472959 – kwin_wayland crashed in "KWin::Workspace::setActiveWindow(KWin::Window*)"? after closing an app

Bug 472959 - kwin_wayland crashed in "KWin::Workspace::setActiveWindow(KWin::Window*)"? after closing an app

Summary: kwin_wayland crashed in "KWin::Workspace::setActiveWindow(KWin::Window*)"? af...

Status:	RESOLVED WORKSFORME

Alias:	None

Product:	kwin
Classification:	Plasma
Component:	wayland-generic (show other bugs)
Version:	5.27.7
Platform:	Arch Linux Linux

Importance:	NOR crash
Target Milestone:	---
Assignee:	KWin default assignee

URL:
Keywords:

Depends on:
Blocks:

Reported:	2023-08-03 14:06 UTC by Andrej Halveland
Modified:	2024-06-08 13:23 UTC (History)
CC List:	1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Coredump with more symbols (20.07 KB, text/plain) 2023-08-03 14:06 UTC, Andrej Halveland	Details
Coredump right after crash (no kwin-debug package) (31.98 KB, text/plain) 2023-08-03 14:08 UTC, Andrej Halveland	Details
View All Add an attachment

Note You need to log in before you can comment on or make changes to this bug.

Description Andrej Halveland 2023-08-03 14:06:33 UTC

Created attachment 160704 [details]
Coredump with more symbols

I had Supersonic (the Subsonic compatible music client) compiled with Wayland support running fine... but after I closed it via the "Close" button in the Window Frame suddenly KWin crashed and restarted.

Btw I have closed the Supersonic app before multiple times just fine, but this time it for some reason made KWin crash.

I also don't know if anything changes if the application is running via XWayland.

I don't know how to reproduce this reliably, this is the first time KWin crashed like this.
STEPS TO REPRODUCE
1. Compile supersonic-desktop from the AUR with wayland support (add the "-tags=wayland" option to the "go build" line when compiling)
2. Close the application via the "Close" button on the window frame.

OBSERVED RESULT
KWin crashes and restarts.

EXPECTED RESULT
KWin should not crash.

SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 5.27.7
KDE Frameworks Version: 5.108.0
Qt Version: 5.15.10
Kernel Version: 6.5-rc4
Graphics Platform: Wayland
Graphics Drivers: mesa-git (23.3.0_devel.174810.9709ae4cc66.d41d8cd-1)
Processors: AMD Ryzen 9 4900HS
Memory:  24GB of RAM
Graphics Processor: Integrated: Vega 8
Manufacturer: ASUS (Zephyrus G15 GA502IV)

ADDITIONAL INFORMATION
The kwin_crash_closing_supersonic-desktop-more-debug-symbols.gdb coredump was rerun after I rebooted my machine and then installed the kwin-debug package.

The kwin_crash_closing_supersonic-desktop.gdb coredump was ran right after I got the crash (without the kwin-debug package).

Comment 1 Andrej Halveland 2023-08-03 14:08:04 UTC

Text from kwin_crash_closing_supersonic-desktop-more-debug-symbols.gdb

Thread 11 (LWP 1633):
#0  0x00007fb349226c0f in __strncasecmp_l_avx2 () at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:547
#1  0x00007fb3180013f0 in  ()
#2  0x00007fb3180013f0 in  ()
#3  0x0000000000000002 in  ()
#4  0xffffffff00000000 in  ()
#5  0x0000000000000002 in  ()
#6  0x00007fb347b6cc2f in  () at /usr/lib/libglib-2.0.so.0
#7  0x00007fb347b0d0e2 in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
#8  0x00007fb34a2eb4cc in QTypedArrayData<pollfd>::allocate(unsigned long, QFlags<QArrayData::AllocationOption>) (options=..., capacity=0) at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:221
#9  QTypedArrayData<pollfd>::unsharableEmpty() () at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:274
#10 QVector<pollfd>::detach() (this=0x7fb318001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:402
#11 QVector<pollfd>::detach() (this=0x7fb318001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:397
#12 QVector<pollfd>::removeLast() (this=0x7fb318001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:821
#13 QVector<pollfd>::takeLast() (this=0x7fb318001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:156
#14 QEventDispatcherUNIX::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=<optimized out>, flags=...) at kernel/qeventdispatcher_unix.cpp:509
#15 0x00005627e4e5f968 in  ()
#16 0x00005627e4e5f910 in  ()
#17 0x00005627e4d6bd50 in  ()
#18 0x00007fb32e7fbcc0 in  ()
#19 0x00007ffcea804710 in  ()
#20 0x00007fb32dffc000 in  ()
#21 0x00007fb34a0f72d6 in (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#22 (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#23 QGlobalStatic<QFreeList<QReadWriteLockPrivate, (anonymous namespace)::FreeListConstants>, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::guard>::operator* (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qglobalstatic.h:147
#24 QReadWriteLockPrivate::allocate() () at thread/qreadwritelock.cpp:624
#25 0x9dc100adb148d800 in  ()
#26 0x0000000000000000 in  ()
--Type <RET> for more, q to quit, c to continue without paging--c

Thread 10 (LWP 1682):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4dfac68) at ../posix/glob.c:845

Thread 9 (LWP 1686):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4dfac6c) at ../posix/glob.c:845

Thread 8 (LWP 1660):
#0  0x00007fb349226c0f in __strncasecmp_l_avx2 () at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:547
#1  0x00007fb3040013d0 in  ()
#2  0x00007fb3040013d0 in  ()
#3  0x0000000000000001 in  ()
#4  0xffffffff00000000 in  ()
#5  0x0000000000000001 in  ()
#6  0x00007fb347b6cc2f in  () at /usr/lib/libglib-2.0.so.0
#7  0x00007fb347b0d0e2 in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
#8  0x00007fb34a2eb4cc in QTypedArrayData<pollfd>::allocate(unsigned long, QFlags<QArrayData::AllocationOption>) (options=..., capacity=0) at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:221
#9  QTypedArrayData<pollfd>::unsharableEmpty() () at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:274
#10 QVector<pollfd>::detach() (this=0x7fb304001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:402
#11 QVector<pollfd>::detach() (this=0x7fb304001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:397
#12 QVector<pollfd>::removeLast() (this=0x7fb304001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:821
#13 QVector<pollfd>::takeLast() (this=0x7fb304001301) at ../../include/QtCore/../../src/corelib/tools/qvector.h:156
#14 QEventDispatcherUNIX::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=<optimized out>, flags=...) at kernel/qeventdispatcher_unix.cpp:509
#15 0x00005627e5541348 in  ()
#16 0x00005627e55412f0 in  ()
#17 0x00005627e554af70 in  ()
#18 0x00007fb3173feca0 in  ()
#19 0x00007ffcea803f80 in  ()
#20 0x00007fb316bff000 in  ()
#21 0x00007fb34a0f72d6 in (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#22 (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#23 QGlobalStatic<QFreeList<QReadWriteLockPrivate, (anonymous namespace)::FreeListConstants>, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::guard>::operator* (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qglobalstatic.h:147
#24 QReadWriteLockPrivate::allocate() () at thread/qreadwritelock.cpp:624
#25 0x00007fb34a0f34fa in QHash<void*, int>::freeData(QHashData*) (x=0x100000012, this=0x5627e554af70) at ../../include/QtCore/../../src/corelib/tools/qhash.h:617
#26 QHash<void*, int>::detach_helper() (this=0x5627e554af70) at ../../include/QtCore/../../src/corelib/tools/qhash.h:633
#27 QHash<void*, int>::detach() (this=0x5627e554af70) at ../../include/QtCore/../../src/corelib/tools/qhash.h:291
#28 0x9dc100adb148d800 in  ()
#29 0x0000000000000000 in  ()

Thread 7 (LWP 1648):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x7fb34314e5d0) at ../posix/glob.c:845

Thread 6 (LWP 1632):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4dfae18) at ../posix/glob.c:845

Thread 5 (LWP 1631):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4dfac68) at ../posix/glob.c:845

Thread 4 (LWP 1629):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4df9f0c) at ../posix/glob.c:845

Thread 3 (LWP 1630):
#0  __glob (pattern=<optimized out>, flags=<optimized out>, errfunc=<optimized out>, pglob=0x5627e4df8ac8) at ../posix/glob.c:845

Thread 2 (LWP 1617):
#0  0x00007fb349226c0f in __strncasecmp_l_avx2 () at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:547
#1  0x00007fb33c001600 in  ()
#2  0x00007fb33c001600 in  ()
#3  0x0000000000000003 in  ()
#4  0xffffffff00000000 in  ()
#5  0x0000000000000003 in  ()
#6  0x00007fb347b6cc2f in  () at /usr/lib/libglib-2.0.so.0
#7  0x00007fb347b0d0e2 in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
#8  0x00007fb34a2eb4cc in QTypedArrayData<pollfd>::allocate(unsigned long, QFlags<QArrayData::AllocationOption>) (options=..., capacity=0) at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:221
#9  QTypedArrayData<pollfd>::unsharableEmpty() () at ../../include/QtCore/../../src/corelib/tools/qarraydata.h:274
#10 QVector<pollfd>::detach() (this=0x7fb33c001501) at ../../include/QtCore/../../src/corelib/tools/qvector.h:402
#11 QVector<pollfd>::detach() (this=0x7fb33c001501) at ../../include/QtCore/../../src/corelib/tools/qvector.h:397
#12 QVector<pollfd>::removeLast() (this=0x7fb33c001501) at ../../include/QtCore/../../src/corelib/tools/qvector.h:821
#13 QVector<pollfd>::takeLast() (this=0x7fb33c001501) at ../../include/QtCore/../../src/corelib/tools/qvector.h:156
#14 QEventDispatcherUNIX::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=<optimized out>, flags=...) at kernel/qeventdispatcher_unix.cpp:509
#15 0x00005627e4d12758 in  ()
#16 0x00005627e4d12700 in  ()
#17 0x00007fb34c0a3660 in (anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder () at /usr/lib/libQt5DBus.so.5
#18 0x00007fb343ffec90 in  ()
#19 0x00007ffcea804410 in  ()
#20 0x00007fb3437ff000 in  ()
#21 0x00007fb34a0f72d6 in (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#22 (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction () at thread/qreadwritelock.cpp:618
#23 QGlobalStatic<QFreeList<QReadWriteLockPrivate, (anonymous namespace)::FreeListConstants>, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::innerFunction, (anonymous namespace)::(anonymous namespace)::Q_QGS_freelist::guard>::operator* (this=<optimized out>) at ../../include/QtCore/../../src/corelib/global/qglobalstatic.h:147
#24 QReadWriteLockPrivate::allocate() () at thread/qreadwritelock.cpp:624
#25 0x0000000000000002 in  ()
#26 0x00007ffcea804410 in  ()
#27 0x00007fb34a0f34fa in QHash<void*, int>::freeData(QHashData*) (x=0x7fb34c0a12b0 <vtable for QDBusConnectionManager+16>, this=0x7fb34c0a3660 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at ../../include/QtCore/../../src/corelib/tools/qhash.h:617
#28 QHash<void*, int>::detach_helper() (this=0x7fb34c0a3660 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at ../../include/QtCore/../../src/corelib/tools/qhash.h:633
#29 QHash<void*, int>::detach() (this=0x7fb34c0a3660 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at ../../include/QtCore/../../src/corelib/tools/qhash.h:291
#30 0x9dc100adb148d800 in  ()
#31 0x0000000000000000 in  ()

Thread 1 (LWP 1594):
#0  0x00005627e5858cf0 in  ()
#1  0x00007fb34bbb4dc8 in KWin::Workspace::setActiveWindow(KWin::Window*) (this=0x5627e5275db0, window=0x5627e6115400) at /usr/src/debug/kwin/kwin-5.27.7/src/activation.cpp:246
#2  0x00007fb34bcf4f1d in KWin::Window::setActive(bool) (act=<optimized out>, this=0x5627e6115400) at /usr/src/debug/kwin/kwin-5.27.7/src/window.cpp:824
#3  KWin::Window::setActive(bool) (this=0x5627e6115400, act=<optimized out>) at /usr/src/debug/kwin/kwin-5.27.7/src/window.cpp:811
#4  0x00007fb34bd4d58b in KWin::XdgToplevelWindow::takeFocus() (this=0x5627e6115400) at /usr/src/debug/kwin/kwin-5.27.7/src/xdgshellwindow.cpp:1006
#5  0x00007fb34bbb59b6 in KWin::Workspace::takeActivity(KWin::Window*, QFlags<KWin::Workspace::ActivityFlag>) (this=this@entry=0x5627e5275db0, window=<optimized out>, window@entry=0x5627e6115400, flags=..., flags@entry=...) at /usr/src/debug/kwin/kwin-5.27.7/src/activation.cpp:406
#6  0x00007fb34bbb5b25 in KWin::Workspace::requestFocus(KWin::Window*, bool) (this=this@entry=0x5627e5275db0, window=window@entry=0x5627e6115400, force=force@entry=false) at /usr/include/qt/QtCore/qflags.h:121
#7  0x00007fb34bbb5d2e in KWin::Workspace::activateNextWindow(KWin::Window*) (this=0x5627e5275db0, window=<optimized out>) at /usr/src/debug/kwin/kwin-5.27.7/src/activation.cpp:518
#8  0x00007fb34bd0f426 in KWin::Workspace::removeWaylandWindow(KWin::Window*) (this=0x5627e5275db0, window=0x5627e5434840) at /usr/src/debug/kwin/kwin-5.27.7/src/workspace.cpp:857
#9  0x00007fb34a2d15a7 in QtPrivate::QSlotObjectBase::call(QObject*, void**) (a=0x7ffcea8041f0, r=0x5627e55a6430, this=0x5627e7094810, this=<optimized out>, r=<optimized out>, a=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#10 doActivate<false>(QObject*, int, void**) (sender=0x5627e4d27160, signal_index=4, argv=0x7ffcea8041f0) at kernel/qobject.cpp:3925
#11 0x00007fb34bb9e5e7 in KWin::WaylandServer::windowRemoved(KWin::Window*) (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/kwin/build/src/kwin_autogen/EWIEGA46WW/moc_wayland_server.cpp:189
#12 0x00007fb34bce6259 in KWin::WaylandServer::removeWindow(KWin::Window*) (this=0x5627e4d27160, c=<optimized out>) at /usr/src/debug/kwin/kwin-5.27.7/src/wayland_server.cpp:729
#13 0x00007fb34bd4692c in KWin::XdgSurfaceWindow::destroyWindow() (this=0x5627e5434840) at /usr/src/debug/kwin/kwin-5.27.7/src/xdgshellwindow.cpp:309
#14 0x00007fb34a2d15a7 in QtPrivate::QSlotObjectBase::call(QObject*, void**) (a=0x7ffcea804310, r=0x5627e712e1f0, this=0x5627e7094810, this=<optimized out>, r=<optimized out>, a=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#15 doActivate<false>(QObject*, int, void**) (sender=0x5627e62abf90, signal_index=3, argv=0x7ffcea804310) at kernel/qobject.cpp:3925
#16 0x00007fb34bdbc739 in KWaylandServer::ClientConnectionPrivate::destroyListenerCallback(wl_listener*, void*) (listener=<optimized out>, data=<optimized out>) at /usr/src/debug/kwin/kwin-5.27.7/src/wayland/clientconnection.cpp:70
#17 0x00007fb348bd507f in wl_client_destroy () at /usr/lib/libwayland-server.so.0
#18 0x00007fb348bd560e in  () at /usr/lib/libwayland-server.so.0
#19 0x00007fb348bd4ae2 in wl_event_loop_dispatch () at /usr/lib/libwayland-server.so.0
#20 0x00007fb34bdc55c7 in KWaylandServer::Display::dispatchEvents() (this=<optimized out>) at /usr/src/debug/kwin/kwin-5.27.7/src/wayland/display.cpp:114
#21 0x00007fb34a2d15a7 in QtPrivate::QSlotObjectBase::call(QObject*, void**) (a=0x7ffcea8048c0, r=0x5627e527f6e0, this=0x5627e7094810, this=<optimized out>, r=<optimized out>, a=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#22 doActivate<false>(QObject*, int, void**) (sender=0x5627e5649c70, signal_index=3, argv=0x7ffcea8048c0) at kernel/qobject.cpp:3925
#23 0x00007fb34a2d2da4 in QtPrivate::QSlotObject<void (QObject::*)(), QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase*, QObject*, void**, bool*) (which=-423731632, this_=0x5627e5275df0, r=0x5627e584db80, a=0x1, ret=0xe) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:411
#24 0x00005627e5f95a70 in  ()
#25 0x0000000d00000000 in  ()
#26 0x0000000000000000 in  ()
(gdb)

Comment 2 Andrej Halveland 2023-08-03 14:08:43 UTC

Created attachment 160705 [details]
Coredump right after crash (no kwin-debug package)

Comment 3 Vlad Zahorodnii 2024-06-07 12:36:24 UTC

Is this issue still reproducible in plasma 6.0?

Comment 4 Nate Graham 2024-06-07 15:37:35 UTC

Comment 5 Andrej Halveland 2024-06-08 11:34:35 UTC

I don't believe I have gotten this kind of crash again since I reported it here.

I guess this can be closed.