Red Hat Bugzilla – Bug 1474022
GNOME shell crashes in st/st-bin.c:186, st_bin_dispose() assertion failed: (priv->child == NULL)
Last modified: 2017-07-29 08:13:57 EDT
Created attachment 1303026 [details] GNOME shell crash backtrace with debugging symbols Description of problem: GNOME shell crashes because of a failed assertion after unlocking the screen. Version-Release number of selected component (if applicable): gnome-shell-3.24.2-1.fc26.x86_64 How reproducible: from time to time, after unlocking the lockscreen Steps to Reproduce: 1. suspend laptop 2. resume 3. unlock the screen Actual results: #0 0x00007f48f0db466b in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51 #1 0x00007f48f0db6470 in __GI_abort () at abort.c:89 #2 0x00007f48f298a70d in g_assertion_message (domain=domain@entry=0x7f48fb26419f "St", file=file@entry=0x7f48fb26443b "st/st-bin.c", line=line@entry=186, func=func@entry=0x7f48fb2645c8 <__func__.68682> "st_bin_dispose", message=message@entry=0x55d9efdacff0 "assertion failed: (priv->child == NULL)") at gtestutils.c:2433 #3 0x00007f48f298a79a in g_assertion_message_expr (domain=domain@entry=0x7f48fb26419f "St", file=file@entry=0x7f48fb26443b "st/st-bin.c", line=line@entry=186, func=func@entry=0x7f48fb2645c8 <__func__.68682> "st_bin_dispose", expr=expr@entry=0x7f48fb264427 "priv->child == NULL") at gtestutils.c:2456 #4 0x00007f48fb229dac in st_bin_dispose (gobject=0x55d9efcf7d10 [StButton]) at st/st-bin.c:186 #5 0x00007f48f2c4286c in g_object_run_dispose (object=0x55d9efcf7d10 [StButton]) at gobject.c:1084 #6 0x00007f48f63f21b6 in clutter_actor_destroy () at /usr/lib64/mutter/libmutter-clutter-0.so #7 0x00007f48efa2dbde in ffi_call_unix64 () at ../src/x86/unix64.S:76 #8 0x00007f48efa2d54f in ffi_call (cif=cif@entry=0x55d9eb4a9cd8, fn=<optimized out>, rvalue=<optimized out>, rvalue@entry=0x7ffc99733388, avalue=avalue@entry=0x7ffc99733270) at ../src/x86/ffi64.c:525 #9 0x00007f48fa11f70c in gjs_invoke_c_function(JSContext*, Function*, JS::HandleObject, JS::HandleValueArray const&, mozilla::Maybe<JS::MutableHandle<JS::Value> >&, GIArgument*) (context=context@entry=0x55d9e9abc800, function=function@entry=0x55d9eb4a9cc0, obj=obj@entry=..., args=..., js_rval=..., r_value=r_value@entry=0x0) at gi/function.cpp:1021 [..] #24 0x00007f48f2c57b0f in <emit signal ??? on instance 0x55d9ec4f1b50 [ShellTrayIcon]> (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at gsignal.c:3447 #21 0x00007f48f2c3c30d in g_closure_invoke (closure=0x55d9ef2b5030, return_value=0x0, n_param_values=1, param_values=0x7ffc99734c50, invocation_hint=0x7ffc99734bd0) at gclosure.c:804 #22 0x00007f48f2c4e98e in signal_emit_unlocked_R (node=node@entry=0x55d9e99ba5b0, detail=detail@entry=0, instance=instance@entry=0x55d9ec4f1b50, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7ffc99734c50) at gsignal.c:3635 #23 0x00007f48f2c571a5 in g_signal_emit_valist (instance=0x55d9ec4f1b50, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7ffc99734e20) at gsignal.c:3391 #25 0x00007f48f63fe43c in clutter_actor_dispose () at /usr/lib64/mutter/libmutter-clutter-0.so #26 0x00007f48fb218703 in shell_gtk_embed_dispose (object=<optimized out>) at shell-gtk-embed.c:329 #27 0x00007f48f2c4286c in g_object_run_dispose (object=0x55d9ec4f1b50 [ShellTrayIcon]) at gobject.c:1084 [..] Complete backtrace is attached. Expected results: no crash Additional info: Similar issue for older Fedora version issue: Bug 1332015 At the time of the crash the 'TopIcons Plus' GNOME shell extension was enabled.
GNOME Shell just crashed again at that location. Things that are different this time: - 'TopIcons Plus' extension disabled and instead 'TopIcons' enabled - gnome shell is now at gnome-shell-3.24.3-1.fc26.x86_64 - backtrace is much shorter and looks incomplete/corrupted The backtace: (gdb) bt #0 0x00007f58381b566b in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51 #1 0x00007f58381b7470 in __GI_abort () at abort.c:89 #2 0x00007f5839d8b70d in g_assertion_message (domain=domain@entry=0x7f584266519f "St", file=file@entry=0x7f584266543b "st/st-bin.c", line=line@entry=186, func=func@entry=0x7f58426655c8 <__func__.68682> "st_bin_dispose", message=message@entry=0x560108e02760 "assertion failed: (priv->child == NULL)") at gtestutils.c:2433 #3 0x00007f5839d8b79a in g_assertion_message_expr (domain=domain@entry=0x7f584266519f "St", file=file@entry=0x7f584266543b "st/st-bin.c", line=line@entry=186, func=func@entry=0x7f58426655c8 <__func__.68682> "st_bin_dispose", expr=expr@entry=0x7f5842665427 "priv->child == NULL") at gtestutils.c:2456 #4 0x00007f584262adac in st_bin_dispose (gobject=0x560105e0b7d0 [StButton]) at st/st-bin.c:186 #5 0x00007f583a04386c in g_object_run_dispose (object=0x560105e0b7d0 [StButton]) at gobject.c:1084 #6 0x00007f583d7f3486 in clutter_actor_destroy (self=0x560105e0b7d0 [StButton]) at clutter-actor.c:8585 #7 0x00007f5836e2ebde in ffi_call_unix64 () at ../src/x86/unix64.S:76 #8 0x00007f5836e2e54f in ffi_call (cif=cif@entry=0x560104a77a58, fn=<optimized out>, rvalue=<optimized out>, rvalue@entry=0x7ffe8ea8ba28, avalue=avalue@entry=0x7ffe8ea8b910) at ../src/x86/ffi64.c:525 #9 0x00007f584152070c in gjs_invoke_c_function(JSContext*, Function*, JS::HandleObject, JS::HandleValueArray const&, mozilla::Maybe<JS::MutableHandle<JS::Value> >&, GIArgument*) ( context=context@entry=0x560103125fb0, function=function@entry=0x560104a77a40, obj=obj@entry=..., args=..., js_rval=..., r_value=r_value@entry=0x0) at gi/function.cpp:1021 #10 0x00007f5841521eb6 in function_call(JSContext*, unsigned int, JS::Value*) (context=0x560103125fb0, js_argc=0, vp=0x7ffe8ea8bdb8) at gi/function.cpp:1340 #11 0x00007f5842b02f85 in () #12 0x00007ffe8ea8be58 in () #13 0x00007ffe8ea8bd90 in () #14 0x0000000000000000 in ()
Related messages in the journal - just before the crash: Jul 29 13:48:47 example.org gnome-shell[2303]: Allocating size to ShellEmbeddedWindow 0x56010980e3e0 without calling gtk_widget_get_preferred_width/height(). How does the code know the size to allocate? Jul 29 13:48:48 example.org gnome-shell[2303]: Attempting to remove actor of type 'ShellTrayIcon' from group of class 'StButton', but the container is not the actor's parent. Jul 29 13:48:48 example.org gnome-shell[2303]: Attempting to add actor of type 'ShellTrayIcon' to a container of type 'ShellGenericContainer', but the actor has already a parent of type 'ShellGenericContainer'. Jul 29 13:48:48 example.org gnome-shell[2303]: Attempting to remove actor of type 'ShellTrayIcon' from group of class 'StButton', but the container is not the actor's parent. Last 2 lines repeated 14 times. Jul 29 13:48:48 example.org gnome-shell[2303]: gsignal.c:2641: instance '0x560103a4ca00' has no handler with id '349112' Last line repeated 15 times. Jul 29 13:48:48 example.org audit[2303]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2303 comm="gnome-shell" exe="/usr/bin/gnome-shell" sig=6 res=1 Jul 29 13:48:48 example.org gnome-shell[2303]: gsignal.c:2641: instance '0x560103a4ca00' has no handler with id '349112' Jul 29 13:48:48 example.org org.gnome.Shell.desktop[2303]: ** Jul 29 13:48:48 example.org org.gnome.Shell.desktop[2303]: St:ERROR:st/st-bin.c:186:st_bin_dispose: assertion failed: (priv->child == NULL) Jul 29 13:48:48 example.org gnome-shell[2303]: gsignal.c:2641: instance '0x560103a4ca00' has no handler with id '349112' Last line repeated 12 times. Jul 29 13:48:48 example.org systemd[1]: Created slice system-systemd\x2dcoredump.slice.