Steps to reproduce:
- Create a new 3D URP project
- In the Hierarchy right-click > UI Toolkit > Standard Elements > Button (or any element)
- Duplicate the element a few times in in context editing
- Zoom in and out the UI Viewport window
- Press Ctrl+Z to Undo
- Add more elements and duplicate them or duplicate old one
- Perform 3-5th steps a few times (usually takes 2-3 times)
- Observe the Editor
Actual results: Editor crashes
Expected results: Editor does not crash
Reproducible with versions: 6000.6.0b4, 6000.7.0a3
Can’t test with versions: 6000.3.20f1, 6000.5.5f1 (UI editing in context not available)
Tested on (OS): Windows 11, macOS 26.5
Notes:
- Could not find the exact repro steps, but the crash would always reproduce after some time, after performing copy/paste, zoom, save and undo
- In some cases the crash would occur faster if Play mode is entered while performing repro steps
First few lines of stack trace:
| 0x1f24 |
0x00007FFDD4B5C235 (Unity) scripting_object_get_class |
| 0x1f24 |
0x00007FFDD43B5B71 (Unity) ManagedReferencesTransferState::RegisterReference |
| 0x1f24 |
0x00007FFDD43A5D17 (Unity) RegisterReferenceForGather |
| 0x1f24 |
0x0000018C98E88A28 (UnityEngine.CoreModule) (wrapper managed-to-native) UnityEngine.Serialization.SerializationBackendManagedCommands:wrapper_native_indirect_0000019533047490 (intptr&,intptr,intptr) |
| 0x1f24 |
0x0000018C98E888BB (UnityEngine.CoreModule) UnityEngine.Serialization.SerializationBackendManagedCommands:InvokeRegisterGatheredRef (intptr,intptr,object) |