gnome-shell crashed with SIGSEGV in meta_kms_connector_read_state(drm_connector=NULL) from meta_kms_connector_update_state()

[errors.ubuntu.com bug bridge]

The Ubuntu Error Tracker has been receiving reports about a problem regarding gnome-shell. This problem was most recently seen with package version 43.1-0ubuntu1, the problem page at https://errors.ubuntu.com/problem/8158e20e6ac0a16fd196b1b06a27678cf87f2029 contains more details, including versions of packages affected, stacktrace or traceback, and individual crash reports.
If you do not have access to the Ubuntu Error Tracker and are a software developer, you can request it at http://forms.canonical.com/reports/.

[kxra (kxra-redhat-bugs)]

Version-Release number of selected component:
gnome-shell-43.0-2.fc37

Additional info:
reporter: libreport-2.17.4
backtrace_rating: 4
cgroup: 0::/user.slice/user-1000.slice/user@<email address hidden>
cmdline: /usr/bin/gnome-shell
crash_function: meta_kms_connector_read_state
dso_list: /usr/bin/gnome-shell gnome-shell-43.0-2.fc37.x86_64 (Fedora Project) 1664437312
executable: /usr/bin/gnome-shell
journald_cursor: s=077a7e261b994b6c8c3b7bfb61d4808f;i=39d95;b=d18c6b9efc764bab9556a3f27efc7431;m=5d7ae831e;t=5e9e4dae5c13a;x=b0ef9ac64bae4473
kernel: 5.19.11-300.fc37.x86_64
rootdir: /
runlevel: N 5
type: CCpp
uid: 1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 meta_kms_connector_read_state at ../src/backends/native/meta-kms-connector.c:684
 #1 meta_kms_connector_update_state at ../src/backends/native/meta-kms-connector.c:767
 #2 meta_kms_impl_device_update_states at ../src/backends/native/meta-kms-impl-device.c:916
 #3 meta_kms_device_update_states_in_impl at ../src/backends/native/meta-kms-device.c:267
 #4 meta_kms_update_states_in_impl at ../src/backends/native/meta-kms.c:604
 #5 update_states_in_impl at ../src/backends/native/meta-kms.c:620
 #6 meta_kms_run_impl_task_sync at ../src/backends/native/meta-kms.c:435
 #7 meta_kms_update_states_sync at ../src/backends/native/meta-kms.c:641
 #8 handle_hotplug_event at ../src/backends/native/meta-kms.c:651
 #9 on_udev_hotplug at ../src/backends/native/meta-kms.c:668

[kxra (kxra-redhat-bugs)]

Created attachment 1915271
File: backtrace

[kxra (kxra-redhat-bugs)]

Created attachment 1915272
File: core_backtrace

[kxra (kxra-redhat-bugs)]

Created attachment 1915273
File: cpuinfo

[kxra (kxra-redhat-bugs)]

Created attachment 1915274
File: environ

[kxra (kxra-redhat-bugs)]

Created attachment 1915275
File: exploitable

[kxra (kxra-redhat-bugs)]

Created attachment 1915276
File: limits

[kxra (kxra-redhat-bugs)]

Created attachment 1915277
File: maps

[kxra (kxra-redhat-bugs)]

Created attachment 1915278
File: mountinfo

[kxra (kxra-redhat-bugs)]

Created attachment 1915279
File: open_fds

[kxra (kxra-redhat-bugs)]

Created attachment 1915280
File: proc_pid_status

[kxra (kxra-redhat-bugs)]

Created attachment 1915281
File: var_log_messages

[MIKHAIL.NIKITIN1 (mikhail.nikitin1-redhat-bugs)]

Similar problem has been detected:

This caused by laptop going to sleep mode and returning back

reporter: libreport-2.17.4
backtrace_rating: 4
cgroup: 0::/user.slice/user-1000.slice/user@<email address hidden>
cmdline: /usr/bin/gnome-shell
crash_function: meta_kms_connector_read_state
executable: /usr/bin/gnome-shell
journald_cursor: s=9612439e34a841488121206a59fe4a8e;i=46809;b=266a1894da3649bd87afe68ef0bec4fa;m=4fd23d2c3;t=5ee08dfbb8cfc;x=b04df1d04d228321
kernel: 6.0.8-300.fc37.x86_64
package: gnome-shell-43.1-3.fc37
reason: gnome-shell killed by SIGSEGV
rootdir: /
runlevel: N 5
type: CCpp
uid: 1000

[lukeamulligan (lukeamulligan-redhat-bugs)]

Similar problem has been detected:

1. Connected to thunderbolt dock with external displays while laptop lid is closed
2. Detach the closed laptop from thunderbolt dock
3. Gnome-shell crashes

reporter: libreport-2.17.4
backtrace_rating: 4
cgroup: 0::/user.slice/user-1000.slice/user@<email address hidden>
cmdline: /usr/bin/gnome-shell
crash_function: meta_kms_connector_read_state
dso_list: /usr/bin/gnome-shell gnome-shell-43.1-4.fc37.x86_64 (Fedora Project) 1669219189
executable: /usr/bin/gnome-shell
journald_cursor: s=e13a325dfd9e46008477ac11ea4ce8c0;i=9e79;b=cccb9e1b0aea4b4898f26c1268b28290;m=ef5f48b1;t=5ee2652a1af2e;x=bbbc6f4772db6969
kernel: 6.0.9-300.fc37.x86_64
package: gnome-shell-43.1-4.fc37
reason: gnome-shell killed by SIGSEGV
rootdir: /
runlevel: N 5
type: CCpp
uid: 1000

[jadahl (jadahl-redhat-bugs)]

Appears to be a race condition. Haven't tested, but the linked MR should fix it.

[lukeamulligan (lukeamulligan-redhat-bugs)]

Similar problem has been detected:

This crash occurs about 50% of the time when disconnecting from a Thunderbolt dock whether the laptop is open or shut.

reporter: libreport-2.17.4
backtrace_rating: 4
cgroup: 0::/user.slice/user-1000.slice/user@<email address hidden>
cmdline: /usr/bin/gnome-shell
crash_function: meta_kms_connector_read_state
dso_list: /usr/bin/gnome-shell gnome-shell-43.1-4.fc37.x86_64 (Fedora Project) 1669219189
executable: /usr/bin/gnome-shell
journald_cursor: s=c43060de1a364e759b4cdede8befa3c5;i=115f;b=d19d979a2c00422da434f565e0a72fed;m=1369fae58;t=5eea480fa8085;x=a65f9b68eee2bba6
kernel: 6.0.9-300.fc37.x86_64
package: gnome-shell-43.1-4.fc37
reason: gnome-shell killed by SIGSEGV
rootdir: /
runlevel: N 5
type: CCpp
uid: 1000

[Daniel van Vugt (vanvugt)]

Fixed in mutter 43.2 by commit:
07f1da261743ac49305158a501528bccbd20e7c0

[amoloney (amoloney-redhat-bugs)]

This message is a reminder that Fedora Linux 37 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 37 on 2023-12-05.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '37'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version'
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before Fedora Linux 37 is end of life. If you would still like
to see this bug fixed and are able to reproduce it against a later version
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

[amoloney (amoloney-redhat-bugs)]

Fedora Linux 37 entered end-of-life (EOL) status on None.

Fedora Linux 37 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.