477941 – Plasma asserts in qobject_cast<PanelView *>(panel) after ShellCorona::createWaitingPanels() after connecting the external display

Bug 477941 - Plasma asserts in qobject_cast<PanelView *>(panel) after ShellCorona::createWaitingPanels() after connecting the external display

Summary: Plasma asserts in qobject_cast<PanelView *>(panel) after ShellCorona::createW...

Status:	CONFIRMED

Alias:	None

Product:	plasmashell
Classification:	Plasma
Component:	Containment (show other bugs)
Version:	5.90.0
Platform:	Neon Linux

Importance:	NOR crash
Target Milestone:	1.0
Assignee:	Plasma Bugs List

URL:
Keywords:	drkonqi, multiscreen, qt6

Duplicates (9):	478752 493314 494512 495172 497381 497600 498706 499353 501038 (view as bug list)
Depends on:
Blocks:

Reported:	2023-12-02 20:40 UTC by Ternomashi
Modified:	2025-03-22 03:03 UTC (History)
CC List:	15 users (show)

See Also:	443708 478071 500044
Latest Commit:
Version Fixed In:
Sentry Crash Report:	https://crash-reports.kde.org/organizations/kde/issues/145832/

Attachments
New crash information added by DrKonqi (178.59 KB, text/plain) 2023-12-02 20:40 UTC, Ternomashi	Details
Crash log on KDE Neon running 6.3 (105.83 KB, text/vnd.kde.kcrash-report) 2025-02-15 21:15 UTC, Wian Potgieter	Details
View All Add an attachment

Note You need to log in before you can comment on or make changes to this bug.

Description Ternomashi 2023-12-02 20:40:31 UTC

Application: plasmashell (5.90.0)

Qt Version: 6.6.0
Frameworks Version: 5.246.0
Operating System: Linux 6.2.0-37-generic x86_64
Windowing System: Wayland
Distribution: KDE neon Unstable Edition
DrKonqi: 5.90.0 [CoredumpBackend]

-- Information about the crash:
Plasma crashes immediately after connecting the external display. In my case the display was connected to HDMI port.

The reporter is unsure if this crash is reproducible.

-- Backtrace (Reduced):
#6  __pthread_kill_implementation (no_tid=0, signo=6, threadid=140661521833920) at ./nptl/pthread_kill.c:44
#7  __pthread_kill_internal (signo=6, threadid=140661521833920) at ./nptl/pthread_kill.c:78
#8  __GI___pthread_kill (threadid=140661521833920, signo=signo@entry=6) at ./nptl/pthread_kill.c:89
#9  0x00007fee54042476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#10 0x00007fee540287f3 in __GI_abort () at ./stdlib/abort.c:79


Reported using DrKonqi

Comment 1 Ternomashi 2023-12-02 20:40:32 UTC

Created attachment 163783 [details]
New crash information added by DrKonqi

DrKonqi auto-attaching complete backtrace.

Comment 2 Nate Graham 2023-12-05 20:50:57 UTC

Thread 1 (Thread 0x7fee500adfc0 (LWP 59633)):
[KCrash Handler]
#6  __pthread_kill_implementation (no_tid=0, signo=6, threadid=140661521833920) at ./nptl/pthread_kill.c:44
#7  __pthread_kill_internal (signo=6, threadid=140661521833920) at ./nptl/pthread_kill.c:78
#8  __GI___pthread_kill (threadid=140661521833920, signo=signo@entry=6) at ./nptl/pthread_kill.c:89
#9  0x00007fee54042476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#10 0x00007fee540287f3 in __GI_abort () at ./stdlib/abort.c:79
#11 0x00007fee54cd6fb7 in qAbort() () at ./src/corelib/global/qglobal.cpp:161
#12 0x00007fee54cd2465 in qt_message_fatal<QString&> (message=..., context=<optimized out>) at ./src/corelib/global/qlogging.cpp:2003
#13 qt_message(QtMsgType, const QMessageLogContext &, const char *, typedef __va_list_tag __va_list_tag *) (msgType=msgType@entry=QtFatalMsg, context=<optimized out>, msg=<optimized out>, ap=ap@entry=0x7ffd207784a0) at ./src/corelib/global/qlogging.cpp:378
#14 0x00007fee54cd79e3 in QMessageLogger::fatal(char const*, ...) const (this=<optimized out>, msg=<optimized out>) at ./src/corelib/global/qlogging.cpp:901
#15 0x00007fee54ca5908 in qt_assert(char const*, char const*, int) (assertion=assertion@entry=0x56544c976280 "qobject_cast<PanelView *>(panel)", file=file@entry=0x56544c976faa "./shell/shellcorona.cpp", line=line@entry=1504) at ./src/corelib/global/qassert.cpp:68
#16 0x000056544c8c0e67 in operator() (__closure=0x56545094d540) at ./shell/shellcorona.cpp:1503
#17 operator() (__closure=0x56545094d540) at ./shell/shellcorona.cpp:1503
#18 QtPrivate::FunctorCall<QtPrivate::IndexesList<>, QtPrivate::List<>, void, ShellCorona::createWaitingPanels()::<lambda()> >::call (arg=<optimized out>, f=...) at /usr/include/x86_64-linux-gnu/qt6/QtCore/qobjectdefs_impl.h:137
#19 QtPrivate::Functor<ShellCorona::createWaitingPanels()::<lambda()>, 0>::call<QtPrivate::List<>, void> (arg=<optimized out>, f=...) at /usr/include/x86_64-linux-gnu/qt6/QtCore/qobjectdefs_impl.h:339
#20 QtPrivate::QCallableObject<ShellCorona::createWaitingPanels()::<lambda()>, QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase *, QObject *, void **, bool *) (which=<optimized out>, this_=0x56545094d530, r=<optimized out>, a=<optimized out>, ret=<optimized out>) at /usr/include/x86_64-linux-gnu/qt6/QtCore/qobjectdefs_impl.h:522
#21 0x00007fee54c26b9e in QtPrivate::QSlotObjectBase::call(QObject*, void**) (a=0x7ffd207786c0, r=0x56544cff9a20, this=<optimized out>, this=<optimized out>, r=<optimized out>, a=<optimized out>) at ./src/corelib/kernel/qobjectdefs_impl.h:433
#22 doActivate<false>(QObject*, int, void**) (sender=0x56544fd1e730, signal_index=15, argv=0x7ffd207786c0) at ./src/corelib/kernel/qobject.cpp:4021
#23 0x00007fee5513c196 in QWindow::visibleChanged(bool) (this=this@entry=0x56544fd1e730, _t1=<optimized out>) at ./obj-x86_64-linux-gnu/src/gui/Gui_autogen/include/moc_qwindow.cpp:1195
#24 0x00007fee5514372b in QWindowPrivate::setVisible(bool) (this=0x56544d7f1b80, visible=<optimized out>) at ./src/gui/kernel/qwindow.cpp:338
#25 0x00007fee55142b9b in QWindowPrivate::destroy() (this=this@entry=0x56544d7f1b80) at ./src/gui/kernel/qwindow.cpp:2031
#26 0x00007fee55142df6 in QWindow::~QWindow() (this=0x56544fd1e730, this=<optimized out>) at ./src/gui/kernel/qwindow.cpp:185
#27 0x000056544c8ecbbd in PanelView::~PanelView() (this=0x56544fd1e730, __in_chrg=<optimized out>) at ./shell/panelview.cpp:129
#28 0x00007fee54bc6eb3 in QObject::event(QEvent*) (this=0x56544fd1e730, e=0x565450506350) at ./src/corelib/kernel/qobject.cpp:1424
#29 0x00007fee56bf079b in QApplicationPrivate::notify_helper(QObject*, QEvent*) (this=<optimized out>, receiver=0x56544fd1e730, e=0x565450506350) at ./src/widgets/kernel/qapplication.cpp:3290
#30 0x00007fee54c5e828 in QCoreApplication::notifyInternal2(QObject*, QEvent*) (receiver=0x56544fd1e730, event=event@entry=0x565450506350) at ./src/corelib/kernel/qcoreapplication.cpp:1118
#31 0x00007fee54c5e86d in QCoreApplication::sendEvent(QObject*, QEvent*) (receiver=<optimized out>, event=event@entry=0x565450506350) at ./src/corelib/kernel/qcoreapplication.cpp:1536
#32 0x00007fee54c5ef40 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (receiver=0x0, event_type=0, data=0x56544ced5040) at ./src/corelib/kernel/qcoreapplication.cpp:1898
#33 0x00007fee54a63087 in postEventSourceDispatch(GSource*, GSourceFunc, gpointer) (s=0x56544cf8c2e0) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:243
#34 0x00007fee534a0d3b in g_main_context_dispatch () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#35 0x00007fee534f6258 in  () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#36 0x00007fee5349e3e3 in g_main_context_iteration () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#37 0x00007fee54a5de60 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x56544cedada0, flags=...) at ./src/corelib/kernel/qeventdispatcher_glib.cpp:393
#38 0x00007fee54c60a5b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (this=this@entry=0x7ffd20778bd0, flags=..., flags@entry=...) at ./src/corelib/global/qflags.h:34
#39 0x00007fee54c6268c in QCoreApplication::exec() () at ./src/corelib/global/qflags.h:74
#40 0x00007fee550e9940 in QGuiApplication::exec() () at ./src/gui/kernel/qguiapplication.cpp:1921
#41 0x00007fee56be8c89 in QApplication::exec() () at ./src/widgets/kernel/qapplication.cpp:2569
#42 0x000056544c8c6adf in main(int, char**) (argc=<optimized out>, argv=<optimized out>) at ./shell/main.cpp:230
-- Notice: 1 systemd-coredump@.service unit is running, output may be incomplete.

Comment 3 Andres Betts 2023-12-15 16:02:04 UTC

In talking to @nicofe I think I am experiencing something similar.

https://pastebin.com/qhKypGXR

Comment 4 Nate Graham 2023-12-20 19:23:43 UTC

Yep, looks like your stack trace is the same one as this crash.

Comment 5 Nate Graham 2024-06-26 13:35:17 UTC

*** Bug 484689 has been marked as a duplicate of this bug. ***

Comment 6 Nate Graham 2024-09-26 20:45:59 UTC

*** Bug 478752 has been marked as a duplicate of this bug. ***

Comment 7 Nate Graham 2024-10-11 18:05:54 UTC

*** Bug 494512 has been marked as a duplicate of this bug. ***

Comment 8 TraceyC 2024-11-12 23:42:23 UTC

*** Bug 493314 has been marked as a duplicate of this bug. ***

Comment 9 Nicolas Fella 2024-12-02 20:35:34 UTC

==7560==ERROR: AddressSanitizer: heap-use-after-free on address 0x506000a67138 at pc 0x7f71b64efd9b bp 0x7fff4f796010 sp 0x7fff4f796008
READ of size 8 at 0x506000a67138 thread T0
    #0 0x7f71b64efd9a in QWeakPointer<QObject>::internalData() const /home/nico/kde-qtdev/usr/include/QtCore/qsharedpointer_impl.h:792
    #1 0x7f71b6550f63 in QPointer<Plasma::Containment>::data() const /home/nico/kde-qtdev/usr/include/QtCore/qpointer.h:75
    #2 0x7f71b655106d in QPointer<Plasma::Containment>::operator Plasma::Containment*() const /home/nico/kde-qtdev/usr/include/QtCore/qpointer.h:83
    #3 0x7f71b654efca in PlasmaQuick::ContainmentView::containment() const /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/containmentview.cpp:265
    #4 0x4b0527 in operator() /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:1655
    #5 0x4b92e5 in operator() /home/nico/kde-qtdev/usr/include/QtCore/qobjectdefs_impl.h:116
    #6 0x4b98b2 in call_internal<void, QtPrivate::FunctorCall<std::integer_sequence<long unsigned int>, QtPrivate::List<>, void, PanelView::refreshContainment()::<lambda()> >::call(PanelView::refreshContainment()::<lambda()>&, void**)::<lambda()> > /home/nico/kde-qtdev/usr/include/QtCore/qobjectdefs_impl.h:65
    #7 0x4b93eb in call /home/nico/kde-qtdev/usr/include/QtCore/qobjectdefs_impl.h:115
    #8 0x4b8a6e in call<QtPrivate::List<>, void> /home/nico/kde-qtdev/usr/include/QtCore/qobjectdefs_impl.h:337
    #9 0x4b8812 in impl /home/nico/kde-qtdev/usr/include/QtCore/qobjectdefs_impl.h:547
    #10 0x7f71a9ac0b85 in void doActivate<false>(QObject*, int, void**) (/home/nico/kde-qtdev/usr/lib64/libQt6Core.so.6+0x4c0b85) (BuildId: 62a903a71b3d68ed807d5dfaa2f6a33b08055910)
    #11 0x7f71a9a9f9cb in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobject.cpp:4198
    #12 0x7f71b0242019 in QQuickWindow::activeFocusItemChanged() /home/nico/workspace/qt6-dev/qtdeclarative/src/quick/Quick_autogen/include/moc_qquickwindow.cpp:452
    #13 0x7f71b0240142 in QtPrivate::FunctorCall<std::integer_sequence<unsigned long>, QtPrivate::List<>, void, void (QQuickWindow::*)()>::call(void (QQuickWindow::*)(), QQuickWindow*, void**)::{lambda()#1}::operator()() const /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs_impl.h:127
    #14 0x7f71b024041e in void QtPrivate::FunctorCallBase::call_internal<void, QtPrivate::FunctorCall<std::integer_sequence<unsigned long>, QtPrivate::List<>, void, void (QQuickWindow::*)()>::call(void (QQuickWindow::*)(), QQuickWindow*, void**)::{lambda()#1}>(void**, QtPrivate::FunctorCall<std::integer_sequence<unsigned long>, QtPrivate::List<>, void, void (QQuickWindow::*)()>::call(void (QQuickWindow::*)(), QQuickWindow*, void**)::{lambda()#1}&&) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs_impl.h:65
    #15 0x7f71b024041e in QtPrivate::FunctorCall<std::integer_sequence<unsigned long>, QtPrivate::List<>, void, void (QQuickWindow::*)()>::call(void (QQuickWindow::*)(), QQuickWindow*, void**) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs_impl.h:126
    #16 0x7f71b024051a in void QtPrivate::FunctionPointer<void (QQuickWindow::*)()>::call<QtPrivate::List<>, void>(void (QQuickWindow::*)(), QQuickWindow*, void**) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs_impl.h:174
    #17 0x7f71b024051a in QtPrivate::QCallableObject<void (QQuickWindow::*)(), QtPrivate::List<>, void>::impl(int, QtPrivate::QSlotObjectBase*, QObject*, void**, bool*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs_impl.h:545
    #18 0x7f71a9ac0b85 in void doActivate<false>(QObject*, int, void**) (/home/nico/kde-qtdev/usr/lib64/libQt6Core.so.6+0x4c0b85) (BuildId: 62a903a71b3d68ed807d5dfaa2f6a33b08055910)
    #19 0x7f71a9a9f9cb in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobject.cpp:4198
    #20 0x7f71ab99adf8 in void QMetaObject::activate<void, QObject*>(QObject*, QMetaObject const*, int, void*, QObject* const&) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobjectdefs.h:306
    #21 0x7f71ab99adf8 in QWindow::focusObjectChanged(QObject*) /home/nico/workspace/qt6-dev/qtbase/src/gui/Gui_autogen/include/moc_qwindow.cpp:662
    #22 0x7f71b05ee665 in QQuickDeliveryAgentPrivate::clearFocusInScope(QQuickItem*, QQuickItem*, Qt::FocusReason, QFlags<QQuickDeliveryAgentPrivate::FocusOption>) /home/nico/workspace/qt6-dev/qtdeclarative/src/quick/util/qquickdeliveryagent.cpp:620
    #23 0x7f71afff33ed in QQuickItem::setParentItem(QQuickItem*) /home/nico/workspace/qt6-dev/qtdeclarative/src/quick/items/qquickitem.cpp:2775
    #24 0x7f71afff3ffb in QQuickItem::~QQuickItem() /home/nico/workspace/qt6-dev/qtdeclarative/src/quick/items/qquickitem.cpp:2385
    #25 0x7f71b077ee34 in QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement() /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/qml/qqmlprivate.h:104
    #26 0x7f71b077ee64 in QQmlPrivate::QQmlElement<QQuickItem>::~QQmlElement() /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/qml/qqmlprivate.h:104
    #27 0x7f71b6591f8c in PlasmaQuick::SharedQmlEngine::~SharedQmlEngine() /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/sharedqmlengine.cpp:175
    #28 0x7f71b6591fc3 in PlasmaQuick::SharedQmlEngine::~SharedQmlEngine() /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/sharedqmlengine.cpp:177
    #29 0x7f71b659c051 in PlasmaQuick::QuickViewSharedEngine::~QuickViewSharedEngine() /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/quickviewsharedengine.cpp:125
    #30 0x7f71b654ea2b in PlasmaQuick::ContainmentView::~ContainmentView() /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/containmentview.cpp:226
    #31 0x49d95a in PanelView::~PanelView() /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:139
    #32 0x49d97f in PanelView::~PanelView() /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:139
    #33 0x517ad3 in ShellCorona::unload() /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:966
    #34 0x512773 in ShellCorona::loadLookAndFeelDefaultLayout(QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:699
    #35 0x6c2bf5 in PlasmaShellAdaptor::loadLookAndFeelDefaultLayout(QString const&) /home/nico/kde-qtdev/build/plasma-workspace/shell/plasmashelladaptor.cpp:75
    #36 0x6c32ab in PlasmaShellAdaptor::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/moc_plasmashelladaptor.cpp:180
    #37 0x6c392f in PlasmaShellAdaptor::qt_metacall(QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/moc_plasmashelladaptor.cpp:234
    #38 0x7f71ab0bf265 in QDBusConnectionPrivate::deliverCall(QObject*, QDBusMessage const&, QList<QMetaType> const&, int) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1007
    #39 0x7f71ab0c6e63 in QDBusConnectionPrivate::activateCall(QObject*, QFlags<QDBusConnection::RegisterOption>, QDBusMessage const&) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:909
    #40 0x7f71ab0c8b42 in QDBusConnectionPrivate::activateObject(QDBusConnectionPrivate::ObjectTreeNode&, QDBusMessage const&, int) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1484
    #41 0x7f71ab0d190d in QDBusActivateObjectEvent::placeMetaCall(QObject*) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1604
    #42 0x7f71a9aa5c8f in QObject::event(QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobject.cpp:1431
    #43 0x7f71b1e7bc21 in QApplicationPrivate::notify_helper(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/widgets/kernel/qapplication.cpp:3296
    #44 0x7f71b1e97bc8 in QApplication::notify(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/widgets/kernel/qapplication.cpp:3247
    #45 0x7f71a99a5a60 in QCoreApplication::notifyInternal2(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1136
    #46 0x7f71a99a5bb0 in QCoreApplication::sendEvent(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1578
    #47 0x7f71a99a8c2a in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1933
    #48 0x7f71a99a9348 in QCoreApplication::sendPostedEvents(QObject*, int) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1765
    #49 0x7f71aa2161b9 in postEventSourceDispatch /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:246
    #50 0x7f71aaf10eb7 in g_main_dispatch ../glib/gmain.c:3357
    #51 0x7f71aaf10eb7 in g_main_context_dispatch_unlocked ../glib/gmain.c:4208
    #52 0x7f71aaf12ca7 in g_main_context_iterate_unlocked ../glib/gmain.c:4273
    #53 0x7f71aaf134bb in g_main_context_iteration ../glib/gmain.c:4338
    #54 0x7f71aa214476 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:399
    #55 0x7f71a2b11ddf in QXcbGlibEventDispatcher::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6-dev/qtbase/src/plugins/platforms/xcb/qxcbeventdispatcher.cpp:96
    #56 0x7f71a99c705f in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qeventloop.cpp:103
    #57 0x7f71a99c92a6 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qeventloop.cpp:194
    #58 0x7f71a99b0935 in QCoreApplication::exec() /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1479
    #59 0x7f71ab8328cb in QGuiApplication::exec() /home/nico/workspace/qt6-dev/qtbase/src/gui/kernel/qguiapplication.cpp:1975
    #60 0x7f71b1e78ad2 in QApplication::exec() /home/nico/workspace/qt6-dev/qtbase/src/widgets/kernel/qapplication.cpp:2564
    #61 0x44192c in main /home/nico/kde-qtdev/src/plasma-workspace/shell/main.cpp:191
    #62 0x7f71a8e2a2ad in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    #63 0x7f71a8e2a378 in __libc_start_main_impl ../csu/libc-start.c:360
    #64 0x42f5b4 in _start ../sysdeps/x86_64/start.S:115

0x506000a67138 is located 24 bytes inside of 56-byte region [0x506000a67120,0x506000a67158)
freed by thread T0 here:
    #0 0x7f71b78fe198 in operator delete(void*, unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cpp:164
    #1 0x7f71b654ea1f in PlasmaQuick::ContainmentView::~ContainmentView() /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/containmentview.cpp:225
    #2 0x49d95a in PanelView::~PanelView() /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:139
    #3 0x49d97f in PanelView::~PanelView() /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:139
    #4 0x517ad3 in ShellCorona::unload() /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:966
    #5 0x512773 in ShellCorona::loadLookAndFeelDefaultLayout(QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:699
    #6 0x6c2bf5 in PlasmaShellAdaptor::loadLookAndFeelDefaultLayout(QString const&) /home/nico/kde-qtdev/build/plasma-workspace/shell/plasmashelladaptor.cpp:75
    #7 0x6c32ab in PlasmaShellAdaptor::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/moc_plasmashelladaptor.cpp:180
    #8 0x6c392f in PlasmaShellAdaptor::qt_metacall(QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/moc_plasmashelladaptor.cpp:234
    #9 0x7f71ab0bf265 in QDBusConnectionPrivate::deliverCall(QObject*, QDBusMessage const&, QList<QMetaType> const&, int) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1007
    #10 0x7f71ab0c6e63 in QDBusConnectionPrivate::activateCall(QObject*, QFlags<QDBusConnection::RegisterOption>, QDBusMessage const&) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:909
    #11 0x7f71ab0c8b42 in QDBusConnectionPrivate::activateObject(QDBusConnectionPrivate::ObjectTreeNode&, QDBusMessage const&, int) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1484
    #12 0x7f71ab0d190d in QDBusActivateObjectEvent::placeMetaCall(QObject*) /home/nico/workspace/qt6-dev/qtbase/src/dbus/qdbusintegrator.cpp:1604
    #13 0x7f71a9aa5c8f in QObject::event(QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qobject.cpp:1431
    #14 0x7f71b1e7bc21 in QApplicationPrivate::notify_helper(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/widgets/kernel/qapplication.cpp:3296
    #15 0x7f71b1e97bc8 in QApplication::notify(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/widgets/kernel/qapplication.cpp:3247
    #16 0x7f71a99a5a60 in QCoreApplication::notifyInternal2(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1136
    #17 0x7f71a99a5bb0 in QCoreApplication::sendEvent(QObject*, QEvent*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1578
    #18 0x7f71a99a8c2a in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1933
    #19 0x7f71a99a9348 in QCoreApplication::sendPostedEvents(QObject*, int) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qcoreapplication.cpp:1765
    #20 0x7f71aa2161b9 in postEventSourceDispatch /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:246
    #21 0x7f71aaf10eb7 in g_main_dispatch ../glib/gmain.c:3357
    #22 0x7f71aaf10eb7 in g_main_context_dispatch_unlocked ../glib/gmain.c:4208

previously allocated by thread T0 here:
    #0 0x7f71b78fd298 in operator new(unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cpp:95
    #1 0x7f71b654e074 in PlasmaQuick::ContainmentView::ContainmentView(Plasma::Corona*, QWindow*) /home/nico/kde-qtdev/src/libplasma/src/plasmaquick/containmentview.cpp:197
    #2 0x49b8bd in PanelView::PanelView(ShellCorona*, QScreen*, QWindow*) /home/nico/kde-qtdev/src/plasma-workspace/shell/panelview.cpp:66
    #3 0x520f39 in ShellCorona::createWaitingPanels() /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:1559
    #4 0x530de5 in ShellCorona::addPanel(QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/shellcorona.cpp:2288
    #5 0x69bff8 in WorkspaceScripting::ScriptEngine::createContainment(QString const&, QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/scripting/scriptengine.cpp:368
    #6 0x69c50b in WorkspaceScripting::ScriptEngine::createContainmentWrapper(QString const&, QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/scripting/scriptengine.cpp:392
    #7 0x6b0db5 in WorkspaceScripting::ScriptEngine::V1::createContainment(QString const&, QString const&, QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/scripting/scriptengine_v1.cpp:832
    #8 0x6a8c09 in WorkspaceScripting::ScriptEngine::V1::newPanel(QString const&) /home/nico/kde-qtdev/src/plasma-workspace/shell/scripting/scriptengine_v1.cpp:433
    #9 0x6b4a2a in WorkspaceScripting::ScriptEngine::V1::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/plasmashell_autogen/include/moc_scriptengine_v1.cpp:381
    #10 0x6b6d20 in WorkspaceScripting::ScriptEngine::V1::qt_metacall(QMetaObject::Call, int, void**) /home/nico/kde-qtdev/build/plasma-workspace/shell/plasmashell_autogen/include/moc_scriptengine_v1.cpp:543
    #11 0x7f71a99d0ae8 in QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) /home/nico/workspace/qt6-dev/qtbase/src/corelib/kernel/qmetaobject.cpp:347
    #12 0x7f71aebf2c37 in QQmlObjectOrGadget::metacall(QMetaObject::Call, int, void**) const /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/qml/qqmlobjectorgadget.cpp:14
    #13 0x7f71ae769f29 in CallMethod /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:1687
    #14 0x7f71ae76a42f in QV4::QObjectMethod::callPrecise(QQmlObjectOrGadget const&, QQmlPropertyData const&, QV4::ExecutionEngine*, QV4::CallData*, QMetaObject::Call) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2054
    #15 0x7f71ae76af3c in operator() /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:3044
    #16 0x7f71ae76b25e in operator()<QV4::QObjectMethod::callInternal(const QV4::Value*, const QV4::Value*, int) const::<lambda()> > /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:3021
    #17 0x7f71ae76c454 in QV4::QObjectMethod::callInternal(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:3044
    #18 0x7f71ae76c8cc in QV4::QObjectMethod::virtualCall(QV4::FunctionObject const*, QV4::Value const*, QV4::Value const*, int) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4qobjectwrapper.cpp:2926
    #19 0x7f71ae4b15b5 in QV4::FunctionObject::call(QV4::Value const*, QV4::Value const*, int) const /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4functionobject_p.h:187
    #20 0x7f71ae801313 in QV4::Runtime::CallName::call(QV4::ExecutionEngine*, int, QV4::Value*, int) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4runtime.cpp:1507
    #21 0x7f71ae8c64c3 in QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:815
    #22 0x7f71ae8d8ed8 in QV4::Moth::VME::exec(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:487
    #23 0x7f71ae63d1a4 in QV4::ScriptFunction::virtualCallAsConstructor(QV4::FunctionObject const*, QV4::Value const*, int, QV4::Value const*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4functionobject.cpp:475
    #24 0x7f71ae4b150e in QV4::FunctionObject::callAsConstructor(QV4::Value const*, int, QV4::Value const*) const /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4functionobject_p.h:180
    #25 0x7f71ae7ef765 in QV4::Runtime::Construct::call(QV4::ExecutionEngine*, QV4::Value const&, QV4::Value const&, QV4::Value*, int) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4runtime.cpp:1654
    #26 0x7f71ae8c7a01 in QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:856
    #27 0x7f71ae8d8ed8 in QV4::Moth::VME::exec(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4vme_moth.cpp:487
    #28 0x7f71ae621bb2 in doCall /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4function.cpp:52
    #29 0x7f71ae623510 in QV4::Function::call(QV4::Value const*, QV4::Value const*, int, QV4::ExecutionContext*) /home/nico/workspace/qt6-dev/qtdeclarative/src/qml/jsruntime/qv4function.cpp:77

SUMMARY: AddressSanitizer: heap-use-after-free /home/nico/kde-qtdev/usr/include/QtCore/qsharedpointer_impl.h:792 in QWeakPointer<QObject>::internalData() const

Comment 10 TraceyC 2024-12-19 21:13:03 UTC

*** Bug 495172 has been marked as a duplicate of this bug. ***

Comment 11 TraceyC 2024-12-19 21:13:26 UTC

*** Bug 497600 has been marked as a duplicate of this bug. ***

Comment 12 TraceyC 2024-12-19 21:25:12 UTC

*** Bug 497381 has been marked as a duplicate of this bug. ***

Comment 13 Nate Graham 2025-01-15 20:36:49 UTC

*** Bug 498706 has been marked as a duplicate of this bug. ***

Comment 14 Nate Graham 2025-01-31 16:02:45 UTC

*** Bug 499353 has been marked as a duplicate of this bug. ***

Comment 15 Wian Potgieter 2025-02-15 21:15:17 UTC

Created attachment 178414 [details]
Crash log on KDE Neon running 6.3

Comment 16 TraceyC 2025-03-04 22:05:13 UTC

*** Bug 501038 has been marked as a duplicate of this bug. ***

Comment 17 Nate Graham 2025-03-22 02:51:46 UTC

According to sentry, this issue has almost entirely disappeared in the wild; lowering priority despite the historically high number of older duplicate reports.

Comment 18 DeeHY 2025-03-22 03:03:32 UTC

In fact, this error has always existed.