If a tray icon gets a mapped and unmapped and the mapped again in quick succession, we can end up with multiple handlers listening for window creation events. An attacker could use this to crash gnome-shell.
Created gnome-shell tracking bugs for this issue: Affects: fedora-all [bug 1492008]
Upstream issue: https://bugzilla.gnome.org/show_bug.cgi?id=787361 Upstream patch: https://git.gnome.org/browse/gnome-shell/commit/?id=90c55e1
gnome-shell-3.22.3-2.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.