FS#71250 - gnome-shell crashes when logging out of wayland session

Attached to Project: Arch Linux
Opened by David Bohman (debo) - Monday, 14 June 2021, 01:07 GMT
Last edited by Jan Alexander Steffens (heftig) - Wednesday, 01 February 2023, 17:50 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Jan Alexander Steffens (heftig)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 3
Private No

Details

Description:

gnome-shell crashes when logging out of wayland session.

Additional info:

gnome-shell 1:40.2-1

Steps to reproduce:

Just log in, then log out.

PID: 1006 (gnome-shell)
UID: 1000 (me)
GID: 985 (users)
Signal: 11 (SEGV)
Timestamp: Sun 2021-06-13 17:53:13 PDT (7min ago)
Command Line: /usr/bin/gnome-shell
Executable: /usr/bin/gnome-shell
Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.Shell@wayland.service
Unit: user@1000.service
User Unit: org.gnome.Shell@wayland.service
Slice: user-1000.slice
Owner UID: 1000 (me)
Boot ID: d27b57d14364485581a2fe0aa978e1fe
Machine ID: ac5d985b9a7048748e87a1a82b872861
Hostname: hyper
Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.d27b57d14364485581a2fe0aa978e1fe.1006.1623631993000000.>
Disk Size: 15.9M
Message: Process 1006 (gnome-shell) of user 1000 dumped core.

Stack trace of thread 1006:
#0 0x00007fa0269e879b n/a (r600_dri.so + 0xc7279b)
#1 0x00007fa026581150 n/a (r600_dri.so + 0x80b150)
#2 0x00007fa025f88798 n/a (r600_dri.so + 0x212798)
#3 0x00007fa025f8569a n/a (r600_dri.so + 0x20f69a)
#4 0x00007fa026147589 n/a (r600_dri.so + 0x3d1589)
#5 0x00007fa0261479b8 n/a (r600_dri.so + 0x3d19b8)
#6 0x00007fa0261486ef n/a (r600_dri.so + 0x3d26ef)
#7 0x00007fa03b99a27b n/a (libmutter-cogl-8.so.0 + 0x1827b)
#8 0x00007fa03b9dff35 n/a (libmutter-cogl-8.so.0 + 0x5df35)
#9 0x00007fa03b9d4c54 n/a (libmutter-cogl-8.so.0 + 0x52c54)
#10 0x00007fa03cbf2698 g_list_foreach (libglib-2.0.so.0 + 0x4e698)
#11 0x00007fa03cbf1eec g_list_free_full (libglib-2.0.so.0 + 0x4deec)
#12 0x00007fa03b9cbe6c n/a (libmutter-cogl-8.so.0 + 0x49e6c)
#13 0x00007fa03bccf0ee n/a (libst-1.0.so + 0x350ee)
#14 0x00007fa03ccf4b2f n/a (libgobject-2.0.so.0 + 0x1bb2f)
#15 0x00007fa03cbd8d2e n/a (libglib-2.0.so.0 + 0x34d2e)
#16 0x00007fa03ccf8785 g_object_unref (libgobject-2.0.so.0 + 0x1f785)
#17 0x00007fa03cbe1a1f n/a (libglib-2.0.so.0 + 0x3da1f)
#18 0x00007fa03cbe6790 g_hash_table_unref (libglib-2.0.so.0 + 0x42790)
#19 0x00007fa03bcd3d6b n/a (libst-1.0.so + 0x39d6b)
#20 0x00007fa03ccf8801 g_object_unref (libgobject-2.0.so.0 + 0x1f801)
#21 0x00007fa03c2f330f n/a (libgjs.so.0 + 0x4e30f)
#22 0x00007fa03c33e358 n/a (libgjs.so.0 + 0x99358)
#23 0x00007fa03c2f0300 n/a (libgjs.so.0 + 0x4b300)
#24 0x00007fa039872a8e n/a (libmozjs-78.so + 0x828a8e)
#25 0x00007fa039f894bf n/a (libmozjs-78.so + 0xf3f4bf)
#26 0x00007fa039c013e5 n/a (libmozjs-78.so + 0xbb73e5)
#27 0x00007fa039469c59 n/a (libmozjs-78.so + 0x41fc59)
#28 0x00007fa039466a46 n/a (libmozjs-78.so + 0x41ca46)
#29 0x00007fa039932f84 n/a (libmozjs-78.so + 0x8e8f84)
#30 0x00007fa03c3065d4 n/a (libgjs.so.0 + 0x615d4)
#31 0x00007fa03ccf8785 g_object_unref (libgobject-2.0.so.0 + 0x1f785)
#32 0x000055e1edd5d471 n/a (gnome-shell + 0x2471)
#33 0x00007fa03bd54b25 __libc_start_main (libc.so.6 + 0x27b25)
#34 0x000055e1edd5d64e n/a (gnome-shell + 0x264e)

Stack trace of thread 1039:
#0 0x00007fa03b3738ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa03b36d270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa0397b728c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
#3 0x00007fa0397b6da1 n/a (libmozjs-78.so + 0x76cda1)
#4 0x00007fa039a4970b n/a (libmozjs-78.so + 0x9ff70b)
#5 0x00007fa03b367259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007fa03be2b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 1353:
#0 0x00007fa03b3738ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa03b36d270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa001b7146f n/a (librsvg-2.so.2 + 0x28f46f)
#3 0x00007fa001b6fecd n/a (librsvg-2.so.2 + 0x28decd)
#4 0x00007fa001b6d215 n/a (librsvg-2.so.2 + 0x28b215)
#5 0x00007fa001b69035 n/a (librsvg-2.so.2 + 0x287035)
#6 0x00007fa001b69d73 n/a (librsvg-2.so.2 + 0x287d73)
#7 0x00007fa001de2bfa n/a (librsvg-2.so.2 + 0x500bfa)
#8 0x00007fa03b367259 start_thread (libpthread.so.0 + 0x9259)
#9 0x00007fa03be2b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 1351:
#0 0x00007fa03b3738ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa03b36d270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa001b7146f n/a (librsvg-2.so.2 + 0x28f46f)
#3 0x00007fa001b6fecd n/a (librsvg-2.so.2 + 0x28decd)
#4 0x00007fa001b6d215 n/a (librsvg-2.so.2 + 0x28b215)
#5 0x00007fa001b69035 n/a (librsvg-2.so.2 + 0x287035)
#6 0x00007fa001b69d73 n/a (librsvg-2.so.2 + 0x287d73)
#7 0x00007fa001de2bfa n/a (librsvg-2.so.2 + 0x500bfa)
#8 0x00007fa03b367259 start_thread (libpthread.so.0 + 0x9259)
#9 0x00007fa03be2b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 1354:
#0 0x00007fa03b3738ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa03b36d270 pth

100% reproducible.
This task depends upon

Closed by  Jan Alexander Steffens (heftig)
Wednesday, 01 February 2023, 17:50 GMT
Reason for closing:  Fixed
Additional comments about closing:  gnome-shell 43.2-2
Comment by David Bohman (debo) - Monday, 14 June 2021, 01:52 GMT
Different backtrace, same trigger:

PID: 2701 (gnome-shell)
UID: 1000 (me)
GID: 985 (users)
Signal: 11 (SEGV)
Timestamp: Sun 2021-06-13 18:48:01 PDT (2min 42s ago)
Command Line: /usr/bin/gnome-shell
Executable: /usr/bin/gnome-shell
Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.Shell@wayland.service
Unit: user@1000.service
User Unit: org.gnome.Shell@wayland.service
Slice: user-1000.slice
Owner UID: 1000 (me)
Boot ID: d27b57d14364485581a2fe0aa978e1fe
Machine ID: ac5d985b9a7048748e87a1a82b872861
Hostname: hyper
Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.d27b57d14364485581a2fe0aa978e1fe.2701.1623635281000000.>
Disk Size: 17.1M
Message: Process 2701 (gnome-shell) of user 1000 dumped core.

Stack trace of thread 2701:
#0 0x00007f0e21107c0a __GI___strlen_sse2 (libc.so.6 + 0x9ec0a)
#1 0x00007f0e21f510c5 g_strdup (libglib-2.0.so.0 + 0x710c5)
#2 0x00007f0e21f1f5cf g_error_copy (libglib-2.0.so.0 + 0x3f5cf)
#3 0x00007f0e213b5dce n/a (libmutter-8.so.0 + 0x17edce)
#4 0x00007f0e21f2e698 g_list_foreach (libglib-2.0.so.0 + 0x4e698)
#5 0x00007f0e213b996a n/a (libmutter-8.so.0 + 0x18296a)
#6 0x00007f0e213a47c1 n/a (libmutter-8.so.0 + 0x16d7c1)
#7 0x00007f0e22029bea g_object_run_dispose (libgobject-2.0.so.0 + 0x14bea)
#8 0x00007f0e2130829d meta_finalize (libmutter-8.so.0 + 0xd129d)
#9 0x00007f0e21309528 meta_run (libmutter-8.so.0 + 0xd2528)
#10 0x0000559186566423 n/a (gnome-shell + 0x2423)
#11 0x00007f0e21090b25 __libc_start_main (libc.so.6 + 0x27b25)
#12 0x000055918656664e n/a (gnome-shell + 0x264e)

Stack trace of thread 2705:
#0 0x00007f0e2115cb2f __poll (libc.so.6 + 0xf3b2f)
#1 0x00007f0e21f87ae8 n/a (libglib-2.0.so.0 + 0xa7ae8)
#2 0x00007f0e21f31781 g_main_context_iteration (libglib-2.0.so.0 + 0x51781)
#3 0x00007f0e21f317d2 n/a (libglib-2.0.so.0 + 0x517d2)
#4 0x00007f0e21f620c1 n/a (libglib-2.0.so.0 + 0x820c1)
#5 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2715:
#0 0x00007f0e206af8ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007f0e206a9270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007f0e0a73d59c n/a (r600_dri.so + 0x1c659c)
#3 0x00007f0e0a737618 n/a (r600_dri.so + 0x1c0618)
#4 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#5 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2728:
#0 0x00007f0e206af8ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007f0e206a9270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007f0e1eaf328c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
#3 0x00007f0e1eaf2da1 n/a (libmozjs-78.so + 0x76cda1)
#4 0x00007f0e1ed8570b n/a (libmozjs-78.so + 0x9ff70b)
#5 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2708:
#0 0x00007f0e2115cb2f __poll (libc.so.6 + 0xf3b2f)
#1 0x00007f0e21f87ae8 n/a (libglib-2.0.so.0 + 0xa7ae8)
#2 0x00007f0e21f31781 g_main_context_iteration (libglib-2.0.so.0 + 0x51781)
#3 0x00007f0e2223febe n/a (libdconfsettings.so + 0x5ebe)
#4 0x00007f0e21f620c1 n/a (libglib-2.0.so.0 + 0x820c1)
#5 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2731:
#0 0x00007f0e206af8ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007f0e206a9270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007f0e1eaf328c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
#3 0x00007f0e1eaf2da1 n/a (libmozjs-78.so + 0x76cda1)
#4 0x00007f0e1ed8570b n/a (libmozjs-78.so + 0x9ff70b)
#5 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2729:
#0 0x00007f0e206af8ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007f0e206a9270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007f0e1eaf328c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
#3 0x00007f0e1eaf2da1 n/a (libmozjs-78.so + 0x76cda1)
#4 0x00007f0e1ed8570b n/a (libmozjs-78.so + 0x9ff70b)
#5 0x00007f0e206a3259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007f0e211675e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 2718:
#0 0x00007f0e206af8ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007f0e2
Comment by David Bohman (debo) - Monday, 14 June 2021, 17:37 GMT
Crash still occurs with mutter-40.2.1. Here is a with a options=(debug !strip) version of mutter:

PID: 55163 (gnome-shell)
UID: 1000 (me)
GID: 985 (users)
Signal: 11 (SEGV)
Timestamp: Mon 2021-06-14 10:24:49 PDT (12min ago)
Command Line: /usr/bin/gnome-shell
Executable: /usr/bin/gnome-shell
Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.Shell@wayland.service
Unit: user@1000.service
User Unit: org.gnome.Shell@wayland.service
Slice: user-1000.slice
Owner UID: 1000 (me)
Boot ID: f50e8d9110e2435888f1126dbac7b669
Machine ID: ac5d985b9a7048748e87a1a82b872861
Hostname: hyper
Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.f50e8d9110e2435888f1126dbac7b669.55163.1623691489000000>
Disk Size: 16.5M
Message: Process 55163 (gnome-shell) of user 1000 dumped core.

Stack trace of thread 55163:
#0 0x00007fa6540cbc0a __GI___strlen_sse2 (libc.so.6 + 0x9ec0a)
#1 0x00007fa654f230c5 g_strdup (libglib-2.0.so.0 + 0x710c5)
#2 0x00007fa654ef15cf g_error_copy (libglib-2.0.so.0 + 0x3f5cf)
#3 0x00007fa654383b8e meta_kms_page_flip_data_discard_in_impl (libmutter-8.so.0 + 0x188b8e)
#4 0x00007fa654f00698 g_list_foreach (libglib-2.0.so.0 + 0x4e698)
#5 0x00007fa65438503e meta_kms_impl_device_simple_prepare_shutdown (libmutter-8.so.0 + 0x18a03e)
#6 0x00007fa65436d979 meta_backend_native_dispose (libmutter-8.so.0 + 0x172979)
#7 0x00007fa654ffbbea g_object_run_dispose (libgobject-2.0.so.0 + 0x14bea)
#8 0x00007fa6542cefd1 meta_finalize (libmutter-8.so.0 + 0xd3fd1)
#9 0x00007fa6542d02ac meta_run (libmutter-8.so.0 + 0xd52ac)
#10 0x000056339c885423 n/a (gnome-shell + 0x2423)
#11 0x00007fa654054b25 __libc_start_main (libc.so.6 + 0x27b25)
#12 0x000056339c88564e n/a (gnome-shell + 0x264e)

Stack trace of thread 55167:
#0 0x00007fa654120b2f __poll (libc.so.6 + 0xf3b2f)
#1 0x00007fa654f59ae8 n/a (libglib-2.0.so.0 + 0xa7ae8)
#2 0x00007fa654f03781 g_main_context_iteration (libglib-2.0.so.0 + 0x51781)
#3 0x00007fa654f037d2 n/a (libglib-2.0.so.0 + 0x517d2)
#4 0x00007fa654f340c1 n/a (libglib-2.0.so.0 + 0x820c1)
#5 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55170:
#0 0x00007fa654120b2f __poll (libc.so.6 + 0xf3b2f)
#1 0x00007fa654f59ae8 n/a (libglib-2.0.so.0 + 0xa7ae8)
#2 0x00007fa654f03781 g_main_context_iteration (libglib-2.0.so.0 + 0x51781)
#3 0x00007fa655211ebe n/a (libdconfsettings.so + 0x5ebe)
#4 0x00007fa654f340c1 n/a (libglib-2.0.so.0 + 0x820c1)
#5 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55181:
#0 0x00007fa654120b2f __poll (libc.so.6 + 0xf3b2f)
#1 0x00007fa654f59ae8 n/a (libglib-2.0.so.0 + 0xa7ae8)
#2 0x00007fa654f05593 g_main_loop_run (libglib-2.0.so.0 + 0x53593)
#3 0x00007fa65439ce88 input_thread (libmutter-8.so.0 + 0x1a1e88)
#4 0x00007fa654f340c1 n/a (libglib-2.0.so.0 + 0x820c1)
#5 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55179:
#0 0x00007fa6536728ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa65366c270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa63df3c59c n/a (r600_dri.so + 0x1c659c)
#3 0x00007fa63df36618 n/a (r600_dri.so + 0x1c0618)
#4 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#5 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55178:
#0 0x00007fa6536728ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa65366c270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa63df3c59c n/a (r600_dri.so + 0x1c659c)
#3 0x00007fa63df36618 n/a (r600_dri.so + 0x1c0618)
#4 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#5 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55190:
#0 0x00007fa6536728ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa65366c270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa651ab628c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
#3 0x00007fa651ab5da1 n/a (libmozjs-78.so + 0x76cda1)
#4 0x00007fa651d4870b n/a (libmozjs-78.so + 0x9ff70b)
#5 0x00007fa653666259 start_thread (libpthread.so.0 + 0x9259)
#6 0x00007fa65412b5e3 __clone (libc.so.6 + 0xfe5e3)

Stack trace of thread 55191:
#0 0x00007fa6536728ca __futex_abstimed_wait_common64 (libpthread.so.0 + 0x158ca)
#1 0x00007fa65366c270 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 + 0xf270)
#2 0x00007fa651ab628c _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTi>
Comment by David Bohman (debo) - Monday, 14 June 2021, 17:56 GMT
The crash occurs both with wayland and xorg. The stack traces are different.

Opened upstream isssue:

https://gitlab.gnome.org/GNOME/mutter/-/issues/1851
Comment by mattia (nTia89) - Sunday, 20 March 2022, 14:49 GMT
I cannot reproduce the issue. Is it still valid for you?
Comment by David Bohman (debo) - Sunday, 20 March 2022, 21:37 GMT
Yes, it still reproduces for me. This is from the output of coredumpctl:

Sun 2022-03-20 14:32:46 PDT 946 1000 985 SIGSEGV none /usr/bin/gnome-shell n/a
Comment by Balló György (City-busz) - Wednesday, 01 February 2023, 17:24 GMT
Upstream report:
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/5560

It will be fixed in GNOME 44, but cannot be easily backported to GNOME 43:
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/5560#note_1636124

Until GNOME 44 released, upstream recommends to apply this patch from Fedora as a workaround:
https://src.fedoraproject.org/rpms/gnome-shell/blob/f37/f/0001-main-Leak-the-GJS-context-and-ShellGlobal.patch

Loading...