Some Wacom tablet input crashes Shell on Wayland

Could you help me investigate the issue with GNOME Shell crashing? I am trying to use a Wacom set consisting of a tablet with a pen and a mouse. It seems to work under Wayland. However, so far, when I right-click that mouse, the screen usually goes black and returns me to GDM login screen. Could it be a bug in Mutter?

$ LC_ALL=C sudo journalctl -b | egrep "segfault|Code"
Nov 01 23:17:02 debian kernel: gnome-shell[970]: segfault at 38 ip 00007ff592b8fc0b sp 00007ffdccfd6420 error 4 in libmutter-15.so.0.0.0[18fc0b,7ff592a5d000+189000] likely on CPU 0 (core 0, socket 0)
Nov 01 23:17:02 debian kernel: Code: 55 49 89 fd 48 89 f7 31 f6 41 54 49 83 c5 20 55 89 d5 53 48 83 ec 08 e8 c3 04 ed ff 89 ea 49 8b 7d 08 f2 0f 10 05 6d 90 08 00 <f2> 0f 59 04 d0 f2 4c 0f 2c e0 e8 66 61 ed ff 48 89 c3 eb 24 90 be
$ lsusb | grep Wacom
Bus 001 Device 002: ID 056a:00b1 Wacom Co., Ltd PTZ-630 [Intuos3 (6x8)]
$ uname -a
Linux debian 6.11.5-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.11.5-1 (2024-10-27) x86_64 GNU/Linux
Stack trace
           PID: 970 (gnome-shell)
           UID: 1000 (roman)
           GID: 1000 (roman)
        Signal: 11 (SEGV)
     Timestamp: Fri 2024-11-01 23:17:02 EET (24s ago)
  Command Line: /usr/bin/gnome-shell
    Executable: /usr/bin/gnome-shell
 Control Group: /user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.Shell@wayland.service
          Unit: user@1000.service
     User Unit: org.gnome.Shell@wayland.service
         Slice: user-1000.slice
     Owner UID: 1000 (roman)
       Boot ID: 7096fe7b3aaa41a58bc81bebc7823651
    Machine ID: 9a31383e9ac2445cb4a212eab35c68f0
      Hostname: debian
       Storage: /var/lib/systemd/coredump/core.gnome-shell.1000.7096fe7b3aaa41a58bc81bebc7823651.970.1730495822000000.zst (present)
  Size on Disk: 16.2M
       Message: Process 970 (gnome-shell) of user 1000 dumped core.
                
                Module libzstd.so.1 from deb libzstd-1.5.6+dfsg-1+b1.amd64
                Module libuuid.so.1 from deb util-linux-2.40.2-9.amd64
                Module libgcc_s.so.1 from deb gcc-14-14.2.0-7.amd64
                Module libblkid.so.1 from deb util-linux-2.40.2-9.amd64
                Module libudev.so.1 from deb systemd-256.7-2.amd64
                Module libstdc++.so.6 from deb gcc-14-14.2.0-7.amd64
                Module libatomic.so.1 from deb gcc-14-14.2.0-7.amd64
                Module libmount.so.1 from deb util-linux-2.40.2-9.amd64
                Module libsystemd.so.0 from deb systemd-256.7-2.amd64
                Module libpolkit-gobject-1.so.0 from deb policykit-1-125-2.amd64
                Module libpolkit-agent-1.so.0 from deb policykit-1-125-2.amd64
                Stack trace of thread 970:
                #0  0x00007ff592b8fc0b broadcast_axis (libmutter-15.so.0 + 0x18fc0b)
                #1  0x00007ff592b90ec8 broadcast_axes (libmutter-15.so.0 + 0x190ec8)
                #2  0x00007ff592b7d138 meta_wayland_event_handler_handle_event (libmutter-15.so.0 + 0x17d138)
                #3  0x00007ff592e8b191 clutter_action_handle_event (libmutter-clutter-15.so.0 + 0x37191)
                #4  0x00007ff592ee3b06 emit_event (libmutter-clutter-15.so.0 + 0x8fb06)
                #5  0x00007ff592ee9ba6 clutter_stage_emit_event (libmutter-clutter-15.so.0 + 0x95ba6)
                #6  0x00007ff592ed45ab emit_event (libmutter-clutter-15.so.0 + 0x805ab)
                #7  0x00007ff592ee547e _clutter_stage_process_queued_events (libmutter-clutter-15.so.0 + 0x9147e)
                #8  0x00007ff592ebfee9 clutter_frame_clock_dispatch (libmutter-clutter-15.so.0 + 0x6bee9)
                #9  0x00007ff5931177df g_main_dispatch (libglib-2.0.so.0 + 0x5a7df)
                #10 0x00007ff593119a17 g_main_context_dispatch_unlocked (libglib-2.0.so.0 + 0x5ca17)
                #11 0x00007ff59311a46f g_main_loop_run (libglib-2.0.so.0 + 0x5d46f)
                #12 0x00007ff592af41b2 meta_context_run_main_loop (libmutter-15.so.0 + 0xf41b2)
                #13 0x00007ff592cca3fe n/a (libffi.so.8 + 0x73fe)
                #14 0x00007ff592cc970d n/a (libffi.so.8 + 0x670d)
                #15 0x00007ff592cc9ee3 ffi_call (libffi.so.8 + 0x6ee3)
                #16 0x00007ff592fafdee n/a (libgjs.so.0 + 0x54dee)
                #17 0x00007ff592fb031e n/a (libgjs.so.0 + 0x5531e)
                #18 0x00007ff58fb8929f n/a (libmozjs-128.so.0 + 0x18929f)
                #19 0x00007ff58fb7afa0 n/a (libmozjs-128.so.0 + 0x17afa0)
                #20 0x00007ff58fb88f9b n/a (libmozjs-128.so.0 + 0x188f9b)
                #21 0x00007ff58fb89560 n/a (libmozjs-128.so.0 + 0x189560)
                #22 0x00007ff58fb897d9 n/a (libmozjs-128.so.0 + 0x1897d9)
                #23 0x00007ff58fc3ba33 _ZN2JS4CallEP9JSContextNS_6HandleINS_5ValueEEES4_RKNS_16HandleValueArrayENS_13MutableHandleIS3_EE (libmozjs-128.so.0 + 0x23ba33)
                #24 0x00007ff592fe45e2 n/a (libgjs.so.0 + 0x895e2)
                #25 0x00007ff592fe907f n/a (libgjs.so.0 + 0x8e07f)
                #26 0x00007ff592fe91e2 gjs_context_eval_module (libgjs.so.0 + 0x8e1e2)
                #27 0x00007ff592fe92d9 gjs_context_eval_module_file (libgjs.so.0 + 0x8e2d9)
                #28 0x00005567f8d009c6 n/a (gnome-shell + 0x29c6)
                #29 0x00007ff592833d68 __libc_start_call_main (libc.so.6 + 0x29d68)
                #30 0x00007ff592833e25 __libc_start_main_impl (libc.so.6 + 0x29e25)
                #31 0x00005567f8d00ce1 n/a (gnome-shell + 0x2ce1)
                
                Stack trace of thread 1000:
                #0  0x00007ff59290d676 __GI_ppoll (libc.so.6 + 0x103676)
                #1  0x00007ff593119aec ppoll (libglib-2.0.so.0 + 0x5caec)
                #2  0x00007ff59311a46f g_main_loop_run (libglib-2.0.so.0 + 0x5d46f)
                #3  0x00007ff592bdb9b0 meta_thread_impl_run (libmutter-15.so.0 + 0x1db9b0)
                #4  0x00007ff592bdcbfc thread_impl_func (libmutter-15.so.0 + 0x1dcbfc)
                #5  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 992:
                #0  0x00007ff59290d676 __GI_ppoll (libc.so.6 + 0x103676)
                #1  0x00007ff593119aec ppoll (libglib-2.0.so.0 + 0x5caec)
                #2  0x00007ff59311a180 g_main_context_iteration (libglib-2.0.so.0 + 0x5d180)
                #3  0x00007ff59311a1d1 glib_worker_main (libglib-2.0.so.0 + 0x5d1d1)
                #4  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 991:
                #0  0x00007ff592918839 syscall (libc.so.6 + 0x10e839)
                #1  0x00007ff593149a84 g_cond_wait_impl (libglib-2.0.so.0 + 0x8ca84)
                #2  0x00007ff5930e13fb g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x243fb)
                #3  0x00007ff59314a402 g_thread_pool_spawn_thread (libglib-2.0.so.0 + 0x8d402)
                #4  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 994:
                #0  0x00007ff59290d676 __GI_ppoll (libc.so.6 + 0x103676)
                #1  0x00007ff593119aec ppoll (libglib-2.0.so.0 + 0x5caec)
                #2  0x00007ff59311a46f g_main_loop_run (libglib-2.0.so.0 + 0x5d46f)
                #3  0x00007ff593332f1a gdbus_shared_thread_func (libgio-2.0.so.0 + 0x127f1a)
                #4  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 998:
                #0  0x00007ff592898afe __futex_abstimed_wait_common64 (libc.so.6 + 0x8eafe)
                #1  0x00007ff59289b380 __pthread_cond_wait_common (libc.so.6 + 0x91380)
                #2  0x00007ff5905e7157 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-128.so.0 + 0xbe7157)
                #3  0x00007ff58fc7d835 n/a (libmozjs-128.so.0 + 0x27d835)
                #4  0x00007ff58fc7d8d1 n/a (libmozjs-128.so.0 + 0x27d8d1)
                #5  0x00007ff58fc7cfb7 n/a (libmozjs-128.so.0 + 0x27cfb7)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 995:
                #0  0x00007ff59290d676 __GI_ppoll (libc.so.6 + 0x103676)
                #1  0x00007ff593119aec ppoll (libglib-2.0.so.0 + 0x5caec)
                #2  0x00007ff59311a180 g_main_context_iteration (libglib-2.0.so.0 + 0x5d180)
                #3  0x00007ff583a26add n/a (libdconfsettings.so + 0xbadd)
                #4  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 1001:
                #0  0x00007ff592898afe __futex_abstimed_wait_common64 (libc.so.6 + 0x8eafe)
                #1  0x00007ff59289b380 __pthread_cond_wait_common (libc.so.6 + 0x91380)
                #2  0x00007ff58bf657dd n/a (libgallium-24.2.4-1.so + 0x1657dd)
                #3  0x00007ff58bf42d5b n/a (libgallium-24.2.4-1.so + 0x142d5b)
                #4  0x00007ff58bf6570b n/a (libgallium-24.2.4-1.so + 0x16570b)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 1380:
                #0  0x00007ff592918839 syscall (libc.so.6 + 0x10e839)
                #1  0x00007ff593149a84 g_cond_wait_impl (libglib-2.0.so.0 + 0x8ca84)
                #2  0x00007ff5930e13fb g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x243fb)
                #3  0x00007ff5930e18ab g_async_queue_pop (libglib-2.0.so.0 + 0x248ab)
                #4  0x00007ff58eab6ae7 n/a (libpangoft2-1.0.so.0 + 0xdae7)
                #5  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 1003:
                #0  0x00007ff59290d676 __GI_ppoll (libc.so.6 + 0x103676)
                #1  0x00007ff593119aec ppoll (libglib-2.0.so.0 + 0x5caec)
                #2  0x00007ff59311a46f g_main_loop_run (libglib-2.0.so.0 + 0x5d46f)
                #3  0x00007ff592bd8c0d input_thread (libmutter-15.so.0 + 0x1d8c0d)
                #4  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #5  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #6  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 997:
                #0  0x00007ff592898afe __futex_abstimed_wait_common64 (libc.so.6 + 0x8eafe)
                #1  0x00007ff59289b380 __pthread_cond_wait_common (libc.so.6 + 0x91380)
                #2  0x00007ff5905e7157 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-128.so.0 + 0xbe7157)
                #3  0x00007ff58fc7d835 n/a (libmozjs-128.so.0 + 0x27d835)
                #4  0x00007ff58fc7d8d1 n/a (libmozjs-128.so.0 + 0x27d8d1)
                #5  0x00007ff58fc7cfb7 n/a (libmozjs-128.so.0 + 0x27cfb7)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 1520:
                #0  0x00007ff592918839 syscall (libc.so.6 + 0x10e839)
                #1  0x00007ff593149f30 g_cond_wait_until_impl (libglib-2.0.so.0 + 0x8cf30)
                #2  0x00007ff5930e13d3 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x243d3)
                #3  0x00007ff5930e1a05 g_async_queue_timeout_pop (libglib-2.0.so.0 + 0x24a05)
                #4  0x00007ff59314a5cd g_thread_pool_wait_for_new_pool (libglib-2.0.so.0 + 0x8d5cd)
                #5  0x00007ff59314a161 g_thread_proxy (libglib-2.0.so.0 + 0x8d161)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 996:
                #0  0x00007ff592898afe __futex_abstimed_wait_common64 (libc.so.6 + 0x8eafe)
                #1  0x00007ff59289b380 __pthread_cond_wait_common (libc.so.6 + 0x91380)
                #2  0x00007ff5905e7157 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-128.so.0 + 0xbe7157)
                #3  0x00007ff58fc7d835 n/a (libmozjs-128.so.0 + 0x27d835)
                #4  0x00007ff58fc7d8d1 n/a (libmozjs-128.so.0 + 0x27d8d1)
                #5  0x00007ff58fc7cfb7 n/a (libmozjs-128.so.0 + 0x27cfb7)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                
                Stack trace of thread 999:
                #0  0x00007ff592898afe __futex_abstimed_wait_common64 (libc.so.6 + 0x8eafe)
                #1  0x00007ff59289b380 __pthread_cond_wait_common (libc.so.6 + 0x91380)
                #2  0x00007ff5905e7157 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-128.so.0 + 0xbe7157)
                #3  0x00007ff58fc7d835 n/a (libmozjs-128.so.0 + 0x27d835)
                #4  0x00007ff58fc7d8d1 n/a (libmozjs-128.so.0 + 0x27d8d1)
                #5  0x00007ff58fc7cfb7 n/a (libmozjs-128.so.0 + 0x27cfb7)
                #6  0x00007ff59289c112 start_thread (libc.so.6 + 0x92112)
                #7  0x00007ff59291a8f8 __clone3 (libc.so.6 + 0x1108f8)
                ELF object binary architecture: AMD x86-64

That indeed looks like a mutter bug. Can you report it at Issues · GNOME / mutter · GitLab? Please also include a full backtrace with debug symbols.

Thank you for looking into it. I created a report in the issue tracker and attached a full backtrace.