Bug 512460

Summary: RKWard crashed when starting with Qt 6.10.1
Product: [Applications] rkward Reporter: Matt Fagnani <matt.fagnani>
Component: generalAssignee: RKWard Team <rkward-devel>
Status: REPORTED ---    
Severity: crash CC: thomas.friedrichsmeier
Priority: NOR Keywords: drkonqi
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:
Attachments: New crash information added by DrKonqi

Description Matt Fagnani 2025-11-22 07:16:28 UTC
Application: rkward (0.8.1z+0.8.2+devel1)

ApplicationNotResponding [ANR]: false
Qt Version: 6.10.1
Frameworks Version: 6.20.0
Operating System: Linux 6.17.8-300.fc43.x86_64 x86_64
Windowing System: Wayland
Distribution: "Fedora Linux 43 (KDE Plasma Desktop Edition)"
DrKonqi: 6.5.3 [CoredumpBackend]

-- Information about the crash:
I started the RKWard pre-release version rkward-0.8.2~pre^3.gitbee78f2b-1.fc43.x86_64 in Plasma 6.5.3 on Wayland in a Fedora 43 KDE installation. I had updated my system which included Qt 6.10.1 with dnf offline-upgrade about 2 hours earlier. RKWard crashed when starting about 2 s after it appeared. The crash was in QtWebEngineCore::ContentClientQt::SetGpuInfo at /usr/src/debug/qt6-qtwebengine-6.10.1-2.fc43.x86_64/src/core/content_client_qt.cpp:528. I think the problem might be in qtwebengine 6.10.1 as most of the top functions were in it. I started RKWard again, and a Crash recovery file detected dialog was shown. I selected Delete twice. RKWard crashed again with the same kind of trace. I'm reporting the second crash. The problem didn't happen with Qt 6.10.0.

There were mesa and GPU errors in the journal when the crash happened.

Nov 22 01:06:40 systemd[1662]: Started app-org.kde.rkward@82e31c8a759140d5b2cfdfa2ca99674b.service - RKWard - Statistics with R.
Nov 22 01:06:43 rkward[8673]: KCrash: Application 'rkward' crashing... crashRecursionCounter = 2
Nov 22 01:06:43 rkward[8673]: KCrash: Attempting to start /usr/libexec/drkonqi
Nov 22 01:06:44 drkonqi[8793]: This plugin does not support polling idle time
Nov 22 01:06:48 drkonqi[8793]: qrc:/ui/MainPage.qml:71:9: QML MainPageButton: Binding loop detected for property "icon.height":
                               qrc:/ui/MainPageButton.qml:15:5
Nov 22 01:06:48 drkonqi[8793]: qrc:/ui/MainPage.qml:53:9: QML MainPageButton: Binding loop detected for property "icon.height":
                               qrc:/ui/MainPageButton.qml:15:5
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.236557:ERROR:angle_platform_impl.cc(49)] renderergl_utils.cpp:3065 (HandleError): GL call functions->texImage2D(nativegl::GetTextureBindingTarget(target), static_cast<GLint>(level), texImageFormat.internalFormat, size.width, size.height, 0, texImageFormat.format, texImageFormat.type, pixels) generated error 0x00000505 in ../../../../../src/3rdparty/chromium/third_party/angle/src/libANGLE/renderer/gl/TextureGL.cpp, setImageHelper:272.
Nov 22 01:06:48 rkward[8673]: ERR: renderergl_utils.cpp:3065 (HandleError): GL call functions->texImage2D(nativegl::GetTextureBindingTarget(target), static_cast<GLint>(level), texImageFormat.internalFormat, size.width, size.height, 0, texImageFormat.format, texImageFormat.type, pixels) generated error 0x00000505 in ../../../../../src/3rdparty/chromium/third_party/angle/src/libANGLE/renderer/gl/TextureGL.cpp, setImageHelper:272.
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.238920:ERROR:shared_context_state.cc(771)] SharedContextState::InitializeGL failure max_vertex_attribs : 0 is less that minimum required : 8
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.238967:ERROR:gpu_channel_manager.cc(1021)] ContextResult::kFatalFailure: Failed to Initialize GL for  SharedContextState
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.239482:ERROR:shared_image_stub.cc(626)] SharedImageStub: unable to create context
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.239529:ERROR:gpu_channel.cc(851)] GpuChannel: Failed to create SharedImageStub
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu: Failed to allocate a buffer:
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    size      : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    alignment : 2097152 bytes
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    domains   : 4
Nov 22 01:06:48 rkward[8673]: MESA: error: amdgpu:    flags   : 6
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.248983:ERROR:angle_platform_impl.cc(49)] renderergl_utils.cpp:3065 (HandleError): GL call functions->texImage2D(nativegl::GetTextureBindingTarget(target), static_cast<GLint>(level), texImageFormat.internalFormat, size.width, size.height, 0, texImageFormat.format, texImageFormat.type, pixels) generated error 0x00000505 in ../../../../../src/3rdparty/chromium/third_party/angle/src/libANGLE/renderer/gl/TextureGL.cpp, setImageHelper:272.
Nov 22 01:06:48 rkward[8673]: ERR: renderergl_utils.cpp:3065 (HandleError): GL call functions->texImage2D(nativegl::GetTextureBindingTarget(target), static_cast<GLint>(level), texImageFormat.internalFormat, size.width, size.height, 0, texImageFormat.format, texImageFormat.type, pixels) generated error 0x00000505 in ../../../../../src/3rdparty/chromium/third_party/angle/src/libANGLE/renderer/gl/TextureGL.cpp, setImageHelper:272.
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.249111:ERROR:shared_context_state.cc(771)] SharedContextState::InitializeGL failure max_vertex_attribs : 0 is less that minimum required : 8
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.249119:ERROR:gpu_channel_manager.cc(1021)] ContextResult::kFatalFailure: Failed to Initialize GL for  SharedContextState
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.249353:ERROR:shared_image_stub.cc(626)] SharedImageStub: unable to create context
Nov 22 01:06:48 rkward[8673]: [8673:8741:1122/010648.249376:ERROR:gpu_channel.cc(851)] GpuChannel: Failed to create SharedImageStub
Nov 22 01:06:48 drkonqi[8793]: Available memory (GiB): 3
Nov 22 01:06:48 drkonqi[8793]: QThread::setPriority: Cannot set priority, thread is not running
Nov 22 01:06:48 drkonqi[8793]: adjusting gdb profile for size MemoryFence::Size::Little
Nov 22 01:06:54 drkonqi[8793]: qrc:/ui/DeveloperPage.qml:12:1: QML DeveloperPage: Created graphical object was not placed in the graphics scene.
Nov 22 01:06:54 drkonqi[8793]: qrc:/ui/DeveloperPage.qml:114:13: QML DownloadSymbolsCheckBox: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
Nov 22 01:06:54 drkonqi[8793]: qrc:/ui/DeveloperPage.qml:114:13: QML DownloadSymbolsCheckBox: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
Nov 22 01:07:11 kde-open[8859]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kioclient'")

The crash can be reproduced every time.

-- Backtrace (Reduced):
#4  QtWebEngineCore::ContentClientQt::SetGpuInfo () at /usr/src/debug/qt6-qtwebengine-6.10.1-2.fc43.x86_64/src/core/content_client_qt.cpp:528
#5  0x00007f00f798a869 in content::GpuDataManagerImplPrivate::UpdateGpuInfo () at ../../../../../src/3rdparty/chromium/content/browser/gpu/gpu_data_manager_impl_private.cc:1051
#6  0x00007f00f7982dbb in content::GpuDataManagerImpl::UpdateGpuInfo () at ../../../../../src/3rdparty/chromium/content/browser/gpu/gpu_data_manager_impl.cc:168
#7  0x00007f00f799ae04 in content::GpuProcessHost::DidInitialize () at ../../../../../src/3rdparty/chromium/content/browser/gpu/gpu_process_host.cc:988
#8  0x00007f00fadf9358 in viz::GpuHostImpl::DidInitialize () at ./../../../../../src/3rdparty/chromium/components/viz/host/gpu_host_impl.cc:498
#9  0x00007f00f5c2fb54 in viz::mojom::GpuHostStubDispatch::Accept () at ./gen/services/viz/privileged/mojom/gl/gpu_host.mojom.cc:1297
#10 0x00007f00f9cbce32 in mojo::InterfaceEndpointClient::HandleValidatedMessage () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1052
#11 0x00007f00f9cbe7be in mojo::MessageDispatcher::Accept () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/message_dispatcher.cc:43
#12 0x00007f00f9cbcadc in mojo::InterfaceEndpointClient::HandleIncomingMessage () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:724
#13 0x00007f00f9cc20e2 in mojo::internal::MultiplexRouter::ProcessIncomingMessage () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/multiplex_router.cc:1121
#14 0x00007f00f9cc5952 in mojo::internal::MultiplexRouter::Accept () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/multiplex_router.cc:734
#15 0x00007f00f9cbe7be in mojo::MessageDispatcher::Accept () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/message_dispatcher.cc:43
#16 0x00007f00f9cb6311 in mojo::Connector::DispatchMessage () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:562
#17 0x00007f00f9cb700c in mojo::Connector::ReadAllAvailableMessages () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:620
#18 0x00007f00f9cb715e in mojo::Connector::OnHandleReadyInternal () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:452
#19 mojo::Connector::OnWatcherHandleReady () at ../../../../../src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:418


Reported using DrKonqi
Comment 1 Matt Fagnani 2025-11-22 07:16:30 UTC
Created attachment 187048 [details]
New crash information added by DrKonqi

DrKonqi auto-attaching complete backtrace.
Comment 2 Thomas Friedrichsmeier 2025-11-23 07:07:38 UTC
Yes, this looks like a problem in QtWebEngine. Could you try whether starting with

  QTWEBENGINE_CHROMIUM_FLAGS=--disable-gpu rkward

fixes the crash?
Comment 3 Matt Fagnani 2025-11-23 22:38:50 UTC
(In reply to Thomas Friedrichsmeier from comment #2)
> Yes, this looks like a problem in QtWebEngine. Could you try whether
> starting with
> 
>   QTWEBENGINE_CHROMIUM_FLAGS=--disable-gpu rkward
> 
> fixes the crash?

The problem didn't happen with QTWEBENGINE_CHROMIUM_FLAGS=--disable-gpu rkward. Thanks.

After the crash happened previously with RKWard on Wayland, when I ran QT_QPA_PLATFORM=xcb rkward &, RKWard on XWayland started normally. RKWard on Wayland then started normally repeatedly during the same boot. On following boots, RKWard on Wayland crashed in the same way until I ran RKWard on XWayland. However, if I ran RKWard on XWayland first in a given boot, it crashed in the same way as with Wayland.
Comment 4 Thomas Friedrichsmeier 2025-11-26 18:02:03 UTC
Thanks!

While this is a problem in QWebEngine (please report it to fedora, too!), and probably limited to some not-so-typical GPU/driver combinations, we're running into related issues far too often. Maybe we should disable GPU acceleration, by default, and offer to enable it as an option, only.
Comment 5 Matt Fagnani 2025-11-27 05:09:51 UTC
(In reply to Thomas Friedrichsmeier from comment #4)
> Thanks!
> 
> While this is a problem in QWebEngine (please report it to fedora, too!),
> and probably limited to some not-so-typical GPU/driver combinations, we're
> running into related issues far too often. Maybe we should disable GPU
> acceleration, by default, and offer to enable it as an option, only.

I reported this problem to Fedora at https://bugzilla.redhat.com/show_bug.cgi?id=2416541 The GPU is an integrated AMD Radeon R5 using the radeonsi mesa driver and amdgpu kernel driver.

RKWard occasionally crashed when starting with Qt 6.10.1 only and a different trace and SIGTRAP. I'm unsure if this crash was related to the first type, but it looked like it was in qtwebengine/chromium when destroying something and an error was logged.

Core was generated by `/usr/bin/rkward --autoreuse'.
Program terminated with signal SIGTRAP, Trace/breakpoint trap.
#0  0x00007f5e3d2b9fbc in base::ImmediateCrash () at ../../../../../src/3rdparty/chromium/base/immediate_crash.h:186
186       TRAP_SEQUENCE_();
[Current thread is 1 (Thread 0x7f5de37fe6c0 (LWP 14871))]

(gdb) bt
#0  0x00007f5e3d2b9fbc in base::ImmediateCrash () at ../../../../../src/3rdparty/chromium/base/immediate_crash.h:186
#1  logging::LogMessage::HandleFatal () at ../../../../../src/3rdparty/chromium/base/logging.cc:1066
#2  0x00007f5e3d2bc3b6 in operator() () at ../../../../../src/3rdparty/chromium/base/logging.cc:772
#3  InvokeCallback () at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/cleanup/internal/cleanup.h:87
#4  ~Cleanup () at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/cleanup/cleanup.h:106
#5  logging::LogMessage::Flush () at ../../../../../src/3rdparty/chromium/base/logging.cc:955
#6  0x00007f5e3d2bd2eb in logging::LogMessage::~LogMessage ()
    at ../../../../../src/3rdparty/chromium/base/logging.cc:725
#7  0x00007f5e3d2bd3a3 in logging::ErrnoLogMessage::~ErrnoLogMessage ()
    at ../../../../../src/3rdparty/chromium/base/logging.cc:1150
#8  logging::ErrnoLogMessage::~ErrnoLogMessage () at ../../../../../src/3rdparty/chromium/base/logging.cc:1150
#9  0x00007f5e3d2c023c in std::default_delete<logging::LogMessage>::operator() ()
    at /usr/include/c++/15/bits/unique_ptr.h:92
#10 std::__uniq_ptr_impl<logging::LogMessage, std::default_delete<logging::LogMessage> >::reset ()
    at /usr/include/c++/15/bits/unique_ptr.h:204
#11 std::unique_ptr<logging::LogMessage, std::default_delete<logging::LogMessage> >::reset ()
    at /usr/include/c++/15/bits/unique_ptr.h:511
#12 logging::CheckNoreturnError::~CheckNoreturnError () at ./../../../../../src/3rdparty/chromium/base/check.cc:350
#13 0x00007f5e3d2dc207 in base::internal::ScopedFDCloseTraits::Free ()
    at ./../../../../../src/3rdparty/chromium/base/files/scoped_file.cc:45
#14 0x00007f5e38957610 in mojo::core::ipcz_driver::SharedBuffer::~SharedBuffer ()
    at ../../../../../src/3rdparty/chromium/mojo/core/ipcz_driver/shared_buffer.cc:91
#15 mojo::core::ipcz_driver::SharedBuffer::~SharedBuffer ()
    at ../../../../../src/3rdparty/chromium/mojo/core/ipcz_driver/shared_buffer.cc:91
#16 0x00007f5e38950ad6 in base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::DeleteInternal<mojo::core::ipcz_driver::ObjectBase> ()
    at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:438
--Type <RET> for more, q to quit, c to continue without paging--c
#17 base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase>::Destruct ()
    at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:391
#18 base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::Release () at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:427
#19 base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::Release () at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:424
#20 scoped_refptr<mojo::core::ipcz_driver::SharedBuffer>::Release ()
    at ../../../../../src/3rdparty/chromium/base/memory/scoped_refptr.h:395
#21 scoped_refptr<mojo::core::ipcz_driver::SharedBuffer>::~scoped_refptr ()
    at ../../../../../src/3rdparty/chromium/base/memory/scoped_refptr.h:280
#22 mojo::core::ipcz_driver::DataPipe::~DataPipe ()
    at ../../../../../src/3rdparty/chromium/mojo/core/ipcz_driver/data_pipe.cc:145
#23 0x00007f5e38950b11 in mojo::core::ipcz_driver::DataPipe::~DataPipe ()
    at ../../../../../src/3rdparty/chromium/mojo/core/ipcz_driver/data_pipe.cc:145
#24 0x00007f5e38952a99 in base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::DeleteInternal<mojo::core::ipcz_driver::ObjectBase> ()
    at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:438
#25 base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase>::Destruct ()
    at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:391
#26 base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::Release () at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:427
#27 base::RefCountedThreadSafe<mojo::core::ipcz_driver::ObjectBase, base::DefaultRefCountedThreadSafeTraits<mojo::core::ipcz_driver::ObjectBase> >::Release () at ../../../../../src/3rdparty/chromium/base/memory/ref_counted.h:424
#28 scoped_refptr<mojo::core::ipcz_driver::ObjectBase>::Release ()
    at ../../../../../src/3rdparty/chromium/base/memory/scoped_refptr.h:395
#29 scoped_refptr<mojo::core::ipcz_driver::ObjectBase>::~scoped_refptr ()
    at ../../../../../src/3rdparty/chromium/base/memory/scoped_refptr.h:280
#30 Close () at ../../../../../src/3rdparty/chromium/mojo/core/ipcz_driver/driver.cc:41
#31 0x00007f5e38a7aa6a in absl::variant_internal::VariantStateBaseDestructorNontrivial<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >::destroy ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:1289
#32 absl::variant_internal::VariantCoreAccess::Destroy<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> > > ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:567
#33 absl::variant_internal::VariantCoreAccess::Replace<0ul, absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate> ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:711
#34 absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >::emplace<0ul, absl::monostate, (void*)0> ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/variant.h:660
#35 absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate>::operator()<1ul> ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:685
#36 std::__invoke_impl<void, absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate>, std::integral_constant<unsigned long, 1ul> > () at /usr/include/c++/15/bits/invoke.h:63
#37 std::__invoke<absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate>, std::integral_constant<unsigned long, 1ul> > () at /usr/include/c++/15/bits/invoke.h:98
#38 std::invoke<absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate>, std::integral_constant<unsigned long, 1ul> > () at /usr/include/c++/15/functional:122
#39 absl::variant_internal::ReachableSwitchCase<absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate>, 1ul>::Run () at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:283
#40 absl::variant_internal::VisitIndicesSwitch<4ul>::Run<absl::variant_internal::VariantCoreAccess::ConversionAssignVisitor<absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >, absl::monostate> > () at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/internal/variant.h:350
#41 absl::variant<absl::monostate, ipcz::DriverObject, ipcz::ApplicationObject, ipcz::Ref<ipcz::ParcelWrapper> >::operator=<absl::monostate, 0ul, absl::monostate, (void*)0> ()
    at ../../../../../src/3rdparty/chromium/third_party/abseil-cpp/absl/types/variant.h:591
#42 ipcz::Box::Close () at ../../../../../src/3rdparty/chromium/third_party/ipcz/src/ipcz/box.cc:31
#43 0x00007f5e38a78dac in Close () at ../../../../../src/3rdparty/chromium/third_party/ipcz/src/api.cc:32
#44 0x00007f5e3bafbdc1 in std::default_delete<mojo::DataPipeProducer>::operator() ()
    at /usr/include/c++/15/bits/unique_ptr.h:92
#45 std::default_delete<mojo::DataPipeProducer>::operator() () at /usr/include/c++/15/bits/unique_ptr.h:86
#46 std::__uniq_ptr_impl<mojo::DataPipeProducer, std::default_delete<mojo::DataPipeProducer> >::reset ()
    at /usr/include/c++/15/bits/unique_ptr.h:204
#47 std::unique_ptr<mojo::DataPipeProducer, std::default_delete<mojo::DataPipeProducer> >::reset ()
    at /usr/include/c++/15/bits/unique_ptr.h:511
#48 OnFileWritten () at ../../../../../src/3rdparty/chromium/content/browser/loader/file_url_loader_factory.cc:786
#49 0x00007f5e3bafabd5 in Invoke<void (content::(anonymous namespace)::FileURLLoader::*)(std::unique_ptr<content::FileURLLoaderObserver>, unsigned int), content::(anonymous namespace)::FileURLLoader*, std::nullptr_t, unsigned int> ()
    at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:729
#50 MakeItSo<void (content::(anonymous namespace)::FileURLLoader::*)(std::unique_ptr<content::FileURLLoaderObserver>, unsigned int), std::tuple<base::internal::UnretainedWrapper<content::(anonymous namespace)::FileURLLoader, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>, std::nullptr_t>, unsigned int> ()
    at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:921
#51 RunImpl<void (content::(anonymous namespace)::FileURLLoader::*)(std::unique_ptr<content::FileURLLoaderObserver>, unsigned int), std::tuple<base::internal::UnretainedWrapper<content::(anonymous namespace)::FileURLLoader, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>, std::nullptr_t>, 0, 1> ()
    at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:1058
#52 RunOnce () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:971
#53 0x00007f5e3dcdaf89 in base::OnceCallback<void (unsigned int)>::Run(unsigned int) && ()
    at ../../../../../src/3rdparty/chromium/base/functional/callback.h:156
#54 mojo::DataPipeProducer::OnWriteComplete ()
    at ../../../../../src/3rdparty/chromium/mojo/public/cpp/system/data_pipe_producer.cc:212
#55 0x00007f5e3dcdadb2 in base::internal::DecayedFunctorTraits<void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>&&, base::OnceCallback<void(unsigned int)>&&>::Invoke<void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer> const&, base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int> ()
    at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:729
#56 base::internal::InvokeHelper<true, base::internal::FunctorTraits<void (mojo::DataPipeProducer::*&&)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>&&, base::OnceCallback<void(unsigned int)>&&>, void, 0ul, 1ul>::MakeItSo<void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), std::tuple<base::WeakPtr<mojo::DataPipeProducer>, base::OnceCallback<void(unsigned int)> >, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int> () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:945
#57 base::internal::Invoker<base::internal::FunctorTraits<void (mojo::DataPipeProducer::*&&)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>&&, base::OnceCallback<void(unsigned int)>&&>, base::internal::BindState<true, true, false, void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>, base::OnceCallback<void(unsigned int)> >, void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>::RunImpl<void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), std::tuple<base::WeakPtr<mojo::DataPipeProducer>, base::OnceCallback<void(unsigned int)> >, 0ul, 1ul> () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:1058
#58 base::internal::Invoker<base::internal::FunctorTraits<void (mojo::DataPipeProducer::*&&)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>&&, base::OnceCallback<void(unsigned int)>&&>, base::internal::BindState<true, true, false, void (mojo::DataPipeProducer::*)(base::OnceCallback<void(unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int), base::WeakPtr<mojo::DataPipeProducer>, base::OnceCallback<void(unsigned int)> >, void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>::RunOnce () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:971
#59 0x00007f5e3dcdacaa in base::OnceCallback<void (mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>::Run(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int) && ()
    at ../../../../../src/3rdparty/chromium/base/functional/callback.h:156
#60 base::internal::DecayedFunctorTraits<base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>&&, unsigned int&&>::Invoke<base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int> () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:804
#61 base::internal::InvokeHelper<false, base::internal::FunctorTraits<base::OnceCallback<void (mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>&&, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>&&, unsigned int&&>, void, 0ul, 1ul>::MakeItSo<base::OnceCallback<void (mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, std::tuple<mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int>>(base::OnceCallback<void (mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>&&, std::tuple<mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int>&&) () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:921
#62 base::internal::Invoker<base::internal::FunctorTraits<base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>&&, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>&&, unsigned int&&>, base::internal::BindState<false, true, true, base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int>, void()>::RunImpl<base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, std::tuple<mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int>, 0ul, 1ul> () at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:1058
#63 base::internal::Invoker<base::internal::FunctorTraits<base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>&&, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>&&, unsigned int&&>, base::internal::BindState<false, true, true, base::OnceCallback<void(mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int)>, mojo::ScopedHandleBase<mojo::DataPipeProducerHandle>, unsigned int>, void()>::RunOnce ()
    at ../../../../../src/3rdparty/chromium/base/functional/bind_internal.h:971
#64 0x00007f5e3d34866e in base::OnceCallback<void ()>::Run() && ()
    at ../../../../../src/3rdparty/chromium/base/functional/callback.h:156
#65 base::TaskAnnotator::RunTaskImpl () at ./../../../../../src/3rdparty/chromium/base/task/common/task_annotator.cc:209
#66 0x00007f5e3d37e539 in RunTask<base::internal::TaskTracker::RunTaskImpl(base::internal::Task&, const base::TaskTraits&, base::internal::TaskSource*, const base::internal::SequenceToken&)::<lambda(perfetto::EventContext&)> > ()
    at ../../../../../src/3rdparty/chromium/base/task/common/task_annotator.h:106
#67 base::internal::TaskTracker::RunTaskImpl ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/task_tracker.cc:691
#68 0x00007f5e3d37ee14 in base::internal::TaskTracker::RunSkipOnShutdown ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/task_tracker.cc:676
#69 0x00007f5e3d37f0b0 in base::internal::TaskTracker::RunTask ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/task_tracker.cc:504
#70 0x00007f5e3d37dcbb in base::internal::TaskTracker::RunAndPopNextTask ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/task_tracker.cc:394
#71 0x00007f5e3d38b719 in base::internal::WorkerThread::RunWorker ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/worker_thread.cc:473
#72 0x00007f5e3d38bf4d in base::internal::WorkerThread::RunPooledWorker ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/worker_thread.cc:359
#73 0x00007f5e3d38c0db in base::internal::WorkerThread::ThreadMain ()
    at ./../../../../../src/3rdparty/chromium/base/task/thread_pool/worker_thread.cc:339
#74 0x00007f5e3d3a77c5 in ThreadFunc ()
    at ./../../../../../src/3rdparty/chromium/base/threading/platform_thread_posix.cc:103
#75 0x00007f5e32e7b464 in start_thread (arg=<optimized out>) at pthread_create.c:448
#76 0x00007f5e32efe5ac in __GI___clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78