After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 760179 - Gnome shell/mutter crashes on wayland
Gnome shell/mutter crashes on wayland
Status: RESOLVED FIXED
Product: gnome-shell
Classification: Core
Component: general
3.18.x
Other Linux
: Normal critical
: ---
Assigned To: gnome-shell-maint
gnome-shell-maint
Depends on:
Blocks:
 
 
Reported: 2016-01-05 20:15 UTC by Géza Búza
Modified: 2016-11-10 13:03 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Information about core dump (5.33 KB, text/plain)
2016-01-05 20:15 UTC, Géza Búza
Details
Backtrace with debug symbols (1.28 KB, text/plain)
2016-01-05 21:21 UTC, Géza Búza
Details
Systemctl journal (13.68 KB, text/x-log)
2016-10-27 21:27 UTC, Géza Búza
Details

Description Géza Búza 2016-01-05 20:15:36 UTC
Created attachment 318289 [details]
Information about core dump

About two or three times a day gnome shell crashes. From the GUI point of view I applications are no longer accepts input from mouse (clicking, scrolling), but the shell itself still works, I can switch between windows by clicking on them, but no interaction possible within window of applications. Surprisingly keyboard keeps working, I can type and navigate.
When I log out and log in back, mouse starts working again.

Environment:
OS: Arch Linux
Kernel: 4.3.3
Gnome shell: 3.18.3
Mutter: 3.18.2


I didn't notice any specific action which triggers the error, however the log below and the attached core dump may tell more about the problem.

Jan 05 16:10:09 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:09 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: gnome-session-binary[21013]: GLib-GObject-CRITICAL: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Jan 05 16:10:11 Geza-DellM4700 kernel: gnome-shell[21022]: segfault at 130 ip 00007fcde31f8384 sp 00007ffec9296cd0 error 4 in libmutter.so.0.0.0[7fcde3148000+fd000]
Jan 05 16:10:11 Geza-DellM4700 org.gnome.GPaste[21017]: (gpaste-daemon:21153): Gdk-WARNING **: gpaste-daemon: Fatal IO error 11 (Resource temporarily unavailable) on X server :0.
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: 2 XSELINUXs still allocated at reset
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: SCREEN: 0 objects of 264 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: DEVICE: 0 objects of 32 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: CLIENT: 0 objects of 168 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: WINDOW: 0 objects of 56 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: PIXMAP: 2 objects of 136 bytes = 272 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: GC: 0 objects of 40 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: CURSOR: 0 objects of 8 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: CURSOR_BITS: 0 objects of 8 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: SYNC_FENCE: 0 objects of 24 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: TOTAL: 2 objects, 272 bytes, 0 allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: 2 PIXMAPs still allocated at reset
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: PIXMAP: 2 objects of 136 bytes = 272 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: GC: 0 objects of 40 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: CURSOR: 0 objects of 8 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: CURSOR_BITS: 0 objects of 8 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: SYNC_FENCE: 0 objects of 24 bytes = 0 total bytes 0 private allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: TOTAL: 2 objects, 272 bytes, 0 allocs
Jan 05 16:10:11 Geza-DellM4700 gnome-session[964]: (gnome-settings-daemon:1195): color-plugin-WARNING **: failed to connect to device: Failed to connect to missing device /org/freedesktop/Co
Jan 05 16:10:11 Geza-DellM4700 gnome-session[964]: (gnome-settings-daemon:1195): color-plugin-WARNING **: failed to connect to device: Failed to connect to missing device /org/freedesktop/Co
Jan 05 16:10:11 Geza-DellM4700 gdm-password][20994]: pam_unix(gdm-password:session): session closed for user gbuza
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: could not connect to wayland server
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: (EE)
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: Fatal server error:
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: (EE) Couldn't add screen
Jan 05 16:10:11 Geza-DellM4700 gnome-session[21013]: (EE)
Jan 05 16:10:11 Geza-DellM4700 org.gnome.Terminal[21017]: (gnome-terminal-server:21374): Gdk-WARNING **: Error 32 (Broken pipe) dispatching to Wayland display.
Jan 05 16:10:11 Geza-DellM4700 polkitd[677]: Unregistered Authentication Agent for unix-session:c3 (system bus name :1.154, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, local
Jan 05 16:10:11 Geza-DellM4700 systemd-coredump[26736]: Process 21022 (gnome-shell) of user 1001 dumped core.
Stack trace of thread 21022:
                                                        #0  0x00007fcde31f8384 meta_wayland_surface_configure_notify (libmutter.so.0)
                                                        #1  0x00007fcde31f9a6f n/a (libmutter.so.0)
                                                        #2  0x00007fcde31d19b5 meta_window_move_resize_internal (libmutter.so.0)
                                                        #3  0x00007fcde31d1db9 meta_window_move_resize_frame (libmutter.so.0)
                                                        #4  0x00007fcde31d22de meta_window_unmanage (libmutter.so.0)
                                                        #5  0x00007fcde31b5920 meta_display_unmanage_windows_for_screen (libmutter.so.0)
                                                        #6  0x00007fcde31c409f meta_screen_free (libmutter.so.0)
                                                        #7  0x00007fcde31b5dd5 meta_display_close (libmutter.so.0)
                                                        #8  0x00007fcde31bfb10 meta_run (libmutter.so.0)
                                                        #9  0x00000000004021a7 main (gnome-shell)
                                                        #10 0x00007fcde1231610 __libc_start_main (libc.so.6)
                                                        #11 0x00000000004022d9 n/a (gnome-shell)
                                                        
                                                        Stack trace of thread 21025:
                                                        #0  0x00007fcde12f118d poll (libc.so.6)
                                                        #1  0x00007fcde181bfbc n/a (libglib-2.0.so.0)
                                                        #2  0x00007fcde181c342 g_main_loop_run (libglib-2.0.so.0)
                                                        #3  0x00007fcde201f236 n/a (libgio-2.0.so.0)
                                                        #4  0x00007fcde1842715 n/a (libglib-2.0.so.0)
                                                        #5  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #6  0x00007fcde12fa13d __clone (libc.so.6)
                                                        
                                                        Stack trace of thread 26734:
                                                        #0  0x00007fcde12f5cf9 syscall (libc.so.6)
                                                        #1  0x00007fcde186087a g_cond_wait_until (libglib-2.0.so.0)
                                                        #2  0x00007fcde17f0a69 n/a (libglib-2.0.so.0)
                                                        #3  0x00007fcde17f108b g_async_queue_timeout_pop (libglib-2.0.so.0)
                                                        #4  0x00007fcde184316a n/a (libglib-2.0.so.0)
                                                        #5  0x00007fcde1842715 n/a (libglib-2.0.so.0)
                                                        #6  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #7  0x00007fcde12fa13d __clone (libc.so.6)
                                                        
                                                        Stack trace of thread 21024:
                                                        #0  0x00007fcde12f118d poll (libc.so.6)
                                                        #1  0x00007fcde181bfbc n/a (libglib-2.0.so.0)
                                                        #2  0x00007fcde181c0cc g_main_context_iteration (libglib-2.0.so.0)
                                                        #3  0x00007fcde181c109 n/a (libglib-2.0.so.0)
                                                        #4  0x00007fcde1842715 n/a (libglib-2.0.so.0)
                                                        #5  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #6  0x00007fcde12fa13d __clone (libc.so.6)

                                                        Stack trace of thread 21067:
                                                        #0  0x00007fcde15c207f pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                                                        #1  0x00007fcdd3cfd4b0 PR_WaitCondVar (libnspr4.so)
                                                        #2  0x00007fcddd0cde9e n/a (libmozjs-24.so)
                                                        #3  0x00007fcdd3d02d7b n/a (libnspr4.so)
                                                        #4  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #5  0x00007fcde12fa13d __clone (libc.so.6)
                                                        
                                                        Stack trace of thread 21068:
                                                        #0  0x00007fcde15c207f pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0)
                                                        #1  0x00007fcdd3cfd4b0 PR_WaitCondVar (libnspr4.so)
                                                        #2  0x00007fcddd141816 n/a (libmozjs-24.so)
                                                        #3  0x00007fcdd3d02d7b n/a (libnspr4.so)
                                                        #4  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #5  0x00007fcde12fa13d __clone (libc.so.6)
                                                        
                                                        Stack trace of thread 21027:
                                                        #0  0x00007fcde12f118d poll (libc.so.6)
                                                        #1  0x00007fcde181bfbc n/a (libglib-2.0.so.0)
                                                        #2  0x00007fcde181c0cc g_main_context_iteration (libglib-2.0.so.0)
                                                        #3  0x00007fcdbcc7725d n/a (libdconfsettings.so)
                                                        #4  0x00007fcde1842715 n/a (libglib-2.0.so.0)
                                                        #5  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #6  0x00007fcde12fa13d __clone (libc.so.6)
                                                        
                                                        Stack trace of thread 21062:
                                                        #0  0x00007fcde12f118d poll (libc.so.6)
                                                        #1  0x00007fcddd67af51 n/a (libpulse.so.0)
                                                        #2  0x00007fcddd66c571 pa_mainloop_poll (libpulse.so.0)
                                                        #3  0x00007fcddd66cc0e pa_mainloop_iterate (libpulse.so.0)
                                                        #4  0x00007fcddd66ccc0 pa_mainloop_run (libpulse.so.0)
                                                        #5  0x00007fcddd67aee6 n/a (libpulse.so.0)
                                                        #6  0x00007fcdd278d5f8 n/a (libpulsecommon-7.1.so)
                                                        #7  0x00007fcde15bc4a4 start_thread (libpthread.so.0)
                                                        #8  0x00007fcde12fa13d __clone (libc.so.6)
Comment 1 Géza Búza 2016-01-05 21:21:24 UTC
Created attachment 318292 [details]
Backtrace with debug symbols
Comment 2 Marek Chalupa 2016-02-19 07:36:29 UTC
The reason of crash from the core dump looks like https://bugzilla.gnome.org/show_bug.cgi?id=751847 - the meta_window_unmanage() sets window->surface to NULL and then meta_wayland_surface_configure_notify() dereferences the surface.

This crash occurred on exit, but you said there are crashes when running. They may be due to the same reason. This bug can be hit even after closing a window when some grab is active https://bugzilla.redhat.com/show_bug.cgi?id=1293479. That would explain why you're mouse is not working properly. But this is not 100%.
Comment 3 Christian Stadelmann 2016-09-26 10:17:10 UTC
This bug should be gone in 3.22 according to https://bugzilla.redhat.com/show_bug.cgi?id=1214462 (via comment #2). Can you confirm this?
Comment 4 Géza Búza 2016-10-27 21:26:14 UTC
I can confirm that the error related to meta_wayland_surface_configure_notify() has gone away. 

Unfortunately today I run into another bug which has the same symptoms like the previous one. Gnome Shell is responding, applications accept keyboard events, but ignores mouse (clicking, scrolling does not work). It's not clear from the logs what crashed exactly in the Wayland/X11 composition.
See the attached gnome_on_wayland_3.22.1_dmesg.log file for details.
Comment 5 Géza Búza 2016-10-27 21:27:21 UTC
Created attachment 338640 [details]
Systemctl journal
Comment 6 Christian Stadelmann 2016-10-28 09:52:42 UTC
(In reply to Géza Búza from comment #4)
> Unfortunately today I run into another bug which has the same symptoms like
> the previous one. Gnome Shell is responding, applications accept keyboard
> events, but ignores mouse (clicking, scrolling does not work). It's not
> clear from the logs what crashed exactly in the Wayland/X11 composition.
> See the attached gnome_on_wayland_3.22.1_dmesg.log file for details.

That looks like a different bug: https://bugzilla.redhat.com/show_bug.cgi?id=1358700 (there is also a similar bug where applications don't react to keyboard events: https://bugzilla.redhat.com/show_bug.cgi?id=1358889)
Comment 7 Géza Búza 2016-11-10 13:03:53 UTC
(In reply to Christian Stadelmann from comment #6)
> That looks like a different bug:
> https://bugzilla.redhat.com/show_bug.cgi?id=1358700 (there is also a similar
> bug where applications don't react to keyboard events:
> https://bugzilla.redhat.com/show_bug.cgi?id=1358889)

That's right. I have the exact same problem as it's described here: https://bugzilla.redhat.com/show_bug.cgi?id=1358700

So this one seems to be resolved.