Crash in _cogl_buffer_gl_unbind()
You know the drill... gnome-shell 3.34.4, mutter 3.34.4:
Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007fe7a737bb92 in _cogl_buffer_gl_unbind (buffer=<optimized out>)
at ../cogl/cogl/driver/gl/cogl-buffer-gl.c:423
423 g_return_if_fail (ctx->current_buffer[buffer->last_target] == buffer);
(gdb) bt full
#0 0x00007fe7a737bb92 in _cogl_buffer_gl_unbind (buffer=<optimized out>)
at ../cogl/cogl/driver/gl/cogl-buffer-gl.c:423
__func__ = "_cogl_buffer_gl_unbind"
ctx = 0x556e657adeb0
__func__ = "_cogl_buffer_gl_unbind"
#1 _cogl_buffer_gl_unbind (buffer=0x556e667fe8e0) at ../cogl/cogl/driver/gl/cogl-buffer-gl.c:416
ctx = 0x556e657adeb0
__func__ = "_cogl_buffer_gl_unbind"
#2 0x00007fe7a737bced in _cogl_buffer_gl_map_range
(buffer=0x556e667fe8e0, offset=<optimized out>, size=1792, access=<optimized out>, hints=<optimized out>, error=0x7ffecc2a11c0) at ../cogl/cogl/driver/gl/cogl-buffer-gl.c:329
data = 0x7fe7781d1000 <error: Cannot access memory at address 0x7fe7781d1000>
target = <optimized out>
gl_target = 34962
ctx = 0x556e657adeb0
__func__ = "_cogl_buffer_gl_map_range"
#3 0x00007fe7a738eb47 in cogl_buffer_map_range
(buffer=buffer@entry=0x556e667fe8e0, offset=offset@entry=0, size=size@entry=1792, access=access@entry=COGL_BUFFER_ACCESS_WRITE, hints=hints@entry=COGL_BUFFER_MAP_HINT_DISCARD, error=error@entry=0x7ffecc2a11c0)
at ../cogl/cogl/cogl-buffer.c:260
__func__ = "cogl_buffer_map_range"
#4 0x00007fe7a738ed67 in _cogl_buffer_map_range_for_fill_or_fallback
(buffer=buffer@entry=0x556e667fe8e0, offset=offset@entry=0, size=size@entry=1792)
at ../cogl/cogl/cogl-buffer.c:301
ctx = 0x556e657adeb0
ret = <optimized out>
ignore_error = 0x0
__func__ = "_cogl_buffer_map_range_for_fill_or_fallback"
#5 0x00007fe7a73b3235 in upload_vertices
(vertices=0x7fe78400c780, needed_vbo_len=<optimized out>, n_entries=<optimized out>, entries=<optimized out>, journal=0x7fe784009400) at ../cogl/cogl/cogl-journal.c:1105
buffer = 0x556e667fe8e0
vin = <optimized out>
vout = <optimized out>
entry_num = <optimized out>
i = <optimized out>
last_modelview_entry = 0x0
attribute_buffer = 0x556e667fe8e0
modelview =
{xx = 0, yx = 0, zx = 2.69049305e-42, wx = 1.51340234e-42, xy = 0, yy = 0, zy = 1920, wy = 1080, xz = 432, yz = 106, zz = 1683, wz = 106, xw = 1683, yw = 1060, zw = 432, ww = 1060, inv = {-8.32442805e-17, 4.58827156e-41, 0, 0, -2.12120714e-39, 4.58827156e-41, -1.15657004e-14, 4.58827156e-41, 8.4620115e+22, 3.06463974e-41, 8.4620115e+22, 3.06463974e-41, 8.46059917e+22, 3.06463974e-41, -44585600, 4.59149455e-41}, type = 93932638657056, flags = 0, _padding3 = 140632263170320}
__func__ = "upload_vertices"
framebuffer = <optimized out>
ctx = <optimized out>
state =
{ctx = 0x556e657adeb0, journal = 0x7fe784009400, attribute_buffer = 0x1, attributes = 0x7fe78400a4d0, current_attribute = 1102683007, stride = 1449602087175309056, array_offset = 4648148262475353066, current_vertex = 1703065632, indices = 0x556e658f5a20, indices_type_size = 93932638655488, pipeline = 0x556e658f56d8}
i = <optimized out>
--Type <RET> for more, q to quit, c to continue without paging--c
#6 _cogl_journal_flush (journal=0x7fe784009400) at ../cogl/cogl/cogl-journal.c:1368
framebuffer = <optimized out>
ctx = <optimized out>
state = {ctx = 0x556e657adeb0, journal = 0x7fe784009400, attribute_buffer = 0x1, attributes = 0x7fe78400a4d0, current_attribute = 1102683007, stride = 1449602087175309056, array_offset = 4648148262475353066, current_vertex = 1703065632, indices = 0x556e658f5a20, indices_type_size = 93932638655488, pipeline = 0x556e658f56d8}
i = <optimized out>
#7 _cogl_journal_flush (journal=0x7fe784009400) at ../cogl/cogl/cogl-journal.c:1295
#8 0x00007fe7a73b4690 in _cogl_framebuffer_flush_journal (framebuffer=<optimized out>) at ../cogl/cogl/cogl-framebuffer.c:599
#9 0x00007fe7a73864a8 in cogl_flush () at ../cogl/cogl/cogl.c:321
l = 0x556e658268e0 = {0x556e6582b820}
ctx = <optimized out>
#10 0x00007fe7a73b77aa in cogl_onscreen_swap_buffers_with_damage (onscreen=onscreen@entry=0x556e6582b820, rectangles=0x7ffecc2a14b0, n_rectangles=n_rectangles@entry=1) at ../cogl/cogl/cogl-onscreen.c:314
framebuffer = 0x556e6582b820
winsys = <optimized out>
info = <optimized out>
__func__ = "cogl_onscreen_swap_buffers_with_damage"
#11 0x00007fe7a7b9b1bc in swap_framebuffer (swap_with_damage=1, swap_region=<synthetic pointer>, view=<optimized out>, stage_window=<optimized out>) at ../clutter/clutter/cogl/clutter-stage-cogl.c:503
onscreen = 0x556e6582b820
framebuffer = 0x556e6582b820
damage = {432, 106, 1251, 954}
ndamage = 1
CoglTraceClutterStageCoglRedrawViewSwapFramebuffer = {begin_time = 0, name = 0x0}
ScopedCoglTraceClutterStageCoglRedrawViewSwapFramebuffer = 0x0
stage_cogl = <optimized out>
view_cogl = <optimized out>
view_priv = <optimized out>
fb = <optimized out>
view_rect = {x = 0, y = 0, width = 1920, height = 1080}
have_clip = <optimized out>
may_use_clipped_redraw = <optimized out>
use_clipped_redraw = <optimized out>
can_blit_sub_buffer = <optimized out>
has_buffer_age = <optimized out>
do_swap_buffer = <optimized out>
swap_with_damage = <optimized out>
wrapper = <optimized out>
redraw_clip = {x = 432, y = 106, width = 1251, height = 954}
swap_region = {x = 432, y = <optimized out>, width = <optimized out>, height = <optimized out>}
fb_clip_region = {x = 432, y = 106, width = 1251, height = 954}
clip_region_empty = <optimized out>
fb_scale = <optimized out>
subpixel_compensation = <optimized out>
fb_width = <optimized out>
fb_height = <optimized out>
__func__ = "clutter_stage_cogl_redraw_view"
#12 clutter_stage_cogl_redraw_view (stage_window=<optimized out>, view=<optimized out>) at ../clutter/clutter/cogl/clutter-stage-cogl.c:954
CoglTraceClutterStageCoglRedrawViewSwapFramebuffer = {begin_time = 0, name = 0x0}
ScopedCoglTraceClutterStageCoglRedrawViewSwapFramebuffer = 0x0
stage_cogl = <optimized out>
view_cogl = <optimized out>
view_priv = <optimized out>
fb = <optimized out>
view_rect = {x = 0, y = 0, width = 1920, height = 1080}
have_clip = <optimized out>
may_use_clipped_redraw = <optimized out>
use_clipped_redraw = <optimized out>
can_blit_sub_buffer = <optimized out>
has_buffer_age = <optimized out>
do_swap_buffer = <optimized out>
swap_with_damage = <optimized out>
wrapper = <optimized out>
redraw_clip = {x = 432, y = 106, width = 1251, height = 954}
swap_region = {x = 432, y = <optimized out>, width = <optimized out>, height = <optimized out>}
fb_clip_region = {x = 432, y = 106, width = 1251, height = 954}
clip_region_empty = <optimized out>
fb_scale = <optimized out>
subpixel_compensation = <optimized out>
fb_width = <optimized out>
fb_height = <optimized out>
__func__ = "clutter_stage_cogl_redraw_view"
#13 0x00007fe7a7b9b8e3 in clutter_stage_cogl_redraw (stage_window=0x556e6583ee30) at ../clutter/clutter/cogl/clutter-stage-cogl.c:978
view = <optimized out>
stage_cogl = 0x556e6583ee30 [MetaStageNative]
swap_event = 0
l = 0x556e65826920 = {0x556e6582d160}
CoglTraceClutterStageCoglRedraw = {begin_time = 0, name = 0x0}
#14 0x00007fe7a7b635d3 in _clutter_stage_do_update () at ../clutter/clutter/clutter-stage.c:1345
#15 0x00007fe7a7b4c509 in master_clock_update_stages (master_clock=<optimized out>, stages=0x556e657c8400 = {...}) at ../clutter/clutter/clutter-master-clock-default.c:366
stages_updated = <optimized out>
l = 0x556e657c8400 = {0x556e658f5a20}
clock_source = 0x7fe7a85d6b00 <g_object_unref>
stages = 0x556e657c8400 = {0x556e658f5a20}
#16 clutter_clock_dispatch (source=source@entry=0x556e6591ffa0, callback=<optimized out>, user_data=<optimized out>) at ../clutter/clutter/clutter-master-clock-default.c:489
clock_source = 0x556e6591ffa0
stages = 0x556e657c8400 = {0x556e658f5a20}
#17 0x00007fe7a84e7520 in g_main_dispatch (context=0x556e64c66400) at ../glib/gmain.c:3216
dispatch = <optimized out>
prev_source = 0x0
was_in_call = <optimized out>
user_data = 0x0
callback = 0x0
cb_funcs = 0x0
cb_data = 0x0
need_destroy = <optimized out>
source = 0x556e6591ffa0
current = 0x556e64c362f0
i = 0
__FUNCTION__ = "g_main_dispatch"
#18 g_main_context_dispatch (context=context@entry=0x556e64c66400) at ../glib/gmain.c:3881
#19 0x00007fe7a84e78b0 in g_main_context_iterate (context=0x556e64c66400, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:3954
max_priority = 150
timeout = 0
some_ready = 1
nfds = <optimized out>
allocated_nfds = <optimized out>
fds = 0x556e67c9b070
#20 0x00007fe7a84e7ba3 in g_main_loop_run (loop=0x556e65917aa0) at ../glib/gmain.c:4148
__FUNCTION__ = "g_main_loop_run"
#21 0x00007fe7a794ad90 in meta_run () at ../src/core/main.c:676
#22 0x0000556e640dfcad in main (argc=<optimized out>, argv=<optimized out>) at ../src/main.c:552
ctx = <optimized out>
error = 0x0
ecode = <optimized out>