GNOME Bugzilla – Bug 789398
Gnome Shell crashes in JS engine
Last modified: 2017-10-24 20:15:53 UTC
Gnome shell crashes once or twice a day for me. I now managed to catch a backtrace: Okt 24 13:08:28 r-thinktop gnome-shell[1794]: invalid unclassed pointer in cast to 'ClutterText' Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_get_editable: assertion 'CLUTTER_IS_TEXT (self)' failed Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_get_text: assertion 'CLUTTER_IS_TEXT (self)' failed Okt 24 13:08:28 r-thinktop gnome-shell[1794]: clutter_text_set_text: assertion 'CLUTTER_IS_TEXT (self)' failed Okt 24 13:08:28 r-thinktop kernel: traps: gnome-shell[1794] general protection ip:7f4a21bcaddd sp:7ffebec79010 error:0 in libgobject-2.0.so.0.5400.1[7f4a21b95000+52000] Okt 24 13:08:28 r-thinktop systemd[1]: Created slice system-systemd\x2dcoredump.slice. Okt 24 13:08:28 r-thinktop systemd[1]: Attaching egress BPF program to cgroup /sys/fs/cgroup/unified/system.slice/system-systemd\x2dcoredump.slice/systemd-coredump@0-11517-0.service failed: Invalid argument Okt 24 13:08:28 r-thinktop systemd[1]: Started Process Core Dump (PID 11517/UID 0). Okt 24 13:08:29 r-thinktop polkitd(authority=local)[770]: Unregistered Authentication Agent for unix-session:2 (system bus name :1.124, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.U Okt 24 13:08:29 r-thinktop gnome-session[1712]: gnome-session-binary[1712]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11 Okt 24 13:08:29 r-thinktop gnome-session-binary[1712]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11 Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): EDID vendor "SHP", prod id 5179 Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Printing DDC gathered Modelines: Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Modeline "3840x2160"x0.0 533.25 3840 3888 3920 4000 2160 2163 2168 2222 -hsync -vsync (133.3 kHz eP) Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): EDID vendor "SHP", prod id 5179 Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Printing DDC gathered Modelines: Okt 24 13:08:29 r-thinktop /usr/lib/gdm3/gdm-x-session[1702]: (II) modeset(0): Modeline "3840x2160"x0.0 533.25 3840 3888 3920 4000 2160 2163 2168 2222 -hsync -vsync (133.3 kHz eP) Okt 24 13:08:30 r-thinktop systemd-coredump[11518]: Process 1794 (gnome-shell) of user 1000 dumped core. Stack trace of thread 1794: #0 0x00007f4a21bcaddd g_type_check_instance_cast (libgobject-2.0.so.0) #1 0x00007f4a1f36e7d8 st_label_set_text (libst-1.0.so) #2 0x00007f4a1b85f038 ffi_call_unix64 (libffi.so.6) #3 0x00007f4a1b85ea9a ffi_call (libffi.so.6) #4 0x00007f4a20892ed8 n/a (libgjs.so.0) #5 0x00007f4a208947b4 n/a (libgjs.so.0) #6 0x00007f4a17977fdc n/a (libmozjs-52.so.0) #7 0x00007f4a179780f9 n/a (libmozjs-52.so.0) #8 0x00007f4a1776a079 n/a (libmozjs-52.so.0) #9 0x00000583cb7883c6 n/a (n/a) Unfortunately, neither libmozjs-52-0 nor libgjs seem to have a -dbg(sym) package in Debian. Is there another way to get more information out of this? I have the following extensions enabled: Alternatetab Dash to panel Topicon plus Workspace indicator
Something I noticed about this backtrace: There's an assertion failure in clutter_text_set_text right before the crash, and st_label_set_text is almost at the top of the backtrace. Seems likely that this is related? (I have no idea about the inner works of Gnome Shell, though.)
Here is a little more details with a crash as the same point. PID: 1202 (gnome-shell) UID: 1000 GID: 1000 Signal: 11 (SEGV) Timestamp: Tue 2017-10-24 08:21:21 CDT (45s ago) Command Line: /usr/bin/gnome-shell Executable: /usr/bin/gnome-shell Control Group: /user.slice/user-1000.slice/session-c3.scope Unit: session-c3.scope Slice: user-1000.slice Session: c3 Owner UID: 1000 Boot ID: d09e1fe4d9334b61a08bd7486551e1a0 Machine ID: aa9d59961df749169fe2cd638e7c9e6d Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.d09e1fe4d9334b61a08bd7486551e1a0.1202.1508851281000000.lz4 Message: Process 1202 (gnome-shell) of user 1000 dumped core. Stack trace of thread 1202: #0 0x00007fd1091e89e2 g_type_check_instance_cast (libgobject-2.0.so.0) #1 0x00007fd106f0b960 st_label_set_text (libst-1.0.so) #2 0x00007fd1038781c8 ffi_call_unix64 (libffi.so.6) #3 0x00007fd103877c2a ffi_call (libffi.so.6) #4 0x00007fd107e91cbb n/a (libgjs.so.0) #5 0x00007fd107e93617 n/a (libgjs.so.0) #6 0x00007fd10154264d _ZN2js12CallJSNativeEP9JSContextPFbS1_jPN2JS5ValueEERKNS2_8CallArgsE (libmozjs-52.so.0) #7 0x00007fd101535687 _ZN2js13CallFromStackEP9JSContextRKN2JS8CallArgsE (libmozjs-52.so.0) #8 0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0) #9 0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0) #10 0x00007fd101542779 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13MutableHandleIS4_EE (libmozjs-52.so.0) #11 0x00007fd101332219 _ZN2js3jit14InvokeFunctionEP9JSContextN2JS6HandleIP8JSObjectEEbjPNS3_5ValueENS3_13MutableHandleIS8_EE (libmozjs-52.so.0) #12 0x00000ce08d92f3c6 n/a (n/a) #13 0x00007fd101230d3e EnterIon (libmozjs-52.so.0) #14 0x00007fd1015419e3 Interpret (libmozjs-52.so.0) #15 0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0) #16 0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0) #17 0x00007fd101542779 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13MutableHandleIS4_EE (libmozjs-52.so.0) #18 0x00007fd101332219 _ZN2js3jit14InvokeFunctionEP9JSContextN2JS6HandleIP8JSObjectEEbjPNS3_5ValueENS3_13MutableHandleIS8_EE (libmozjs-52.so.0) #19 0x00000ce08d92f3c6 n/a (n/a) #20 0x000055ebef8e4620 n/a (n/a) #21 0x00000ce08d9b89d5 n/a (n/a) #22 0x00007fd101230d3e EnterIon (libmozjs-52.so.0) #23 0x00007fd1015419e3 Interpret (libmozjs-52.so.0) #24 0x00007fd101541e97 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libmozjs-52.so.0) #25 0x00007fd10154246f _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE (libmozjs-52.so.0) lines 1-45
Created attachment 362181 [details] Core Dump info with all thread states
This is indeed a duplicate of Bug 788931 Please, provide your JS stack dump as well as explained here https://is.gd/wiki_gnome_shell_crash_debug Thanks *** This bug has been marked as a duplicate of bug 788931 ***