Public bug reported:
Began with the 24.04 → 26.04 upgrade on 17 October
1) Release: Ubuntu 26.04.1 LTS (26.04)
2) Package versions:
gnome-shell 50.1-0ubuntu1.4
gjs 1.88.0-1
libmozjs-140-0 140.8.0-4 (source: mozjs140)
mutter-common 50.1-0ubuntu2.5
kernel 7.0.0-42-generic
What happens:
gnome-shell (Wayland session) segfaults with SIGSEGV during JavaScript
garbage collection (JS_GC in libmozjs-140), which ends the session and
returns to the GDM login screen. Started after upgrading 24.04 -> 26.04
on 2026-10-17; 7 shell crashes since then, 2 within 25 minutes on 2026-10-30.
The desktop-icons helper (gjs ding.js, a separate process that loads no
user extensions) segfaults at the same libmozjs-140 instruction offset,
so the fault appears to be in gjs/mozjs140 rather than in gnome-shell
code or a third-party extension.
Backtrace, crash timeline and the matching gjs segfaults:
7.0.0-42-generic
gjs 1.88.0-1
gnome-shell 50.1-0ubuntu1.4
libmozjs-140-0 140.8.0-4
mutter-common 50.1-0ubuntu2.5
Crash: Fri Oct 30 11:46:36 2026
== Backtrace (crashing thread) ==
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=11,
no_tid=0) at ./nptl/pthread_kill.c:44
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=11,
no_tid=0) at ./nptl/pthread_kill.c:44
#1 __pthread_kill_internal (threadid=<optimized out>, signo=11) at
./nptl/pthread_kill.c:89
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at
./nptl/pthread_kill.c:100
#3 0x0000753c9b845b7e in __GI_raise (sig=11) at ../sysdeps/posix/raise.c:26
#4 0x00005d73a219aca7 in ?? ()
#5 <signal handler called>
#6 0x0000753c990b7370 in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#7 0x0000753c990a4a3f in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#8 0x0000753c990a5e54 in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#9 0x0000753c990a810f in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#10 0x0000753c98e917ee in JS_GC(JSContext*, JS::GCReason) () from
/usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#11 0x0000753c9c13fa1e in ?? () from /usr/lib/x86_64-linux-gnu/libgjs.so.0
#12 0x0000753c9c2c9a71 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#13 0x0000753c9c2c7c1b in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#14 0x0000753c9c2c9257 in ?? () from /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#15 0x0000753c9c2c95f7 in g_main_loop_run () from
/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#16 0x0000753c9bd019ca in meta_context_run_main_loop () from
/usr/lib/x86_64-linux-gnu/libmutter-18.so.0
#17 0x0000753c9afb9056 in ?? () from /usr/lib/x86_64-linux-gnu/libffi.so.8
#18 0x0000753c9afb4d16 in ?? () from /usr/lib/x86_64-linux-gnu/libffi.so.8
#19 0x0000753c9afb77ae in ffi_call () from /usr/lib/x86_64-linux-gnu/libffi.so.8
#20 0x0000753c9c0ec477 in ?? () from /usr/lib/x86_64-linux-gnu/libgjs.so.0
#21 0x0000753c9c0ecc09 in ?? () from /usr/lib/x86_64-linux-gnu/libgjs.so.0
#22 0x0000753c98b8fc84 in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#23 0x0000753c98b848bc in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
#24 0x0000753c98b8f5d3 in ?? () from /usr/lib/x86_64-linux-gnu/libmozjs-140.so.0
== Same crash in a separate gjs process (ding desktop icons, no user
extensions) ==
== Shell crash timestamps since upgrade to 26.04 on 2026-10-17 ==
paź 17 14:41:29
paź 20 10:09:31
paź 22 09:37:11
paź 30 11:46:36
paź 30 12:10:52
** Affects: gnome-shell (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172586
Title:
gnome-shell 50.1 crashes with SIGSEGV in JS_GC (libmozjs-140
140.8.0-4), logging the user out
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2172586/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
