Public bug reported:

very Wayland login crashes ~1 min after login back to GDM. gnome-shell
51.0-2ubuntu1 + mutter 51.0-1ubuntu2 on 26.10. Clutter:ERROR clutter-
cursor.c:464, SIGABRT in StCursor ensure_cursor -> type_to_name on
INHERIT. Stable 20+ min without native-Wayland Chromium, crash with it.
Workaround --ozone-platform=x11.

Full details below.
---

Package: gnome-shell 51.0-2ubuntu1, libmutter-51-0 51.0-1ubuntu2
Release: Ubuntu 26.10 Stonking Stingray (development branch)
Session: Wayland (ubuntu.desktop), Intel TigerLake Iris Xe, GDM

Summary:
Every Wayland login crashes ~1 min after login, back to GDM greeter (login 
loop).
Working from tty2, graphical session on tty3 survives 5+ min without Chromium,
crashes in ~1-1.5 min with Chromium running.

Log:
gnome-shell[..]: 
Clutter:ERROR:../clutter/clutter/clutter-cursor.c:464:clutter_cursor_type_to_name:
 code should not be reached
gnome-shell[..]: Bail out! Clutter:ERROR:../clutter/clutter/clutter-cursor.c:464
gnome-shell[..]: GNOME Shell crashed with signal 6

Core backtrace (from /var/crash/_usr_bin_gnome-shell.1000.crash):
#13 clutter_cursor_type_to_name (libmutter-clutter)
#14-16 libst-51.so (check_metadata_exists / find_cursor_metadata / 
ensure_cursor)
#19 g_object_new (StCursor construction -> st_cursor_constructed -> 
ensure_cursor)
#20 libmutter (meta_cursor_theme_get_cursor)
#21 clutter_sprite_invalidate_cursor
#25-27 Wayland wl_event_loop_dispatch

Root cause:
src/st/st-cursor.c check_metadata_exists() calls clutter_cursor_type_to_name()
without guarding INHERIT/NONE (aborts, never returns NULL - existing
`if (!cursor_name)` is dead code). ensure_cursor() guards NONE but not INHERIT.
Any theme request for INHERIT aborts shell. Same flaw in mutter
src/backends/meta-cursor-xcursor.c:179 (guards NONE only).

Reproduce:
1. Boot 26.10, GDM Wayland, log in
2. Open Chromium unstable 155.0.8054.0-1 (native Wayland), hover/use 1-2 min
3. Shell aborts, back to greeter. Without Chromium, session stable.

Expected:
INHERIT never reaches theme (resolve to DEFAULT like
clutter_actor_real_get_cursor_for_sprite), or StCursor/Xcursor handle
INHERIT gracefully (fallback to DEFAULT/empty, no SIGABRT).

Attachments:
- gnome-shell-bug.apport (ubuntu-bug --save gnome-shell)
- st-cursor-inherit-fix.patch (defensive guard, tested as diff only)
- /var/crash/_usr_bin_gnome-shell.1000.crash (32M, local)

** Affects: gnome-shell (Ubuntu)
     Importance: Undecided
         Status: New

** Patch added: "gnome-shell-bug-files.tar.gz"
   
https://bugs.launchpad.net/bugs/2168601/+attachment/6002748/+files/gnome-shell-bug-files.tar.gz

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2168601

Title:
  gnome-shell 51.0 SIGABRT in clutter_cursor_type_to_name via StCursor
  INHERIT - Wayland login loop

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2168601/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to