View Issue Details

IDProjectCategoryView StatusLast Update
0017275CentOS-8gnome-shellpublic2020-04-21 15:49
ReporterENOTTY 
PrioritynormalSeveritycrashReproducibilitysometimes
Status newResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0017275: Null pointer dereference in dri_flush_front_buffer
Description       Message: Process 5422 (gnome-shell) of user 1000 dumped core.
                
                Stack trace of thread 5422:
                #0 0x00007f5b458927e7 dri_flush_front_buffer (libgbm.so.1)
                #1 0x00007f5b29dd4512 intel_flush_front (i965_dri.so)
                #2 0x00007f5b29dd4580 intel_glFlush (i965_dri.so)
                #3 0x00007f5b3c9bd082 dri2_make_current (libEGL_mesa.so.0)
                #4 0x00007f5b3c9abb28 eglMakeCurrent (libEGL_mesa.so.0)
                #5 0x00007f5b48293a60 InternalMakeCurrentVendor.isra.1 (libEGL.so.1)
                #6 0x00007f5b50eb8ba5 _cogl_winsys_egl_make_current (libmutter-cogl-4.so.0)
                #7 0x00007f5b5227bc28 meta_renderer_native_create_view (libmutter-4.so.0)
                #8 0x00007f5b521d1ed0 meta_renderer_rebuild_views (libmutter-4.so.0)
                #9 0x00007f5b5227f09b meta_stage_native_rebuild_views (libmutter-4.so.0)
                #10 0x00007f5b52270469 meta_backend_native_update_screen_size (libmutter-4.so.0)
                #11 0x00007f5b521b82b3 meta_backend_sync_screen_size (libmutter-4.so.0)
                #12 0x00007f5b521b930d meta_backend_monitors_changed (libmutter-4.so.0)
                #13 0x00007f5b521cc27d meta_monitor_manager_notify_monitors_changed (libmutter-4.so.0)
                #14 0x00007f5b521cf27f meta_monitor_manager_rebuild (libmutter-4.so.0)
                #15 0x00007f5b52277766 meta_monitor_manager_kms_apply_monitors_config (libmutter-4.so.0)
                #16 0x00007f5b521cc2dc meta_monitor_manager_apply_monitors_config (libmutter-4.so.0)
                #17 0x00007f5b521ce281 meta_monitor_manager_ensure_configured (libmutter-4.so.0)
                #18 0x00007f5b52277e17 on_uevent (libmutter-4.so.0)
                #19 0x00007f5b4f01704e ffi_call_unix64 (libffi.so.6)
                #20 0x00007f5b4f016a0f ffi_call (libffi.so.6)
                #21 0x00007f5b5404ce85 g_cclosure_marshal_generic (libgobject-2.0.so.0)
                #22 0x00007f5b5404c3bd g_closure_invoke (libgobject-2.0.so.0)
                #23 0x00007f5b5405f945 signal_emit_unlocked_R (libgobject-2.0.so.0)
                #24 0x00007f5b54068a06 g_signal_emit_valist (libgobject-2.0.so.0)
                #25 0x00007f5b54069043 g_signal_emit (libgobject-2.0.so.0)
                #26 0x00007f5b4759b2d8 monitor_event (libgudev-1.0.so.0)
                #27 0x00007f5b53d7067d g_main_context_dispatch (libglib-2.0.so.0)
                #28 0x00007f5b53d70a48 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #29 0x00007f5b53d70d72 g_main_loop_run (libglib-2.0.so.0)
                #30 0x00007f5b52205ff0 meta_run (libmutter-4.so.0)
                #31 0x00005571b6084536 main (gnome-shell)
                #32 0x00007f5b51db1873 __libc_start_main (libc.so.6)
                #33 0x00005571b608468e _start (gnome-shell)
                
                Stack trace of thread 5583:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5584:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5428:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b29e15a8b util_queue_thread_func (i965_dri.so)
                #2 0x00007f5b29e156ab impl_thrd_routine (i965_dri.so)
                #3 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #4 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5581:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5582:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5427:
                #0 0x00007f5b51e7f211 __GI___poll (libc.so.6)
                #1 0x00007f5b53d709b6 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #2 0x00007f5b53d70ae0 g_main_context_iteration (libglib-2.0.so.0)
                #3 0x00007f5b3d3e9e6d dconf_gdbus_worker_thread (libdconfsettings.so)
                #4 0x00007f5b53d98d9a g_thread_proxy (libglib-2.0.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5424:
                #0 0x00007f5b51e7f211 __GI___poll (libc.so.6)
                #1 0x00007f5b53d709b6 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #2 0x00007f5b53d70ae0 g_main_context_iteration (libglib-2.0.so.0)
                #3 0x00007f5b53d70b31 glib_worker_main (libglib-2.0.so.0)
                #4 0x00007f5b53d98d9a g_thread_proxy (libglib-2.0.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5425:
                #0 0x00007f5b51e7f211 __GI___poll (libc.so.6)
                #1 0x00007f5b53d709b6 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #2 0x00007f5b53d70d72 g_main_loop_run (libglib-2.0.so.0)
                #3 0x00007f5b543663ba gdbus_shared_thread_func (libgio-2.0.so.0)
                #4 0x00007f5b53d98d9a g_thread_proxy (libglib-2.0.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5585:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5586:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5588:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 6198:
                #0 0x00007f5b51e7f211 __GI___poll (libc.so.6)
                #1 0x00007f5af77b5465 poll_func (libpulse.so.0)
                #2 0x00007f5af77a6a98 pa_mainloop_poll (libpulse.so.0)
                #3 0x00007f5af77a70f2 pa_mainloop_iterate (libpulse.so.0)
                #4 0x00007f5af77a71a0 pa_mainloop_run (libpulse.so.0)
                #5 0x00007f5af77b53ad thread (libpulse.so.0)
                #6 0x00007f5af734d87c internal_thread_func (libpulsecommon-11.1.so)
                #7 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #8 0x00007f5b51e8a133 __clone (libc.so.6)
                
                Stack trace of thread 5587:
                #0 0x00007f5b4e3ca47c futex_wait_cancelable (libpthread.so.0)
                #1 0x00007f5b4a54e4e3 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-60.so.0)
                #2 0x00007f5b4a54e6c5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-60.so.0)
                #3 0x00007f5b4a2cbe74 _ZN2js12HelperThread10threadLoopEv (libmozjs-60.so.0)
                #4 0x00007f5b4a2c6ea6 _ZN2js6detail16ThreadTrampolineIRFvPvEJPNS_12HelperThreadEEE5StartES2_ (libmozjs-60.so.0)
                #5 0x00007f5b4e3c42de start_thread (libpthread.so.0)
                #6 0x00007f5b51e8a133 __clone (libc.so.6)

(gdb) p/x $rip
$1 = 0x7f5b458927e7
(gdb) x/9i dri_flush_front_buffer
   0x7f5b458927e0 <dri_flush_front_buffer>: endbr64
   0x7f5b458927e4 <dri_flush_front_buffer+4>: mov (%rsi),%rax
=> 0x7f5b458927e7 <dri_flush_front_buffer+7>: mov 0x1f8(%rax),%rax
   0x7f5b458927ee <dri_flush_front_buffer+14>: test %rax,%rax
   0x7f5b458927f1 <dri_flush_front_buffer+17>: je 0x7f5b45892800 <dri_flush_front_buffer+32>
   0x7f5b458927f3 <dri_flush_front_buffer+19>: mov 0x28(%rsi),%rsi
   0x7f5b458927f7 <dri_flush_front_buffer+23>: jmpq *%rax
   0x7f5b458927f9 <dri_flush_front_buffer+25>: nopl 0x0(%rax)
   0x7f5b45892800 <dri_flush_front_buffer+32>: retq
(gdb) p/x $rax
$2 = 0x0
(gdb) p *(struct gbm_dri_surface *)data
$4 = {base = {gbm = 0x0, width = 0, height = 0, format = 0, flags = 0, {modifiers = 0x0, count = 1}}, dri_private = 0x7f5b5404f4c0 <g_cclosure_marshal_VOID__PARAM>}
Steps To ReproduceIssue seems to occur when adding or removing a USB keyboard/mouse to the system.
Additional InformationMay be related to this Ubuntu bug https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1870270
TagsNo tags attached.

Activities

ENOTTY

ENOTTY

2020-04-21 14:08

reporter   ~0036743

Found two more related core dumps:

=== FIRST ===

                Stack trace of thread 24609:
                #0 0x00007fb41b9f17e7 dri_flush_front_buffer (libgbm.so.1)
                #1 0x00007fb3f3396512 intel_flush_front (i965_dri.so)
                #2 0x00007fb3f3396580 intel_glFlush (i965_dri.so)
                #3 0x00007fb41431f082 dri2_make_current (libEGL_mesa.so.0)
                #4 0x00007fb41430db28 eglMakeCurrent (libEGL_mesa.so.0)
                #5 0x00007fb41e3f2a60 InternalMakeCurrentVendor.isra.1 (libEGL.so.1)
                #6 0x00007fb427017ba5 _cogl_winsys_egl_make_current (libmutter-cogl-4.so.0)
                #7 0x00007fb4283dac28 meta_renderer_native_create_view (libmutter-4.so.0)
                #8 0x00007fb428330ed0 meta_renderer_rebuild_views (libmutter-4.so.0)
                #9 0x00007fb4283de09b meta_stage_native_rebuild_views (libmutter-4.so.0)
                #10 0x00007fb4283cf469 meta_backend_native_update_screen_size (libmutter-4.so.0)
                #11 0x00007fb4283172b3 meta_backend_sync_screen_size (libmutter-4.so.0)
                #12 0x00007fb42831830d meta_backend_monitors_changed (libmutter-4.so.0)
                #13 0x00007fb42832b27d meta_monitor_manager_notify_monitors_changed (libmutter-4.so.0)
                #14 0x00007fb42832e27f meta_monitor_manager_rebuild (libmutter-4.so.0)
                #15 0x00007fb4283d6766 meta_monitor_manager_kms_apply_monitors_config (libmutter-4.so.0)
                #16 0x00007fb42832b2dc meta_monitor_manager_apply_monitors_config (libmutter-4.so.0)
                #17 0x00007fb42832d281 meta_monitor_manager_ensure_configured (libmutter-4.so.0)
                #18 0x00007fb4283d6e17 on_uevent (libmutter-4.so.0)
                #19 0x00007fb42517604e ffi_call_unix64 (libffi.so.6)
                #20 0x00007fb425175a0f ffi_call (libffi.so.6)
                #21 0x00007fb42a1abe85 g_cclosure_marshal_generic (libgobject-2.0.so.0)
                #22 0x00007fb42a1ab3bd g_closure_invoke (libgobject-2.0.so.0)
                #23 0x00007fb42a1be945 signal_emit_unlocked_R (libgobject-2.0.so.0)
                #24 0x00007fb42a1c7a06 g_signal_emit_valist (libgobject-2.0.so.0)
                #25 0x00007fb42a1c8043 g_signal_emit (libgobject-2.0.so.0)
                #26 0x00007fb41d6fa2d8 monitor_event (libgudev-1.0.so.0)
                #27 0x00007fb429ecf67d g_main_context_dispatch (libglib-2.0.so.0)
                #28 0x00007fb429ecfa48 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #29 0x00007fb429ecfd72 g_main_loop_run (libglib-2.0.so.0)
                #30 0x00007fb428364ff0 meta_run (libmutter-4.so.0)
                #31 0x00005566f63f7536 main (gnome-shell)
                #32 0x00007fb427f10873 __libc_start_main (libc.so.6)
                #33 0x00005566f63f768e _start (gnome-shell)

(gdb) x/i$rip
=> 0x7fb41b9f17e7 <dri_flush_front_buffer+7>: mov 0x1f8(%rax),%rax
(gdb) p/x$rax
$1 = 0x494e495f43455355
(gdb) x/s $rax
0x494e495f43455355: <error: Cannot access memory at address 0x494e495f43455355>
(gdb) p *(struct gbm_dri_surface *)data
$2 = {base = {gbm = 0x494e495f43455355, width = 1279347028, height = 1145395785, format = 0, flags = 1818652769, {modifiers = 0x21, count = 808466485}},
  dri_private = 0x313635}
(gdb) x/s data
0x5566f87c9200: "USEC_INITIALIZED"
(gdb) p sizeof(struct gbm_dri_surface)
$3 = 48
(gdb) x/48xb data
0x5566f87c9200: 0x55 0x53 0x45 0x43 0x5f 0x49 0x4e 0x49
0x5566f87c9208: 0x54 0x49 0x41 0x4c 0x49 0x5a 0x45 0x44
0x5566f87c9210: 0x00 0x00 0x00 0x00 0x61 0x70 0x66 0x6c
0x5566f87c9218: 0x21 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x5566f87c9220: 0x35 0x38 0x30 0x30 0x35 0x36 0x30 0x39
0x5566f87c9228: 0x35 0x36 0x31 0x00 0x00 0x00 0x00 0x00

=== SECOND ===

                Stack trace of thread 11636:
                #0 0x00007f65546bc7e7 dri_flush_front_buffer (libgbm.so.1)
                #1 0x00007f6538d54512 intel_flush_front (i965_dri.so)
                #2 0x00007f6538d54580 intel_glFlush (i965_dri.so)
                #3 0x00007f653a627082 dri2_make_current (libEGL_mesa.so.0)
                #4 0x00007f653a615b28 eglMakeCurrent (libEGL_mesa.so.0)
                #5 0x00007f65570bda60 InternalMakeCurrentVendor.isra.1 (libEGL.so.1)
                #6 0x00007f655fce2ba5 _cogl_winsys_egl_make_current (libmutter-cogl-4.so.0)
                #7 0x00007f65610a5c28 meta_renderer_native_create_view (libmutter-4.so.0)
                #8 0x00007f6560ffbed0 meta_renderer_rebuild_views (libmutter-4.so.0)
                #9 0x00007f65610a909b meta_stage_native_rebuild_views (libmutter-4.so.0)
                #10 0x00007f656109a469 meta_backend_native_update_screen_size (libmutter-4.so.0)
                #11 0x00007f6560fe22b3 meta_backend_sync_screen_size (libmutter-4.so.0)
                #12 0x00007f6560fe330d meta_backend_monitors_changed (libmutter-4.so.0)
                #13 0x00007f6560ff627d meta_monitor_manager_notify_monitors_changed (libmutter-4.so.0)
                #14 0x00007f6560ff927f meta_monitor_manager_rebuild (libmutter-4.so.0)
                #15 0x00007f65610a1766 meta_monitor_manager_kms_apply_monitors_config (libmutter-4.so.0)
                #16 0x00007f6560ff62dc meta_monitor_manager_apply_monitors_config (libmutter-4.so.0)
                #17 0x00007f6560ff8281 meta_monitor_manager_ensure_configured (libmutter-4.so.0)
                #18 0x00007f65610a1e17 on_uevent (libmutter-4.so.0)
                #19 0x00007f655de4104e ffi_call_unix64 (libffi.so.6)
                #20 0x00007f655de40a0f ffi_call (libffi.so.6)
                #21 0x00007f6562e76e85 g_cclosure_marshal_generic (libgobject-2.0.so.0)
                #22 0x00007f6562e763bd g_closure_invoke (libgobject-2.0.so.0)
                #23 0x00007f6562e89945 signal_emit_unlocked_R (libgobject-2.0.so.0)
                #24 0x00007f6562e92a06 g_signal_emit_valist (libgobject-2.0.so.0)
                #25 0x00007f6562e93043 g_signal_emit (libgobject-2.0.so.0)
                #26 0x00007f65563c52d8 monitor_event (libgudev-1.0.so.0)
                #27 0x00007f6562b9a67d g_main_context_dispatch (libglib-2.0.so.0)
                #28 0x00007f6562b9aa48 g_main_context_iterate.isra.21 (libglib-2.0.so.0)
                #29 0x00007f6562b9ad72 g_main_loop_run (libglib-2.0.so.0)
                #30 0x00007f656102fff0 meta_run (libmutter-4.so.0)
                #31 0x00005583f91a6536 main (gnome-shell)
                #32 0x00007f6560bdb873 __libc_start_main (libc.so.6)
                #33 0x00005583f91a668e _start (gnome-shell)

(gdb) x/i $rip
=> 0x7f65546bc7e7 <dri_flush_front_buffer+7>: mov 0x1f8(%rax),%rax
(gdb) p/x$rax
$1 = 0x800000003
(gdb) p *(struct gbm_dri_surface *)data
$2 = {base = {gbm = 0x800000003, width = 72, height = 21891, format = 4265759520, flags = 21891, {modifiers = 0x7f6562e7a5c0 <weak_refs_notify>, count = 74}},
  dri_private = 0x5583fe425b40}
ENOTTY

ENOTTY

2020-04-21 14:26

reporter   ~0036744

Actually, it may be happening when I use my HDMI switch to switch my display from the crashing system to another then back to the crashing system.

Journal upon switching my display away from the crashing system:

Apr 21 10:20:27 nuc1 gnome-shell[4946]: JS WARNING: [resource:///org/gnome/shell/ui/layout.js 552]: reference to undefined property 0

Journal upon switching back:
Apr 21 10:20:38 nuc1 kernel: gnome-shell[4946]: segfault at 1 ip 0000000000000001 sp 00007ffe7f002578 error 14
Apr 21 10:20:38 nuc1 kernel: Code: Bad RIP value.
Apr 21 10:20:38 nuc1 systemd[1]: Created slice system-systemd\x2dcoredump.slice.
Apr 21 10:20:38 nuc1 systemd[1]: Started Process Core Dump (PID 12221/UID 0).
Apr 21 10:20:39 nuc1 unknown[6740]: Error reading events from display: Broken pipe
Apr 21 10:20:39 nuc1 gnome-session[4850]: gnome-session-binary[4850]: WARNING: App 'org.gnome.SettingsDaemon.Wacom.desktop' exited with code 1
Apr 21 10:20:39 nuc1 gnome-session-binary[4850]: WARNING: App 'org.gnome.SettingsDaemon.Wacom.desktop' exited with code 1
Apr 21 10:20:39 nuc1 org.gnome.Shell.desktop[4946]: (EE) failed to read Wayland events: Broken pipe
Apr 21 10:20:39 nuc1 gnome-session[4850]: gnome-session-binary[4850]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11
Apr 21 10:20:39 nuc1 gnome-session-binary[4850]: Unrecoverable failure in required component org.gnome.Shell.desktop
Apr 21 10:20:39 nuc1 gnome-session-binary[4850]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 11
Apr 21 10:20:39 nuc1 polkitd[2910]: Unregistered Authentication Agent for unix-session:c1 (system bus name :1.76, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Apr 21 10:20:39 nuc1 gsd-power[6691]: gsd-power: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 at-spi-bus-launcher[5698]: XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":1024"
Apr 21 10:20:39 nuc1 at-spi-bus-launcher[5698]: after 21 requests (21 known processed) with 0 events remaining.
Apr 21 10:20:39 nuc1 gsd-clipboard[6616]: gsd-clipboard: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 gsd-xsettings[6593]: gsd-xsettings: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 gsd-media-keys[6676]: gsd-media-keys: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 gsd-color[6620]: gsd-color: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 gsd-keyboard[6643]: gsd-keyboard: Fatal IO error 11 (Resource temporarily unavailable) on X server :1024.
Apr 21 10:20:39 nuc1 gdm-launch-environment][4475]: pam_unix(gdm-launch-environment:session): session closed for user gdm
Apr 21 10:20:39 nuc1 gdm[3251]: Child process 4475 was already dead.
Apr 21 10:20:39 nuc1 gdm[3251]: Unable to kill session worker process
Apr 21 10:20:39 nuc1 systemd-coredump[12222]: Process 4946 (gnome-shell) of user 42 dumped core.
                                              
                                              Stack trace of thread 4946:
                                              #0 0x0000000000000001 n/a (n/a)
ENOTTY

ENOTTY

2020-04-21 15:49

reporter   ~0036745

I should add that I can reproduce the bug very consistently now.

Issue History

Date Modified Username Field Change
2020-04-21 13:59 ENOTTY New Issue
2020-04-21 14:08 ENOTTY Note Added: 0036743
2020-04-21 14:26 ENOTTY Note Added: 0036744
2020-04-21 15:49 ENOTTY Note Added: 0036745