Bug 453633 - kwin SIGSEGV at #0 __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:513
Summary: kwin SIGSEGV at #0 __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/mul...
Status: RESOLVED NOT A BUG
Alias: None
Product: kwin
Classification: Plasma
Component: core (show other bugs)
Version: 5.24.4
Platform: Other Linux
: NOR crash
Target Milestone: ---
Assignee: KWin default assignee
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-05-10 16:27 UTC by Germano Massullo
Modified: 2023-02-02 17:05 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
GDB trace (91.28 KB, text/plain)
2022-05-10 16:27 UTC, Germano Massullo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Germano Massullo 2022-05-10 16:27:46 UTC
Created attachment 148710 [details]
GDB trace

my Plasma session was locked when strangely the laptop went into sleep mode. When I have awaken it, and I unlocked the screen, I saw all opened applications have disappeared.
I collected the GDB trace of kwin crash, see attachment.
A short resume of it is:

Core was generated by `/usr/bin/kwin_wayland --wayland-fd 5 --socket wayland-0 --xwayland-fd 6 --xwayl'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:513
513             VMOVU   -VEC_SIZE(%rsi, %rdx), %VEC(5)


Kwin 5.24.4
Plasma 5.24.4
Qt 5.15.2
Fedora 35 KDE
Comment 1 Nate Graham 2022-05-11 13:48:25 UTC
Pasting full backtrace for searchability:


Thread 1 (Thread 0x7eff7fec0940 (LWP 1537)):
#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:513
#1  0x00007eff6a6a08b6 in memcpy (__len=<optimized out>, __src=<optimized out>, __dest=0x7eff2579d800) at /usr/include/bits/string_fortified.h:29
#2  st_TexSubImage (ctx=0x7eff705f7010, dims=2, texImage=0x5603791d7ed0, xoffset=0, yoffset=0, zoffset=0, width=2560, height=1440, depth=1, format=32993, type=33639, pixels=0x7eff3e47b010, unpack=0x7eff7062a4b0) at ../src/mesa/state_tracker/st_cb_texture.c:2196
#3  0x00007eff6a82eaa1 in texture_sub_image (ctx=ctx@entry=0x7eff705f7010, dims=dims@entry=2, texObj=texObj@entry=0x56037a050a10, texImage=0x5603791d7ed0, target=target@entry=3553, level=level@entry=0, xoffset=<optimized out>, yoffset=<optimized out>, zoffset=<optimized out>, width=2560, height=1440, depth=1, format=32993, type=33639, pixels=0x7eff3e47b010) at ../src/mesa/main/teximage.c:3608
#4  0x00007eff6a831ec9 in texsubimage_err (ctx=0x7eff705f7010, dims=dims@entry=2, target=3553, level=0, xoffset=0, yoffset=0, zoffset=0, width=2560, height=1440, depth=1, format=32993, type=33639, pixels=0x7eff3e47b010, callerName=0x7eff6b6c9c0e "glTexSubImage2D") at ../src/mesa/main/teximage.c:3666
#5  0x00007eff6a838149 in _mesa_TexSubImage2D (target=<optimized out>, level=<optimized out>, xoffset=<optimized out>, yoffset=<optimized out>, width=<optimized out>, height=<optimized out>, format=32993, type=33639, pixels=0x7eff3e47b010) at ../src/mesa/main/teximage.c:3888
#6  0x00007eff86a92562 in KWin::GLTexture::update (src=@0x7eff8341dab0: {x1 = 1386783743, y1 = 778436608, x2 = 8658703, y2 = 0}, offset=@0x7ffc9dc88af0: {xp = 0, yp = 0}, image=@0x5603797cb630: {<QPaintDevice> = {_vptr.QPaintDevice = 0x7eff86aa3238 <vtable for KWin::GLTexture+16>, painters = 54016, reserved = 0x20}, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7eff855d1f60 <qt_meta_stringdata_QImage>, data = 0x7eff855d1e00 <qt_meta_data_QImage>, static_metacall = 0x0, relatedMetaObjects = 0x0, extradata = 0x0}}, d = 0x81}, this=0x5603797cb630) at /usr/include/qt5/QtCore/qpoint.h:130
#7  KWin::GLTexture::update (this=0x5603797cb630, image=@0x7ffc9dc88b00: {<QPaintDevice> = {_vptr.QPaintDevice = 0x7eff85687348 <vtable for QImage+16>, painters = 0, reserved = 0x0}, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7eff855d1f60 <qt_meta_stringdata_QImage>, data = 0x7eff855d1e00 <qt_meta_data_QImage>, static_metacall = 0x0, relatedMetaObjects = 0x0, extradata = 0x0}}, d = 0x560379dc55f0}, offset=@0x7ffc9dc88af0: {xp = 0, yp = 0}, src=@0x56037908ba70: {x1 = 0, y1 = 0, x2 = 2559, y2 = 1439}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/libkwineffects/kwingltexture.cpp:358
#8  0x00007eff8708f203 in KWin::BasicEGLSurfaceTextureInternal::updateFromImage (this=this@entry=0x56037857edf0, region=@0x7ffc9dc88c20: {d = 0x5603796952a0, static shared_empty = {ref = {atomic = {_q_value = {<std::__atomic_base<int>> = {static _S_alignment = 4, _M_i = -1}, static is_always_lock_free = true}}}, qt_rgn = 0x7eff856a6ea0 <qrp>}}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/platformsupport/scenes/opengl/basiceglsurfacetexture_internal.cpp:84
#9  0x00007eff87091c2b in KWin::BasicEGLSurfaceTextureInternal::update (this=0x56037857edf0, region=@0x7ffc9dc88c20: {d = 0x5603796952a0, static shared_empty = {ref = {atomic = {_q_value = {<std::__atomic_base<int>> = {static _S_alignment = 4, _M_i = -1}, static is_always_lock_free = true}}}, qt_rgn = 0x7eff856a6ea0 <qrp>}}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/platformsupport/scenes/opengl/basiceglsurfacetexture_internal.cpp:39
#10 0x00007eff8706a794 in KWin::bindSurfaceTexture (surfaceItem=0x560379deed10) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scenes/opengl/scene_opengl.cpp:563
#11 KWin::OpenGLWindow::createRenderNode (this=this@entry=0x5603796eefe0, item=item@entry=0x560379deed10, context=context@entry=0x7ffc9dc88f40) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scenes/opengl/scene_opengl.cpp:664
#12 0x00007eff8706a0e8 in KWin::OpenGLWindow::createRenderNode (this=this@entry=0x5603796eefe0, item=<optimized out>, context=context@entry=0x7ffc9dc88f40) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scenes/opengl/scene_opengl.cpp:680
#13 0x00007eff8706abd8 in KWin::OpenGLWindow::performPaint (this=0x5603796eefe0, mask=10, region=@0x7ffc9dc89118: {d = 0x560379354400}, data=@0x7ffc9dc89120: {<KWin::PaintData> = {_vptr.PaintData = 0x7eff86aea8a8 <vtable for KWin::WindowPaintData+16>, d = 0x560379b4ffb0}, shader = 0x0, d = 0x56037a00c200}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scenes/opengl/scene_opengl.cpp:752
#14 0x00007eff86fa7c6d in KWin::Scene::paintWindow (this=0x5603785f35e0, w=0x5603796eefe0, mask=10, _region=<optimized out>) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/effects.cpp:2125
#15 0x00007eff86fa8cf4 in KWin::Scene::paintSimpleScreen (this=<optimized out>, orig_mask=8, region=<optimized out>) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scene.cpp:503
#16 0x00007eff86fa7620 in KWin::Scene::paintScreen (this=0x5603785f35e0, damage=<optimized out>, repaint=@0x7ffc9dc89450: {d = 0x560379f9e750, static shared_empty = {ref = {atomic = {_q_value = {<std::__atomic_base<int>> = {static _S_alignment = 4, _M_i = -1}, static is_always_lock_free = true}}}, qt_rgn = 0x7eff856a6ea0 <qrp>}}, updateRegion=0x7ffc9dc89460, validRegion=0x7ffc9dc89458, renderLoop=<optimized out>, projection=@0x7ffc9dc89490: {m = {{0.00161054172, 0, 0, 0}, {-0, -0.0028645834, -0, -0}, {0, 0, -0.00100200204, -0.00100000005}, {-1.10000002, 1.10000002, 0.902001977, 1.10000002}}, flagBits = 31}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scene.cpp:280
#17 0x00007eff87069430 in KWin::SceneOpenGL::paint (this=0x5603785f35e0, output=0x560378584650, damage=@0x7ffc9dc89550: {d = 0x7eff85682e80 <QRegion::shared_empty>}, toplevels=<optimized out>, renderLoop=0x5603786ce4d0) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/scenes/opengl/scene_opengl.cpp:259
#18 0x00007eff86f0aba9 in KWin::Compositor::composite (this=0x5603785f13f0, renderLoop=0x5603786ce4d0) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/composite.cpp:633
#19 0x00007eff84db53e9 in QtPrivate::QSlotObjectBase::call (a=0x7ffc9dc896d0, r=<optimized out>, this=0x560379380120) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#20 doActivate<false> (sender=0x5603786ce4d0, signal_index=5, argv=0x7ffc9dc896d0) at kernel/qobject.cpp:3886
#21 0x00007eff84db0367 in QMetaObject::activate (sender=<optimized out>, m=m@entry=0x7eff87163460 <KWin::RenderLoop::staticMetaObject>, local_signal_index=local_signal_index@entry=2, argv=argv@entry=0x7ffc9dc896d0) at kernel/qobject.cpp:3946
#22 0x00007eff86ec9ef6 in KWin::RenderLoop::frameRequested (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/redhat-linux-build/src/kwin_autogen/EWIEGA46WW/moc_renderloop.cpp:206
#23 0x00007eff86f95ca7 in KWin::RenderLoopPrivate::dispatch (this=0x5603786d4020) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/renderloop.cpp:150
#24 0x00007eff84db53e9 in QtPrivate::QSlotObjectBase::call (a=0x7ffc9dc89800, r=<optimized out>, this=0x5603786cf940) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#25 doActivate<false> (sender=0x5603786d4038, signal_index=3, argv=0x7ffc9dc89800) at kernel/qobject.cpp:3886
#26 0x00007eff84db0367 in QMetaObject::activate (sender=<optimized out>, m=m@entry=0x7eff8505a5a0 <QTimer::staticMetaObject>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7ffc9dc89800) at kernel/qobject.cpp:3946
#27 0x00007eff84db868e in QTimer::timeout (this=<optimized out>, _t1={<No data fields>}) at .moc/moc_qtimer.cpp:205
#28 0x00007eff84dabedf in QObject::event (this=0x5603786d4038, e=0x7ffc9dc89960) at kernel/qobject.cpp:1336
#29 0x00007eff8589e443 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x5603786d4038, e=0x7ffc9dc89960) at kernel/qapplication.cpp:3632
#30 0x00007eff84d817d8 in QCoreApplication::notifyInternal2 (receiver=0x5603786d4038, event=0x7ffc9dc89960) at kernel/qcoreapplication.cpp:1064
#31 0x00007eff84dd1ea3 in QTimerInfoList::activateTimers (this=this@entry=0x5603784078c8) at kernel/qtimerinfo_unix.cpp:643
#32 0x00007eff84dcf660 in QEventDispatcherUNIXPrivate::activateTimers (this=this@entry=0x560378407840) at kernel/qeventdispatcher_unix.cpp:249
#33 0x00007eff84dd0470 in QEventDispatcherUNIX::processEvents (this=<optimized out>, flags=<optimized out>) at kernel/qeventdispatcher_unix.cpp:516
#34 0x0000560377ddfb81 in QUnixEventDispatcherQPA::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
#35 0x00007eff84d801e2 in QEventLoop::exec (this=this@entry=0x7ffc9dc89ae0, flags=<optimized out>, flags@entry={i = 0}) at ../../include/QtCore/../../src/corelib/global/qflags.h:69
#36 0x00007eff84d88724 in QCoreApplication::exec () at ../../include/QtCore/../../src/corelib/global/qflags.h:121
#37 0x0000560377cf2e17 in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/main_wayland.cpp:727


Kinda looks like a bug in the Mesa drivers, but I'll let the KWin developers make the final determination.
Comment 2 Vlad Zahorodnii 2023-01-18 13:31:39 UTC
#6  0x00007eff86a92562 in KWin::GLTexture::update (src=@0x7eff8341dab0: {x1 = 1386783743, y1 = 778436608, x2 = 8658703, y2 = 0}, offset=@0x7ffc9dc88af0: {xp = 0, yp = 0}, image=@0x5603797cb630: {<QPaintDevice> = {_vptr.QPaintDevice = 0x7eff86aa3238 <vtable for KWin::GLTexture+16>, painters = 54016, reserved = 0x20}, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7eff855d1f60 <qt_meta_stringdata_QImage>, data = 0x7eff855d1e00 <qt_meta_data_QImage>, static_metacall = 0x0, relatedMetaObjects = 0x0, extradata = 0x0}}, d = 0x81}, this=0x5603797cb630) at /usr/include/qt5/QtCore/qpoint.h:130
#7  KWin::GLTexture::update (this=0x5603797cb630, image=@0x7ffc9dc88b00: {<QPaintDevice> = {_vptr.QPaintDevice = 0x7eff85687348 <vtable for QImage+16>, painters = 0, reserved = 0x0}, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7eff855d1f60 <qt_meta_stringdata_QImage>, data = 0x7eff855d1e00 <qt_meta_data_QImage>, static_metacall = 0x0, relatedMetaObjects = 0x0, extradata = 0x0}}, d = 0x560379dc55f0}, offset=@0x7ffc9dc88af0: {xp = 0, yp = 0}, src=@0x56037908ba70: {x1 = 0, y1 = 0, x2 = 2559, y2 = 1439}) at /usr/src/debug/kwin-5.24.4-1.fc35.x86_64/src/libkwineffects/kwingltexture.cpp:358

I'm confused by src in frame 6, but that might be some debugger fluke. It might be a driver issue, but it would be nice to have a reproducible scenario otherwise the bug report is inactionable.
Comment 3 Bug Janitor Service 2023-02-02 05:01:37 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 4 Germano Massullo 2023-02-02 09:15:54 UTC
(In reply to Vlad Zahorodnii from comment #2)
> it would be nice to have a reproducible scenario otherwise the bug report is inactionable.

I don't have a way to reproduce it
Comment 5 Vlad Zahorodnii 2023-02-02 17:05:21 UTC
Okay, it sucks but there are debug symbols so it should provide at least some context. In general, it looks like a crash in Mesa. Please report this issue to Mesa developers. Also, please check whether the issue is still present in latest plasma + mesa.