Xubuntu 22.04 crashes

Support and Help
,
1

I have experienced three similar crash/freeze events on the following dates:

24 Jul 2024
25 Jul 2024
21 Feb 2025

The latest event seemed to occur at 05:54 GMT (based on a photo taken of the frozen screen (as PrintScreen was inoperable)).

Chromium and Chrome browsers were open across 3 tabs.

I had not been using the computer for at least 7 hours at the time of the Feb 2025 “crash”.

uname-r:

6.5.0-44-generic (Jul 2024)

6.8.0-52-generic (Feb 2025)

lsb_release -d

Ubuntu 22.04.4 LTS (Jul 2024)

Ubuntu 22.04.5 LTS (Feb 2025)

I have 2 SSD (250GB, 1TB) drives and 32 GB of ram on a Z390 M Gigabyte motherboard in the desktop impacted.

Keyboard and mouse were both rendered inoperable.

Given keyboard (and mouse) deactivation I was unable to safely reboot using “REISUB” (via the desktop impacted or ssh).

I have had to perform a hard shutdown all three times.

SSDs seem healthy (via nvme-cli), with 13 unsafe showdowns (11 of these occurring close to previous install end-of-life).

I have not checked RAM.

These are the “only” three system freeze events I have experienced with this clean April 2024 install.

I have taken a look at logs (journalctl), but none seem to show anything nefarious, however, I am not an expert.

Any suggestions regarding specific logs to review / provide or tires to kick would be welcome!

Thanks for any guidance!

2

What we’re the last, say, 100 lines in journal before that?

3

Thanks for the reply.

Here’s what roughly 100 last lines of journalctl -b -1 show:

hidden for readability, click to open 
Feb 21 00:00:13 server systemd[1]: Starting Daily dpkg database backup service...

Feb 21 00:00:13 server systemd[1]: Starting Rotate log files...

Feb 21 00:00:13 server systemd[1]: Stopping Make remote CUPS printers available locally...

Feb 21 00:00:13 server systemd[1]: cups-browsed.service: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Stopped Make remote CUPS printers available locally.

Feb 21 00:00:13 server systemd[1]: Stopping CUPS Scheduler...

Feb 21 00:00:13 server systemd[1]: cups.service: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Stopped CUPS Scheduler.

Feb 21 00:00:13 server systemd[1]: cups.path: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Stopped CUPS Scheduler.

Feb 21 00:00:13 server systemd[1]: Stopping CUPS Scheduler...

Feb 21 00:00:13 server systemd[1]: Started CUPS Scheduler.

Feb 21 00:00:13 server systemd[1]: cups.socket: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Closed CUPS Scheduler.

Feb 21 00:00:13 server systemd[1]: Stopping CUPS Scheduler...

Feb 21 00:00:13 server systemd[1]: Listening on CUPS Scheduler.

Feb 21 00:00:13 server systemd[1]: Starting CUPS Scheduler...

Feb 21 00:00:13 server audit[57862]: AVC apparmor="DENIED" operation="capable" class="cap" profile="/usr/sbin/cupsd" pid=57862 comm="cupsd" capability=12  capname="net_admin"

Feb 21 00:00:13 server systemd[1]: Started CUPS Scheduler.

Feb 21 00:00:13 server kernel: audit: type=1400 audit(1740096013.755:264): apparmor="DENIED" operation="capable" class="cap" profile="/usr/sbin/cupsd" pid=57862 comm="cupsd" capability=12  capname="net_admin"

Feb 21 00:00:13 server systemd[1]: Started Make remote CUPS printers available locally.

Feb 21 00:00:13 server systemd[1]: dpkg-db-backup.service: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Finished Daily dpkg database backup service.

Feb 21 00:00:13 server systemd[1]: logrotate.service: Deactivated successfully.

Feb 21 00:00:13 server systemd[1]: Finished Rotate log files.

Feb 21 00:00:14 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:14 server kernel: audit: type=1107 audit(1740096014.283:265): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:14 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:14 server kernel: audit: type=1107 audit(1740096014.319:266): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:18 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:18 server kernel: audit: type=1107 audit(1740096018.386:267): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:19 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:19 server kernel: audit: type=1107 audit(1740096019.992:268): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:20 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:20 server kernel: audit: type=1107 audit(1740096020.027:269): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:20 server audit[742]: USER_AVC pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                    exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:00:20 server kernel: audit: type=1107 audit(1740096020.071:270): pid=742 uid=102 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/com/redhat/PrinterSpooler" interface="com.redhat.PrinterSpooler" member="QueueChanged" mask="send" name="org.freedesktop.DBus" pid=1562 label="snap.cups.cupsd" peer_pid=2411 peer_label="unconfined"
                                exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'

Feb 21 00:17:01 server CRON[57940]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 00:17:01 server CRON[57941]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 00:17:01 server CRON[57940]: pam_unix(cron:session): session closed for user root

Feb 21 00:28:52 server cups.cups-browsed[1842]: + true

Feb 21 00:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 01:16:09 server systemd[1]: Starting Refresh fwupd metadata and update motd...

Feb 21 01:16:09 server dbus-daemon[742]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.461' (uid=119 pid=57987 comm="/usr/bin/fwupdmgr refresh " label="unconfined")

Feb 21 01:16:09 server systemd[1]: Starting Firmware update daemon...

Feb 21 01:16:09 server fwupd[57992]: 01:16:09:0749 FuPluginUefiCapsule  skipping device that failed coldplug: ESRT GUID '00000000-0000-0000-0000-000000000000' was not valid

Feb 21 01:16:10 server fwupd[57992]: 01:16:10:0186 FuEngine             failed to add device /sys/devices/pci0000:00/0000:00:1f.5/spi_master/spi0/spi0.0/mtd/mtd0ro: attribute size returned no data

Feb 21 01:16:10 server dbus-daemon[742]: [system] Successfully activated service 'org.freedesktop.fwupd'

Feb 21 01:16:10 server systemd[1]: Started Firmware update daemon.

Feb 21 01:16:10 server systemd[1]: fwupd-refresh.service: Deactivated successfully.

Feb 21 01:16:10 server systemd[1]: Finished Refresh fwupd metadata and update motd.

Feb 21 01:17:01 server CRON[58001]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 01:17:01 server CRON[58002]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 01:17:01 server CRON[58001]: pam_unix(cron:session): session closed for user root

Feb 21 01:28:52 server cups.cups-browsed[1842]: + true

Feb 21 01:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 02:17:01 server CRON[58030]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 02:17:01 server CRON[58031]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 02:17:01 server CRON[58030]: pam_unix(cron:session): session closed for user root

Feb 21 02:28:52 server cups.cups-browsed[1842]: + true

Feb 21 02:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 02:39:27 server systemd[1]: Starting Process error reports when automatic reporting is enabled...

Feb 21 02:39:27 server whoopsie-upload-all[58044]: INFO:root:/var/crash/_usr_lib_x86_64-linux-gnu_tumbler-1_tumblerd.1000.crash already marked for upload, skipping

Feb 21 02:39:27 server whoopsie-upload-all[58044]: INFO:root:/var/crash/_usr_bin_xfce4-power-manager.1000.crash already marked for upload, skipping

Feb 21 02:39:27 server whoopsie-upload-all[58044]: INFO:root:Waiting for whoopsie to upload reports (timeout: 20 s)

Feb 21 02:39:27 server whoopsie-upload-all[58044]: INFO:root:All reports uploaded successfully

Feb 21 02:39:27 server systemd[1]: Started crash report submission.

Feb 21 02:39:27 server systemd[1]: apport-autoreport.service: Deactivated successfully.

Feb 21 02:39:27 server systemd[1]: Finished Process error reports when automatic reporting is enabled.

Feb 21 02:39:27 server whoopsie[58046]: [02:39:27] Using lock path: /var/lock/whoopsie/lock

Feb 21 02:39:27 server systemd[1]: whoopsie.service: Deactivated successfully.

Feb 21 03:10:01 server CRON[58064]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 03:10:01 server CRON[58065]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)

Feb 21 03:10:01 server CRON[58064]: pam_unix(cron:session): session closed for user root

Feb 21 03:16:10 server systemd[1]: fwupd.service: Deactivated successfully.

Feb 21 03:17:01 server CRON[58073]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 03:17:01 server CRON[58074]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 03:17:01 server CRON[58073]: pam_unix(cron:session): session closed for user root

Feb 21 03:28:52 server cups.cups-browsed[1842]: + true

Feb 21 03:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 04:03:51 server snapd[763]: storehelpers.go:954: cannot refresh: snap has no updates available: "bare", "chromium", "core20", "core22", "core24", "cups", "curl", "firefox", "gnome-3-38-2004", "gnome-42-2204", "gnome-46-2404", "gtk-common-themes", "mesa-2404", "snapd"

Feb 21 04:07:27 server systemd[1]: Starting Message of the Day...

Feb 21 04:07:27 server systemd[1]: motd-news.service: Deactivated successfully.

Feb 21 04:07:27 server systemd[1]: Finished Message of the Day.

Feb 21 04:17:01 server CRON[58115]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 04:17:01 server CRON[58116]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 04:17:01 server CRON[58115]: pam_unix(cron:session): session closed for user root

Feb 21 04:28:52 server cups.cups-browsed[1842]: + true

Feb 21 04:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 04:28:53 server NetworkManager[743]: <info>  [1740112133.1506] dhcp4 (eno1): state changed new lease, address=192.168.0.10

Feb 21 04:36:43 server audit[58128]: AVC apparmor="DENIED" operation="exec" class="file" profile="snap.chromium.chromium" name="/usr/lib/chromium-browser/chrome" pid=58128 comm="ThreadPoolSingl" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Feb 21 04:36:43 server kernel: audit: type=1400 audit(1740112603.733:271): apparmor="DENIED" operation="exec" class="file" profile="snap.chromium.chromium" name="/usr/lib/chromium-browser/chrome" pid=58128 comm="ThreadPoolSingl" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Feb 21 04:36:43 server audit[58129]: AVC apparmor="DENIED" operation="exec" class="file" profile="snap.chromium.chromium" name="/usr/lib/chromium-browser/chrome" pid=58129 comm="ThreadPoolSingl" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Feb 21 04:36:43 server kernel: audit: type=1400 audit(1740112603.789:272): apparmor="DENIED" operation="exec" class="file" profile="snap.chromium.chromium" name="/usr/lib/chromium-browser/chrome" pid=58129 comm="ThreadPoolSingl" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Feb 21 05:17:01 server CRON[58149]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)

Feb 21 05:17:01 server CRON[58150]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)

Feb 21 05:17:01 server CRON[58149]: pam_unix(cron:session): session closed for user root

Feb 21 05:28:52 server cups.cups-browsed[1842]: + true

Feb 21 05:28:52 server cups.cups-browsed[1842]: + sleep 3600

Feb 21 05:40:07 server systemd[1]: Starting Process error reports when automatic reporting is enabled...

Feb 21 05:40:07 server whoopsie-upload-all[58179]: INFO:root:/var/crash/_usr_lib_x86_64-linux-gnu_tumbler-1_tumblerd.1000.crash already marked for upload, skipping

Feb 21 05:40:07 server whoopsie-upload-all[58179]: INFO:root:/var/crash/_usr_bin_xfce4-power-manager.1000.crash already marked for upload, skipping

Feb 21 05:40:07 server whoopsie-upload-all[58179]: INFO:root:Waiting for whoopsie to upload reports (timeout: 20 s)

Feb 21 05:40:07 server whoopsie-upload-all[58179]: INFO:root:All reports uploaded successfully

Feb 21 05:40:07 server systemd[1]: Started crash report submission.

Feb 21 05:40:07 server systemd[1]: apport-autoreport.service: Deactivated successfully.

Feb 21 05:40:07 server systemd[1]: Finished Process error reports when automatic reporting is enabled.

Feb 21 05:40:07 server whoopsie[58181]: [05:40:07] Using lock path: /var/lock/whoopsie/lock

Feb 21 05:40:07 server systemd[1]: whoopsie.service: Deactivated successfully.
4

Thanks for any thoughts / guidance!

5

Thanks for both being patient and then gently bumping. I actually missed your logs, so that was helpful.

You’ll note these two are close to the time frame you specify. There are times where they happen earlier in the log. I wonder if that is related to your issue.

You might want to check out this thread about Tumbler. It is interesting to note that when you had the crash, you were away from the keyboard. This suggests some sort of background process happening. Certainly, thumbnail generation is a background process, so it would make sense that this could be your culprit.

Maybe you should temporarily disable it to see if that doesn’t fix the issue. I guess if you don’t see at least the first message about Tumbler in the logs, then that should probably be your fix. As I said there, if that is the fix, then a bug report needs to be filed.

6

From your logs it seems there was both a tumblerd and a power manager crash.
My experience with tumblerd is it causes X11 crashes, which reboots.
Your crash sounds more thorough, so look at power manager as well:
check if there are any other power manager messages in the log,
also try different settings, see if it changes things.

But really, you have been running the system a long time, and it has been reliable,
so seems unlikely it is either.
You did not mention what happened before the other 2 crashes.:
did you have Chromium and Chrome browsers open for 7 hours then also?
Doesn’t seem like a good idea.
And did you upgrade to 24.04.1, which now brings in apparmor userspace restrictions?

If the logs don’t show anything definite, I think really you need a few more crashes to establish a pattern.

7

Thanks for the responses.

In order to provide a bit more (historical) perspective / context, I attach:

(1) ubuntu error report summary, seemingly, for the lifetime of my latest install as shown via:

xdg-open https://errors.ubuntu.com/user/$(sudo cat /var/lib/whoopsie/whoopsie-id)

Click to review error report summary

2025-02-17 16:02 2025-02-17 16:02 UTC Crash xfce4-power-manager
2025-02-13 09:02 2025-02-13 09:02 UTC Crash tumbler
2025-02-13 09:02 2025-02-13 09:02 UTC Crash tumbler
2025-01-24 06:01 2025-01-24 06:01 UTC Crash blueman
2025-01-03 19:01 2025-01-03 19:01 UTC Crash xserver-xorg-core
2024-12-28 17:12 2024-12-28 20:12 UTC Crash blueman
2024-12-28 17:12 2024-12-28 17:12 UTC Crash blueman
2024-12-19 20:12 2024-12-19 20:12 UTC Crash plymouth
2024-12-14 15:12 2024-12-14 15:12 UTC Crash plymouth
2024-12-06 08:12 2024-12-14 14:12 UTC Crash xserver-xorg-core
2024-12-05 09:12 2024-12-09 07:12 UTC Crash xfce4-power-manager
2024-08-07 08:08 2024-08-07 07:08 UTC Crash xfce4-power-manager
2024-07-27 13:07 2024-07-27 12:07 UTC Crash xfce4-power-manager
2024-07-23 09:07 2024-07-23 08:07 UTC Crash xfce4-power-manager
2024-06-30 11:06 2024-06-30 10:06 UTC Crash xfce4-power-manager
2024-06-28 14:06 2024-06-28 13:06 UTC Crash xfce4-power-manager
2024-06-20 08:06 2024-06-20 07:06 UTC Crash xfce4-power-manager
2024-06-09 11:06 2024-06-09 10:06 UTC Crash xfce4-power-manager
2024-06-06 06:06 2024-06-06 06:06 UTC Crash blueman
2024-05-29 23:05 2024-05-29 22:05 UTC Crash xfce4-power-manager
2024-05-26 15:05 2024-05-26 15:05 UTC Crash xfce4-power-manager
2024-04-10 07:04 2024-04-10 07:04 UTC Crash xfce4-power-manager
2024-04-08 08:04 2024-04-08 07:04 UTC Crash system-config-printer
2024-04-07 11:04 2024-04-07 10:04 UTC Crash gnome-font-viewer

(2) link to ye olde Ubuntu Forums thread where I first reported the first couple of (July 2024) crashes.

(3) comment added to a launchpad bug report describing a potentially crashes-related kernel issue.

As noted elsewhere, I have had no other “show-stopping” issues with this (April 2024) install.

Thanks, again, for your observations.