Public bug reported:

My KDE Plasma session (Wayland) on Ubuntu Noble Numbat frequently
experiences crashes of the kcminit process shortly after login or during
active use. My system is equipped with an NVIDIA RTX 2080 GPU, using
NVIDIA proprietary driver version 570.133.07 (distro-provided, not PPA).

A recent dmesg output shows a segmentation fault related to Wayland and
libc:

[11:27:54] WaylandEventThr[84615]: segfault at 0 ip 00007beb60129c3c sp 
00007beb561fe6d0 error 6 in libc.so.6[7beb60091000+191000]
Analysis of the _usr_bin_kcminit.1000.crash file using apport-unpack reveals 
that kcminit is crashing during a memory allocation call 
(_int_malloc/__libc_calloc), which is initiated by the Qt5Core library, which 
in turn calls into the NVIDIA Thread Local Storage library (libnvidia-tls.so).

Here is the Stacktrace of the crashing thread:

#0  0x00007beb600aba34 in _int_malloc (av=av@entry=0x7beb48000030, 
bytes=bytes@entry=24) at ./malloc/malloc.c:3954
        tc_victim = 0x7beb48000
        victim_idx = <optimized out>
        tc_idx = 0
        p = 0x7beb48000b70
        fb = <optimized out>
        pp = 0x7beb48000
        nb = <optimized out>
        idx = <optimized out>
        bin = <optimized out>
        victim = <optimized out>
        size = <optimized out>
        victim_index = <optimized out>
        remainder = <optimized out>
        remainder_size = <optimized out>
        block = <optimized out>
        bit = <optimized out>
        map = <optimized out>
        fwd = <optimized out>
        bck = <optimized out>
        tcache_unsorted_count = <optimized out>
        tcache_nb = <optimized out>
        tc_idx = <optimized out>
        return_cached = <optimized out>
        __PRETTY_FUNCTION__ = "_int_malloc"
#1  0x00007beb600ae87e in __libc_calloc (n=<optimized out>, 
elem_size=<optimized out>) at ./malloc/malloc.c:3754
        av = <optimized out>
        oldtop = 0x7beb48001260
        sz = 24
        oldtopsize = 130464
        mem = <optimized out>
        clearsize = <optimized out>
        nclears = <optimized out>
        d = <optimized out>
        bytes = 24
        __PRETTY_FUNCTION__ = "__libc_calloc"
        p = <optimized out>
        csz = <optimized out>
#2  0x00007beb5f3b150f in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-tls.so.570.133.07
No symbol table info available.
#3  0x00007beb608dabc0 in ?? () from /lib/x86_64-linux-gnu/libQt5Core.so.5
No symbol table info available.
#4  0x00007beb60099340 in __GI___nptl_deallocate_tsd () at 
./nptl/nptl_deallocate_tsd.c:73
        data = <optimized out>
        inner = <optimized out>
        level2 = 0x7beb561fe9d0
        idx = <optimized out>
        round = <optimized out>
        cnt = 0
        self = <optimized out>
        just_free = <optimized out>
        __value = <optimized out>
#5  __GI___nptl_deallocate_tsd () at ./nptl/nptl_deallocate_tsd.c:22
        self = <optimized out>
        just_free = <optimized out>
        round = <optimized out>
        cnt = <optimized out>
        idx = <optimized out>
        level2 = <optimized out>
        __value = <optimized out>
        inner = <optimized out>
        data = <optimized out>
        __value = <optimized out>
        level2 = <optimized out>
        __value = <optimized out>
#6  0x00007beb6009c890 in start_thread (arg=<optimized out>) at 
./nptl/pthread_create.c:455
        pd = <optimized out>
        out = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {136250692462272, 
-2184149916597490632, 136250692462272, -248, 2, 140724374291040, 
-2184149916643627976, -2184180857246585800}, mask_was_saved = 0}}, priv = {pad 
= {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
#7  0x00007beb60129c3c in clone3 () at 
../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
No locals.%
And here is the ThreadStacktrace, showing other active NVIDIA-related threads:

.
Thread 2 (Thread 0x7beb5ff4e880 (LWP 84668)):
#0  0x00007beb57effc47 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#1  0x00007beb577dd819 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#2  0x00007beb57c25269 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#3  0x00007beb59d1a421 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#4  0x00007beb57c0693d in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#5  0x00007beb57c08970 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#6  0x00007beb57c08faa in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-gpucomp.so.570.133.07
No symbol table info available.
#7  0x00007beb5b855f57 in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-glcore.so.570.133.07
No symbol table info available.
#8  0x00007beb5d2d5abe in ?? () from /lib/x86_64-linux-gnu/libGLX_nvidia.so.0
No symbol table info available.
#9  0x00007beb5d2d5e8d in ?? () from /lib/x86_64-linux-gnu/libGLX_nvidia.so.0
No symbol table info available.
#10 0x00007beb5d2d6064 in ?? () from /lib/x86_64-linux-gnu/libGLX_nvidia.so.0
No symbol table info available.
#11 0x00007beb5b81c27e in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-glcore.so.570.133.07
No symbol table info available.
#12 0x00007beb5d2a270b in ?? () from /lib/x86_64-linux-gnu/libGLX_nvidia.so.0
No symbol table info available.
#13 0x00007beb5d2a2edf in ?? () from /lib/x86_64-linux-gnu/libGLX_nvidia.so.0
No symbol table info available.
#14 0x00007beb6182a000 in _GLOBAL_OFFSET_TABLE_ () from 
/lib64/ld-linux-x86-64.so.2
No symbol table info available.
#15 0x0000000000000000 in ?? ()
No symbol table info available.
.
Thread 1 (Thread 0x7beb561fe6c0 (LWP 84674)):
#0  0x00007beb600aba34 in _int_malloc (av=av@entry=0x7beb48000030, 
bytes=bytes@entry=24) at ./malloc/malloc.c:3954
        tc_victim = 0x7beb48000
        victim_idx = <optimized out>
        tc_idx = 0
        p = 0x7beb48000b70
        fb = <optimized out>
        pp = 0x7beb48000
        nb = <optimized out>
        idx = <optimized out>
        bin = <optimized out>
        victim = <optimized out>
        size = <optimized out>
        victim_index = <optimized out>
        remainder = <optimized out>
        remainder_size = <optimized out>
        block = <optimized out>
        bit = <optimized out>
        map = <optimized out>
        fwd = <optimized out>
        bck = <optimized out>
        tcache_unsorted_count = <optimized out>
        tcache_nb = <optimized out>
        tc_idx = <optimized out>
        return_cached = <optimized out>
        __PRETTY_FUNCTION__ = "_int_malloc"
#1  0x00007beb600ae87e in __libc_calloc (n=<optimized out>, 
elem_size=<optimized out>) at ./malloc/malloc.c:3754
        av = <optimized out>
        oldtop = 0x7beb48001260
        sz = 24
        oldtopsize = 130464
        mem = <optimized out>
        clearsize = <optimized out>
        nclears = <optimized out>
        d = <optimized out>
        bytes = 24
        __PRETTY_FUNCTION__ = "__libc_calloc"
        p = <optimized out>
        csz = <optimized out>
#2  0x00007beb5f3b150f in ?? () from 
/lib/x86_64-linux-gnu/libnvidia-tls.so.570.133.07
No symbol table info available.
#3  0x00007beb608dabc0 in ?? () from /lib/x86_64-linux-gnu/libQt5Core.so.5
No symbol table info available.
#4  0x00007beb60099340 in __GI___nptl_deallocate_tsd () at 
./nptl/nptl_deallocate_tsd.c:73
        data = <optimized out>
        inner = <optimized out>
        level2 = 0x7beb561fe9d0
        idx = <optimized out>
        round = <optimized out>
        cnt = 0
        self = <optimized out>
        just_free = <optimized out>
        __value = <optimized out>
#5  __GI___nptl_deallocate_tsd () at ./nptl/nptl_deallocate_tsd.c:22
        self = <optimized out>
        just_free = <optimized out>
        round = <optimized out>
        cnt = <optimized out>
        idx = <optimized out>
        level2 = <optimized out>
        __value = <optimized out>
        inner = <optimized out>
        data = <optimized out>
        __value = <optimized out>
        level2 = <optimized out>
        __value = <optimized out>
#6  0x00007beb6009c890 in start_thread (arg=<optimized out>) at 
./nptl/pthread_create.c:455
        pd = <optimized out>
        out = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {136250692462272, 
-2184149916597490632, 136250692462272, -248, 2, 140724374291040, 
-2184149916643627976, -2184180857246585800}, mask_was_saved = 0}}, priv = {pad 
= {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
#7  0x00007beb60129c3c in clone3 () at 
../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
No locals.%

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: plasma-workspace 4:5.27.12-0ubuntu0.1 [modified: 
usr/lib/x86_64-linux-gnu/libexec/plasma-dbus-run-session-if-needed 
usr/lib/x86_64-linux-gnu/libexec/plasma-sourceenv.sh]
ProcVersionSignature: Ubuntu 6.11.0-28.28~24.04.1-generic 6.11.11
Uname: Linux 6.11.0-28-generic x86_64
ApportVersion: 2.28.1-0ubuntu3.7
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: KDE
Date: Sat Jun 28 13:43:00 2025
InstallationDate: Installed on 2025-05-09 (50 days ago)
InstallationMedia: Xubuntu 24.04.2 LTS "Noble Numbat" - Release amd64 
(20250215.1)
SourcePackage: plasma-workspace
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: plasma-workspace (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug noble wayland-session

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2115567

Title:
  KDE Plasma: kcminit crashes with _int_malloc error originating from
  NVIDIA libnvidia-tls.so on Wayland

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plasma-workspace/+bug/2115567/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to