cec-client segfaults in cec-onsleep.service

[eliottness]

When entering sleep cec-client ran through systemd segfaults.

Logs found from journalctl -u cec-onsleep:

Logs

Sep 21 21:35:47 bazzite systemd[1]: Starting cec-onsleep.service - Run CEC actions for sleep...
Sep 21 21:35:47 bazzite cec-control[8476]: using osd name bazzite
Sep 21 21:35:47 bazzite cec-control[8476]: opening a connection to the CEC adapter...
Sep 21 21:36:18 bazzite systemd[1]: cec-onsleep.service: Deactivated successfully.
Sep 21 21:36:18 bazzite systemd[1]: Finished cec-onsleep.service - Run CEC actions for sleep.
Sep 21 21:36:18 bazzite systemd[1]: cec-onsleep.service: Consumed 9.125s CPU time, 2.8M memory peak.
Sep 21 22:02:24 bazzite systemd[1]: Starting cec-onsleep.service - Run CEC actions for sleep...
Sep 21 22:02:24 bazzite cec-control[14788]: using osd name bazzite
Sep 21 22:02:24 bazzite cec-control[14788]: opening a connection to the CEC adapter...
Sep 21 22:26:40 bazzite cec-control[14788]: ERROR: [ 19773] failed to ping the adapter 3 times in a row. closing the connection.
Sep 21 22:26:40 bazzite cec-control[14788]: Connection lost - trying to reconnect
Sep 21 22:26:40 bazzite systemd-coredump[15072]: Process 14788 (cec-client) of user 0 dumped core.

                                             Module libXau.so.6 from rpm libXau-1.0.12-2.fc42.x86_64
                                             Module libxcb.so.1 from rpm libxcb-1.17.0-5.fc42.x86_64
                                             Module libXrender.so.1 from rpm libXrender-0.9.12-2.fc42.x86_64
                                             Module libXext.so.6 from rpm libXext-1.3.6-3.fc42.x86_64
                                             Module libcap.so.2 from rpm libcap-2.73-2.fc42.x86_64
                                             Module libX11.so.6 from rpm libX11-1.8.12-1.fc42.x86_64
                                             Module libXrandr.so.2 from rpm libXrandr-1.5.4-5.fc42.x86_64
                                             Module libudev.so.1 from rpm systemd-257.9-2.fc42.x86_64
                                             Module libcec.so.7 from rpm libcec-7.1.1-1.fc42.x86_64
                                             Module libtinfo.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libncurses.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libp8-platform.so.2 from rpm platform-2.1.0.1-22.fc42.x86_64
                                             Stack trace of thread 15069:
                                             #0  0x0000000000000000 n/a (n/a + 0x0)
                                             #1  0x00005646e001f7ab n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x87ab)
                                             #2  0x00007fe41b723f54 start_thread (libc.so.6 + 0x71f54)
                                             #3  0x00007fe41b7a732c __clone3 (libc.so.6 + 0xf532c)

                                             Stack trace of thread 14788:
                                             #0  0x00007fe41b72c462 __syscall_cancel_arch (libc.so.6 + 0x7a462)
                                             #1  0x00007fe41b72075c __internal_syscall_cancel (libc.so.6 + 0x6e75c)
                                             #2  0x00007fe41b720dcc __futex_abstimed_wait_common (libc.so.6 + 0x6edcc)
                                             #3  0x00007fe41b72349e pthread_cond_wait@@GLIBC_2.3.2 (libc.so.6 + 0x7149e)
                                             #4  0x00007fe41b53cd21 _ZN3CEC21CCECStandbyProtectionD1Ev (libcec.so.7 + 0x9d21)
                                             #5  0x00007fe41b5516f1 _ZN3CEC13CCECProcessor5CloseEv (libcec.so.7 + 0x1e6f1)
                                             #6  0x00005646e001901a n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x201a)
                                             #7  0x00007fe41b6b5575 __libc_start_call_main (libc.so.6 + 0x3575)
                                             #8  0x00007fe41b6b5628 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3628)
                                             #9  0x00005646e001bb25 n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x4b25)
                                             ELF object binary architecture: AMD x86-64

Sep 21 22:26:40 bazzite cec-control[14783]: /usr/bin/cec-control: line 26: 14787 Done echo "standby $id"
Sep 21 22:26:40 bazzite cec-control[14783]: 14788 Segmentation fault (core dumped) | cec-client ${args[@]}
Sep 21 22:26:40 bazzite systemd[1]: cec-onsleep.service: Deactivated successfully.
Sep 21 22:26:40 bazzite systemd[1]: Finished cec-onsleep.service - Run CEC actions for sleep.
Sep 21 22:26:40 bazzite systemd[1]: cec-onsleep.service: Consumed 12.919s CPU time, 2.6M memory peak.
Sep 21 22:30:39 bazzite systemd[1]: Starting cec-onsleep.service - Run CEC actions for sleep...
Sep 21 22:30:39 bazzite cec-control[15139]: using osd name bazzite
Sep 21 22:30:39 bazzite cec-control[15139]: opening a connection to the CEC adapter...
Sep 21 22:31:07 bazzite cec-control[15139]: ERROR: [ 19667] failed to ping the adapter 3 times in a row. closing the connection.
Sep 21 22:31:07 bazzite cec-control[15139]: Connection lost - trying to reconnect
Sep 21 22:31:07 bazzite systemd-coredump[15323]: Process 15139 (cec-client) of user 0 dumped core.

                                             Module libXau.so.6 from rpm libXau-1.0.12-2.fc42.x86_64
                                             Module libxcb.so.1 from rpm libxcb-1.17.0-5.fc42.x86_64
                                             Module libXrender.so.1 from rpm libXrender-0.9.12-2.fc42.x86_64
                                             Module libXext.so.6 from rpm libXext-1.3.6-3.fc42.x86_64
                                             Module libcap.so.2 from rpm libcap-2.73-2.fc42.x86_64
                                             Module libX11.so.6 from rpm libX11-1.8.12-1.fc42.x86_64
                                             Module libXrandr.so.2 from rpm libXrandr-1.5.4-5.fc42.x86_64
                                             Module libudev.so.1 from rpm systemd-257.9-2.fc42.x86_64
                                             Module libcec.so.7 from rpm libcec-7.1.1-1.fc42.x86_64
                                             Module libtinfo.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libncurses.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libp8-platform.so.2 from rpm platform-2.1.0.1-22.fc42.x86_64
                                             Stack trace of thread 15321:
                                             #0  0x0000000000000000 n/a (n/a + 0x0)
                                             #1  0x00005630d001e7ab n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x87ab)
                                             #2  0x00007f55f0f29f54 start_thread (libc.so.6 + 0x71f54)
                                             #3  0x00007f55f0fad32c __clone3 (libc.so.6 + 0xf532c)

                                             Stack trace of thread 15139:
                                             #0  0x00007f55f0f32462 __syscall_cancel_arch (libc.so.6 + 0x7a462)
                                             #1  0x00007f55f0f2675c __internal_syscall_cancel (libc.so.6 + 0x6e75c)
                                             #2  0x00007f55f0f26dcc __futex_abstimed_wait_common (libc.so.6 + 0x6edcc)
                                             #3  0x00007f55f0f2949e pthread_cond_wait@@GLIBC_2.3.2 (libc.so.6 + 0x7149e)
                                             #4  0x00007f55f0d42d21 _ZN3CEC21CCECStandbyProtectionD1Ev (libcec.so.7 + 0x9d21)
                                             #5  0x00007f55f0d576f1 _ZN3CEC13CCECProcessor5CloseEv (libcec.so.7 + 0x1e6f1)
                                             #6  0x00005630d001801a n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x201a)
                                             #7  0x00007f55f0ebb575 __libc_start_call_main (libc.so.6 + 0x3575)
                                             #8  0x00007f55f0ebb628 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3628)
                                             #9  0x00005630d001ab25 n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x4b25)
                                             ELF object binary architecture: AMD x86-64

Sep 21 22:31:07 bazzite cec-control[15134]: /usr/bin/cec-control: line 26: 15138 Done echo "standby $id"
Sep 21 22:31:07 bazzite systemd[1]: cec-onsleep.service: Deactivated successfully.
Sep 21 22:31:07 bazzite cec-control[15134]: 15139 Segmentation fault (core dumped) | cec-client ${args[@]}
Sep 21 22:31:07 bazzite systemd[1]: Finished cec-onsleep.service - Run CEC actions for sleep.
Sep 21 22:31:07 bazzite systemd[1]: cec-onsleep.service: Consumed 13.642s CPU time, 2.3M memory peak.
Sep 21 22:36:03 bazzite systemd[1]: Starting cec-onsleep.service - Run CEC actions for sleep...
Sep 21 22:36:03 bazzite cec-control[16153]: using osd name bazzite
Sep 21 22:36:03 bazzite cec-control[16153]: opening a connection to the CEC adapter...
Sep 21 22:40:31 bazzite cec-control[16153]: ERROR: [ 19756] failed to ping the adapter 3 times in a row. closing the connection.
Sep 21 22:40:31 bazzite cec-control[16153]: Connection lost - trying to reconnect
Sep 21 22:40:31 bazzite systemd-coredump[16440]: Process 16153 (cec-client) of user 0 dumped core.

                                             Module libXau.so.6 from rpm libXau-1.0.12-2.fc42.x86_64
                                             Module libxcb.so.1 from rpm libxcb-1.17.0-5.fc42.x86_64
                                             Module libXrender.so.1 from rpm libXrender-0.9.12-2.fc42.x86_64
                                             Module libXext.so.6 from rpm libXext-1.3.6-3.fc42.x86_64
                                             Module libcap.so.2 from rpm libcap-2.73-2.fc42.x86_64
                                             Module libX11.so.6 from rpm libX11-1.8.12-1.fc42.x86_64
                                             Module libXrandr.so.2 from rpm libXrandr-1.5.4-5.fc42.x86_64
                                             Module libudev.so.1 from rpm systemd-257.9-2.fc42.x86_64
                                             Module libcec.so.7 from rpm libcec-7.1.1-1.fc42.x86_64
                                             Module libtinfo.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libncurses.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                             Module libp8-platform.so.2 from rpm platform-2.1.0.1-22.fc42.x86_64
                                             Stack trace of thread 16153:
                                             #0  0x0000000000000000 n/a (n/a + 0x0)
                                             #1  0x000055edf2f2c01a n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x201a)
                                             #2  0x00007f76a9946575 __libc_start_call_main (libc.so.6 + 0x3575)
                                             #3  0x00007f76a9946628 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3628)
                                             #4  0x000055edf2f2eb25 n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x4b25)
                                             ELF object binary architecture: AMD x86-64

Sep 21 22:40:31 bazzite cec-control[16148]: /usr/bin/cec-control: line 26: 16152 Done echo "standby $id"
Sep 21 22:40:31 bazzite cec-control[16148]: 16153 Segmentation fault (core dumped) | cec-client ${args[@]}
Sep 21 22:40:31 bazzite systemd[1]: cec-onsleep.service: Deactivated successfully.
Sep 21 22:40:31 bazzite systemd[1]: Finished cec-onsleep.service - Run CEC actions for sleep.
Sep 21 22:40:31 bazzite systemd[1]: cec-onsleep.service: Consumed 13.066s CPU time, 2.8M memory peak.

I have not yet pinpointed why certain boot instances have this issue yet, usually the cec-client is working fine.

[eliottness]

News logs that I found:

Sep 26 16:44:58 bazzite cec-control[44101]: using osd name bazzite
Sep 26 16:44:58 bazzite cec-control[44101]: opening a connection to the CEC adapter..
Sep 26 16:45:55 bazzite cec-control[44101]:  ERROR:   [           19646]        failed to ping the adapter 3 times in a row. closing the connection.
Sep 26 16:45:55 bazzite cec-control[44101]: Connection lost - trying to reconnect
Sep 26 16:46:05 bazzite systemd-coredump[44422]: [🡕] Process 44101 (cec-client) of user 0 dumped core.

                                                 Module libXau.so.6 from rpm libXau-1.0.12-2.fc42.x86_64
                                                 Module libxcb.so.1 from rpm libxcb-1.17.0-5.fc42.x86_64
                                                 Module libXrender.so.1 from rpm libXrender-0.9.12-2.fc42.x86_64
                                                 Module libXext.so.6 from rpm libXext-1.3.6-3.fc42.x86_64
                                                 Module libcap.so.2 from rpm libcap-2.73-2.fc42.x86_64
                                                 Module libX11.so.6 from rpm libX11-1.8.12-1.fc42.x86_64
                                                 Module libXrandr.so.2 from rpm libXrandr-1.5.4-5.fc42.x86_64
                                                 Module libudev.so.1 from rpm systemd-257.9-2.fc42.x86_64
                                                 Module libcec.so.7 from rpm libcec-7.1.1-1.fc42.x86_64
                                                 Module libtinfo.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                                 Module libncurses.so.6 from rpm ncurses-6.5-5.20250125.fc42.x86_64
                                                 Module libp8-platform.so.2 from rpm platform-2.1.0.1-22.fc42.x86_64
                                                 Stack trace of thread 44396:
                                                 #0  0x00007f2c19c2a791 _ZN3CEC27CUSBCECAdapterCommunication11SendCommandENS_23cec_adapter_messagecodeERNS_18CCECAdapterMessageEb (libcec.so.7 +>
                                                 #1  0x00007f2c19c2a953 _ZN3CEC22CUSBCECAdapterCommands14RequestSettingENS_23cec_adapter_messagecodeE (libcec.so.7 + 0x28953)
                                                 #2  0x00007f2c19c2aff0 _ZN3CEC22CUSBCECAdapterCommands35RequestSettingDefaultLogicalAddressEv (libcec.so.7 + 0x28ff0)
                                                 #3  0x00007f2c19c2b54d _ZN3CEC22CUSBCECAdapterCommands15RequestSettingsEv (libcec.so.7 + 0x2954d)
                                                 #4  0x00007f2c19c2b606 _ZN3CEC22CUSBCECAdapterCommands16GetConfigurationERNS_20libcec_configurationE (libcec.so.7 + 0x29606)
                                                 #5  0x00007f2c19c1fa83 _ZN3CEC13CCECProcessor14RegisterClientESt10shared_ptrINS_10CCECClientEE (libcec.so.7 + 0x1da83)
                                                 #6  0x00007f2c19c222ad _ZN3CEC7CLibCEC4OpenEPKcj (libcec.so.7 + 0x202ad)
                                                 #7  0x00005641c8d2e7c4 n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x87c4)
                                                 #8  0x00007f2c19df2f54 start_thread (libc.so.6 + 0x71f54)
                                                 #9  0x00007f2c19e7632c __clone3 (libc.so.6 + 0xf532c)

                                                 Stack trace of thread 44397:
                                                 #0  0x00007f2c19dfb462 __syscall_cancel_arch (libc.so.6 + 0x7a462)
                                                 #1  0x00007f2c19def75c __internal_syscall_cancel (libc.so.6 + 0x6e75c)
                                                 #2  0x00007f2c19defdcc __futex_abstimed_wait_common (libc.so.6 + 0x6edcc)
                                                 #3  0x00007f2c19df26a8 pthread_cond_timedwait@@GLIBC_2.3.2 (libc.so.6 + 0x716a8)
                                                 #4  0x00007f2c19c38060 _ZN3CEC23CCECAdapterMessageQueue7ProcessEv (libcec.so.7 + 0x36060)
                                                 #5  0x00007f2c19c0a20b _ZN10P8PLATFORM7CThread13ThreadHandlerEPv (libcec.so.7 + 0x820b)
                                                 #6  0x00007f2c19df2f54 start_thread (libc.so.6 + 0x71f54)
                                                 #7  0x00007f2c19e7632c __clone3 (libc.so.6 + 0xf532c)

                                                 Stack trace of thread 44103:
                                                 #0  0x00007f2c19dfb462 __syscall_cancel_arch (libc.so.6 + 0x7a462)
                                                 #1  0x00007f2c19def75c __internal_syscall_cancel (libc.so.6 + 0x6e75c)
                                                 #2  0x00007f2c19defdcc __futex_abstimed_wait_common (libc.so.6 + 0x6edcc)
                                                 #3  0x00007f2c19df26a8 pthread_cond_timedwait@@GLIBC_2.3.2 (libc.so.6 + 0x716a8)
                                                 #4  0x00007f2c19c14130 _ZN3CEC10CCECClient7ProcessEv (libcec.so.7 + 0x12130)
                                                 #5  0x00007f2c19c0a20b _ZN10P8PLATFORM7CThread13ThreadHandlerEPv (libcec.so.7 + 0x820b)
                                                 #6  0x00007f2c19df2f54 start_thread (libc.so.6 + 0x71f54)
                                                 #7  0x00007f2c19e7632c __clone3 (libc.so.6 + 0xf532c)

                                                 Stack trace of thread 44101:
                                                 #0  0x00007f2c19dfb462 __syscall_cancel_arch (libc.so.6 + 0x7a462)
                                                 #1  0x00007f2c19def75c __internal_syscall_cancel (libc.so.6 + 0x6e75c)
                                                 #2  0x00007f2c19defdcc __futex_abstimed_wait_common (libc.so.6 + 0x6edcc)
                                                 #3  0x00007f2c19df26a8 pthread_cond_timedwait@@GLIBC_2.3.2 (libc.so.6 + 0x716a8)
                                                 #4  0x00007f2c19c0cb6a _ZN10P8PLATFORM10CConditionIbE4WaitERNS_6CMutexEPFbPvES4_j.constprop.0 (libcec.so.7 + 0xab6a)
                                                 #5  0x00007f2c19c0ccfc _ZN10P8PLATFORM7CThread10StopThreadEi (libcec.so.7 + 0xacfc)
                                                 #6  0x00007f2c19c330b1 _ZN3CEC23CCECAdapterMessageQueueD1Ev (libcec.so.7 + 0x310b1)
                                                 #7  0x00007f2c19c2e7bf _ZN3CEC27CUSBCECAdapterCommunicationD1Ev (libcec.so.7 + 0x2c7bf)
                                                 #8  0x00007f2c19c2e9c5 _ZN3CEC27CUSBCECAdapterCommunicationD0Ev (libcec.so.7 + 0x2c9c5)
                                                 #9  0x00007f2c19c207c3 _ZN3CEC13CCECProcessor5CloseEv (libcec.so.7 + 0x1e7c3)
                                                 #10 0x00005641c8d2801a n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x201a)
                                                 #11 0x00007f2c19d84575 __libc_start_call_main (libc.so.6 + 0x3575)
                                                 #12 0x00007f2c19d84628 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3628)
                                                 #13 0x00005641c8d2ab25 n/a (/89/4e1b4a3c93b22c723fdba71afb52e3008f2e052f05c626c4de7252b7ea7a22.file + 0x4b25)
                                                 ELF object binary architecture: AMD x86-64

[eliottness]

I believe this was caused by the service cec-onsleep and cec-onpoweroff files using Before=final.target which happens too late in the shutdown/suspend process when USB devices are unresponsive. Instead, I changed it to respectively Before=sleep.target and Before=poweroff.target and it's fixed.

Fixing this segfault could still be useful I believe.