Bug 2498847 - [abrt] gnome-shell: meta_gbm_device_from_gpu(): gnome-shell killed by SIGSEGV
Summary: [abrt] gnome-shell: meta_gbm_device_from_gpu(): gnome-shell killed by SIGSEGV
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-shell
Version: rawhide
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: GNOME SIG Unassigned
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:fa22ff5064405234b1f614820b3...
Depends On:
Blocks: BetaBlocker, F45BetaBlocker BetaFreezeException, F45BetaFreezeException
TreeView+ depends on / blocked
 
Reported: 2026-07-09 22:25 UTC by Mikhail
Modified: 2026-08-31 23:42 UTC (History)
10 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-07-22 21:15:34 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: proc_pid_status (1.48 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: maps (127.69 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: limits (1.29 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: environ (1.30 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: open_fds (20.19 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: mountinfo (3.56 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: os_info (740 bytes, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: cpuinfo (3.83 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: core_backtrace (128.28 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: dso_list (29.33 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: var_log_messages (2.54 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details
File: backtrace (116.69 KB, text/plain)
2026-07-09 22:25 UTC, Mikhail
no flags Details


Links
System ID Private Priority Status Summary Last Updated
GNOME Gitlab GNOME mutter issues 4890 0 None closed Crash on moving cursor 2026-07-10 14:53:57 UTC
GNOME Gitlab GNOME mutter merge_requests 5153 0 None merged backends/native: Handle NULL GPU data retrieving gbm_device 2026-07-10 14:52:46 UTC

Description Mikhail 2026-07-09 22:25:17 UTC
Description of problem:
gnome-shell crashes with SIGSEGV (SEGV_MAPERR) as soon as the pointer is moved after login. Downgrading mutter and gnome-shell to 50.2-2.fc45 makes the crash go away; nothing else is changed. Setting MUTTER_DEBUG_DISABLE_HW_CURSORS=1 also avoids the crash on 51.alpha.		

Version-Release number of selected component:
gnome-shell-51~alpha-1.fc45

Additional info:
reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a47e4;b=de1f4823a156438a99d8aee24c362966;m=359a581;t=6562cc4a73d39;x=d59c9db173c29c04
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=user
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu

Truncated backtrace:
Thread no. 0 (45 frames)
 #0 meta_gbm_device_from_gpu at ../src/backends/native/meta-renderer-native.c:180
 #1 init_hw_cursor_support_for_gpu at ../src/backends/native/meta-cursor-renderer-native.c:1394
 #2 init_hw_cursor_support at ../src/backends/native/meta-cursor-renderer-native.c:1528
 #3 meta_cursor_renderer_native_new at ../src/backends/native/meta-cursor-renderer-native.c:1601
 #4 meta_seat_native_maybe_ensure_cursor_renderer at ../src/backends/native/meta-seat-native.c:823
 #5 meta_backend_native_get_cursor_renderer at ../src/backends/native/meta-backend-native.c:272
 #6 meta_sprite_update_cursor at ../src/backends/meta-sprite.c:102
 #7 clutter_sprite_invalidate_cursor at ../clutter/clutter/clutter-sprite.c:1231
 #8 repick_for_event at ../src/wayland/meta-wayland-pointer.c:675
 #9 meta_wayland_pointer_update at ../src/wayland/meta-wayland-pointer.c:701
 #10 meta_wayland_seat_update at ../src/wayland/meta-wayland-seat.c:471
 #12 meta_wayland_compositor_update at ../src/wayland/meta-wayland.c:544
 #13 meta_display_handle_event at ../src/core/events.c:175
 #14 event_callback at ../src/core/events.c:323
 #15 _clutter_event_process_filters at ../clutter/clutter/clutter-event.c:1263
 #16 clutter_sprite_set_current_actor at ../clutter/clutter/clutter-sprite.c:603
 #17 clutter_focus_set_current_actor at ../clutter/clutter/clutter-focus.c:140
 #18 clutter_stage_pick_and_update_sprite at ../clutter/clutter/clutter-stage.c:2958
 #19 clutter_stage_update_device_for_event at ../clutter/clutter/clutter-stage.c:3516
 #20 clutter_stage_handle_event at ../clutter/clutter/clutter-main.c:169
 #22 dispatch_clutter_event at ../src/backends/meta-backend.c:1112
 #23 clutter_source_dispatch at ../src/backends/meta-backend.c:1156
 #25 g_main_context_dispatch_unlocked at ../glib/gmain.c:4451
 #26 g_main_context_iterate_unlocked at ../glib/gmain.c:4516
 #28 meta_context_run_main_loop at ../src/core/meta-context.c:505
 #29 ffi_call_unix64 at ../src/x86/unix64.S:104
 #30 ffi_call_int at ../src/x86/ffi64.c:676
 #31 ffi_call at ../src/x86/ffi64.c:713
 #32 Gjs::Function::invoke at ../gi/inline-array.h:42
 #33 Gjs::Function::call at ../gi/function.cpp:1199
 #34 CallJSNative at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:494
 #35 js::InternalCallOrConstruct at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:576
 #36 InternalCall at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:657
 #37 js::CallFromStack at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:662
 #38 js::Interpret at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:3286
 #39 MaybeEnterInterpreterTrampoline at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:395
 #40 js::RunScript at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:464
 #41 js::InternalCallOrConstruct at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:622
 #42 InternalCall at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:657
 #43 js::Call at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/Interpreter.cpp:689
 #44 JS::Call at /usr/src/debug/mozjs140-140.6.0-6.fc45.x86_64/js/src/vm/CallAndConstruct.cpp:119
 #46 GjsContextPrivate::run_main_loop_hook at ../gjs/context.cpp:1402
 #47 GjsContextPrivate::eval_module at ../gjs/context.cpp:1555
 #48 gjs_context_eval_module at ../gjs/context.cpp:1295
 #49 gjs_context_eval_module_file at ../gjs/context.cpp:1637

Comment 1 Mikhail 2026-07-09 22:25:21 UTC
Created attachment 2148228 [details]
File: proc_pid_status

Comment 2 Mikhail 2026-07-09 22:25:22 UTC
Created attachment 2148229 [details]
File: maps

Comment 3 Mikhail 2026-07-09 22:25:24 UTC
Created attachment 2148230 [details]
File: limits

Comment 4 Mikhail 2026-07-09 22:25:25 UTC
Created attachment 2148231 [details]
File: environ

Comment 5 Mikhail 2026-07-09 22:25:27 UTC
Created attachment 2148232 [details]
File: open_fds

Comment 6 Mikhail 2026-07-09 22:25:28 UTC
Created attachment 2148233 [details]
File: mountinfo

Comment 7 Mikhail 2026-07-09 22:25:29 UTC
Created attachment 2148234 [details]
File: os_info

Comment 8 Mikhail 2026-07-09 22:25:30 UTC
Created attachment 2148235 [details]
File: cpuinfo

Comment 9 Mikhail 2026-07-09 22:25:32 UTC
Created attachment 2148236 [details]
File: core_backtrace

Comment 10 Mikhail 2026-07-09 22:25:33 UTC
Created attachment 2148237 [details]
File: dso_list

Comment 11 Mikhail 2026-07-09 22:25:35 UTC
Created attachment 2148238 [details]
File: var_log_messages

Comment 12 Mikhail 2026-07-09 22:25:36 UTC
Created attachment 2148239 [details]
File: backtrace

Comment 13 Mikhail 2026-07-09 22:29:28 UTC
gnome-shell start crashed after update when i move mouse (mouse poinder not displayed)


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a6067;b=de1f4823a156438a99d8aee24c362966;m=d0a90a7;t=6562cce58285f;x=3e4af8714e290b3d
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60587.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60587
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        gnome-shell start crashed after update when i move mouse (mouse poinder not displayed)

Comment 14 Fedora Blocker Bugs Application 2026-07-09 22:56:58 UTC
Proposed as a Blocker and Freeze Exception for 45-beta by Fedora user mikhail using the blocker tracking app because:

 With mutter/gnome-shell 51~alpha, currently in Rawhide, gnome-shell crashes with SIGSEGV on the first pointer motion. This happens in GDM as well, before anyone logs in: the cursor is never drawn, and moving the mouse on the login screen kills the shell. There is no way to reach a working desktop through the normal path. Downgrading mutter and gnome-shell to 50.2 makes the problem go away.

Comment 15 Adam Williamson (Red Hat non-Fedora) 2026-07-10 14:55:41 UTC
Note for blocker/FE review purposes: this seems to be specific to hybrid GPU setups. Not sure if it affects *all* hybrid GPU setups or only ones with specific properties.

Comment 16 Mikhail 2026-07-12 10:48:45 UTC
Crash happened at logon screen


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=805058dfaa064f49aacacecb9f212b49;i=87a45fa;b=de1f4823a156438a99d8aee24c362966;m=2d44126;t=6562cc421d8de;x=af74383c6b00c714
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60578.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60578
kernel:         7.2.0-rc2-0e35b9b6ec0f-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        Crash happened at logon screen

Comment 17 Mikhail 2026-07-12 21:21:54 UTC
gnome-shell crashed on login screen when mouse moved


reporter:       libreport-2.17.15
type:           CCpp
reason:         gnome-shell killed by SIGSEGV
journald_cursor: s=61741312fdec46f3954d2d3cd396c70c;i=34444fe;b=a226d0144b024923bdabe5f7bd3cbd09;m=38dee80;t=6566eb261a86a;x=7f20926c0785ab1d
executable:     /usr/bin/gnome-shell
cmdline:        /usr/bin/gnome-shell --mode=gdm
cgroup:         0::/user.slice/user-60579.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            60579
kernel:         7.2.0-rc2-44696aa3a489-with-fixes-v1+
package:        gnome-shell-51~alpha-1.fc45
runlevel:       /bin/sh: line 1: runlevel: command not found
backtrace_rating: 4
crash_function: meta_gbm_device_from_gpu
comment:        gnome-shell crashed on login screen when mouse moved

Comment 18 Tom "spot" Callaway 2026-07-22 16:26:58 UTC
Patching in the fix (merged) in https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/5153 resolved the crash on my Alienware m16 R2 (hybrid GPU, Intel/NVIDIA).

Comment 19 Adam Williamson (Red Hat non-Fedora) 2026-07-22 17:38:16 UTC
I've sent an official build with the fix backported: https://koji.fedoraproject.org/koji/taskinfo?taskID=148155731

Note it might take a while as s390x builders are backed up ATM (gotta make sure people can run GNOME on their mainframes!)

Comment 20 Adam Williamson (Red Hat non-Fedora) 2026-07-22 21:15:34 UTC
https://bodhi.fedoraproject.org/updates/FEDORA-2026-74d630a4ef should fix this, please yell if not.


Note You need to log in before you can comment on or make changes to this bug.