Bug 1758384 - poll_for_event assert(!xcb_xlib_threads_sequence_lost) (was: remote-viewer: Reproducible crash over ssh X11 forwarding)
Summary: poll_for_event assert(!xcb_xlib_threads_sequence_lost) (was: remote-viewer: R...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: libX11
Version: 33
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Adam Jackson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 1697019 1701704 1701754 1705076 1708022 1708288 1713723 1714382 1715594 1722168 1726379 1726916 1729947 1730563 1731244 1731643 1739166 1739343 1746702 1749947 1750750 1752198 1754173 1754234 1756065 1756565 1758599 1760388 1761635 1761641 1762284 1762586 1765321 1767207 1771464 1771504 1772640 1773218 1774779 1775292 1776884 1778447 1779572 1780483 1783767 1784722 1785218 1785854 1787161 1787167 1787214 1788740 1789770 1792576 1793194 1794196 1796661 1806139 1808158 1808954 1810812 1811052 1811436 1811780 1812260 1812273 1813463 1814675 1815979 1816781 1818542 1819230 1826461 1833627 1834815 1836515 1836527 1836643 1839140 1839361 1840843 1843246 1844618 1845038 1845754 1882946 1883364 1886190 1886831 1887378 1887564 1889008 1889092 1889148 1891233 1892208 (view as bug list)
Depends On:
Blocks: 1889008
TreeView+ depends on / blocked
 
Reported: 2019-10-04 01:15 UTC by jamespharvey20
Modified: 2020-11-11 01:20 UTC (History)
87 users (show)

Fixed In Version: libX11-1.6.12-3.fc33
Clone Of:
: 1795931 (view as bug list)
Environment:
Last Closed: 2020-11-11 01:20:15 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
log that was at http://ix.io/1XxD, just to have everything in one place (307.25 KB, text/plain)
2020-01-25 08:57 UTC, Frediano Ziglio
no flags Details
Proposed fix (2.54 KB, application/mbox)
2020-01-29 09:14 UTC, Frediano Ziglio
no flags Details
File: backtrace (92.92 KB, text/plain)
2020-02-10 08:05 UTC, kalus.mario
no flags Details


Links
System ID Private Priority Status Summary Last Updated
freedesktop.org Gitlab xorg/lib/libx11/merge_requests/34 0 None None None 2020-01-29 09:30:18 UTC

Internal Links: 2223629

Description jamespharvey20 2019-10-04 01:15:01 UTC
Description of problem: remote-viewer crashes a bit more than once per day.  When it happens, it's always when I'm moving my host mouse cursor across the remote-viewer window border.



Version-Release number of selected component (if applicable):

virt-viewer 8.0.0, libxcb 1.13.1, qemu 4.1.0, spice 0.14.2, and spice-gtk 0.37.  no qemu guest agent.

When this started a few months ago, I was on virt-viewer 8.0.0, libcxb 1.13 (not .1), qemu 4.0.0, spice 0.14.0, and spice-gtk 0.37.

8.0.0 was the first version I installed on the headless machine, but I tried downgrading to 7.0 and was still able to replicate the crash.



How reproducible: 100% (within 1-60 seconds of trying to aggravate it by repeatedly going in and out of the remote-viewer window.)  Otherwise about once a day.



Steps to Reproduce:

1. ssh to other/headless machine sitting 2 feet away with X11 forwarding enabled
2. run remote-viewer to connect via spice to QEMU vm (remote-viewer spice+unix:///<socket file>)
3. wait for about a day, and be unlucky when going in or out of the remote-viewer window; or go in and out as quickly as I can for 1-60 seconds



Actual results: 

remote-viewer crashes showing:

[xcb] Unknown sequence number while processing queue
[xcb] Most likely this is a multi-threaded client and XInitThreads has not been called
[xcb] Aborting, sorry about that.
remote-viewer: xcb_io.c:263: poll_for_event: Assertion `!xcb_xlib_threads_sequence_lost' failed.
Aborted (core dumped)

journalctl shows core was dumped, visible here: http://ix.io/1KpK



Expected results: remote-viewer to not crash



Additional info:

I am reporting to virt-viewer because I haven't been able to replicate this over ssh with X11 forwarding with other GUI programs.

This happens whether the guest vm is running in tty without mouse, tty with gpm (text mode mouse), or with an x server.

After writing a script to repeatedly move the mouse up (xdotool mousemove_relative -- -2 -10) 30 times and down (xdotool mousemove_relative 2 10) 30 times, I verified it would still reproduce the crash.  Then, I tried letting it run for 10 minutes with another window being active but not even covering the remote-viewer window, but it failed to crash.

The guest vm isn't using the qemu guest agent.

I'm thinking it's probably related to 

The actual system I'm physically using and the headless one I'm ssh'ing into are 2 feet away.  They have a direct InfiniBand connection (no switches involved) which provides ultra low latency and high bandwidth.  That's usually what I connect through (using IP over Infiniband.)  But, I've replicated this connecting via ssh over gigabit ethernet.

I run most of my VM's on the headless system with remote-viewer over ssh with X11 trusted forwarding.  But, I created a VM on the system I'm physically using, and am unable to replicate the crash.

I temporarily installed an x server on the typically headless system and ran remote-viewer directly on it, but was unable to replicate the crash.  So, it definitely seems limited to being ran over ssh with X11 trusted forwarding.  I'll mention the two systems are identical (hardware and software version wise) except the headless machine only has its onboard video rather than a Radeon Vega 64.

To be clear, running remote-viewer on the system I'm physically using to a VM on it does not crash.

It's just the specific remote-viewer that crashes, not the VM itself, and not other remote-viewers running within the same ssh session.

I tried using xtrace (the one that sets up a proxy x server to trace client/server communications, not the one included with glibc) but even over X11 forwarding, it prevents being able to replicate the crash.  Guessing it introduces a timing change that prevents it.

Comment 1 jamespharvey20 2019-10-04 04:42:47 UTC
I went back and let the xdotool-based mouse movement run for an extremely long time, and actually reproduced a crash under it.  Perhaps it just changes the timings enough to make it less likely.

The entire xtrace log is 172MB and is available upon request, but the last 1,000 lines (315K) is viewable here: http://ix.io/1XxD

If you search for "xcb" in the linked partial log, you'll come to line 926/1000 which is the origianl error I posted.

----------

Also, in case it helps, qemu command line I'm using is:

/usr/bin/qemu-system-x86_64 \
   -name crash,process=qemu:crash \
   -no-user-config \
   -nodefaults \
   -nographic \
   -uuid 4a30c830-80d5-4b88-a79f-e6ad4e44a7fe \
   -pidfile /tmp/vm_crash.pid \
   -machine q35,accel=kvm,vmport=off,dump-guest-core=off \
   -cpu SandyBridge-IBRS \
   -smp cpus=4,cores=2,threads=1,sockets=2 \
   -m 4G \
   -drive if=pflash,format=raw,readonly,file=/usr/share/ovmf/x64/OVMF_CODE.fd \
   -drive if=pflash,format=raw,readonly,file=/var/qemu/efivars/vm_crash.fd \
   -monitor telnet:localhost:8000,server,nowait,nodelay \
   -spice unix,addr=/tmp/spice.crash.sock,disable-ticketing \
   -device ioh3420,id=pcie.1,bus=pcie.0,slot=0 \
   -device qxl-vga,bus=pcie.0,addr=2,ram_size_mb=64,vram_size_mb=8,vgamem_mb=16,max_outputs=1 \
   -usbdevice tablet \
   -netdev bridge,id=network0,br=br0 \
   -device virtio-net-pci,netdev=network0,mac=94:f9:7b:a9:15:a4,bus=pcie.0,addr=3 \
   -device virtio-scsi-pci,id=scsi1 \
   -drive driver=raw,node-name=hd0,file=/dev/newLvm/vm_crash,if=none,discard=unmap,cache=none,aio=threads \
   -device scsi-hd,drive=hd0,bootindex=1

Comment 2 Cole Robinson 2020-01-21 21:09:32 UTC
Found this bug by googling 'spice-gtk xcb_xlib_threads_sequence_lost'. Thanks for the detailed report!

FWIW we have had a lot of crashes in virt-manager too that may be related, see all the dupes here:

  https://bugzilla.redhat.com/show_bug.cgi?id=1756065

And another bug that I am actively working with the reporter to try and identify, from the virt-manager perspective, where the crash always happens on VM window interaction.

  https://bugzilla.redhat.com/show_bug.cgi?id=1792576

FWIW virt-viewer doesn't have any native usage of threads AFAICT, so if the app is crashing like this then it is something lower level than virt-viewer, spice-gtk is my guess.

Can you still reproduce easily with your current setup?
Can you verify what distro and package versions you can still reproduce with?

It would help to get a gdb backtrace. If you are on Fedora, you can do:

  sudo dnf debuginfo-install virt-viewer
  gdb --eval-command=run --args virt-viewer [insert your args]

Reproduce the crash (virt-viewer will freeze), then go back to the gdb terminal and run

  thread apply all bt

And attach the whole result here

Comment 3 Cole Robinson 2020-01-21 21:14:10 UTC
Note, I see now that you have the backtrace in journalctl, but lack of debuginfo makes it not too useful, so if you can reproduce in gdb that will help. gdb could make it hard to reproduce, so maybe just installing debuginfo packages and reproducing like normal will give a more useful backtrace in the logs

Comment 4 Frediano Ziglio 2020-01-25 08:57:54 UTC
Created attachment 1655204 [details]
log that was at http://ix.io/1XxD, just to have everything in one place

log that was at http://ix.io/1XxD, just to have everything in one place

Comment 5 Frediano Ziglio 2020-01-26 09:42:10 UTC
A gdb or stack trace could be not so interesting if the other (not main) thread do its job and the main one (as almost all reports are showing) report the unknown sequence.
From the partial xtrace attached here it seems that some focus in/out was happening and also that there has been some freeing of image which may suggest that mouse movements were close to the viewer border.

Comment 6 Frediano Ziglio 2020-01-27 10:11:45 UTC
I finally got an easy way to reproduce.
After compiling from source xtrace (from Debian sources) and installing it, simply a

$ xtrace -o trace -n strace -f remote-viewer spice://localhost:5900

and move the mouse on the windows between above the remote viewer windows and inside (guest part). After repeating for a while (like 20/30 times maximum maybe) back and forth the crash happens.
I can see just before the xcb error another thread doing something. I can see that the thread is doing something with dbus but I cannot understand how this affects xcb (it interacts with a different file descriptor). I just picked up a random VM (currently Windows 7) on a Fedora 30 client/host. I can confirm this happens with both stock and master spice-gtk. Not saying that this should be reliable for everyone, probably I'm just lucky that on my machine happens so reliably (and I'm trying to understand it before a restart).
I tried to compile out the spice integration code on spice-gtk (the only part using directly dbus) but it didn't help out).

Comment 7 Frediano Ziglio 2020-01-28 23:23:55 UTC
It's a bug in libx11, specifically poll_for_response. Code is

   273  static xcb_generic_reply_t *poll_for_response(Display *dpy)
   274  {
   275          void *response;
   276          xcb_generic_error_t *error;
   277          PendingRequest *req;
   278          while(!(response = poll_for_event(dpy, False)) &&
   279                (req = dpy->xcb->pending_requests) &&
   280                !req->reply_waiter)
   281          {
   282                  uint64_t request;
   283
   284                  if(!xcb_poll_for_reply64(dpy->xcb->connection, req->sequence,
   285                                           &response, &error)) {
   286                          /* xcb_poll_for_reply64 may have read events even if
   287                           * there is no reply. */
   288                          response = poll_for_event(dpy, True);
   289                          break;
   290                  }
   291
   292                  request = X_DPY_GET_REQUEST(dpy);
   293                  if(XLIB_SEQUENCE_COMPARE(req->sequence, >, request))
   294                  {
   295                          throw_thread_fail_assert("Unknown sequence number "
   296                                                   "while awaiting reply",
   297                                                  xcb_xlib_threads_sequence_lost);
   298                  }
   299                  X_DPY_SET_LAST_REQUEST_READ(dpy, req->sequence);
   300                  if(response)
   301                          break;
   302                  dequeue_pending_request(dpy, req);
   303                  if(error)
   304                          return (xcb_generic_reply_t *) error;
   305          }
   306          return response;
   307  }

is it possible that when poll_for_event is called there are no events (still to arrive), but there are pending_requests (as these are added when requests are sent without waiting for reply from server), then when xcb_poll_for_reply64 is called replies and events are read so last_request_read is set to request sequence which is higher than event skipped in this function.
After when poll_for_event is called the event is fetched, sequence number of event is passed to widen function which will add 0x100000000 (on 64 bit) which will cause XLIB_SEQUENCE_COMPARE(event_sequence, >, request) to be triggered.
So this has nothing to do with threads.

Too late today to post proper bug to libX11.

Comment 8 Frediano Ziglio 2020-01-29 09:11:16 UTC
*** Bug 1792576 has been marked as a duplicate of this bug. ***

Comment 9 Frediano Ziglio 2020-01-29 09:14:05 UTC
Created attachment 1656189 [details]
Proposed fix

See https://gitlab.freedesktop.org/xorg/lib/libx11/merge_requests/34

Comment 10 Frediano Ziglio 2020-01-29 17:37:01 UTC
*** Bug 1760388 has been marked as a duplicate of this bug. ***

Comment 11 Frediano Ziglio 2020-01-29 17:37:59 UTC
*** Bug 1756065 has been marked as a duplicate of this bug. ***

Comment 12 Frediano Ziglio 2020-01-29 17:39:34 UTC
*** Bug 1762284 has been marked as a duplicate of this bug. ***

Comment 13 Frediano Ziglio 2020-01-29 17:39:36 UTC
*** Bug 1739166 has been marked as a duplicate of this bug. ***

Comment 14 Frediano Ziglio 2020-01-29 17:41:39 UTC
*** Bug 1771504 has been marked as a duplicate of this bug. ***

Comment 15 Frediano Ziglio 2020-01-29 17:41:41 UTC
*** Bug 1726916 has been marked as a duplicate of this bug. ***

Comment 16 Frediano Ziglio 2020-01-29 21:11:05 UTC
*** Bug 1713723 has been marked as a duplicate of this bug. ***

Comment 17 Frediano Ziglio 2020-01-29 21:11:43 UTC
*** Bug 1708288 has been marked as a duplicate of this bug. ***

Comment 18 Frediano Ziglio 2020-01-29 21:11:49 UTC
*** Bug 1758599 has been marked as a duplicate of this bug. ***

Comment 19 Frediano Ziglio 2020-01-29 21:12:13 UTC
*** Bug 1714382 has been marked as a duplicate of this bug. ***

Comment 20 Frediano Ziglio 2020-01-29 21:12:37 UTC
*** Bug 1729947 has been marked as a duplicate of this bug. ***

Comment 21 Frediano Ziglio 2020-01-29 21:13:51 UTC
*** Bug 1779572 has been marked as a duplicate of this bug. ***

Comment 22 Frediano Ziglio 2020-01-29 21:13:57 UTC
*** Bug 1784722 has been marked as a duplicate of this bug. ***

Comment 23 Frediano Ziglio 2020-01-29 21:14:16 UTC
*** Bug 1749947 has been marked as a duplicate of this bug. ***

Comment 24 Frediano Ziglio 2020-01-29 21:15:18 UTC
*** Bug 1697019 has been marked as a duplicate of this bug. ***

Comment 25 Frediano Ziglio 2020-01-29 21:15:27 UTC
*** Bug 1701704 has been marked as a duplicate of this bug. ***

Comment 26 Frediano Ziglio 2020-01-29 21:15:45 UTC
*** Bug 1705076 has been marked as a duplicate of this bug. ***

Comment 27 Frediano Ziglio 2020-01-29 21:16:11 UTC
*** Bug 1730563 has been marked as a duplicate of this bug. ***

Comment 28 Frediano Ziglio 2020-01-29 21:16:32 UTC
*** Bug 1750750 has been marked as a duplicate of this bug. ***

Comment 29 Frediano Ziglio 2020-01-29 21:17:33 UTC
*** Bug 1752198 has been marked as a duplicate of this bug. ***

Comment 30 Frediano Ziglio 2020-01-29 21:17:51 UTC
*** Bug 1754234 has been marked as a duplicate of this bug. ***

Comment 31 Frediano Ziglio 2020-01-29 21:18:00 UTC
*** Bug 1761635 has been marked as a duplicate of this bug. ***

Comment 32 Frediano Ziglio 2020-01-29 21:18:39 UTC
*** Bug 1762586 has been marked as a duplicate of this bug. ***

Comment 33 Frediano Ziglio 2020-01-29 21:18:47 UTC
*** Bug 1771464 has been marked as a duplicate of this bug. ***

Comment 34 Frediano Ziglio 2020-01-29 21:19:45 UTC
*** Bug 1774779 has been marked as a duplicate of this bug. ***

Comment 35 Frediano Ziglio 2020-01-29 21:20:00 UTC
*** Bug 1776884 has been marked as a duplicate of this bug. ***

Comment 36 Frediano Ziglio 2020-01-29 21:20:15 UTC
*** Bug 1785218 has been marked as a duplicate of this bug. ***

Comment 37 Frediano Ziglio 2020-01-29 21:20:32 UTC
*** Bug 1787167 has been marked as a duplicate of this bug. ***

Comment 38 Frediano Ziglio 2020-01-29 21:20:48 UTC
*** Bug 1789770 has been marked as a duplicate of this bug. ***

Comment 39 Frediano Ziglio 2020-01-29 21:21:41 UTC
*** Bug 1793194 has been marked as a duplicate of this bug. ***

Comment 40 Frediano Ziglio 2020-01-29 21:21:57 UTC
*** Bug 1794196 has been marked as a duplicate of this bug. ***

Comment 41 Frediano Ziglio 2020-01-29 21:22:17 UTC
*** Bug 1761641 has been marked as a duplicate of this bug. ***

Comment 42 Frediano Ziglio 2020-01-29 21:22:42 UTC
*** Bug 1780483 has been marked as a duplicate of this bug. ***

Comment 43 Frediano Ziglio 2020-01-29 21:23:40 UTC
*** Bug 1726379 has been marked as a duplicate of this bug. ***

Comment 44 Frediano Ziglio 2020-01-29 21:23:55 UTC
*** Bug 1722168 has been marked as a duplicate of this bug. ***

Comment 45 Frediano Ziglio 2020-01-29 21:24:12 UTC
*** Bug 1746891 has been marked as a duplicate of this bug. ***

Comment 46 Frediano Ziglio 2020-01-29 21:24:28 UTC
*** Bug 1731643 has been marked as a duplicate of this bug. ***

Comment 47 Frediano Ziglio 2020-01-29 21:24:47 UTC
*** Bug 1788740 has been marked as a duplicate of this bug. ***

Comment 48 Frediano Ziglio 2020-01-29 21:25:39 UTC
*** Bug 1773218 has been marked as a duplicate of this bug. ***

Comment 49 Frediano Ziglio 2020-01-29 21:25:52 UTC
*** Bug 1787161 has been marked as a duplicate of this bug. ***

Comment 50 Frediano Ziglio 2020-01-29 21:26:06 UTC
*** Bug 1767207 has been marked as a duplicate of this bug. ***

Comment 51 Frediano Ziglio 2020-01-29 21:26:21 UTC
*** Bug 1701754 has been marked as a duplicate of this bug. ***

Comment 52 Frediano Ziglio 2020-01-29 21:26:39 UTC
*** Bug 1715594 has been marked as a duplicate of this bug. ***

Comment 53 Frediano Ziglio 2020-01-29 21:27:33 UTC
*** Bug 1756565 has been marked as a duplicate of this bug. ***

Comment 54 Frediano Ziglio 2020-01-29 21:27:49 UTC
*** Bug 1778447 has been marked as a duplicate of this bug. ***

Comment 55 Frediano Ziglio 2020-01-29 21:28:05 UTC
*** Bug 1739343 has been marked as a duplicate of this bug. ***

Comment 56 Frediano Ziglio 2020-01-29 21:28:21 UTC
*** Bug 1772640 has been marked as a duplicate of this bug. ***

Comment 57 Frediano Ziglio 2020-01-29 21:28:37 UTC
*** Bug 1775292 has been marked as a duplicate of this bug. ***

Comment 58 Frediano Ziglio 2020-01-29 21:28:52 UTC
*** Bug 1785854 has been marked as a duplicate of this bug. ***

Comment 59 Frediano Ziglio 2020-01-29 21:29:16 UTC
*** Bug 1754173 has been marked as a duplicate of this bug. ***

Comment 60 Frediano Ziglio 2020-01-29 21:30:11 UTC
*** Bug 1708022 has been marked as a duplicate of this bug. ***

Comment 61 Frediano Ziglio 2020-01-29 21:30:28 UTC
*** Bug 1757611 has been marked as a duplicate of this bug. ***

Comment 62 Frediano Ziglio 2020-01-29 21:30:42 UTC
*** Bug 1765321 has been marked as a duplicate of this bug. ***

Comment 63 Frediano Ziglio 2020-01-29 21:30:58 UTC
*** Bug 1783767 has been marked as a duplicate of this bug. ***

Comment 64 Frediano Ziglio 2020-01-29 21:31:13 UTC
*** Bug 1787214 has been marked as a duplicate of this bug. ***

Comment 65 Frediano Ziglio 2020-01-29 21:31:29 UTC
*** Bug 1731244 has been marked as a duplicate of this bug. ***

Comment 66 Frediano Ziglio 2020-01-29 21:32:57 UTC
*** Bug 1746702 has been marked as a duplicate of this bug. ***

Comment 67 Frediano Ziglio 2020-02-05 13:00:34 UTC
*** Bug 1796661 has been marked as a duplicate of this bug. ***

Comment 68 kalus.mario 2020-02-10 08:05:28 UTC
Similar problem has been detected:

Again and again for more than two years - virt-manager crashed when working with virtual machines!
THIS IS HAPPENING FOR MORE THAN TWO YEARS YET NOTHING IS HAPPENING. GOING TO SWITCH TO DIFFERENT DISTRIBUTION BECAUSE I AM TIRED OF THIS. SEEMS LOIKE NO ONE IN FEDORA TEAM CARES ANYMORE!

reporter:       libreport-2.11.3
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-2.scope
cmdline:        /usr/bin/python3 /usr/share/virt-manager/virt-manager
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=92a4313359c6417bbf50c2b1be7f4486;i=493be;b=fed046066f5e456dbf100fe4b408c898;m=638447dbd;t=59e341621b3a9;x=48f532ac596f51ca
kernel:         5.4.17-200.fc31.x86_64
package:        virt-manager-2.2.1-2.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 69 kalus.mario 2020-02-10 08:05:32 UTC
Created attachment 1662076 [details]
File: backtrace

Comment 70 Ben Cotton 2020-02-11 16:34:54 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 32 development cycle.
Changing version to 32.

Comment 71 Frediano Ziglio 2020-02-26 11:54:12 UTC
*** Bug 1806139 has been marked as a duplicate of this bug. ***

Comment 72 kalus.mario 2020-03-02 09:21:01 UTC
Similar problem has been detected:

I don't need to fill this report again. It is taking more than 2 zears already and it seems that noone in Fedora cares. Honestly - this bug affected 4 FU***ING releases so why don't you already fix it? And I don't care if this comment is public because I would like community to know how do you treat them.

reporter:       libreport-2.12.0
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-2.scope
cmdline:        /usr/bin/python3 /usr/share/virt-manager/virt-manager
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=68bcf42be49640358b3ed75f2e3f9d27;i=45327;b=e39a81b230984e58bfd28de21a4c81ee;m=c544e335ff;t=59fdb95ff27d0;x=6dfed1d0edebce06
kernel:         5.4.20-200.fc31.x86_64
package:        virt-manager-2.2.1-2.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 73 Frediano Ziglio 2020-03-02 11:23:35 UTC
Sent a new fix for this bug in X11, see updated https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/34.
I found also an easy way to reproduce in no time adding a specific sleep, hope this helps the patch to be accepted.

Comment 74 Robin Lee 2020-03-12 09:25:20 UTC
Similar problem has been detected:

Just open a vm display console(spice), and switch window with Alt-Tab.

reporter:       libreport-2.12.0
backtrace_rating: 4
cmdline:        /usr/bin/python3 /usr/share/virt-manager/virt-manager
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=e3be113e802b42ad9d7ac893e0a10148;i=1215552;b=4a6ded33d054465fa0a362142d5430e6;m=ce0ddec26e;t=5a0a3c770e78d;x=41420e4986514290
kernel:         5.5.6-100.fc30.x86_64
package:        virt-manager-2.1.0-2.fc30
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 75 Tomaz Borstnar 2020-04-13 08:13:15 UTC
Similar problem has been detected:

Upon logging into MATE environment this error happens every time.

reporter:       libreport-2.12.0
backtrace_rating: 3
cgroup:         0::/user.slice/user-1000.slice/session-3.scope
cmdline:        /usr/bin/python3 /usr/bin/dnfdragora-updater
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=4411486244ce4396bdcfa4e6a71b76e8;i=d14;b=c777204659094a508b34bdc1c9d4f223;m=249c50b;t=5a326ba223a13;x=59560d3d5f97d18e
kernel:         5.5.15-200.fc31.x86_64
package:        dnfdragora-updater-1.1.1-3.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 76 Frediano Ziglio 2020-04-13 15:08:41 UTC
*** Bug 1810812 has been marked as a duplicate of this bug. ***

Comment 77 Frediano Ziglio 2020-04-13 15:09:13 UTC
*** Bug 1811052 has been marked as a duplicate of this bug. ***

Comment 78 Frediano Ziglio 2020-04-13 15:09:51 UTC
*** Bug 1812273 has been marked as a duplicate of this bug. ***

Comment 79 Frediano Ziglio 2020-04-13 15:09:56 UTC
*** Bug 1813463 has been marked as a duplicate of this bug. ***

Comment 80 Frediano Ziglio 2020-04-13 15:11:15 UTC
*** Bug 1814675 has been marked as a duplicate of this bug. ***

Comment 81 Frediano Ziglio 2020-04-13 15:11:34 UTC
*** Bug 1815979 has been marked as a duplicate of this bug. ***

Comment 82 Frediano Ziglio 2020-04-13 15:11:53 UTC
*** Bug 1816781 has been marked as a duplicate of this bug. ***

Comment 83 Frediano Ziglio 2020-04-13 15:12:11 UTC
*** Bug 1819230 has been marked as a duplicate of this bug. ***

Comment 84 Frediano Ziglio 2020-04-13 15:12:34 UTC
*** Bug 1811436 has been marked as a duplicate of this bug. ***

Comment 85 Frediano Ziglio 2020-04-13 15:13:17 UTC
*** Bug 1808954 has been marked as a duplicate of this bug. ***

Comment 86 Frediano Ziglio 2020-04-13 15:13:43 UTC
*** Bug 1811780 has been marked as a duplicate of this bug. ***

Comment 87 Frediano Ziglio 2020-04-13 15:14:05 UTC
*** Bug 1818542 has been marked as a duplicate of this bug. ***

Comment 88 Frediano Ziglio 2020-04-13 15:14:23 UTC
*** Bug 1812260 has been marked as a duplicate of this bug. ***

Comment 89 Frediano Ziglio 2020-04-13 15:15:37 UTC
*** Bug 1808158 has been marked as a duplicate of this bug. ***

Comment 90 Frediano Ziglio 2020-04-21 18:40:02 UTC
*** Bug 1826461 has been marked as a duplicate of this bug. ***

Comment 91 Stan King 2020-05-01 11:22:44 UTC
Similar problem has been detected:

This error happened shortly after logging in.  No special action was required.

reporter:       libreport-2.12.0
backtrace_rating: 3
cgroup:         0::/user.slice/user-1000.slice/session-2.scope
cmdline:        /usr/bin/python3 /usr/bin/dnfdragora-updater
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=398d63cbfa144339b85cd5e37d4eb5ff;i=52ecaa;b=79b3ede045e24f50af7fec2d4f169de8;m=219af2c;t=5a4940ab96dd6;x=ffd90afd02932d4d
kernel:         5.6.7-200.fc31.x86_64
package:        dnfdragora-updater-1.1.1-3.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 92 Matthias Andree 2020-05-24 12:26:39 UTC
Similar problem has been detected:

potentially this was related to the GNOME session and/or gnome-shell being messed up.

reporter:       libreport-2.12.0
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/user/gnome-launched-org.mageia.dnfdragora-updater.desktop-1699227.scope
cmdline:        /usr/bin/python3 /usr/bin/dnfdragora-updater
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=0a17bbef25cc4e9c96aa22f95c3f6b79;i=610a2f;b=9e89a5b6c6054786b6d2d49315f27b4f;m=76481565e5;t=5a64f94935e99;x=11dbbe268bf2665d
kernel:         5.6.11-200.fc31.x86_64
package:        dnfdragora-updater-1.1.1-3.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 93 Frediano Ziglio 2020-05-24 19:03:06 UTC
*** Bug 1839361 has been marked as a duplicate of this bug. ***

Comment 94 Frediano Ziglio 2020-05-24 19:03:28 UTC
*** Bug 1836515 has been marked as a duplicate of this bug. ***

Comment 95 Frediano Ziglio 2020-05-24 19:03:48 UTC
*** Bug 1833627 has been marked as a duplicate of this bug. ***

Comment 96 Frediano Ziglio 2020-05-24 19:04:10 UTC
*** Bug 1839140 has been marked as a duplicate of this bug. ***

Comment 97 Frediano Ziglio 2020-05-24 19:04:31 UTC
*** Bug 1836527 has been marked as a duplicate of this bug. ***

Comment 98 Frediano Ziglio 2020-05-24 19:04:51 UTC
*** Bug 1834815 has been marked as a duplicate of this bug. ***

Comment 99 Frediano Ziglio 2020-05-24 19:05:12 UTC
*** Bug 1836643 has been marked as a duplicate of this bug. ***

Comment 100 Cole Robinson 2020-06-03 19:47:51 UTC
*** Bug 1843246 has been marked as a duplicate of this bug. ***

Comment 101 Matthias Andree 2020-06-05 19:20:07 UTC
Similar problem has been detected:

I've rebooted the computer for a newer kernel (also after dnf upgrade), and upon login after reboot, dnfdragora apparently crashed.

reporter:       libreport-2.12.0
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/user/gnome-launched-org.mageia.dnfdragora-updater.desktop-15241.scope
cmdline:        /usr/bin/python3 /usr/bin/dnfdragora-updater
crash_function: poll_for_event
executable:     /usr/bin/python3.7
journald_cursor: s=fcd7f11f2bc245ba9210851f77d3e1ca;i=80c25d;b=1aad101ef57e4b42af29ef0092c2f05f;m=86f1443;t=5a75b15de2b8d;x=339e39c7b55cfe4b
kernel:         5.6.15-200.fc31.x86_64
package:        dnfdragora-updater-1.1.1-3.fc31
reason:         python3.7 killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 102 Cole Robinson 2020-06-08 12:54:59 UTC
*** Bug 1844618 has been marked as a duplicate of this bug. ***

Comment 103 Frediano Ziglio 2020-07-08 09:23:56 UTC
*** Bug 1840843 has been marked as a duplicate of this bug. ***

Comment 104 Frediano Ziglio 2020-07-08 09:24:34 UTC
*** Bug 1845038 has been marked as a duplicate of this bug. ***

Comment 105 Frediano Ziglio 2020-07-08 09:25:01 UTC
*** Bug 1845754 has been marked as a duplicate of this bug. ***

Comment 106 Frediano Ziglio 2020-07-08 09:25:27 UTC
*** Bug 1840288 has been marked as a duplicate of this bug. ***

Comment 107 Cole Robinson 2020-10-07 23:05:27 UTC
*** Bug 1886190 has been marked as a duplicate of this bug. ***

Comment 108 Frediano Ziglio 2020-10-08 07:51:31 UTC
*** Bug 1882946 has been marked as a duplicate of this bug. ***

Comment 109 Frediano Ziglio 2020-10-08 07:52:40 UTC
*** Bug 1883364 has been marked as a duplicate of this bug. ***

Comment 110 Michael Schwendt 2020-10-12 20:36:04 UTC
*** Bug 1886831 has been marked as a duplicate of this bug. ***

Comment 111 Michael Schwendt 2020-10-12 20:36:07 UTC
*** Bug 1887564 has been marked as a duplicate of this bug. ***

Comment 112 Frediano Ziglio 2020-10-13 08:44:48 UTC
*** Bug 1887378 has been marked as a duplicate of this bug. ***

Comment 113 Edward 2020-10-13 16:38:06 UTC
Similar problem has been detected:

Selected button to delete duplicate messages (in IMAP Sent folder). A 'Notice' box displayed that three duplicate messages were deleted. Claws Mail then froze, with the Notice box remaining on screen, then Claws Mail eventually crashed.

reporter:       libreport-2.13.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-3.scope
cmdline:        claws-mail
crash_function: poll_for_event
executable:     /usr/bin/claws-mail
journald_cursor: s=c8d47d9e641f498ba0231ca36962bbc7;i=171e1;b=a89d86c51c7748618b4c6383ecd97052;m=47572f500;t=5b18fecaf1048;x=ee9f2e5a625f0504
kernel:         5.8.14-200.fc32.x86_64
package:        claws-mail-3.17.6-1.fc32
reason:         claws-mail killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 114 Edward 2020-10-13 21:24:03 UTC
Similar problem has been detected:

Was composing an e-mail. Claws Mail unexpectedly crashed.

reporter:       libreport-2.13.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-3.scope
cmdline:        claws-mail
crash_function: poll_for_event
executable:     /usr/bin/claws-mail
journald_cursor: s=c8d47d9e641f498ba0231ca36962bbc7;i=1727b;b=a89d86c51c7748618b4c6383ecd97052;m=880f4a955;t=5b193f830c49d;x=154212ed5d735d28
kernel:         5.8.14-200.fc32.x86_64
package:        claws-mail-3.17.6-1.fc32
reason:         claws-mail killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 115 Frediano Ziglio 2020-10-19 08:20:57 UTC
*** Bug 1889008 has been marked as a duplicate of this bug. ***

Comment 116 Frediano Ziglio 2020-10-19 08:21:29 UTC
*** Bug 1889092 has been marked as a duplicate of this bug. ***

Comment 117 Frediano Ziglio 2020-10-19 08:23:43 UTC
*** Bug 1889148 has been marked as a duplicate of this bug. ***

Comment 118 Edward 2020-10-21 17:45:34 UTC
Similar problem has been detected:

Was replying to an e-mail, proceeded to copy and paste some information. Upon attempting to paste the information into the e-mail, Claws Mail crashed.

reporter:       libreport-2.13.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-1.scope
cmdline:        claws-mail
crash_function: poll_for_event
executable:     /usr/bin/claws-mail
journald_cursor: s=e1a8e4f74c0d4155a0411f9c4098d2e5;i=4b2bc;b=7d12f442ca60431b9f264e9e90e7228e;m=6d8d89cf;t=5b231d274193c;x=9aedb74f119cd119
kernel:         5.8.15-201.fc32.x86_64
package:        claws-mail-3.17.7-1.fc32
reason:         claws-mail killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 119 Edward 2020-10-23 12:23:35 UTC
Similar problem has been detected:

Notification plugin indicated there was new mail. Maximized Claws Mail, to find it completely unresponsive. It eventually crashed.

reporter:       libreport-2.13.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-1.scope
cmdline:        claws-mail
crash_function: poll_for_event
executable:     /usr/bin/claws-mail
journald_cursor: s=e1a8e4f74c0d4155a0411f9c4098d2e5;i=51ae7;b=afff16d263c64ad4bf2b5d06cdbc99aa;m=b05dc700;t=5b25597b0c986;x=266d622a56aeae7d
kernel:         5.8.15-201.fc32.x86_64
package:        claws-mail-3.17.7-1.fc32
reason:         claws-mail killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 120 Edward 2020-10-23 20:37:22 UTC
Similar problem has been detected:

Was typing a reply to an e-mail when Claws Mail unexpectedly crashed.

reporter:       libreport-2.13.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/session-1.scope
cmdline:        claws-mail
crash_function: poll_for_event
executable:     /usr/bin/claws-mail
journald_cursor: s=e1a8e4f74c0d4155a0411f9c4098d2e5;i=5649f;b=2b5c918fb3fa44049d7a083fa2873a84;m=a14273d0;t=5b25c7b6cc820;x=884ce4170120c1f7
kernel:         5.8.15-201.fc32.x86_64
package:        claws-mail-3.17.7-1.fc32
reason:         claws-mail killed by SIGABRT
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
xsession_errors:

Comment 121 Edward 2020-10-23 20:41:58 UTC
As an end-user of Fedora, would it be asking too much, if the patch/fix that was submitted to X11 upstream, mentioned in Comment 9, could be tested and incorporated into the Fedora packages, without waiting for upstream?

Thank you.

Comment 122 Cole Robinson 2020-10-26 13:40:47 UTC
*** Bug 1891233 has been marked as a duplicate of this bug. ***

Comment 123 Cole Robinson 2020-11-02 01:57:15 UTC
*** Bug 1892208 has been marked as a duplicate of this bug. ***

Comment 124 Fedora Update System 2020-11-09 05:42:13 UTC
FEDORA-2020-3b7a70c0ff has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-3b7a70c0ff

Comment 125 Fedora Update System 2020-11-10 02:18:53 UTC
FEDORA-2020-3b7a70c0ff has been pushed to the Fedora 33 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-3b7a70c0ff`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-3b7a70c0ff

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 126 Fedora Update System 2020-11-11 01:20:15 UTC
FEDORA-2020-3b7a70c0ff has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.