Bug 405663 - Tile manager crash while transforming a frame. [GDB backtrace]
Summary: Tile manager crash while transforming a frame. [GDB backtrace]
Status: RESOLVED FIXED
Alias: None
Product: krita
Classification: Applications
Component: Tile manager (show other bugs)
Version: git master (please specify the git hash!)
Platform: Other Linux
: NOR crash
Target Milestone: ---
Assignee: Krita Bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-03-19 21:29 UTC by wolthera
Modified: 2019-03-21 12:23 UTC (History)
0 users

See Also:
Latest Commit: https://commits.kde.org/krita/64dc4d5b7431598d3b28ab858322281712a32019
Version Fixed In:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description wolthera 2019-03-19 21:29:47 UTC 
SUMMARY
Free Transformation on an animation frame caused this crash, didn't try to reproduce, doesn't always happen.

GDB backtrace:

free(): invalid pointer

Thread 14435 "Thread (pooled)" received signal SIGABRT, Aborted.
[Switching to Thread 0x7fff9588c700 (LWP 3230)]
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51      ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) thread apply all backtrace

Thread 14439 (Thread 0x7fff83229700 (LWP 3234)):
#0  tcache_get (tc_idx=0) at malloc.c:2943
#1  __GI___libc_malloc (bytes=16) at malloc.c:3050
#2  0x00007ffff2da61a8 in operator new(unsigned long) ()
   from /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#3  0x00007ffff51492c8 in KisLocklessStack<unsigned char*>::push (
    this=0x7ffff591b348 <KisTileData::m_cache+8>, 
    data=0x7fff4096b010 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377"...)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_lockless_stack.h:55
#4  0x00007ffff5148e3c in SimpleCache::push (this=0x7ffff591b340 <KisTileData::m_cache>, 
    pixelSize=4, 
    ptr=@0x7fff832285d8: 0x7fff4096b010 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377"...) at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data_interface.h:57
#5  0x00007ffff51483db in KisTileData::freeData (
    ptr=0x7fff4096b010 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377"..., 
    pixelSize=4) at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.cc:170
#6  0x00007ffff5148070 in KisTileData::releaseMemory (this=0x7fff5408c160)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.cc:129
#7  0x00007ffff5147fae in KisTileData::~KisTileData (this=0x7fff5408c160, 
    __in_chrg=<optimized out>)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.cc:114
#8  0x00007ffff514c579 in KisTileDataStore::freeTileData (
    this=0x7ffff591b4e0 <(anonymous namespace)::Q_QGS_s_instance::innerFunction()::holder>, 
    td=0x7fff5408c160)
---Type <return> to continue, or q <return> to quit---
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data_store.cc:204
#9  0x00007ffff5145787 in KisTileData::deref (this=0x7fff5408c160)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.h:81
#10 0x00007ffff514571e in KisTileData::release (this=0x7fff5408c160)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.h:69
#11 0x00007ffff5144964 in KisTile::~KisTile (this=0x7fff5406e1f0, __in_chrg=<optimized out>)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile.cc:91
#12 0x00007ffff5146d21 in KisSharedPtr<KisTile>::deref (sp=0x555570b80dc0, t=0x7fff5406e1f0)
    at /home/wolthera/krita/src/libs/global/kis_shared_ptr.h:211
#13 0x00007ffff515c302 in KisTileHashTableTraits2<KisTile>::MemoryReclaimer::destroy (
    this=0x555570b80dc0)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_hash_table2.h:122
#14 0x00007ffff515c397 in void QSBR::enqueue<KisTileHashTableTraits2<KisTile>::MemoryReclaimer>(void (KisTileHashTableTraits2<KisTile>::MemoryReclaimer::*)(), KisTileHashTableTraits2<KisTile>::MemoryReclaimer*, bool)::Closure::thunk(void*) (param=0x7fff83228848)
    at /home/wolthera/krita/src/libs/image/3rdparty/lock_free_map/qsbr.h:67
#15 0x00007ffff514d334 in QSBR::Action::operator() (this=0x7fff83228840)
    at /home/wolthera/krita/src/libs/image/3rdparty/lock_free_map/qsbr.h:38
#16 0x00007ffff514d37a in QSBR::releasePoolSafely (this=0x55556efa8978, pool=0x55556efa8980)
    at /home/wolthera/krita/src/libs/image/3rdparty/lock_free_map/qsbr.h:51
#17 0x00007ffff515732c in QSBR::update (this=0x55556efa8978, migrationInProgress=true)
    at /home/wolthera/krita/src/libs/image/3rdparty/lock_free_map/qsbr.h:83
#18 0x00007ffff515d818 in KisTileHashTableTraits2<KisTile>::erase (this=0x55556efa8970, 
    idx=589848) at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_hash_table2.h:184
#19 0x00007ffff51591a6 in KisTileHashTableTraits2<KisTile>::deleteTile (
    this=0x55556efa8970, col=24, row=9)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_hash_table2.h:409
#20 0x00007ffff515555d in KisTiledDataManager::clear (this=0x55557089ca50, clearRect=..., 
    clearPixel=0x555571869040 "\335\335\335\377UU")
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tiled_data_manager.cc:372
#21 0x00007ffff51558e5 in KisTiledDataManager::clear (this=0x55557089ca50, x=1536, y=512, 
    w=64, h=388, clearPixel=0x555571869040 "\335\335\335\377UU")
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tiled_data_manager.cc:425
#22 0x00007ffff5459f87 in KisDataManager::clear (this=0x55557089ca50, x=1536, y=512, w=64, 
    h=388, def=0x555571869040 "\335\335\335\377UU")
    at /home/wolthera/krita/src/libs/image/kis_datamanager.h:200
#23 0x00007ffff546011e in KisPaintDevice::Private::KisPaintDeviceStrategy::clear (
    this=0x555571da4c10, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_paint_device_strategies.h:75
#24 0x00007ffff54548d4 in KisPaintDevice::clear (this=0x5555658042e0, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_paint_device.cc:1474
#25 0x00007ffff52e42f0 in KisAsyncMerger::setupProjection (this=0x555572a7e7c8, 
    currentLeaf=..., rect=..., useTempProjection=false)
    at /home/wolthera/krita/src/libs/image/kis_async_merger.cpp:322

#26 0x00007ffff52de7d1 in KisAsyncMerger::startMerge (this=0x555572a7e7c8, walker=..., 
    notifyClones=true) at /home/wolthera/krita/src/libs/image/kis_async_merger.cpp:245
#27 0x00007ffff5561b36 in KisUpdateJobItem::runMergeJob (this=0x555572a7e780)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:118
---Type <return> to continue, or q <return> to quit---
#28 0x00007ffff5561975 in KisUpdateJobItem::run (this=0x555572a7e780)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:86
#29 0x00007ffff3148352 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#30 0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#31 0x00007fffebfc36db in start_thread (arg=0x7fff83229700) at pthread_create.c:463
#32 0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14438 (Thread 0x7fff85ffb700 (LWP 3233)):
#0  0x00007fffebfc9ed9 in futex_reltimed_wait_cancelable (private=<optimized out>, 
    reltime=0x7fff85ffabc0, expected=0, futex_word=0x7fff7c01aaf4)
    at ../sysdeps/unix/sysv/linux/futex-internal.h:142
#1  __pthread_cond_wait_common (abstime=0x7fff85ffac80, mutex=0x7fff7c01aaa0, 
    cond=0x7fff7c01aac8) at pthread_cond_wait.c:533
#2  __pthread_cond_timedwait (cond=0x7fff7c01aac8, mutex=0x7fff7c01aaa0, 
    abstime=0x7fff85ffac80) at pthread_cond_wait.c:667
#3  0x00007ffff314aac6 in QWaitCondition::wait(QMutex*, QDeadlineTimer) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff314ae25 in QWaitCondition::wait(QMutex*, unsigned long) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff31485dd in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#7  0x00007fffebfc36db in start_thread (arg=0x7fff85ffb700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14437 (Thread 0x7fff86ffd700 (LWP 3232)):
#0  0x00007fffc28b3e06 in ?? () from /usr/lib/x86_64-linux-gnu/liblcms2.so.2
#1  0x00007fffc289e2e1 in ?? () from /usr/lib/x86_64-linux-gnu/liblcms2.so.2
#2  0x00007fffc289ebf6 in cmsDoTransform () from /usr/lib/x86_64-linux-gnu/liblcms2.so.2
#3  0x00007fffbabcec3b in KoLcmsColorConversionTransformation::transform (
    this=0x7fff60003ea0, 
    src=0x55556e5011b0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\334\334\335\377\331\331\334\377\316\316\330\377\276\276\316\377\257\257\303\377\252\252\277\377\251\251\276\377\251\251\276\377\251\251\276\377\251\251\276\377"..., 
    dst=0x7fff8512a010 "\334\334\334=\334\334\334", numPixels=20480)
    at /home/wolthera/krita/src/plugins/color/lcms2engine/IccColorSpaceEngine.cpp:79
#4  0x00007fffefbcf782 in KoColorSpace::convertPixelsTo (this=0x555559f9d360, 
    src=0x55556e5011b0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\3---Type <return> to continue, or q <return> to quit---
35\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\334\334\335\377\331\331\334\377\316\316\330\377\276\276\316\377\257\257\303\377\252\252\277\377\251\251\276\377\251\251\276\377\251\251\276\377\251\251\276\377"..., 
    dst=0x7fff8512a010 "\334\334\334=\334\334\334", dstColorSpace=0x5555704a1e50, 
    numPixels=20480, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...) at /home/wolthera/krita/src/libs/pigment/KoColorSpace.cpp:430
#5  0x00007fffba84ffcf in KoColorSpaceAbstract<KoBgrU8Traits>::convertPixelsTo (
    this=0x555559f9d360, 
    src=0x55556e5011b0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\334\334\335\377\331\331\334\377\316\316\330\377\276\276\316\377\257\257\303\377\252\252\277\377\251\251\276\377\251\251\276\377\251\251\276\377\251\251\276\377"..., 
    dst=0x7fff8512a010 "\334\334\334=\334\334\334", dstColorSpace=0x5555704a1e50, 
    numPixels=20480, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...) at /home/wolthera/krita/src/libs/pigment/KoColorSpaceAbstract.h:193
#6  0x00007ffff692c6fa in KisTextureTileUpdateInfo::convertTo (this=0x7fff580791b0, 
    dstCS=0x5555704a1e50, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_texture_tile_update_info.h:237
#7  0x00007ffff692a615 in KisOpenGLUpdateInfoBuilder::buildUpdateInfo (this=0x55556eedd790, 
    rect=..., projection=..., bounds=..., levelOfDetail=0, convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/KisOpenGLUpdateInfoBuilder.cpp:160
#8  0x00007ffff6929c48 in KisOpenGLUpdateInfoBuilder::buildUpdateInfo (this=0x55556eedd790, 
    rect=..., srcImage=..., convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/KisOpenGLUpdateInfoBuilder.cpp:61
#9  0x00007ffff691e8fd in KisOpenGLImageTextures::updateCacheImpl (this=0x55556eedd700, 
    rect=..., srcImage=..., convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_image_textures.cpp:258
#10 0x00007ffff691e771 in KisOpenGLImageTextures::updateCache (this=0x55556eedd700, 
    rect=..., srcImage=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_image_textures.cpp:246

#11 0x00007ffff6915d2d in KisOpenGLCanvas2::startUpdateCanvasProjection (this=
    0x55556f114250, rc=..., channelFlags=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_canvas2.cpp:933
#12 0x00007ffff6688e9d in KisCanvas2::startUpdateCanvasProjection (this=0x5555719cbbe0, 
    rc=...) at /home/wolthera/krita/src/libs/ui/canvas/kis_canvas2.cpp:780
#13 0x00007ffff6c0f439 in KisCanvas2::qt_static_metacall (_o=0x5555719cbbe0, 
    _c=QMetaObject::InvokeMetaMethod, _id=20, _a=0x7fff86ffcb90)
    at /home/wolthera/krita/build/libs/ui/kritaui_autogen/KGLXD3X7AI/moc_kis_canvas2.cpp:223
#14 0x00007ffff334be25 in QMetaObject::activate(QObject*, int, int, void**) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
---Type <return> to continue, or q <return> to quit---
#15 0x00007ffff555a090 in KisImage::sigImageUpdated (this=0x55556ede4af0, _t1=...)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/moc_kis_image.cpp:664
#16 0x00007ffff5330e45 in KisImage::notifyProjectionUpdated (this=0x55556ede4af0, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_image.cc:1661
#17 0x00007ffff530c14c in KisUpdateScheduler::continueUpdate (this=0x5555726c8a30, rect=...)
    at /home/wolthera/krita/src/libs/image/kis_update_scheduler.cpp:457
#18 0x00007ffff52ea860 in KisUpdaterContext::continueUpdate (this=0x55556bb9f8a0, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_updater_context.cpp:285
#19 0x00007ffff5561b6d in KisUpdateJobItem::runMergeJob (this=0x55556ee67e60)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:121
#20 0x00007ffff5561975 in KisUpdateJobItem::run (this=0x55556ee67e60)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:86
#21 0x00007ffff3148352 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#22 0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#23 0x00007fffebfc36db in start_thread (arg=0x7fff86ffd700) at pthread_create.c:463
#24 0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14436 (Thread 0x7fff867fc700 (LWP 3231)):
#0  0x00007fffba258873 in CLAMP<double, int, int> (x=255, l=0, u=255)
    at /home/wolthera/krita/src/libs/pigment/KoIntegerMaths.h:62
#1  0x00007fffba25775b in KoColorSpaceMaths<double, unsigned char>::scaleToA (a=1)
    at /home/wolthera/krita/src/libs/pigment/KoColorSpaceMaths.h:312
#2  0x00007fffba5a0600 in KoColorSpaceTrait<unsigned char, 4, 3>::setOpacity (
    pixels=0x7fff8433437c "\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\333\333\334\377\331\331\334\377\321\320\332\377\305\304\325\377\267\267\315\377\255\255\306\377\246\246\300\377\243\243\275\377\241\241\274\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377"..., 
    alpha=1, nPixels=1) at /home/wolthera/krita/src/libs/pigment/KoColorSpaceTraits.h:103
#3  0x00007fffba850206 in KoColorSpaceAbstract<KoBgrU8Traits>::setOpacity (
    this=0x5555704a1e50, 
    pixels=0x7fff8433437c "\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\333\333\334\377\331\331\334\377\321\320\332\377\305\304\325\377\267\267\315\377\255\255\306\377\246\246\300\377\243\243\275\377\241\241\274\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377"..., 
    alpha=1, nPixels=1) at /home/wolthera/krita/src/libs/pigment/KoColorSpaceAbstract.h:112
#4  0x00007fffbabceca3 in KoLcmsColorConversionTransformation::transform (
---Type <return> to continue, or q <return> to quit---
    this=0x7fff64064ec0, 
    src=0x55556de8b51c "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\334\334\335\377\332\332\335\377\322\322\332\377\306\306\324\377\271\271\313\377\257\257\303\377\250\250\275\377\245\245\272\377\243\243\271\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\242\242\270\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377"..., 
    dst=0x7fff8433437c "\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\333\333\334\377\331\331\334\377\321\320\332\377\305\304\325\377\267\267\315\377\255\255\306\377\246\246\300\377\243\243\275\377\241\241\274\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\240\240\273\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377"..., 
    numPixels=10021)
    at /home/wolthera/krita/src/plugins/color/lcms2engine/IccColorSpaceEngine.cpp:83
#5  0x00007fffefbcf782 in KoColorSpace::convertPixelsTo (this=0x555559f9d360, 
    src=0x55556de811b0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\332\332\335\377\306\306\323\377\251\251\276\377\230\230\257\377\223\223\253\377\222\222\252\377\224\224\254\377\224\224\254\377\221\221\251\377\216\216\247\377\216\216\247\377\215\215\246\377\214\214\245\377\214\214\245\377\215\215\246\377\215\215\246\377\215\215\246\377"..., 
    dst=0x7fff8432a010 "\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\331\331\334\377\305\304\324\377\247\247\301\377\226\226\262\377\221\221\256\377\220\220\255\377\222\222\257\377\222\222\257\377\217\217\254\377\214\214\252\377\214\214\252\377\213\213\251\377\212\212\250\377\212\212\250\377\213\213\251\377\213\213\251\377\213\213\251\377"..., 
    dstColorSpace=0x5555704a1e50, numPixels=20480, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...) at /home/wolthera/krita/src/libs/pigment/KoColorSpace.cpp:430
#6  0x00007fffba84ffcf in KoColorSpaceAbstract<KoBgrU8Traits>::convertPixelsTo (
    this=0x555559f9d360, 
    src=0x55556de811b0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335---Type <return> to continue, or q <return> to quit---
\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\332\332\335\377\306\306\323\377\251\251\276\377\230\230\257\377\223\223\253\377\222\222\252\377\224\224\254\377\224\224\254\377\221\221\251\377\216\216\247\377\216\216\247\377\215\215\246\377\214\214\245\377\214\214\245\377\215\215\246\377\215\215\246\377\215\215\246\377"..., 
    dst=0x7fff8432a010 "\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\334\334\334\377\331\331\334\377\305\304\324\377\247\247\301\377\226\226\262\377\221\221\256\377\220\220\255\377\222\222\257\377\222\222\257\377\217\217\254\377\214\214\252\377\214\214\252\377\213\213\251\377\212\212\250\377\212\212\250\377\213\213\251\377\213\213\251\377\213\213\251\377"..., 
    dstColorSpace=0x5555704a1e50, numPixels=20480, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...) at /home/wolthera/krita/src/libs/pigment/KoColorSpaceAbstract.h:193
#7  0x00007ffff692c6fa in KisTextureTileUpdateInfo::convertTo (this=0x7fff740550f0, 
    dstCS=0x5555704a1e50, 
    renderingIntent=KoColorConversionTransformation::IntentRelativeColorimetric, 
    conversionFlags=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_texture_tile_update_info.h:237
#8  0x00007ffff692a615 in KisOpenGLUpdateInfoBuilder::buildUpdateInfo (this=0x55556eedd790, 
    rect=..., projection=..., bounds=..., levelOfDetail=0, convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/KisOpenGLUpdateInfoBuilder.cpp:160
#9  0x00007ffff6929c48 in KisOpenGLUpdateInfoBuilder::buildUpdateInfo (this=0x55556eedd790, 
    rect=..., srcImage=..., convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/KisOpenGLUpdateInfoBuilder.cpp:61
#10 0x00007ffff691e8fd in KisOpenGLImageTextures::updateCacheImpl (this=0x55556eedd700, 
    rect=..., srcImage=..., convertColorSpace=true)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_image_textures.cpp:258
#11 0x00007ffff691e771 in KisOpenGLImageTextures::updateCache (this=0x55556eedd700, 
    rect=..., srcImage=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_image_textures.cpp:246
#12 0x00007ffff6915d2d in KisOpenGLCanvas2::startUpdateCanvasProjection (
    this=0x55556f114250, rc=..., channelFlags=...)
    at /home/wolthera/krita/src/libs/ui/opengl/kis_opengl_canvas2.cpp:933
#13 0x00007ffff6688e9d in KisCanvas2::startUpdateCanvasProjection (this=0x5555719cbbe0, 
    rc=...) at /home/wolthera/krita/src/libs/ui/canvas/kis_canvas2.cpp:780
#14 0x00007ffff6c0f439 in KisCanvas2::qt_static_metacall (_o=0x5555719cbbe0, 
    _c=QMetaObject::InvokeMetaMethod, _id=20, _a=0x7fff867fbb90)
    at /home/wolthera/krita/build/libs/ui/kritaui_autogen/KGLXD3X7AI/moc_kis_canvas2.cpp:223
#15 0x00007ffff334be25 in QMetaObject::activate(QObject*, int, int, void**) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#16 0x00007ffff555a090 in KisImage::sigImageUpdated (this=0x55556ede4af0, _t1=...)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/moc_kis_image.cpp:664
#17 0x00007ffff5330e45 in KisImage::notifyProjectionUpdated (this=0x55556ede4af0, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_image.cc:1661
---Type <return> to continue, or q <return> to quit---
#18 0x00007ffff530c14c in KisUpdateScheduler::continueUpdate (this=0x5555726c8a30, rect=...)
    at /home/wolthera/krita/src/libs/image/kis_update_scheduler.cpp:457
#19 0x00007ffff52ea860 in KisUpdaterContext::continueUpdate (this=0x55556bb9f8a0, rc=...)
    at /home/wolthera/krita/src/libs/image/kis_updater_context.cpp:285
#20 0x00007ffff5561b6d in KisUpdateJobItem::runMergeJob (this=0x55556eaa31d0)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:121
#21 0x00007ffff5561975 in KisUpdateJobItem::run (this=0x55556eaa31d0)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:86
#22 0x00007ffff3148352 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#23 0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#24 0x00007fffebfc36db in start_thread (arg=0x7fff867fc700) at pthread_create.c:463
#25 0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14435 (Thread 0x7fff9588c700 (LWP 3230)):
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff274a801 in __GI_abort () at abort.c:79
#2  0x00007ffff2793897 in __libc_message (action=action@entry=do_abort, 
    fmt=fmt@entry=0x7ffff28c0b9a "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#3  0x00007ffff279a90a in malloc_printerr (
    str=str@entry=0x7ffff28bed88 "free(): invalid pointer") at malloc.c:5350
#4  0x00007ffff27a1e1c in _int_free (have_lock=0, p=0x7fff5541b5af, 
    av=0x7ffff2af5c40 <main_arena>) at malloc.c:4157
#5  __GI___libc_free (mem=0x7fff5541b5bf) at malloc.c:3124
#6  0x00007ffff51493f0 in KisLocklessStack<unsigned char*>::pop (
    this=0x7ffff591b348 <KisTileData::m_cache+8>, 
    value=@0x7fff9588b3d0: 0x55556762cbb0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\315\315\330\377\262\262\305\377\256\256\302\377\254\254\301\377\246\246\274\377\247\247\274\377\262\262\305\377\324\324\333\377"...) at /home/wolthera/krita/src/libs/image/tiles3/kis_lockless_stack.h:94
#7  0x00007ffff5148f27 in SimpleCache::pop (this=0x7ffff591b340 <KisTileData::m_cache>, 
    pixelSize=4, 
    ptr=@0x7fff9588b3d0: 0x55556762cbb0 "\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\335\335\335\377\315\315\330\377\262\262\305\377\256\256\302\377\254\254\301\377\246\246\274\377\247\247\274\377\262\262\305\377\324\324\333\377"...) at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data_interface.h:77
---Type <return> to continue, or q <return> to quit---
#8  0x00007ffff5148358 in KisTileData::allocateData (pixelSize=4)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.cc:151
#9  0x00007ffff5147f21 in KisTileData::KisTileData (this=0x7fff602e8940, rhs=..., 
    checkFreeMemory=true) at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.cc:106
#10 0x00007ffff514c398 in KisTileDataStore::duplicateTileData (
    this=0x7ffff591b4e0 <(anonymous namespace)::Q_QGS_s_instance::innerFunction()::holder>, 
    rhs=0x55556f2e3ef0)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data_store.cc:176
#11 0x00007ffff51457b7 in KisTileData::clone (this=0x55556f2e3ef0)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile_data.h:88
#12 0x00007ffff5144bba in KisTile::lockForWrite (this=0x7fff600bd960)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_tile.cc:251
#13 0x00007ffff5171f7e in KisRandomAccessor2::lockTile (this=0x7fff602e6840, tile=...)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_random_accessor.h:51
#14 0x00007ffff5171d2e in KisRandomAccessor2::fetchTileData (this=0x7fff602e6840, col=16, 
    row=8) at /home/wolthera/krita/src/libs/image/tiles3/kis_random_accessor.cc:124
#15 0x00007ffff5171bd6 in KisRandomAccessor2::moveTo (this=0x7fff602e6840, x=1024, y=512)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_random_accessor.cc:89
#16 0x00007ffff51717a9 in KisRandomAccessor2::KisRandomAccessor2 (this=0x7fff602e6840, 
    ktm=0x7fffc4029a60, x=1024, y=512, offsetX=0, offsetY=0, writable=true, 
    completeListener=0x7fff8c03a100)
    at /home/wolthera/krita/src/libs/image/tiles3/kis_random_accessor.cc:38
#17 0x00007ffff546075d in KisPaintDevice::Private::KisPaintDeviceStrategy::createRandomAccessorNG (this=0x7fff8c02a920, x=1024, y=512)
    at /home/wolthera/krita/src/libs/image/kis_paint_device_strategies.h:111
#18 0x00007ffff5456c65 in KisPaintDevice::createRandomAccessorNG (this=0x55555de2baa0, 
    x=1024, y=512) at /home/wolthera/krita/src/libs/image/kis_paint_device.cc:1785
#19 0x00007ffff5195d37 in KisPainter::bitBltImpl<false> (this=0x7fff9588b920, dstX=1024, 
    dstY=512, srcDev=..., srcX=1024, srcY=512, srcWidth=512, srcHeight=388)
    at /home/wolthera/krita/src/libs/image/kis_painter.cc:653
#20 0x00007ffff5180187 in KisPainter::bitBlt (this=0x7fff9588b920, dstX=1024, dstY=512, 
    srcDev=..., srcX=1024, srcY=512, srcWidth=512, srcHeight=388)
    at /home/wolthera/krita/src/libs/image/kis_painter.cc:773
#21 0x00007ffff5180288 in KisPainter::bitBlt (this=0x7fff9588b920, pos=..., srcDev=..., 
    srcRect=...) at /home/wolthera/krita/src/libs/image/kis_painter.cc:779

#22 0x00007ffff547a7dd in KisPaintLayer::copyOriginalToProjection (this=0x55556632c8d0, 
    original=..., projection=..., rect=...)
    at /home/wolthera/krita/src/libs/image/kis_paint_layer.cc:172
#23 0x00007ffff535309a in KisLayer::applyMasks (this=0x55556632c8d0, source=..., 
    destination=..., requestedRect=..., filthyNode=..., lastNode=...)
    at /home/wolthera/krita/src/libs/image/kis_layer.cc:759
#24 0x00007ffff5353f7e in KisLayer::updateProjection (this=0x55556632c8d0, rect=..., 
    filthyNode=...) at /home/wolthera/krita/src/libs/image/kis_layer.cc:850
#25 0x00007ffff535fe7d in KisLayerProjectionPlane::recalculate (this=0x55556f19a370, 
    rect=..., filthyNode=...)
    at /home/wolthera/krita/src/libs/image/kis_layer_projection_plane.cpp:47
#26 0x00007ffff52de901 in KisAsyncMerger::startMerge (this=0x555572a888b8, walker=..., 
    notifyClones=true) at /home/wolthera/krita/src/libs/image/kis_async_merger.cpp:256
#27 0x00007ffff5561b36 in KisUpdateJobItem::runMergeJob (this=0x555572a88870)
---Type <return> to continue, or q <return> to quit---
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:118
#28 0x00007ffff5561975 in KisUpdateJobItem::run (this=0x555572a88870)
    at /home/wolthera/krita/build/libs/image/kritaimage_autogen/EWIEGA46WW/../../../../../src/libs/image/kis_update_job_item.h:86
#29 0x00007ffff3148352 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#30 0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#31 0x00007fffebfc36db in start_thread (arg=0x7fff9588c700) at pthread_create.c:463
#32 0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14434 (Thread 0x7fff87fff700 (LWP 3229)):
#0  0x00007fffebfc9ed9 in futex_reltimed_wait_cancelable (private=<optimized out>, 
    reltime=0x7fff87ffebc0, expected=0, futex_word=0x7fff74069224)
    at ../sysdeps/unix/sysv/linux/futex-internal.h:142
#1  __pthread_cond_wait_common (abstime=0x7fff87ffec80, mutex=0x7fff740691d0, 
    cond=0x7fff740691f8) at pthread_cond_wait.c:533
#2  __pthread_cond_timedwait (cond=0x7fff740691f8, mutex=0x7fff740691d0, 
    abstime=0x7fff87ffec80) at pthread_cond_wait.c:667
#3  0x00007ffff314aac6 in QWaitCondition::wait(QMutex*, QDeadlineTimer) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff314ae25 in QWaitCondition::wait(QMutex*, unsigned long) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff31485dd in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#7  0x00007fffebfc36db in start_thread (arg=0x7fff87fff700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14433 (Thread 0x7fff877fe700 (LWP 3228)):
#0  0x00007fffebfc9ed9 in futex_reltimed_wait_cancelable (private=<optimized out>, 
    reltime=0x7fff877fdbc0, expected=0, futex_word=0x555566a33d84)
    at ../sysdeps/unix/sysv/linux/futex-internal.h:142
#1  __pthread_cond_wait_common (abstime=0x7fff877fdc80, mutex=0x555566a33d30, 
    cond=0x555566a33d58) at pthread_cond_wait.c:533
#2  __pthread_cond_timedwait (cond=0x555566a33d58, mutex=0x555566a33d30, 
    abstime=0x7fff877fdc80) at pthread_cond_wait.c:667
#3  0x00007ffff314aac6 in QWaitCondition::wait(QMutex*, QDeadlineTimer) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff314ae25 in QWaitCondition::wait(QMutex*, unsigned long) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff31485dd in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#7  0x00007fffebfc36db in start_thread (arg=0x7fff877fe700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 6223 (Thread 0x7fff68f19700 (LWP 18220)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fff6c004820, nfds=3, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffe96b2481 in ?? () from /usr/lib/x86_64-linux-gnu/libpulse.so.0
#2  0x00007fffe96a3e40 in pa_mainloop_poll () from /usr/lib/x86_64-linux-gnu/libpulse.so.0
---Type <return> to continue, or q <return> to quit---
#3  0x00007fffe96a44d0 in pa_mainloop_iterate ()
   from /usr/lib/x86_64-linux-gnu/libpulse.so.0
#4  0x00007fffe96a4560 in pa_mainloop_run () from /usr/lib/x86_64-linux-gnu/libpulse.so.0
#5  0x00007fffe96b23c9 in ?? () from /usr/lib/x86_64-linux-gnu/libpulse.so.0
#6  0x00007fffe47ee318 in ?? ()
   from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-11.1.so
#7  0x00007fffebfc36db in start_thread (arg=0x7fff68f19700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 16 (Thread 0x7fff977fe700 (LWP 29099)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fff88004ee0, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337915b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff314241a in QThread::exec() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#7  0x00007fffebfc36db in start_thread (arg=0x7fff977fe700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 15 (Thread 0x7fff97fff700 (LWP 29089)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fff900052a0, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337913f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff314241a in QThread::exec() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007fffd66e81c6 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Quick.so.5
#7  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007fffebfc36db in start_thread (arg=0x7fff97fff700) at pthread_create.c:463
#9  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 14 (Thread 0x7fffaae1d700 (LWP 29080)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fff98004990, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337913f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff314241a in QThread::exec() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007fffd62232e5 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Qml.so.5
#7  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007fffebfc36db in start_thread (arg=0x7fffaae1d700) at pthread_create.c:463
#9  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 13 (Thread 0x7fffaa61c700 (LWP 29047)):
#0  0x00007ffff27ee9d0 in __GI___nanosleep (requested_time=0x7fffaa61bd70, 
    remaining=0x7fffaa61bd70) at ../sysdeps/unix/sysv/linux/nanosleep.c:28
#1  0x00007ffff3378a9d in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#2  0x00007ffff5178749 in KisTileDataSwapper::run (
    this=0x7ffff591b520 <(anonymous namespace)::Q_QGS_s_instance::innerFunction()::holder+64>) at /home/wolthera/krita/src/libs/image/tiles3/swap/kis_tile_data_swapper.cpp:97
#3  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007fffebfc36db in start_thread (arg=0x7fffaa61c700) at pthread_create.c:463
#5  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 11 (Thread 0x7fffb1799700 (LWP 29040)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fffac004740, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337913f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff314241a in QThread::exec() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#7  0x00007fffebfc36db in start_thread (arg=0x7fffb1799700) at pthread_create.c:463
#8  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 10 (Thread 0x7fffdd5c4700 (LWP 28819)):
#0  0x00007fffebfc99f3 in futex_wait_cancelable (private=<optimized out>, expected=0, 
    futex_word=0x5555575dc568) at ../sysdeps/unix/sysv/linux/futex-internal.h:88
#1  __pthread_cond_wait_common (abstime=0x0, mutex=0x5555575dc518, cond=0x5555575dc540)
    at pthread_cond_wait.c:502
#2  __pthread_cond_wait (cond=0x5555575dc540, mutex=0x5555575dc518)
    at pthread_cond_wait.c:655
#3  0x00007fffcb2ceb1b in ?? () from /usr/lib/x86_64-linux-gnu/dri/i965_dri.so
#4  0x00007fffcb2ce847 in ?? () from /usr/lib/x86_64-linux-gnu/dri/i965_dri.so
#5  0x00007fffebfc36db in start_thread (arg=0x7fffdd5c4700) at pthread_create.c:463
#6  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 9 (Thread 0x7fffca14c700 (LWP 28818)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fffca14bc78, nfds=1, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffe9463747 in ?? () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
---Type <return> to continue, or q <return> to quit---
#2  0x00007fffe946536a in xcb_wait_for_event () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007fffde90d32a in ?? () from /usr/lib/x86_64-linux-gnu/libQt5XcbQpa.so.5
#4  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007fffebfc36db in start_thread (arg=0x7fffca14c700) at pthread_create.c:463
#6  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7fffd2072700 (LWP 28811)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x7fffcc01db10, nfds=4, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337913f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff314241a in QThread::exec() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007fffec1f1015 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5DBus.so.5
#7  0x00007ffff3143bc2 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007fffebfc36db in start_thread (arg=0x7fffd2072700) at pthread_create.c:463
#9  0x00007ffff282b88f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7ffff7f80840 (LWP 28646)):
#0  0x00007ffff281ebf9 in __GI___poll (fds=0x555571aee3a0, nfds=8, timeout=10)
    at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fffea6c7539 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fffea6c764c in g_main_context_iteration ()
   from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007ffff337913f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007ffff331a64a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007ffff3323800 in QCoreApplication::exec() ()
   from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x0000555555e92b32 in main (argc=1, argv=0x7fffffffe218)
    at /home/wolthera/krita/src/krita/main.cc:481
(gdb) 
(gdb) 

Other info
--------------------

================================================================================
SESSION: 19 Mar 2019 22:26:38 +0100. Executing /home/wolthera/krita/inst/bin/krita

WARNING: This file contains information about your system and the
images you have been working with.

If you have problems with Krita, the Krita developers might ask
you to share this file with them. The information in this file is
not shared automatically with the Krita developers in any way. You
can disable logging to this file in Krita's Configure Krita Dialog.

Please review the contents of this file before sharing this file with
anyone.

Krita

 Version: 4.2.0-pre-alpha (git 0f58208)
 Languages: en_US, en_GB, nl
 Hidpi: false

Qt

  Version (compiled): 5.12.0
  Version (loaded): 5.12.0

OS Information

  Build ABI: x86_64-little_endian-lp64
  Build CPU: x86_64
  CPU: x86_64
  Kernel Type: linux
  Kernel Version: 4.15.0-46-generic
  Pretty Productname: KDE neon User Edition 5.15
  Product Type: neon
  Product Version: 18.04

19 Mar 2019 22:26:53 +0100: Importing application/x-krita to application/x-krita. Location: /home/wolthera/.krita-28646-document_1-autosave.kra. Real location: /home/wolthera/.krita-28646-document_1-autosave.kra. Batchmode: 0
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.
19 Mar 2019 22:26:54 +0100: Enabled simple smoothing.

Hardware Information

  GPU Acceleration: auto
  Memory: 7725 Mb
  Number of Cores: 8
  Swap Location: /tmp
Comment 1 Dmitry Kazakov 2019-03-21 12:23:22 UTC 
Git commit 64dc4d5b7431598d3b28ab858322281712a32019 by Dmitry Kazakov.
Committed on 21/03/2019 at 12:22.
Pushed by dkazakov into branch 'master'.

Fix a race condition in KisLocklessStack

When recycling the objects after pop(), a race condition could happen.
After the thread has successfully passed 'if (m_deleteBlockers == 1)'
check, it could go to sleep. During its sleep some other threads could
release more objects into m_freeNodes, which were still accessed by
someone. It could lead to both: invalid access or even ABA problem
(the latter, theoretically, could cause bug 405663).

The patch fixes the problem by forcing the releasing thread to check
if it is still the only owner of the freeNodes list. It atomically
fetches the list of free nodes, and only after that checks if all its
other users are dead. Since the list is stored in a local variable,
it is guaranteed that noone modifies it during the check.

M  +23   -8    libs/image/tiles3/kis_lockless_stack.h
M  +59   -0    libs/image/tiles3/tests/kis_lockless_stack_test.cpp
M  +3    -0    libs/image/tiles3/tests/kis_lockless_stack_test.h

https://commits.kde.org/krita/64dc4d5b7431598d3b28ab858322281712a32019