dual-GPU desktop setup: gnome-shell (3.28) segfault 6

Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f745437a020 in gbm_bo_get_plane_count () from /usr/lib64/libgbm.so.1
[Current thread is 1 (Thread 0x7f7462bdbac0 (LWP 9295))]
(gdb) bt
#0  0x00007f745437a020 in gbm_bo_get_plane_count () at /usr/lib64/libgbm.so.1
#1  0x00007f7460270737 in gbm_get_next_fb_id (gpu_kms=gpu_kms@entry=0xd18030 [MetaGpuKms], gbm_surface=0xef2a60, out_next_bo=out_next_bo@entry=0xed2368, out_next_fb_id=out_next_fb_id@entry=0xed235c)
    at backends/native/meta-renderer-native.c:1601
#2  0x00007f74602714a1 in meta_onscreen_native_swap_buffers_with_damage (onscreen=0xef1f30, rectangles=0x7ffe1f7c9e30, n_rectangles=0) at backends/native/meta-renderer-native.c:1877
#3  0x00007f745ec9e2e6 in cogl_onscreen_swap_buffers_with_damage (onscreen=onscreen@entry=0xef1f30, rectangles=rectangles@entry=0x7ffe1f7c9e30, n_rectangles=n_rectangles@entry=0) at cogl-onscreen.c:319
#4  0x00007f746096e4f5 in swap_framebuffer (stage_window=0x1, swap_with_damage=<optimized out>, swap_region=<synthetic pointer>, view=0xef0390 [MetaRendererView]) at cogl/clutter-stage-cogl.c:400
#5  0x00007f746096e4f5 in clutter_stage_cogl_redraw_view (stage_window=stage_window@entry=0xed7ce0, view=0xef0390 [MetaRendererView]) at cogl/clutter-stage-cogl.c:845
#6  0x00007f746096f46b in clutter_stage_cogl_redraw (stage_window=0xed7ce0) at cogl/clutter-stage-cogl.c:868
#7  0x00007f74609db457 in clutter_stage_do_redraw (stage=0xed7540 [MetaStage]) at clutter-stage.c:1121
#8  0x00007f74609db457 in _clutter_stage_do_update (stage=0xed7540 [MetaStage]) at clutter-stage.c:1236
#9  0x00007f74609c6fa9 in master_clock_update_stages (master_clock=0xeb9c40 [ClutterMasterClockDefault], stages=0x19e94c0 = {...}) at clutter-master-clock-default.c:443
#10 0x00007f74609c6fa9 in clutter_clock_dispatch (source=source@entry=0xf0e100, callback=<optimized out>, user_data=<optimized out>) at clutter-master-clock-default.c:567
#11 0x00007f7461d05277 in g_main_dispatch (context=0xce4110) at gmain.c:3177
#12 0x00007f7461d05277 in g_main_context_dispatch (context=context@entry=0xce4110) at gmain.c:3830
#13 0x00007f7461d054b0 in g_main_context_iterate (context=0xce4110, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3903
#14 0x00007f7461d057c2 in g_main_loop_run (loop=0xf1b430) at gmain.c:4099
#15 0x00007f74602189ac in meta_run () at core/main.c:660
#16 0x00000000004022fc in main (argc=<optimized out>, argv=<optimized out>) at ../src/main.c:525
(gdb) up
#1  0x00007f7460270737 in gbm_get_next_fb_id (gpu_kms=gpu_kms@entry=0xd18030 [MetaGpuKms], gbm_surface=0xef2a60, out_next_bo=out_next_bo@entry=0xed2368, out_next_fb_id=out_next_fb_id@entry=0xed235c)
    at backends/native/meta-renderer-native.c:1601
1601	  for (i = 0; i < gbm_bo_get_plane_count (next_bo); i++)
(gdb) print next_bo
$1 = (struct gbm_bo *) 0x0
(gdb) print *gpu_kms
$2 = {parent = {parent_instance = {g_type_instance = {g_class = 0xcb9fe0}, ref_count = 333, qdata = 0x7f744000d0b0}}, fd = 11, file_path = 0xd31b90 "/dev/dri/card0", source = 0xd295a0, connectors = 0xeb3e10,
  n_connectors = 2, max_buffer_width = 16384, max_buffer_height = 16384, page_flips_not_supported = 0}
(gdb) up
#2  0x00007f74602714a1 in meta_onscreen_native_swap_buffers_with_damage (onscreen=0xef1f30, rectangles=0x7ffe1f7c9e30, n_rectangles=0) at backends/native/meta-renderer-native.c:1877
1877	      if (!gbm_get_next_fb_id (render_gpu,
(gdb) print *render_gpu
$3 = {parent = {parent_instance = {g_type_instance = {g_class = 0xcb9fe0}, ref_count = 333, qdata = 0x7f744000d0b0}}, fd = 11, file_path = 0xd31b90 "/dev/dri/card0", source = 0xd295a0, connectors = 0xeb3e10,
  n_connectors = 2, max_buffer_width = 16384, max_buffer_height = 16384, page_flips_not_supported = 0}
(gdb) print *onscreen_native
$4 = {renderer_native = 0x7f7438003710 [MetaRendererNative], render_gpu = 0xd18030 [MetaGpuKms], logical_monitor = 0xee7ed0 [MetaLogicalMonitor], secondary_gpu_states = 0xd00b60 = {[0xd180a0] = 0xef2660},
  gbm = {surface = 0xef2a60, current_fb_id = 88, next_fb_id = 0, current_bo = 0xef29e0, next_bo = 0x0}, egl = {stream = 0x0, dumb_fb = {fb_id = 0, handle = 0, map = 0x0, map_size = 0}},
  pending_queue_swap_notify = 0, pending_swap_notify = 0, pending_set_crtc = 0, pending_queue_swap_notify_frame_count = 332, pending_swap_notify_frame_count = 332, view = 0xef0390 [MetaRendererView],
  total_pending_flips = 0}