gnome-shell segfaults on exit in g_hash_table_lookup() from st_focus_manager_remove_group()
gnome-shell segfaults on exit in:
Stack trace
Thread 1 "gnome-shell" received signal SIGSEGV, Segmentation fault. 0x0000000000000022 in ?? () (gdb) bt #0 0x0000000000000022 in () #1 0x00007ffff79f8ff0 in g_hash_table_lookup () at /lib/x86_64-linux-gnu/libglib-2.0.so.0 #2 0x00007ffff69b83fa in st_focus_manager_remove_group (manager=0x555555ce60b0, root=0x555556fc4b30) at ../src/st/st-focus-manager.c:199 #3 0x00007ffff69b832c in remove_destroyed_group (actor=0x555556fc4b30, user_data=0x555555ce60b0) at ../src/st/st-focus-manager.c:163 #4 0x00007ffff7b09bcf in g_closure_invoke () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #5 0x00007ffff7b3381b in () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #6 0x00007ffff7b27638 in g_signal_emit_valist () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #7 0x00007ffff7b27893 in g_signal_emit () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #8 0x00007ffff6f9049c in clutter_actor_dispose (object=0x555556fc4b30) at ../clutter/clutter/clutter-actor.c:5510 #9 0x00007ffff69e4989 in st_widget_dispose (gobject=0x555556fc4b30) at ../src/st/st-widget.c:334 #10 0x00007ffff7b0ba01 in g_object_run_dispose () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #11 0x00007ffff6f9303e in clutter_actor_destroy (self=0x555556fc4b30) at ../clutter/clutter/clutter-actor.c:7965 #12 0x00007ffff6fa6176 in clutter_actor_iter_destroy (iter=0x7fffffffca80) at ../clutter/clutter/clutter-actor.c:17283 #13 0x00007ffff6f9118a in clutter_actor_real_destroy (actor=0x555556b4fc90) at ../clutter/clutter/clutter-actor.c:5854 #14 0x00007ffff7b09b0c in g_closure_invoke () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #15 0x00007ffff7b337b5 in () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #16 0x00007ffff7b27638 in g_signal_emit_valist () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #17 0x00007ffff7b27893 in g_signal_emit () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #18 0x00007ffff6f9049c in clutter_actor_dispose (object=0x555556b4fc90) at ../clutter/clutter/clutter-actor.c:5510 #19 0x00007ffff69e4989 in st_widget_dispose (gobject=0x555556b4fc90) at ../src/st/st-widget.c:334 #20 0x00007ffff69e2bc6 in st_viewport_dispose (object=0x555556b4fc90) at ../src/st/st-viewport.c:271 #21 0x00007ffff7b0ba01 in g_object_run_dispose () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #22 0x00007ffff6f9303e in clutter_actor_destroy (self=0x555556b4fc90) at ../clutter/clutter/clutter-actor.c:7965 #23 0x00007ffff6fa6176 in clutter_actor_iter_destroy (iter=0x7fffffffd180) at ../clutter/clutter/clutter-actor.c:17283 #24 0x00007ffff6f9118a in clutter_actor_real_destroy (actor=0x555556b45be0) at ../clutter/clutter/clutter-actor.c:5854 #25 0x00007ffff7b09bcf in g_closure_invoke () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #26 0x00007ffff7b337b5 in () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #27 0x00007ffff7b27638 in g_signal_emit_valist () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #28 0x00007ffff7b27893 in g_signal_emit () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #29 0x00007ffff6f9049c in clutter_actor_dispose (object=0x555556b45be0) at ../clutter/clutter/clutter-actor.c:5510 #30 0x00007ffff69e4989 in st_widget_dispose (gobject=0x555556b45be0) at ../src/st/st-widget.c:334 #31 0x00007ffff7b16a13 in g_object_unref () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #32 0x00007ffff70fbe35 in () at /lib/x86_64-linux-gnu/libgjs.so.0 #33 0x00007ffff7109436 in () at /lib/x86_64-linux-gnu/libgjs.so.0 #34 0x00007ffff54c1e98 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #35 0x00007ffff54acd05 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #36 0x00007ffff54bab80 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #37 0x00007ffff54ac77e in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #38 0x00007ffff54baa49 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #39 0x00007ffff54ac77e in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #40 0x00007ffff54c2e12 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #41 0x00007ffff54b9654 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #42 0x00007ffff54c7fba in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #43 0x00007ffff54c99f2 in () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #44 0x00007ffff527038c in JSRuntime::destroyRuntime() () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #45 0x00007ffff50f2082 in JS_DestroyContext(JSContext*) () at /lib/x86_64-linux-gnu/libmozjs-78.so.0 #46 0x00007ffff7117419 in () at /lib/x86_64-linux-gnu/libgjs.so.0 #47 0x00007ffff7b16a13 in g_object_unref () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #48 0x00007ffff7d63de5 in _shell_global_destroy_gjs_context (self=0x55555563d140) at ../src/shell-global.c:681 #49 0x00005555555575f2 in main (argc=1, argv=0x7fffffffe3d8) at ../src/main.c:508
Crashes in 40.0 and later, but not in 3.38. Also reported in #4097 (closed) but I can confirm there are no extensions here.
Now trying to bisect.