Notifications sometimes result in segfault

[djaeris]

What Happened?

When printing, the segfault in the logs below happens. This happens sporadically — it happened to me twice while printing a PDF and also once in LibreOffice. I have no clue as to why it sometimes happens and sometimes it works normally. The document does print, though. But the session is over…

Steps to Reproduce

1. Open PDF in Evince
2. Print it
3. You are back in the greeter

Expected Behavior

Print. Don't crash.

OS Version

8.x (Early Access)

Session Type

Secure Session (Wayland)

Software Version

Latest release (I have run all updates)

Log Output

okt 27 04:15:22 aerisbase gala[1841]: meta_window_set_stack_position_no_sync: assertion 'window->stack_position >= 0' failed
okt 27 04:15:22 aerisbase kernel: gala[1841]: segfault at 18 ip 000071ff53cee482 sp 00007ffc2e202090 error 4 in libmutter-14.so.0.0.0[71ff53c50000+165000] likely on CPU 3 (core 3, socket 0)
okt 27 04:15:22 aerisbase kernel: Code: f6 ff 66 0f 1f 44 00 00 e8 fb f0 ff ff 0f b6 83 9d 02 00 00 eb 86 66 90 f3 0f 1e fa 55 48 89 e5 41 56 41 55 41 54 41 89 f4 53 <48> 8b 47 18 48 89 fb 4c 8b 6f 30 4c 8b b0 a0 01 00 00 48 8b 07 ff
okt 27 04:15:22 aerisbase systemd[1]: Created slice system-systemd\x2dcoredump.slice - Slice /system/systemd-coredump.
okt 27 04:15:22 aerisbase systemd[1]: Started systemd-coredump@0-75504-0.service - Process Core Dump (PID 75504/UID 0).
okt 27 04:15:22 aerisbase systemd-coredump[75506]: Removed old coredump core.gala.1000.fb8656caabb840f3a48e5bf7576d552d.1695.1729591661000000.zst.
okt 27 04:15:22 aerisbase systemd-coredump[75506]: Removed old coredump core.eurotrucks2.1000.fb8656caabb840f3a48e5bf7576d552d.28075.1729602854000000.zst.
okt 27 04:15:25 aerisbase systemd-coredump[75506]: Process 1841 (gala) of user 1000 dumped core.
                                                   
                                                   Module libgcc_s.so.1 from deb gcc-14-14.2.0-4ubuntu2~24.04.amd64
                                                   Module libstdc++.so.6 from deb gcc-14-14.2.0-4ubuntu2~24.04.amd64
                                                   Module libzstd.so.1 from deb libzstd-1.5.5+dfsg2-2build1.1.amd64
                                                   Module libudev.so.1 from deb systemd-255.4-1ubuntu8.4.amd64
                                                   Module libsystemd.so.0 from deb systemd-255.4-1ubuntu8.4.amd64
                                                   Stack trace of thread 1841:
                                                   #0  0x000071ff53cee482 n/a (libmutter-14.so.0 + 0xee482)
                                                   #1  0x000071ff53d6b02b n/a (libmutter-14.so.0 + 0x16b02b)
                                                   #2  0x000071ff53cee49d n/a (libmutter-14.so.0 + 0xee49d)
                                                   #3  0x000071ff53cf14a2 n/a (libmutter-14.so.0 + 0xf14a2)
                                                   #4  0x000060e0a9f60acb n/a (gala + 0x38acb)
                                                   #5  0x000060e0a9f63ee4 gala_notification_stack_show_notification (gala + 0x3bee4)
                                                   #6  0x000071ff54d1e2fa g_closure_invoke (libgobject-2.0.so.0 + 0x152fa)
                                                   #7  0x000071ff54d4d90c n/a (libgobject-2.0.so.0 + 0x4490c)
                                                   #8  0x000071ff54d3e591 n/a (libgobject-2.0.so.0 + 0x35591)
                                                   #9  0x000071ff54d3e7c1 g_signal_emit_valist (libgobject-2.0.so.0 + 0x357c1)
                                                   #10 0x000071ff54d3e883 g_signal_emit (libgobject-2.0.so.0 + 0x35883)
                                                   #11 0x000071ff54d1e2fa g_closure_invoke (libgobject-2.0.so.0 + 0x152fa)
                                                   #12 0x000071ff54d4d90c n/a (libgobject-2.0.so.0 + 0x4490c)
                                                   #13 0x000071ff54d3e591 n/a (libgobject-2.0.so.0 + 0x35591)
                                                   #14 0x000071ff54d3e7c1 g_signal_emit_valist (libgobject-2.0.so.0 + 0x357c1)
                                                   #15 0x000071ff54d3e883 g_signal_emit (libgobject-2.0.so.0 + 0x35883)
                                                   #16 0x000071ff53cdeb0b n/a (libmutter-14.so.0 + 0xdeb0b)
                                                   #17 0x000071ff54bb58bc g_initable_new_valist (libgio-2.0.so.0 + 0x7e8bc)
                                                   #18 0x000071ff54bb59ab g_initable_new (libgio-2.0.so.0 + 0x7e9ab)
                                                   #19 0x000071ff53d6b874 n/a (libmutter-14.so.0 + 0x16b874)
                                                   #20 0x000071ff53d6c0d2 n/a (libmutter-14.so.0 + 0x16c0d2)
                                                   #21 0x000071ff53667b16 n/a (libffi.so.8 + 0x7b16)
                                                   #22 0x000071ff536643ef n/a (libffi.so.8 + 0x43ef)
                                                   #23 0x000071ff536670be ffi_call (libffi.so.8 + 0x70be)
                                                   #24 0x000071ff54a02393 n/a (libwayland-server.so.0 + 0x9393)
                                                   #25 0x000071ff54a06bb4 n/a (libwayland-server.so.0 + 0xdbb4)
                                                   #26 0x000071ff54a05402 wl_event_loop_dispatch (libwayland-server.so.0 + 0xc402)
                                                   #27 0x000071ff53d4434b n/a (libmutter-14.so.0 + 0x14434b)
                                                   #28 0x000071ff54dc95b5 n/a (libglib-2.0.so.0 + 0x5d5b5)
                                                   #29 0x000071ff54e28717 n/a (libglib-2.0.so.0 + 0xbc717)
                                                   #30 0x000071ff54dc9f77 g_main_loop_run (libglib-2.0.so.0 + 0x5df77)
                                                   #31 0x000071ff53cd50fa meta_context_run_main_loop (libmutter-14.so.0 + 0xd50fa)
                                                   #32 0x000060e0a9f675b5 n/a (gala + 0x3f5b5)
                                                   #33 0x000071ff5342a1ca n/a (libc.so.6 + 0x2a1ca)
                                                   #34 0x000071ff5342a28b __libc_start_main (libc.so.6 + 0x2a28b)
                                                   #35 0x000060e0a9f528a5 _start (gala + 0x2a8a5)
                                                   
                                                   Stack trace of thread 1845:
                                                   #0  0x000071ff5352725d syscall (libc.so.6 + 0x12725d)
                                                   #1  0x000071ff54e2240d g_cond_wait (libglib-2.0.so.0 + 0xb640d)
                                                   #2  0x000071ff54d9352b n/a (libglib-2.0.so.0 + 0x2752b)
                                                   #3  0x000071ff54dfb043 n/a (libglib-2.0.so.0 + 0x8f043)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1848:
                                                   #0  0x000071ff5351b4cd __poll (libc.so.6 + 0x11b4cd)
                                                   #1  0x000071ff54e2866e n/a (libglib-2.0.so.0 + 0xbc66e)
                                                   #2  0x000071ff54dc9f77 g_main_loop_run (libglib-2.0.so.0 + 0x5df77)
                                                   #3  0x000071ff54c51422 n/a (libgio-2.0.so.0 + 0x11a422)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1846:
                                                   #0  0x000071ff5351b4cd __poll (libc.so.6 + 0x11b4cd)
                                                   #1  0x000071ff54e2866e n/a (libglib-2.0.so.0 + 0xbc66e)
                                                   #2  0x000071ff54dc8a53 g_main_context_iteration (libglib-2.0.so.0 + 0x5ca53)
                                                   #3  0x000071ff54dc8aa9 n/a (libglib-2.0.so.0 + 0x5caa9)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1852:
                                                   #0  0x000071ff5351b4cd __poll (libc.so.6 + 0x11b4cd)
                                                   #1  0x000071ff54e2866e n/a (libglib-2.0.so.0 + 0xbc66e)
                                                   #2  0x000071ff54dc9f77 g_main_loop_run (libglib-2.0.so.0 + 0x5df77)
                                                   #3  0x000071ff53da7426 n/a (libmutter-14.so.0 + 0x1a7426)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1930:
                                                   #0  0x000071ff5352725d syscall (libc.so.6 + 0x12725d)
                                                   #1  0x000071ff54e2240d g_cond_wait (libglib-2.0.so.0 + 0xb640d)
                                                   #2  0x000071ff54d9352b n/a (libglib-2.0.so.0 + 0x2752b)
                                                   #3  0x000071ff54d9358c g_async_queue_pop (libglib-2.0.so.0 + 0x2758c)
                                                   #4  0x000071ff531810fb n/a (libpangoft2-1.0.so.0 + 0xc0fb)
                                                   #5  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #6  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #7  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1849:
                                                   #0  0x000071ff5351b4cd __poll (libc.so.6 + 0x11b4cd)
                                                   #1  0x000071ff54e2866e n/a (libglib-2.0.so.0 + 0xbc66e)
                                                   #2  0x000071ff54dc8a53 g_main_context_iteration (libglib-2.0.so.0 + 0x5ca53)
                                                   #3  0x000071ff5210d595 n/a (libdconfsettings.so + 0x7595)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   
                                                   Stack trace of thread 1882:
                                                   #0  0x000071ff5351b4cd __poll (libc.so.6 + 0x11b4cd)
                                                   #1  0x000071ff54e2866e n/a (libglib-2.0.so.0 + 0xbc66e)
                                                   #2  0x000071ff54dc9f77 g_main_loop_run (libglib-2.0.so.0 + 0x5df77)
                                                   #3  0x000071ff53da7107 n/a (libmutter-14.so.0 + 0x1a7107)
                                                   #4  0x000071ff54df7c82 n/a (libglib-2.0.so.0 + 0x8bc82)
                                                   #5  0x000071ff5349ca94 n/a (libc.so.6 + 0x9ca94)
                                                   #6  0x000071ff53529c3c n/a (libc.so.6 + 0x129c3c)
                                                   ELF object binary architecture: AMD x86-64

Hardware Info

KONICA Printer, driverless, 2.0.0 (color, 2-sided printing)

[djaeris]

It seems, that this error is not really triggered by printing, but by displaying a notification. I can't reproduce it, but it does sporadically happen in other situations, immediately after a notification gets displayed.