Summary: | plasmashell on Wayland segmentation fault in update_buffers in mesa-libEGL | ||
---|---|---|---|
Product: | [Plasma] plasmashell | Reporter: | Matt Fagnani <matt.fagnani> |
Component: | general | Assignee: | David Edmundson <kde> |
Status: | RESOLVED DOWNSTREAM | ||
Severity: | crash | CC: | elxreno, null, plasma-bugs, rikmills, torokati44 |
Priority: | NOR | Keywords: | drkonqi |
Version: | 5.19.4 | ||
Target Milestone: | 1.0 | ||
Platform: | Fedora RPMs | ||
OS: | Linux | ||
URL: | https://bugzilla.redhat.com/show_bug.cgi?id=1777733 | ||
Latest Commit: | Version Fixed In: | ||
Sentry Crash Report: | |||
Attachments: |
ksplashqml 5.16.5 segmentation fault report
New crash information added by DrKonqi my crash logs |
Description
Matt Fagnani
2019-11-23 05:21:38 UTC
Created attachment 124069 [details]
ksplashqml 5.16.5 segmentation fault report
I saw a ksplashqml 5.16.5 segmentation fault in update_buffers at ../src/egl/drivers/dri2/platform_wayland.c:633 which had a similar trace of its crashing thread as I reported here. The ksplashqml crash happened while starting Plasma 5.16.5 on Wayland with Qt 5.12.5, KF 5.61.0, mesa 19.2.2 on 2019-11-07. That crash makes it less likely that a mesa change from 19.2.4 to 19.2.6 was involved in the plasmashell crash. I'm attaching the ksplashqml 5.16.5 segmentation fault report from Dr. Konqi.
Please report issues in Mesa DRI drivers directly to Mesa developers via https://www.mesa3d.org/bugs.html I was using Plasma 5.19.4 on Wayland in Fedora 33 with KF 5.73.0 and Qt 5.14.2. I set the desktop to use the Application Menu by right-clicking on the button at the bottom left of the screen, selecting Show Alternatives > Application Menu > Switch. I quickly left-clicked to open the Application Menu many times. The Task Manager bar at the bottom of the screen disappeared and reappeared automatically. plasmashell segmentation faulted in thread 1 in update_buffers at ../src/egl/drivers/dri2/platform_wayland.c:675 in mesa-libEGL-20.1.5-1.fc33.x86_64. Core was generated by `/usr/bin/plasmashell'. Program terminated with signal SIGSEGV, Segmentation fault. #0 __GI_raise (sig=<optimized out>) at ../sysdeps/unix/sysv/linux/raise.c:49 49 return ret; [Current thread is 1 (Thread 0x7ff43ebf5640 (LWP 8914))] (gdb) bt #0 __GI_raise (sig=<optimized out>) at ../sysdeps/unix/sysv/linux/raise.c:49 #1 <signal handler called> #2 0x00007ff4c815026d in update_buffers (dri2_surf=dri2_surf@entry=0x7ff428166b70) at ../src/egl/drivers/dri2/platform_wayland.c:675 #3 0x00007ff4c81507e8 in image_get_buffers (driDrawable=<optimized out>, format=<optimized out>, stamp=<optimized out>, loaderPrivate=0x7ff428166b70, buffer_mask=<optimized out>, buffers=0x7ff43ebf3ba0) at ../src/egl/drivers/dri2/platform_wayland.c:810 #4 0x00007ff4c2a46b11 in dri_image_drawable_get_buffers (statts_count=<optimized out>, statts=<optimized out>, images=<optimized out>, drawable=<optimized out>) at ../src/gallium/state_trackers/dri/dri2.c:282 #5 dri2_allocate_textures (ctx=0x55cc55a25e20, drawable=0x7ff42816b200, statts=0x7ff428163cd8, statts_count=2) at ../src/gallium/state_trackers/dri/dri2.c:415 #6 0x00007ff4c2a39ee4 in dri_st_framebuffer_validate (stctx=<optimized out>, stfbi=<optimized out>, statts=0x7ff428163cd8, count=2, out=0x7ff43ebf3d40) at ../src/gallium/state_trackers/dri/dri_drawable.c:82 #7 0x00007ff4c2a5609b in st_framebuffer_validate (stfb=stfb@entry=0x7ff428163800, st=st@entry=0x55cc56ce6510) at ../src/mesa/state_tracker/st_manager.c:223 #8 0x00007ff4c2a57143 in st_manager_validate_framebuffers (st=0x55cc56ce6510) at ../src/mesa/state_tracker/st_manager.c:1185 #9 0x00007ff4c2a8e605 in st_validate_state (st=st@entry=0x55cc56ce6510, pipeline=pipeline@entry=ST_PIPELINE_CLEAR) at ../src/mesa/state_tracker/st_atom.c:203 #10 0x00007ff4c2a8f100 in st_Clear (ctx=0x55cc56cabe50, mask=50) at ../src/mesa/state_tracker/st_cb_clear.c:442 #11 0x00007ff4de231d6b in QSGBatchRenderer::Renderer::renderBatches (this=this@entry=0x7ff4280079a0) at ../../include/QtQuick/5.14.2/QtQuick/private/../../../../../src/quick/scenegraph/coreapi/qsgrend--Type <RET> for more, q to quit, c to continue without paging--c erer_p.h:131 #12 0x00007ff4de2324d2 in QSGBatchRenderer::Renderer::render (this=<optimized out>) at scenegraph/coreapi/qsgbatchrenderer.cpp:4320 #13 0x00007ff4de21bcd0 in QSGRenderer::renderScene (bindable=..., this=0x7ff4280079a0) at scenegraph/coreapi/qsgrenderer.cpp:259 #14 QSGRenderer::renderScene (this=0x7ff4280079a0, bindable=...) at scenegraph/coreapi/qsgrenderer.cpp:219 #15 0x00007ff4de21c1a3 in QSGRenderer::renderScene (this=<optimized out>, fboId=<optimized out>) at scenegraph/coreapi/qsgrenderer.cpp:211 #16 0x00007ff4de26f8e1 in QSGDefaultRenderContext::renderNextFrame (this=0x55cc55d1d880, renderer=0x7ff4280079a0, fboId=<optimized out>) at scenegraph/qsgdefaultrendercontext.cpp:223 #17 0x00007ff4de2c99a9 in QQuickWindowPrivate::renderSceneGraph (this=0x55cc55d1ccf0, size=..., surfaceSize=...) at items/qquickwindow.cpp:541 #18 0x00007ff4de27c7e3 in QSGRenderThread::syncAndRender (this=0x55cc56979f50, grabImage=0x0) at /usr/include/qt5/QtGui/5.14.2/QtGui/private/qrhi_p.h:1230 #19 0x00007ff4de283e0f in QSGRenderThread::run (this=0x55cc56979f50) at scenegraph/qsgthreadedrenderloop.cpp:980 #20 0x00007ff4dc7eb690 in QThreadPrivate::start (arg=0x55cc56979f50) at thread/qthread_unix.cpp:342 #21 0x00007ff4dbc4f3f9 in start_thread (arg=0x7ff43ebf5640) at pthread_create.c:463 #22 0x00007ff4dc46fb03 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 platform_wayland.c:675 corresponds to that in the crash I reported here before. if (dri2_surf->base.Width != dri2_surf->wl_win->width || dri2_surf->base.Height != dri2_surf->wl_win->height) { The pointer dri2_surf=dri2_surf@entry=0x7ff428166b70 passed to update_buffers pointed to a invalid pointer possibly to dri2_surf->wl_win (gdb) x 0x7ff428166b70 0x7ff428166b70: 0x553e66e0 (gdb) x 0x553e66e0 0x553e66e0: Cannot access memory at address 0x553e66e0 I've seen crashes with this trace 2-3 times in the last few days. The crashes might involve a race condition in which the Wayland surface of the Application menu was occasionally freed or corrupted before it was used. plasmashell crashed when I've quickly left-clicked to open the Application Menu many times in the last day with errors like The Wayland connection experienced a fatal error: Invalid argument https://bugs.kde.org/show_bug.cgi?id=424879 and a segmentation fault in wl_proxy_set_queue https://bugs.kde.org/show_bug.cgi?id=409021 Those crashes might have been related to this one. I reported previous plasmashell crashes in updates_buffers and assigned them to mesa at https://bugzilla.redhat.com/show_bug.cgi?id=1777733 Michel Dänzer replied "Note that while the linked upstream issue is technically a Mesa bug, Firefox was triggering this condition by accident and has been modified not to trigger it anymore. Might be similar for plasmashell." Firefox Nightly 80.0a1-81.0a1 had segmentation faults occasionally in update_buffers at ../src/egl/drivers/dri2/platform_wayland.c:675 in mesa-libEGL-20.1.3-1.fc33.x86_64 and later when I've clicked on toolbar buttons at the top right of the Firefox window in the last 3 weeks or so. I reported those crashes at https://bugzilla.mozilla.org/show_bug.cgi?id=1655120 Created attachment 131501 [details]
New crash information added by DrKonqi
plasmashell (5.19.5) using Qt 5.14.2
- What I was doing when the application crashed:
Install a RPM package. After that, my workspace has been crashed.
-- Backtrace (Reduced):
#4 0x00007f7bdc98aced in update_buffers (dri2_surf=dri2_surf@entry=0x7f7b8c19a040) at ../src/egl/drivers/dri2/platform_wayland.c:675
#5 0x00007f7bdc98b108 in image_get_buffers (driDrawable=driDrawable@entry=0x5579c4e0ad00, format=<optimized out>, stamp=stamp@entry=0x5579c4e0ad30, loaderPrivate=loaderPrivate@entry=0x7f7b8c19a040, buffer_mask=buffer_mask@entry=1, buffers=buffers@entry=0x7f7b9eef8ea0) at ../src/egl/drivers/dri2/platform_wayland.c:810
#6 0x00007f7bd7306468 in intel_update_image_buffers (drawable=0x5579c4e0ad00, brw=0x5579cb9ccbe0) at ../src/mesa/drivers/dri/i965/brw_context.c:1896
#7 intel_update_renderbuffers (context=context@entry=0x5579c3c2eff0, drawable=drawable@entry=0x5579c4e0ad00) at ../src/mesa/drivers/dri/i965/brw_context.c:1523
#8 0x00007f7bd7306b69 in intel_prepare_render (brw=brw@entry=0x5579cb9ccbe0) at ../src/mesa/drivers/dri/i965/brw_context.c:1544
Created attachment 131766 [details]
my crash logs
I've also experienced this issue. Attached is my backtrace.
Operating System: Arch Linux
KDE Plasma Version: 5.19.5
KDE Frameworks Version: 5.74.0
Qt Version: 5.15.1
Kernel Version: 5.8.10-arch1-1
OS Type: 64-bit
Processors: 4 × Intel® Core™ i5-6500 CPU @ 3.20GHz
Memory: 7.6 GiB of RAM
Graphics Processor: Mesa Intel® HD Graphics 530
|