Bug 2498847

Summary: [abrt] gnome-shell: meta_gbm_device_from_gpu(): gnome-shell killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Mikhail <mikhail.v.gavrilov>
Component: gnome-shellAssignee: GNOME SIG Unassigned <gnome-sig>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: adscvr, development.group, fmuellner, gnome-sig, jadahl, mikhail.v.gavrilov, otaylor, rhbz, robatino, spotrh
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/4b91feff0ff50fde95526ba373d4edddd7d9235
Whiteboard: abrt_hash:fa22ff5064405234b1f614820b3650af192d4924;VARIANT_ID=workstation;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-07-22 21:15:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2406952, 2406953    
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: environ
none
File: open_fds
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: dso_list
none
File: var_log_messages
none
File: backtrace none

Description Mikhail 2026-07-09 22:25:17 UTC 
Description of problem:
gnome-shell crashes with SIGSEGV (SEGV_MAPERR) as soon as the pointer is moved after login. Downgrading mutter and gnome-shell to 50.2-2.fc45 makes the crash go away; nothing else is changed. Setting MUTTER_DEBUG_DISABLE_HW_CURSORS=1 also avoids the crash on 51.alpha.		

Version-Release number of selected component:
gnome-shell-51~alpha-1.fc45

Additional info:
reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a47e4;b=de1f4823a156438a99d8aee24c362966;m=359a581;t=6562cc4a73d39;x=d59c9db173c29c04
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=user
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu

Truncated backtrace:
Thread no. 0 (45 frames)
 #0 meta_gbm_device_from_gpu at ../src/backends/native/meta-renderer-native.c:180
 #1 init_hw_cursor_support_for_gpu at ../src/backends/native/meta-cursor-renderer-native.c:1394
 #2 init_hw_cursor_support at ../src/backends/native/meta-cursor-renderer-native.c:1528
 #3 meta_cursor_renderer_native_new at ../src/backends/native/meta-cursor-renderer-native.c:1601
 #4 meta_seat_native_maybe_ensure_cursor_renderer at ../src/backends/native/meta-seat-native.c:823
 #5 meta_backend_native_get_cursor_renderer at ../src/backends/native/meta-backend-native.c:272
 #6 meta_sprite_update_cursor at ../src/backends/meta-sprite.c:102
 #7 clutter_sprite_invalidate_cursor at ../clutter/clutter/clutter-sprite.c:1231
 #8 repick_for_event at ../src/wayland/meta-wayland-pointer.c:675
 #9 meta_wayland_pointer_update at ../src/wayland/meta-wayland-pointer.c:701
 #10 meta_wayland_seat_update at ../src/wayland/meta-wayland-seat.c:471
 #12 meta_wayland_compositor_update at ../src/wayland/meta-wayland.c:544
 #13 meta_display_handle_event at ../src/core/events.c:175
 #14 event_callback at ../src/core/events.c:323
 #15 _clutter_event_process_filters at ../clutter/clutter/clutter-event.c:1263
 #16 clutter_sprite_set_current_actor at ../clutter/clutter/clutter-sprite.c:603
 #17 clutter_focus_set_current_actor at ../clutter/clutter/clutter-focus.c:140
 #18 clutter_stage_pick_and_update_sprite at ../clutter/clutter/clutter-stage.c:2958
 #19 clutter_stage_update_device_for_event at ../clutter/clutter/clutter-stage.c:3516
 #20 clutter_stage_handle_event at ../clutter/clutter/clutter-main.c:169
 #22 dispatch_clutter_event at ../src/backends/meta-backend.c:1112
 #23 clutter_source_dispatch at ../src/backends/meta-backend.c:1156
 #25 g_main_context_dispatch_unlocked at ../glib/gmain.c:4451
 #26 g_main_context_iterate_unlocked at ../glib/gmain.c:4516
 #28 meta_context_run_main_loop at ../src/core/meta-context.c:505
 #29 ffi_call_unix64 at ../src/x86/unix64.S:104
 #30 ffi_call_int at ../src/x86/ffi64.c:676
 #31 ffi_call at ../src/x86/ffi64.c:713
 #32 Gjs::Function::invoke at ../gi/inline-array.h:42
 #33 Gjs::Function::call at ../gi/function.cpp:1199
 #34 CallJSNative at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:494
 #35 js::InternalCallOrConstruct at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:576
 #36 InternalCall at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:657
 #37 js::CallFromStack at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:662
 #38 js::Interpret at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:3286
 #39 MaybeEnterInterpreterTrampoline at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:395
 #40 js::RunScript at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:464
 #41 js::InternalCallOrConstruct at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:622
 #42 InternalCall at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:657
 #43 js::Call at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:689
 #44 JS::Call at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/CallAndConstruct.cpp:119
 #46 GjsContextPrivate::run_main_loop_hook at ../gjs/context.cpp:1402
 #47 GjsContextPrivate::eval_module at ../gjs/context.cpp:1555
 #48 gjs_context_eval_module at ../gjs/context.cpp:1295
 #49 gjs_context_eval_module_file at ../gjs/context.cpp:1637
Comment 1 Mikhail 2026-07-09 22:25:21 UTC 
Created attachment 2148228 [details]
File: proc_pid_status
Comment 2 Mikhail 2026-07-09 22:25:22 UTC 
Created attachment 2148229 [details]
File: maps
Comment 3 Mikhail 2026-07-09 22:25:24 UTC 
Created attachment 2148230 [details]
File: limits
Comment 4 Mikhail 2026-07-09 22:25:25 UTC 
Created attachment 2148231 [details]
File: environ
Comment 5 Mikhail 2026-07-09 22:25:27 UTC 
Created attachment 2148232 [details]
File: open_fds
Comment 6 Mikhail 2026-07-09 22:25:28 UTC 
Created attachment 2148233 [details]
File: mountinfo
Comment 7 Mikhail 2026-07-09 22:25:29 UTC 
Created attachment 2148234 [details]
File: os_info
Comment 8 Mikhail 2026-07-09 22:25:30 UTC 
Created attachment 2148235 [details]
File: cpuinfo
Comment 9 Mikhail 2026-07-09 22:25:32 UTC 
Created attachment 2148236 [details]
File: core_backtrace
Comment 10 Mikhail 2026-07-09 22:25:33 UTC 
Created attachment 2148237 [details]
File: dso_list
Comment 11 Mikhail 2026-07-09 22:25:35 UTC 
Created attachment 2148238 [details]
File: var_log_messages
Comment 12 Mikhail 2026-07-09 22:25:36 UTC 
Created attachment 2148239 [details]
File: backtrace
Comment 13 Mikhail 2026-07-09 22:29:28 UTC 
gnome-shell start crashed after update when i move mouse (mouse poinder not displayed)


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a6067;b=de1f4823a156438a99d8aee24c362966;m=d0a90a7;t=6562cce58285f;x=3e4af8714e290b3d
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60587.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60587
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        gnome-shell start crashed after update when i move mouse (mouse poinder not displayed)
Comment 14 Fedora Blocker Bugs Application 2026-07-09 22:56:58 UTC 
Proposed as a Blocker and Freeze Exception for 45-beta by Fedora user mikhail using the blocker tracking app because:

 With mutter/gnome-shell 51~alpha, currently in Rawhide, gnome-shell crashes with SIGSEGV on the first pointer motion. This happens in GDM as well, before anyone logs in: the cursor is never drawn, and moving the mouse on the login screen kills the shell. There is no way to reach a working desktop through the normal path. Downgrading mutter and gnome-shell to 50.2 makes the problem go away.
Comment 15 Adam Williamson (Red Hat non-Fedora) 2026-07-10 14:55:41 UTC 
Note for blocker/FE review purposes: this seems to be specific to hybrid GPU setups. Not sure if it affects *all* hybrid GPU setups or only ones with specific properties.
Comment 16 Mikhail 2026-07-12 10:48:45 UTC 
Crash happened at logon screen


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a45fa;b=de1f4823a156438a99d8aee24c362966;m=2d44126;t=6562cc421d8de;x=af74383c6b00c714
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60578.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60578
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        Crash happened at logon screen
Comment 17 Mikhail 2026-07-12 21:21:54 UTC 
gnome-shell crashed on login screen when mouse moved


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=61741312fdec46f3954d2d3cd396c70c;i=34444fe;b=a226d0144b024923bdabe5f7bd3cbd09;m=38dee80;t=6566eb261a86a;x=7f20926c0785ab1d
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60579.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60579
kernel:         7.2.0-rc2-44696aa3a489-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        gnome-shell crashed on login screen when mouse moved
Comment 18 Tom "spot" Callaway 2026-07-22 16:26:58 UTC 
Patching in the fix (merged) in https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/5153 resolved the crash on my Alienware m16 R2 (hybrid GPU, Intel/NVIDIA).
Comment 19 Adam Williamson (Red Hat non-Fedora) 2026-07-22 17:38:16 UTC 
I've sent an official build with the fix backported: https://koji.fedoraproject.org/koji/taskinfo?taskID=148155731

Note it might take a while as s390x builders are backed up ATM (gotta make sure people can run GNOME on their mainframes!)
Comment 20 Adam Williamson (Red Hat non-Fedora) 2026-07-22 21:15:34 UTC 
https://bodhi.fedoraproject.org/updates/FEDORA-2026-74d630a4ef should fix this, please yell if not.