Description:
All .docx files are essentially unusable when setting the top bar to a tabbed layout, as opening one will make it automatically crash. Furthermore, the tabbed layout persists in safe mode.

Steps to Reproduce:
1. On the "you're using this version for the first time!" dialog, select the tabbed layout
2. Open a .docx file. It may require formatting such as highlighting or centered text, however I'm not certain as I can't actually see the file I'm trying to open
3. LibreOffice has crashed!

Actual Results:
LibreOffice flashes the content, then immediately crashes. I am unable to read and/or edit the document. Furthermore, the user profile should not persist in safe mode!

Expected Results:
The software should be able to open .docx files normally, regardless of top menu layout. Furthermore, the settings for the top bar should not persist in safe mode, like how none of the user profile should persist.


Reproducible: Always


User Profile Reset: Yes

Additional Info:
Version: 25.8.0.4 (X86_64) / LibreOffice Community
Build ID: 580(Build:4)
CPU threads: 24; OS: Linux 6.16; UI render: default; VCL: kf6 (cairo+wayland)
Locale: en-US (en_US.UTF-8); UI: en-US
25.8.0-1
Calc: threaded

Furthermore, I did a bit of a backtrace on it. Couldn't get the symbols to load with gdb (I'll see if I get back to my computer later today if the symbols have loaded, I'm hoping it'll just take a *really* long time and that gdb didn't somehow hang) so this is probably not particularly useful, however here's the log:
(gdb) r --writer
Starting program: /usr/lib/libreoffice/program/soffice.bin --writer
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".
[New Thread 0x7fffea1fc6c0 (LWP 222228)]
[New Thread 0x7fffe3fff6c0 (LWP 222229)]
[New Thread 0x7fffe37fe6c0 (LWP 222230)]
[New Thread 0x7fffdbfff6c0 (LWP 222231)]
[New Thread 0x7fffdb7fe6c0 (LWP 222232)]
[New Thread 0x7fffdaffd6c0 (LWP 222233)]
[New Thread 0x7fffda7fc6c0 (LWP 222234)]
[New Thread 0x7fffd9ffb6c0 (LWP 222235)]
[New Thread 0x7fffd97fa6c0 (LWP 222236)]
[New Thread 0x7fffd8ff96c0 (LWP 222237)]
[Thread 0x7fffd9ffb6c0 (LWP 222235) exited]
[Thread 0x7fffd97fa6c0 (LWP 222236) exited]
[Thread 0x7fffd8ff96c0 (LWP 222237) exited]
[Thread 0x7fffdaffd6c0 (LWP 222233) exited]
[Thread 0x7fffda7fc6c0 (LWP 222234) exited]
[Thread 0x7fffdb7fe6c0 (LWP 222232) exited]
[Thread 0x7fffdbfff6c0 (LWP 222231) exited]
[New Thread 0x7fffdbfff6c0 (LWP 222238)]
[New Thread 0x7fffdb7fe6c0 (LWP 222239)]
[New Thread 0x7fffda7fc6c0 (LWP 222240)]
[New Thread 0x7fffdaffd6c0 (LWP 222241)]
[New Thread 0x7fffd9ffb6c0 (LWP 222242)]
[New Thread 0x7fffd97fa6c0 (LWP 222243)]
[New Thread 0x7fffd8ff96c0 (LWP 222244)]
[New Thread 0x7fffca7ff6c0 (LWP 222245)]
[New Thread 0x7fffc9ffe6c0 (LWP 222246)]
[New Thread 0x7fffc97fd6c0 (LWP 222247)]
[New Thread 0x7fffc8ffc6c0 (LWP 222248)]
[New Thread 0x7fffc87fb6c0 (LWP 222249)]
[New Thread 0x7fffc7ffa6c0 (LWP 222250)]
[Thread 0x7fffc7ffa6c0 (LWP 222250) exited]
[Thread 0x7fffc87fb6c0 (LWP 222249) exited]
[Thread 0x7fffc8ffc6c0 (LWP 222248) exited]
[Thread 0x7fffc97fd6c0 (LWP 222247) exited]
[Thread 0x7fffc9ffe6c0 (LWP 222246) exited]
[Thread 0x7fffca7ff6c0 (LWP 222245) exited]
[New Thread 0x7fffca7ff6c0 (LWP 222251)]
[New Thread 0x7fffc9ffe6c0 (LWP 222252)]
[New Thread 0x7fffc97fd6c0 (LWP 222253)]
[New Thread 0x7fffc8ffc6c0 (LWP 222254)]
[New Thread 0x7fffbbfff6c0 (LWP 222255)]
[New Thread 0x7fffbac466c0 (LWP 222257)]
[Thread 0x7fffbac466c0 (LWP 222257) exited]
[New Thread 0x7fffbac466c0 (LWP 222258)]
[New Thread 0x7fffba0426c0 (LWP 222259)]
[New Thread 0x7fffb98416c0 (LWP 222260)]
[New Thread 0x7fffb90406c0 (LWP 222261)]
[New Thread 0x7fffb883f6c0 (LWP 222262)]
This plugin supports grabbing the mouse only for popup windows
This plugin supports grabbing the mouse only for popup windows
[Detaching after vfork from child process 222263]
[New Thread 0x7fff9da656c0 (LWP 222265)]
[Thread 0x7fff9da656c0 (LWP 222265) exited]
[New Thread 0x7fff9da656c0 (LWP 222266)]
[Thread 0x7fff9da656c0 (LWP 222266) exited]
[New Thread 0x7fff9da656c0 (LWP 222267)]
[Thread 0x7fff9da656c0 (LWP 222267) exited]
[New Thread 0x7fff9da656c0 (LWP 222268)]
[Thread 0x7fff9da656c0 (LWP 222268) exited]
[New Thread 0x7fff9da656c0 (LWP 222269)]
[Thread 0x7fff9da656c0 (LWP 222269) exited]
[New Thread 0x7fff9da656c0 (LWP 222271)]
[Thread 0x7fff9da656c0 (LWP 222271) exited]
[Detaching after fork from child process 222272]
[Detaching after fork from child process 222274]
[Detaching after fork from child process 222276]
[Detaching after fork from child process 222278]
[Detaching after fork from child process 222280]
[New Thread 0x7fff9da656c0 (LWP 222282)]
[New Thread 0x7fff903ff6c0 (LWP 222283)]
[New Thread 0x7fff8fbfe6c0 (LWP 222284)]

Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
0x00007fff7785f620 in ?? ()
(gdb) bt
#0  0x00007fff7785f620 in ?? ()
#1  0x0000000000000246 in ?? ()
#2  0x00007fff7785f714 in ?? ()
#3  0x00007fff8f2f1890 in ?? () from /usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so
#4  0x00007fffffffb670 in ?? ()
#5  0x00007fff8ee157ad in ?? () from /usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

I wanted to reset the user profile as I'm not 100% sure how I'd go about changing the top bar otherwise, however when I did that I made the mistake of attempting to test it in safe mode. It opened just fine without the tabbed menu, but as soon as I turned it on via the "wow this is the first time you're using LibreOffice 25.8.0.4" popup, it immediately started crashing, and now *the top bar stays tabbed in safe mode*. EEK!