mutter from git master (tip @ commit 17afb88a) aborts on logout
Affected version
- Fedora 33
- mutter from git master @ commit 17afb88a
- Wayland
Bug summary
Loging out from gnome-shell/mutter leads to acrash (see bellow for backtrace).
Steps to reproduce
- Logout from gnome-shell
What happened
mutter crashed
What did you expect to happen
mutter exited cleanly
Relevant logs, screenshots, screencasts etc.
Backtrace
(gdb) bt
#0 __GI_raise (sig=) at ../sysdeps/unix/sysv/linux/raise.c:49
#1 0x0000000000402c2c in dump_gjs_stack_on_signal_handler (signo=6) at ../../../../src/gnome/gnome-shell/src/main.c:349
#2
#3 __GI_raise (sig=) at ../sysdeps/unix/sysv/linux/raise.c:49
#4 0x00007f5a967b48a4 in __GI_abort () at abort.c:79
#5 0x00007f5a9680df27 in __libc_message (action=, fmt=) at ../sysdeps/posix/libc_fatal.c:155
#6 0x00007f5a96815c1c in malloc_printerr (str=str@entry=0x7f5a9691e576 "corrupted double-linked list") at malloc.c:5389
#7 0x00007f5a96816afc in unlink_chunk (p=p@entry=0x7f5a4c062a60, av=0x7f5a4c000020) at malloc.c:1472
#8 0x00007f5a9681736b in _int_free (av=0x7f5a4c000020, p=0x7f5a4c062770, have_lock=) at malloc.c:4375
#9 0x00007f5a934508d8 in fallback_interface_destroy (evdev_dispatch=0x7f5a4c062780) at ../../../../src/gnome/libinput/src/evdev-fallback.c:1282
#10 0x00007f5a9344b8b5 in evdev_device_destroy (device=0x7f5a4c05e500) at ../../../../src/gnome/libinput/src/evdev.c:2853
#11 0x00007f5a93440bbb in libinput_device_destroy (device=0x7f5a4c05e500) at ../../../../src/gnome/libinput/src/libinput.c:2078
#12 0x00007f5a93440c1c in libinput_device_unref (device=0x7f5a4c05e500) at ../../../../src/gnome/libinput/src/libinput.c:2087
#13 0x00007f5a96b567c5 in meta_input_device_native_finalize (object=0x1af6ca0)
at ../../../../src/gnome/mutter/src/backends/native/meta-input-device-native.c:73
#14 0x00007f5a978fa242 in g_object_unref (_object=) at ../../../../src/gnome/glib/gobject/gobject.c:3524
#15 g_object_unref (_object=0x1af6ca0) at ../../../../src/gnome/glib/gobject/gobject.c:3416
#16 0x00007f5a96b784d6 in meta_seat_native_finalize (object=0x7f5a740081d0) at ../../../../src/gnome/mutter/src/backends/native/meta-seat-native.c:234
#17 0x00007f5a978fa242 in g_object_unref (_object=) at ../../../../src/gnome/glib/gobject/gobject.c:3524
#18 g_object_unref (_object=0x7f5a740081d0) at ../../../../src/gnome/glib/gobject/gobject.c:3416
#19 0x00007f5a96e1ed98 in ObjectInstance::release_native_object (this=0x2b66d40) at ../../../../src/gnome/gjs/gi/object.cpp:1288
#20 0x00007f5a96e20244 in ObjectInstance::~ObjectInstance (this=0x2b66d40, __in_chrg=) at ../../../../src/gnome/gjs/gi/object.cpp:1665
#21 0x00007f5a96e2896b in GIWrapperInstance::finalize_impl (this=0x2b66d40)
at ../../../../src/gnome/gjs/gi/wrapperutils.h:1075
#22 0x00007f5a96e200e2 in ObjectInstance::finalize_impl (this=0x2b66d40, fop=0x7ffec0b1b0a0, obj=0x954b3d22910)
at ../../../../src/gnome/gjs/gi/object.cpp:1633
#23 0x00007f5a96e28e7a in GIWrapperBase::finalize (fop=0x7ffec0b1b0a0, obj=0x954b3d22910)
at ../../../../src/gnome/gjs/gi/wrapperutils.h:442
#24 0x00007f5a93fba698 in bool FinalizeTypedArenas(JSFreeOp*, js::gc::Arena**, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&) [clone .lto_priv.0] () from /lib64/libmozjs-78.so.0
#25 0x00007f5a93fa3749 in js::gc::GCRuntime::finalizeAllocKind(JSFreeOp*, js::SliceBudget&) () from /lib64/libmozjs-78.so.0
#26 0x00007f5a93fb66b8 in sweepaction::SweepActionForEach >, mozilla::EnumSet >::run(js::gc::SweepAction::Args&) () from /lib64/libmozjs-78.so.0
#27 0x00007f5a93fa360e in sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&) () from /lib64/libmozjs-78.so.0
#28 0x00007f5a93fb60f9 in sweepaction::SweepActionForEach::run(js::gc::SweepAction::Args&) ()
from /lib64/libmozjs-78.so.0
#29 0x00007f5a93fa360e in sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&) () from /lib64/libmozjs-78.so.0
#30 0x00007f5a93fbc6da in sweepaction::SweepActionForEach::run(js::gc::SweepAction::Args&) ()
from /lib64/libmozjs-78.so.0
#31 0x00007f5a93fadff4 in js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe const&, JS::GCReason, js::gc::AutoGCSession&) () from /lib64/libmozjs-78.so.0
#32 0x00007f5a93fb31fc in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget, mozilla::Maybe const&, JS::GCReason) ()
from /lib64/libmozjs-78.so.0
--Type for more, q to quit, c to continue without paging--
#33 0x00007f5a93fb4c32 in js::gc::GCRuntime::collect(bool, js::SliceBudget, mozilla::Maybe const&, JS::GCReason) ()
from /lib64/libmozjs-78.so.0
#34 0x00007f5a93d5841c in JSRuntime::destroyRuntime() () from /lib64/libmozjs-78.so.0
#35 0x00007f5a93bd2b46 in JS_DestroyContext(JSContext*) () from /lib64/libmozjs-78.so.0
#36 0x00007f5a96e4ea00 in GjsContextPrivate::dispose (this=0x1cc40b0) at ../../../../src/gnome/gjs/gjs/context.cpp:394
#37 0x00007f5a96e4e788 in gjs_context_dispose (object=0x1cc41a0) at ../../../../src/gnome/gjs/gjs/context.cpp:342
#38 0x00007f5a978fa1c3 in g_object_unref (_object=) at ../../../../src/gnome/glib/gobject/gobject.c:3486
#39 g_object_unref (_object=0x1cc41a0) at ../../../../src/gnome/glib/gobject/gobject.c:3416
#40 0x00007f5a97b3e8e3 in _shell_global_destroy_gjs_context (self=0x1cc3890) at ../../../../src/gnome/gnome-shell/src/shell-global.c:681
#41 0x0000000000402ffc in main (argc=1, argv=0x7ffec0b1b948) at ../../../../src/gnome/gnome-shell/src/main.c:511