Bug 2195981

Summary: [abrt] gnome-shell: g_type_check_instance_is_a(): gnome-shell killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Richard Ruhland <bugzilla.redhat>
Component: gnome-shellAssignee: Florian Müllner <fmuellner>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 38CC: adscvr, bugzilla.redhat, fmuellner, gnome-sig, grier_jones, jadahl, otaylor, philip.wyett
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/048013e3fd8abf2691e11ca48ffcc6feab361b5
Whiteboard: abrt_hash:9e6b4b1e9d1612590a03d3f5b46b6ecb88928f1d;VARIANT_ID=workstation;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: exploitable
none
File: var_log_messages
none
File: backtrace
none
File: open_fds
none
File: environ none

Description Richard Ruhland 2023-05-07 07:34:20 UTC
Version-Release number of selected component:
gnome-shell-44.1-1.fc38

Additional info:
reporter:       libreport-2.17.9
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=651bdbc59a964e5a938d0e97e71cc385;i=116796;b=7be0e47baa404c57aa34684e49f33aeb;m=14fefbc76;t=5fb157070c1da;x=85e89a3c7b8a22f2
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         6.2.14-300.fc38.x86_64
package:        gnome-shell-44.1-1.fc38
runlevel:       N 5
dso_list:       /usr/bin/gnome-shell gnome-shell-44.1-1.fc38.x86_64 (Fedora Project) 1682714412
backtrace_rating: 4
crash_function: g_type_check_instance_is_a

Truncated backtrace:
Thread no. 1 (40 frames)
 #0 g_type_check_instance_is_a at ../gobject/gtype.c:4154
 #1 clutter_actor_remove_effect at ../clutter/clutter/clutter-actor.c:14830
 #3 st_scroll_view_dispose at ../src/st/st-scroll-view.c:246
 #6 GjsAutoPointer<_GObject, void, &g_object_unref, &g_object_ref>::reset(_GObject*) at ../gjs/jsapi-util.h:229
 #7 GjsAutoPointer<_GObject, void, &g_object_unref, &g_object_ref>::~GjsAutoPointer() at ../gjs/jsapi-util.h:172
 #8 GjsSmartPointer<_GObject>::~GjsSmartPointer() at ../gjs/jsapi-util.h:349
 #9 ObjectInstance::release_native_object() at ../gi/object.cpp:1524
 #11 ObjectInstance::~ObjectInstance() at ../gi/object.cpp:1945
 #12 GIWrapperInstance<ObjectBase, ObjectPrototype, ObjectInstance, _GObject>::finalize_impl(JS::GCContext*, JSObject*) at ../gi/wrapperutils.h:1113
 #13 ObjectInstance::finalize_impl(JS::GCContext*, JSObject*) at ../gi/object.cpp:1912
 #14 GIWrapperBase<ObjectBase, ObjectPrototype, ObjectInstance>::finalize(JS::GCContext*, JSObject*) at ../gi/wrapperutils.h:411
 #15 JSClass::doFinalize(JS::GCContext*, JSObject*) const at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/dist/include/js/Class.h:649
 #16 JSObject::finalize(JS::GCContext*) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/JSObject-inl.h:97
 #17 js::gc::Arena::finalize<JSObject>(JS::GCContext*, js::gc::AllocKind, unsigned long) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:128
 #18 FinalizeTypedArenas<JSObject>(JS::GCContext*, js::gc::ArenaList&, js::gc::SortedArenaList&, js::gc::AllocKind, js::SliceBudget&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:194
 #19 js::gc::GCRuntime::foregroundFinalize(JS::GCContext*, JS::Zone*, js::gc::AllocKind, js::SliceBudget&, js::gc::SortedArenaList&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:1693
 #20 js::gc::GCRuntime::finalizeAllocKind(JS::GCContext*, js::SliceBudget&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:1894
 #21 sweepaction::SweepActionForEach<ContainerIter<mozilla::EnumSet<js::gc::AllocKind, unsigned long> >, mozilla::EnumSet<js::gc::AllocKind, unsigned long> >::run(js::gc::SweepAction::Args&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:2120
 #22 sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:2085
 #23 sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*>::run(js::gc::SweepAction::Args&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:2120
 #24 sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:2085
 #25 sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/Sweeping.cpp:2120
 #26 js::gc::GCRuntime::performSweepActions(js::SliceBudget&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/dist/include/mozilla/UniquePtr.h:290
 #27 js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/GC.cpp:3255
 #28 js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/GC.cpp:3736
 #29 js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/GC.cpp:3920
 #30 js::gc::GCRuntime::gc(JS::GCOptions, JS::GCReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/gc/GC.cpp:3998
 #31 JS_GC(JSContext*, JS::GCReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/jsapi.cpp:1305
 #32 gjs_gc(JSContext*, unsigned int, JS::Value*) at ../modules/system.cpp:157
 #33 CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), js::CallReason, JS::CallArgs const&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:420
 #34 js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:507
 #35 InternalCall at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:574
 #36 js::CallFromStack(JSContext*, JS::CallArgs const&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:578
 #37 Interpret(JSContext*, js::RunState&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:3314
 #38 js::RunScript(JSContext*, js::RunState&) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:389
 #39 js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:539
 #40 InternalCall at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:574
 #41 js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/vm/Interpreter.cpp:605
 #42 js::jit::InvokeFunction(JSContext*, JS::Handle<JSObject*>, bool, bool, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/jit/VMFunctions.cpp:527
 #43 js::jit::InvokeFromInterpreterStub(JSContext*, js::jit::InterpreterStubExitFrameLayout*) at /usr/src/debug/mozjs102-102.9.0-1.fc38.x86_64/jit/VMFunctions.cpp:551

Comment 1 Richard Ruhland 2023-05-07 07:34:23 UTC
Created attachment 1962966 [details]
File: proc_pid_status

Comment 2 Richard Ruhland 2023-05-07 07:34:25 UTC
Created attachment 1962967 [details]
File: maps

Comment 3 Richard Ruhland 2023-05-07 07:34:26 UTC
Created attachment 1962968 [details]
File: limits

Comment 4 Richard Ruhland 2023-05-07 07:34:28 UTC
Created attachment 1962969 [details]
File: mountinfo

Comment 5 Richard Ruhland 2023-05-07 07:34:29 UTC
Created attachment 1962970 [details]
File: os_info

Comment 6 Richard Ruhland 2023-05-07 07:34:31 UTC
Created attachment 1962971 [details]
File: cpuinfo

Comment 7 Richard Ruhland 2023-05-07 07:34:33 UTC
Created attachment 1962972 [details]
File: core_backtrace

Comment 8 Richard Ruhland 2023-05-07 07:34:34 UTC
Created attachment 1962973 [details]
File: exploitable

Comment 9 Richard Ruhland 2023-05-07 07:34:36 UTC
Created attachment 1962974 [details]
File: var_log_messages

Comment 10 Richard Ruhland 2023-05-07 07:34:38 UTC
Created attachment 1962975 [details]
File: backtrace

Comment 11 Richard Ruhland 2023-05-07 07:34:40 UTC
Created attachment 1962976 [details]
File: open_fds

Comment 12 Richard Ruhland 2023-05-07 07:34:41 UTC
Created attachment 1962977 [details]
File: environ

Comment 13 Philippe Jumelle 2023-06-13 08:21:36 UTC
gnome-shell  crashed, no particular activity (I was just attending a Teams call and was not touching the keyboard nor the mouse).


reporter:       libreport-2.17.10
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=09c5369377c94eb289c525dcbbfb0b9f;i=4ca1ae;b=5ae28e3ae6694ce3a086a3b86b378c1a;m=f4721b0ca;t=5fdfe2d1c2f48;x=f5667a0f994cbba4
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         6.3.6-200.fc38.x86_64
package:        gnome-shell-44.2-1.fc38
runlevel:       N 5
dso_list:       /usr/bin/gnome-shell gnome-shell-44.2-1.fc38.x86_64 (Fedora Project) 1686486552
backtrace_rating: 4
crash_function: g_type_check_instance_is_a
comment:        gnome-shell  crashed, no particular activity (I was just attending a Teams call and was not touching the keyboard nor the mouse).