Bug 514016

Summary: PlasmaShell SegV'd in QtPipeWire::QAudioContextManager::withEventLoopLock when playing War Thunder
Product: [Plasma] plasmashell Reporter: Roke Julian Lockhart Beedell <4wy78uwh>
Component: generic-crashAssignee: Plasma Bugs List <plasma-bugs-null>
Status: RESOLVED DOWNSTREAM    
Severity: crash CC: kdedev, nate
Priority: NOR Keywords: drkonqi, qt-crash
Version First Reported In: 6.5.4   
Target Milestone: 1.0   
Platform: Fedora RPMs   
OS: Linux   
See Also: https://bugzilla.redhat.com/show_bug.cgi?id=2411800
https://github.com/abrt/abrt/issues/1689#issue-3786852562
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report: https://crash-reports.kde.org/organizations/kde/issues/339741/events/47ed00f1220c44dc898dab92015684e7/
Attachments: New crash information added by DrKonqi

Description Roke Julian Lockhart Beedell 2025-12-31 16:51:05 UTC 
Application: plasmashell (6.5.4)

ApplicationNotResponding [ANR]: false
Qt Version: 6.10.1
Frameworks Version: 6.21.0
Operating System: Linux 6.17.12-300.fc43.x86_64 x86_64
Windowing System: Wayland
Distribution: "Fedora Linux 43 (KDE Plasma Desktop Edition)"
DrKonqi: 6.5.4 [CoredumpBackend]

-- Information about the crash:
When playing https://steamdb.info/depot/236391/history/?changeid=M:8993648880144243669, I observed:

> Id            d6a6837  
> Component     plasma-workspace  
> Count         1  
> Time          2025-12-31 16:30:29  
> Command line  /usr/bin/plasmashell --no-respawn  
> Package       plasma-workspace-6.5.4-1.fc43  
> User id       1000 (RokeJulianLockhart)  
> Path          /var/spool/abrt/ccpp-2025-12-31-16:30:29.246799-2045

>            PID: 2045 (plasmashell)
>            UID: 1000 (RokeJulianLockhart)
>            GID: 1000 (RokeJulianLockhart)
>         Signal: 11 (SEGV)
>      Timestamp: Wed 2025-12-31 16:30:27 GMT (18min ago)
>   Command Line: /usr/bin/plasmashell --no-respawn
>     Executable: /usr/bin/plasmashell
>  Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/plasma-plasmashell.service
>           Unit: user@1000.service
>      User Unit: plasma-plasmashell.service
>          Slice: user-1000.slice
>      Owner UID: 1000 (RokeJulianLockhart)
>        Boot ID: 7b842d190e1a47f2a5d751d411063031
>     Machine ID: b4f0bef5ffd640fba0ab31fdaa2820b8
>       Hostname: Beedell.RokeJulianLockhart.desktop.SSV2AY
>        Storage: /var/lib/systemd/coredump/core.plasmashell.1000.7b842d190e1a47f2a5d751d411063031.2045.1767198627000000.zst (present)
>   Size on Disk: 44.6M
>        Package: plasma-workspace/6.5.4-1.fc43
>       build-id: dd1d4de61384102884298328f023885b17cbc2fd
>        Message: Process 2045 (plasmashell) of user 1000 dumped core.

The crash does not seem to be reproducible.

-- Backtrace (Reduced):
#5  0x00007f3af502b0ab in spa_list_insert (list=<optimized out>, elem=0x7f3ae400abb8) at ../spa/include/spa/utils/list.h:56
#6  spa_hook_list_append (list=0x562281e254c8, hook=0x7f3ae400abb8, funcs=<optimized out>, data=0x7f3ae400abb0) at ../spa/include/spa/utils/hook.h:443
#7  pw_proxy_add_object_listener (proxy=0x562281e25470, listener=0x7f3ae400abb8, funcs=<optimized out>, data=0x7f3ae400abb0) at ../src/pipewire/proxy.c:185
#8  0x00007f3aeb9c39dd in core_method_marshal_add_listener () at ../src/modules/module-protocol-native/protocol-native.c:25
#9  0x00007f3af56b1bc6 in pw_core_add_listener (object=0x562281e25470, listener=0x7f3ae400abb8, events=0x7f3ae400abe8, data=0x7f3ae400abb0) at /usr/include/pipewire-0.3/pipewire/core.h:354
#10 operator() (__closure=<optimized out>) at /usr/src/debug/qt6-qtmultimedia-6.10.1-1.fc43.x86_64/src/multimedia/pipewire/qpipewire_async_support.cpp:111
#12 QtPipeWire::CoreEventDoneListener::asyncWait (this=0x7f3ae400abb0, coreConnection=0x562281e25470, handler=...) at /usr/src/debug/qt6-qtmultimedia-6.10.1-1.fc43.x86_64/src/multimedia/pipewire/qpipewire_async_support.cpp:110
#14 0x00007f3af56aefaa in QtPipeWire::QAudioDeviceMonitor::objectAdded (this=0x56228299c840, id=..., objectType=<optimized out>, propDict=<optimized out>) at /usr/src/debug/qt6-qtmultimedia-6.10.1-1.fc43.x86_64/src/multimedia/pipewire/qpipewire_audiodevicemonitor.cpp:138
#15 QtPipeWire::QAudioContextManager::objectAdded (permissions=<optimized out>, this=<optimized out>, id=..., type=<optimized out>, version=<optimized out>, props=<optimized out>) at /usr/src/debug/qt6-qtmultimedia-6.10.1-1.fc43.x86_64/src/multimedia/pipewire/qpipewire_audiocontextmanager.cpp:246
#16 QtPipeWire::QAudioContextManager::objectAddedCb (data=<optimized out>, id=<optimized out>, permissions=<optimized out>, type=<optimized out>, version=<optimized out>, props=<optimized out>) at /usr/src/debug/qt6-qtmultimedia-6.10.1-1.fc43.x86_64/src/multimedia/pipewire/qpipewire_audiocontextmanager.cpp:226
#17 0x00007f3aeb9d184e in registry_demarshal_global (data=<optimized out>, msg=<optimized out>) at ../src/modules/module-protocol-native/protocol-native.c:1827
#18 0x00007f3aeb9c294c in process_remote (impl=impl@entry=0x562282a830c0) at ../src/modules/module-protocol-native.c:1095
#19 0x00007f3aeb9c3008 in on_remote_data (data=0x562282a830c0, fd=38, mask=1) at ../src/modules/module-protocol-native.c:1129
#20 0x00007f3af69177c6 in loop_iterate (object=<optimized out>, timeout=<optimized out>) at ../spa/plugins/support/loop.c:726
#21 0x00007f3af50374d4 in spa_loop_control_iterate_fast (object=<optimized out>, timeout=-1) at ../spa/include/spa/support/loop.h:312
#22 pw_loop_iterate (object=<optimized out>, timeout=-1) at ../src/pipewire/loop.h:89


Reported using DrKonqi
Comment 1 Roke Julian Lockhart Beedell 2025-12-31 16:51:06 UTC 
Created attachment 188117 [details]
New crash information added by DrKonqi

DrKonqi auto-attaching complete backtrace.
Comment 2 TraceyC 2025-12-31 17:27:06 UTC 
The crash looks to be in Qt and pipewire
Comment 3 Roke Julian Lockhart Beedell 2025-12-31 22:35:47 UTC 
Reported downstream, at https://bugzilla.redhat.com/show_bug.cgi?id=2411800#c29. The data shall be available at https://retrace.fedoraproject.org/faf/reports/bthash/445592a628223fa33897ec2b0bd1259b9b654d29 for P6M.
Comment 4 Nate Graham 2026-01-06 17:20:48 UTC 
Yeah, no KDE code is implicated. It'll likely end up being a bug in either Qt or Pipewire, but let's see what Fedora folks say about it.
Comment 5 Roke Julian Lockhart Beedell 2026-01-06 23:09:06 UTC 
(In reply to Nate Graham from comment #4)

> Yeah, no KDE code is implicated. It'll likely end up being a bug in either
> Qt or Pipewire, but let's see what Fedora folks say about it.

Unfortunately, I doubt that they'll triage a single Abrt-produced comment at RHBZ. If it were its own Abrt-reported bug, I'd agree, but LibReport doesn't always parse what's been uploaded to FAF correctly; unlike Konqi, Abrt is too aggressive to remove duplicates.

I don't know how tall of a request this is, but if you can somehow differentiate whether Qt or PW are the highest abstraction here, I'll file a bug with either of them, instead (hopefully, PW, since Qt appears to require me to produce a CPP reproducer, and confirm in openSUSE Leap, or Ubuntu 22.04).

Unless, I suppose, filing a manually-crafted bug at RHBZ is more applicable. If it is, what should I say…? 😅
Comment 6 Nate Graham 2026-01-06 23:15:39 UTC 
I don't know, sorry.
Comment 7 Roke Julian Lockhart Beedell 2026-01-06 23:50:11 UTC 
No worries; I'll return here if I've ever a solution to https://github.com/abrt/abrt/issues/1689#issue-3786852562. Thanks, regardless.