3762
#31 0x000000390e9a7145 in QEventDispatcherGlib::processEvents (this=0x2355e40, flags=...) at kernel/qeventdispatcher_glib.cpp:425
#32 0x0000003914e64fc6 in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:207
#33 0x000000390e978ecf in QEventLoop::processEvents (this=this@entry=0x7fff653b6660, flags=...) at kernel/qeventloop.cpp:149
#34 0x000000390e9791c5 in QEventLoop::exec (this=this@entry=0x7fff653b6660, flags=...) at kernel/qeventloop.cpp:204
#35 0x000000390e97e45b in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1221
#36 0x0000003914dc6c9c in QApplication::exec () at kernel/qapplication.cpp:3823
#37 0x0000003fdca3c40c in kdemain (argc=1, argv=0x7fff653b68b8) at /usr/src/debug/kde-workspace-4.11.1/plasma/desktop/shell/main.cpp:126
#38 0x00000038ffa21b75 in __libc_start_main (main=0x400940 <main(int, char**)>, argc=1, ubp_av=0x7fff653b68b8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff653b68a8) at libc-start.c:274
#39 0x0000000000400971 in _start ()

Possible duplicates by query: bug 325730, bug 325076, bug 324920, bug 324552, bug 324456.

Reported using DrKonqi