The function question_attempt_step:get_user() returns the $user property which might not have been initialized. Also, get_user_fullname() accesses the same property. It will then silently return an empty string without notifying the caller that something went wrong and how the problem can be solved.