#1043056 gnome-shell: crashes with SIGSEGV in on_after_paint() -> discard_non_cursor_feedbacks()

Package:
gnome-shell
Source:
gnome-shell
Description:
graphical shell for the GNOME desktop
Submitter:
Jörg Sommer
Date:
2023-08-09 08:15:04 UTC
Severity:
normal
#1043056#5
Date:
2023-08-05 11:50:42 UTC
From:
To:
Hi,

my gnome-shell crashed and I've a coredump of it. I hope this is useful for
you to find and fix the bad point, because a crash of gnome-shell kills the
whole desktop.

```
% coredumpctl --debugger ~/bin/gdb-bt-full debug /usr/bin/gnome-shell
           PID: 1067 (gnome-shell)
           UID: 1000 (joerg)
           GID: 1000 (joerg)
        Signal: 11 (SEGV)
     Timestamp: Sat 2023-08-05 12:16:47 CEST (1h 32min ago)
  Command Line: /usr/bin/gnome-shell
    Executable: /usr/bin/gnome-shell
 Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.Shell@wayland.service
          Unit: user@1000.service
     User Unit: org.gnome.Shell@wayland.service
         Slice: user-1000.slice
     Owner UID: 1000 (joerg)
       Boot ID: b407b68900ed4b4695d770c2cb30b696
    Machine ID: 523cb54753234ed08c13ec497d0d3b64
      Hostname: zenbook
       Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.b407b68900ed4b4695d770c2cb30b696.1067.1691230607000000.zst (present)
  Size on Disk: 48.5M
       Message: Process 1067 (gnome-shell) of user 1000 dumped core.

                Module libudev.so.1 from deb systemd-254-1.amd64
                Module libsystemd.so.0 from deb systemd-254-1.amd64
                Stack trace of thread 1067:
                #0  0x00007fb10935dde8 n/a (libmutter-11.so.0 + 0x15dde8)
                #1  0x00007fb10a70a3d8 g_closure_invoke (libgobject-2.0.so.0 + 0x163d8)
                #2  0x00007fb10a71cede n/a (libgobject-2.0.so.0 + 0x28ede)
                #3  0x00007fb10a723c97 g_signal_emit_valist (libgobject-2.0.so.0 + 0x2fc97)
                #4  0x00007fb10a7241bf g_signal_emit (libgobject-2.0.so.0 + 0x301bf)
                #5  0x00007fb109629cec n/a (libmutter-clutter-11.so.0 + 0x9fcec)
                #6  0x00007fb1095f9e57 n/a (libmutter-clutter-11.so.0 + 0x6fe57)
                #7  0x00007fb10a1325e5 g_main_context_dispatch (libglib-2.0.so.0 + 0x595e5)
                #8  0x00007fb10a1328e8 n/a (libglib-2.0.so.0 + 0x598e8)
                #9  0x00007fb10a132b9f g_main_loop_run (libglib-2.0.so.0 + 0x59b9f)
                #10 0x00007fb1092d6fc5 meta_context_run_main_loop (libmutter-11.so.0 + 0xd6fc5)
                #11 0x0000556d8776f924 n/a (gnome-shell + 0x2924)
                #12 0x00007fb1090456ca __libc_start_call_main (libc.so.6 + 0x276ca)
                #13 0x00007fb109045785 __libc_start_main_impl (libc.so.6 + 0x27785)
                #14 0x0000556d8776fbc1 n/a (gnome-shell + 0x2bc1)

                Stack trace of thread 1078:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb10a18c260 g_cond_wait (libglib-2.0.so.0 + 0xb3260)
                #2  0x00007fb10a0fcefb n/a (libglib-2.0.so.0 + 0x23efb)
                #3  0x00007fb10a15f4e2 n/a (libglib-2.0.so.0 + 0x864e2)
                #4  0x00007fb10a15ee9d n/a (libglib-2.0.so.0 + 0x85e9d)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1081:
                #0  0x00007fb1091199ef __GI___poll (libc.so.6 + 0xfb9ef)
                #1  0x00007fb10a13285e n/a (libglib-2.0.so.0 + 0x5985e)
                #2  0x00007fb10a132b9f g_main_loop_run (libglib-2.0.so.0 + 0x59b9f)
                #3  0x00007fb10a338536 n/a (libgio-2.0.so.0 + 0x11c536)
                #4  0x00007fb10a15ee9d n/a (libglib-2.0.so.0 + 0x85e9d)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1079:
                #0  0x00007fb1091199ef __GI___poll (libc.so.6 + 0xfb9ef)
                #1  0x00007fb10a13285e n/a (libglib-2.0.so.0 + 0x5985e)
                #2  0x00007fb10a13297c g_main_context_iteration (libglib-2.0.so.0 + 0x5997c)
                #3  0x00007fb10a1329c1 n/a (libglib-2.0.so.0 + 0x599c1)
                #4  0x00007fb10a15ee9d n/a (libglib-2.0.so.0 + 0x85e9d)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1101:
                #0  0x00007fb1091199ef __GI___poll (libc.so.6 + 0xfb9ef)
                #1  0x00007fb10a13285e n/a (libglib-2.0.so.0 + 0x5985e)
                #2  0x00007fb10a13297c g_main_context_iteration (libglib-2.0.so.0 + 0x5997c)
                #3  0x00007fb1004374bd n/a (libdconfsettings.so + 0xb4bd)
                #4  0x00007fb10a15ee9d n/a (libglib-2.0.so.0 + 0x85e9d)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1099:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb0f2111369 n/a (crocus_dri.so + 0x111369)
                #3  0x00007fb0f20c502b n/a (crocus_dri.so + 0xc502b)
                #4  0x00007fb0f21112a7 n/a (crocus_dri.so + 0x1112a7)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1126:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1102:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb0f2111369 n/a (crocus_dri.so + 0x111369)
                #3  0x00007fb0f20c502b n/a (crocus_dri.so + 0xc502b)
                #4  0x00007fb0f21112a7 n/a (crocus_dri.so + 0x1112a7)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1526:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1132:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1522:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1524:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1104:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb0f2111369 n/a (crocus_dri.so + 0x111369)
                #3  0x00007fb0f20c502b n/a (crocus_dri.so + 0xc502b)
                #4  0x00007fb0f21112a7 n/a (crocus_dri.so + 0x1112a7)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1521:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1595:
                #0  0x00007fb1091199ef __GI___poll (libc.so.6 + 0xfb9ef)
                #1  0x00007fb0dc1c02e1 n/a (libpulse.so.0 + 0x342e1)
                #2  0x00007fb0dc1b1fa4 pa_mainloop_poll (libpulse.so.0 + 0x25fa4)
                #3  0x00007fb0dc1b2606 pa_mainloop_iterate (libpulse.so.0 + 0x26606)
                #4  0x00007fb0dc1b26b0 pa_mainloop_run (libpulse.so.0 + 0x266b0)
                #5  0x00007fb0dc1c03b9 n/a (libpulse.so.0 + 0x343b9)
                #6  0x00007fb0dc16133f n/a (libpulsecommon-16.1.so + 0x5b33f)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1130:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1525:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1523:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1105:
                #0  0x00007fb1091199ef __GI___poll (libc.so.6 + 0xfb9ef)
                #1  0x00007fb10a13285e n/a (libglib-2.0.so.0 + 0x5985e)
                #2  0x00007fb10a132b9f g_main_loop_run (libglib-2.0.so.0 + 0x59b9f)
                #3  0x00007fb10939f450 n/a (libmutter-11.so.0 + 0x19f450)
                #4  0x00007fb10a15ee9d n/a (libglib-2.0.so.0 + 0x85e9d)
                #5  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #6  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1129:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1527:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1528:
                #0  0x00007fb10911eeb9 syscall (libc.so.6 + 0x100eb9)
                #1  0x00007fb0cd1f0820 n/a (librsvg-2.so.2 + 0x5f0820)
                #2  0x00007fb0ccd01918 n/a (librsvg-2.so.2 + 0x101918)
                #3  0x00007fb0ccd013ef n/a (librsvg-2.so.2 + 0x1013ef)
                #4  0x00007fb0cceb65de n/a (librsvg-2.so.2 + 0x2b65de)
                #5  0x00007fb0cceb3881 n/a (librsvg-2.so.2 + 0x2b3881)
                #6  0x00007fb0ccebbef3 n/a (librsvg-2.so.2 + 0x2bbef3)
                #7  0x00007fb0cd239ef3 n/a (librsvg-2.so.2 + 0x639ef3)
                #8  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #9  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1128:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1127:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1131:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)

                Stack trace of thread 1125:
                #0  0x00007fb1090a3156 __futex_abstimed_wait_common64 (libc.so.6 + 0x85156)
                #1  0x00007fb1090a5818 __pthread_cond_wait_common (libc.so.6 + 0x87818)
                #2  0x00007fb106e740c7 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa740c7)
                #3  0x00007fb106e74255 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa74255)
                #4  0x00007fb10667da85 n/a (libmozjs-102.so.0 + 0x27da85)
                #5  0x00007fb10667db31 n/a (libmozjs-102.so.0 + 0x27db31)
                #6  0x00007fb10667ce47 n/a (libmozjs-102.so.0 + 0x27ce47)
                #7  0x00007fb1090a63ec start_thread (libc.so.6 + 0x883ec)
                #8  0x00007fb109126a1c __clone3 (libc.so.6 + 0x108a1c)
                ELF object binary architecture: AMD x86-64


warning: Can't open file anon_inode:i915.gem which was expanded to anon_inode:i915.gem during file-backed mapping note processing

warning: Can't open file anon_inode:i915.gem which was expanded to anon_inode:i915.gem during file-backed mapping note processing
[New LWP 1067]
[New LWP 1078]
[New LWP 1081]
[New LWP 1079]
[New LWP 1101]
[New LWP 1099]
[New LWP 1126]
[New LWP 1102]
[New LWP 1526]
[New LWP 1132]
[New LWP 1522]
[New LWP 1524]
[New LWP 1104]
[New LWP 1521]
[New LWP 1595]
[New LWP 1130]
[New LWP 1525]
[New LWP 1523]
[New LWP 1105]
[New LWP 1129]
[New LWP 1527]
[New LWP 1528]
[New LWP 1128]
[New LWP 1127]
[New LWP 1131]
[New LWP 1125]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  META_IS_WAYLAND_CURSOR_SURFACE (ptr=0x16000000160) at ../src/wayland/meta-wayland-cursor-surface.h:34
Download failed: Invalid argument.  Continuing without source file ./obj-x86_64-linux-gnu/../src/wayland/meta-wayland-cursor-surface.h.
34	../src/wayland/meta-wayland-cursor-surface.h: Inappropriate ioctl for device.
[Current thread is 1 (Thread 0x7fb104821e00 (LWP 1067))]
#0  META_IS_WAYLAND_CURSOR_SURFACE (ptr=0x16000000160) at ../src/wayland/meta-wayland-cursor-surface.h:34
        __inst = 0x16000000160
        __t = 0x556d8b0b9210 [MetaWaylandCursorSurface/MetaWaylandSurfaceRole]
        __r = <optimized out>
        feedback = 0x556d8bf632a0
        next = 0x556d8d544d90
        feedbacks = 0x556d8d544d90
        l = <optimized out>
#1  discard_non_cursor_feedbacks (feedbacks=0x556d8d544d90) at ../src/wayland/meta-wayland-presentation-time.c:123
        feedback = 0x556d8bf632a0
        next = 0x556d8d544d90
        feedbacks = 0x556d8d544d90
        l = <optimized out>
#2  on_after_paint (stage=<optimized out>, stage_view=0x556d893c57c0 [MetaRendererView], compositor=0x556d898d3a80 [MetaWaylandCompositor]) at ../src/wayland/meta-wayland-presentation-time.c:151
        feedbacks = 0x556d8d544d90
        l = <optimized out>
#6  0x00007fb10a7241bf in <emit signal after-paint on instance 0x556d895fcb00 [MetaStage]> (instance=instance@entry=0x556d895fcb00, signal_id=<optimized out>, detail=detail@entry=0) at ../../../gobject/gsignal.c:3622
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7ffe81836680, reg_save_area = 0x7ffe818365c0}}
    #3  0x00007fb10a70a3d8 in g_closure_invoke (closure=0x556d898d95f0, return_value=0x0, n_param_values=2, param_values=0x7ffe81836400, invocation_hint=0x7ffe81836380) at ../../../gobject/gclosure.c:832
                marshal = 0x7fb10a70d5c0 <g_cclosure_marshal_VOID__OBJECT>
                marshal_data = 0x0
                in_marshal = 0
                real_closure = 0x556d898d95d0
                __func__ = "g_closure_invoke"
    #4  0x00007fb10a71cede in signal_emit_unlocked_R (node=node@entry=0x556d895d7220, detail=detail@entry=0, instance=instance@entry=0x556d895fcb00, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7ffe81836400) at ../../../gobject/gsignal.c:3812
                tmp = <optimized out>
                handler = 0x556d898d9590
                accumulator = 0x0
                emission = {next = 0x0, instance = 0x556d895fcb00, ihint = {signal_id = 126, detail = 0, run_type = (G_SIGNAL_RUN_FIRST | G_SIGNAL_ACCUMULATOR_FIRST_RUN)}, state = EMISSION_RUN, chain_type = 0x4 [void]}
                class_closure = 0x0
                handler_list = 0x556d898d9590
                return_accu = 0x0
                accu = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
                signal_id = 126
                max_sequential_handler_number = 1075281
                return_value_altered = <optimized out>
    #5  0x00007fb10a723c97 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7ffe818365a0) at ../../../gobject/gsignal.c:3565
                instance_and_params = 0x7ffe81836400
                signal_return_type = <optimized out>
                param_values = 0x7ffe81836418
                node = <optimized out>
                i = <optimized out>
                n_params = <optimized out>
                __func__ = "g_signal_emit_valist"
#7  0x00007fb109624752 in clutter_stage_emit_after_paint (stage=stage@entry=0x556d895fcb00 [MetaStage], view=view@entry=0x556d893c57c0 [MetaRendererView]) at ../clutter/clutter/clutter-stage.c:488
#8  0x00007fb109629cec in handle_frame_clock_frame (frame_clock=0x556d893c5c90 [ClutterFrameClock], frame_count=<optimized out>, user_data=0x556d893c57c0) at ../clutter/clutter/clutter-stage-view.c:1259
        view = 0x556d893c57c0 [MetaRendererView]
        priv = 0x556d893c56e0
        stage = 0x556d895fcb00 [MetaStage]
        stage_window = 0x556d895ec640
        devices = 0x556d8aa87650
        frame = {has_result = 1, result = CLUTTER_FRAME_RESULT_PENDING_PRESENTED, hints = CLUTTER_FRAME_HINT_NONE}
#9  0x00007fb1095f9e57 in clutter_frame_clock_dispatch (time_us=<optimized out>, frame_clock=0x556d893c5c90 [ClutterFrameClock]) at ../clutter/clutter/clutter-frame-clock.c:814
        frame_count = 330648
        this_dispatch_time_us = 26522244529
        ScopedCoglTraceClutterFrameClockDispatch = 0x0
        ideal_dispatch_time_us = <optimized out>
        lateness_us = <optimized out>
        CoglTraceClutterFrameClockDispatch = {begin_time = 0, name = 0x0, description = 0x0}
        result = <optimized out>
        this_dispatch_ready_time_us = 26522091360
        CoglTraceClutterFrameClockEvents = {begin_time = 0, name = 0x0, description = 0x0}
        CoglTraceClutterFrameClockTimelines = {begin_time = 0, name = 0x0, description = 0x0}
        CoglTraceClutterFrameClockFrame = {begin_time = 0, name = 0x0, description = 0x0}
        __func__ = "clutter_frame_clock_dispatch"
        clock_source = <optimized out>
        frame_clock = 0x556d893c5c90 [ClutterFrameClock]
        dispatch_time_us = 26522244529
#10 frame_clock_source_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at ../clutter/clutter/clutter-frame-clock.c:870
        clock_source = <optimized out>
        frame_clock = 0x556d893c5c90 [ClutterFrameClock]
        dispatch_time_us = 26522244529
#11 0x00007fb10a1325e5 in g_main_dispatch (context=0x556d892b0720) at ../../../glib/gmain.c:3460
        dispatch = 0x7fb1095f9bb0 <frame_clock_source_dispatch>
        prev_source = 0x0
        begin_time_nsec = 0
        was_in_call = 0
        user_data = 0x0
        callback = 0x0
        cb_funcs = <optimized out>
        cb_data = <optimized out>
        need_destroy = <optimized out>
        source = 0x556d893c5ee0
        current = 0x556d8928d5d0
        i = 0
        __func__ = "g_main_dispatch"
#12 g_main_context_dispatch (context=context@entry=0x556d892b0720) at ../../../glib/gmain.c:4200
#13 0x00007fb10a1328e8 in g_main_context_iterate (context=0x556d892b0720, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../../../glib/gmain.c:4276
        max_priority = 150
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 31
        fds = 0x556d8ae4e5a0
#14 0x00007fb10a132b9f in g_main_loop_run (loop=0x556d8add8930) at ../../../glib/gmain.c:4479
        __func__ = "g_main_loop_run"
#15 0x00007fb1092d6fc5 in meta_context_run_main_loop (context=context@entry=0x556d892aeaf0 [MetaContextMain], error=error@entry=0x7ffe81836930) at ../src/core/meta-context.c:465
        priv = 0x556d892aea80
        __func__ = "meta_context_run_main_loop"
#16 0x0000556d8776f924 in main (argc=<optimized out>, argv=<optimized out>) at ../src/main.c:582
        context = 0x556d892aeaf0
        error = 0x0
        ecode = 0
--- END ---
```

Regards Jörg

#1043056#10
Date:
2023-08-05 13:52:11 UTC
From:
To:
Control: retitle -1 gnome-shell: crashes with SIGSEGV in on_after_paint() -> discard_non_cursor_feedbacks()

Is there any action you can take that makes this crash more likely
to happen, or is it apparently random?

The interesting stack frames seem to be:
...
...
...
...
...

    smcv

#1043056#17
Date:
2023-08-09 07:53:46 UTC
From:
To:
Simon McVittie schrieb am Sa 05. Aug, 14:52 (+0100):
I can find are these:

```
Aug 09 09:28:18 gnome-shell[46283]: munmap_chunk(): invalid pointer
Aug 09 09:28:18 gnome-shell[46283]: == Stack trace for context 0x5604964cbdf0 ==
Aug 09 09:28:18 systemd[1]: Started systemd-coredump@11-204242-0.service - Process Core Dump (PID 204242/UID 0).
```

Regards Jörg