Bug 2028385

[New LWP 1084276]
[New LWP 1084277]
[New LWP 1084278]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/NetworkManager --no-daemon'.
Program terminated with signal SIGTRAP, Trace/breakpoint trap.
#0  _g_log_abort (breakpoint=1) at gmessages.c:580
580	    G_BREAKPOINT ();
[Current thread is 1 (Thread 0x7f5a6c3aa480 (LWP 1084276))]

Thread 1 (Thread 0x7f5a6c3aa480 (LWP 1084276)):
#0  0x00007f5a6a422895 in _g_log_abort (breakpoint=1) at gmessages.c:580
        debugger_present = 1
#1  0x00007f5a6a423b98 in g_logv (log_domain=0x7f5a60459f20 "nm", log_level=G_LOG_LEVEL_CRITICAL, format=<optimized out>, args=args@entry=0x7ffc3f42a720) at gmessages.c:1391
        domain = 0x0
        data = 0x0
        depth = 1
        log_func = 0x7f5a6a423890 <g_log_default_handler>
        domain_fatal_mask = <optimized out>
        masquerade_fatal = 0
        test_level = 10
        was_fatal = <optimized out>
        was_recursion = <optimized out>
        msg = 0x5557a4254dd0 "modem_new_config: assertion 'nm_device_devip_get_state(device, addr_family) == NM_DEVICE_IP_STATE_PENDING' failed"
        msg_alloc = 0x5557a4254dd0 "modem_new_config: assertion 'nm_device_devip_get_state(device, addr_family) == NM_DEVICE_IP_STATE_PENDING' failed"
        i = 3
#2  0x00007f5a6a423d63 in g_log (log_domain=<optimized out>, log_level=<optimized out>, format=<optimized out>) at gmessages.c:1432
        args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffc3f42a800, reg_save_area = 0x7ffc3f42a740}}
#3  0x00007f5a6539809e in ffi_call_unix64 () at ../src/x86/unix64.S:76
#4  0x00007f5a65397a4f in ffi_call (cif=cif@entry=0x7ffc3f42aa80, fn=fn@entry=0x7f5a60459330 <modem_new_config>, rvalue=<optimized out>, avalue=avalue@entry=0x7ffc3f42a950) at ../src/x86/ffi64.c:525
        classes = {X86_64_INTEGER_CLASS, X86_64_NO_CLASS, 1409354736, 32602}
        stack = <optimized out>
        argp = <optimized out>
        arg_types = <optimized out>
        gprcount = <optimized out>
        ssecount = <optimized out>
        ngpr = 1
        nsse = 0
        i = <optimized out>
        avn = <optimized out>
        ret_in_memory = <optimized out>
        reg_args = <optimized out>
#5  0x00007f5a6a8fd386 in g_cclosure_marshal_generic_va (closure=<optimized out>, return_value=<optimized out>, instance=<optimized out>, args_list=<optimized out>, marshal_data=<optimized out>, n_params=<optimized out>, param_types=<optimized out>) at gclosure.c:1604
        rtype = <optimized out>
        rvalue = 0x7ffc3f42a9f0
        n_args = <optimized out>
        atypes = <optimized out>
        args = <optimized out>
        storage = 0x7ffc3f42a910
        i = <optimized out>
        cif = {abi = FFI_UNIX64, nargs = 8, arg_types = 0x7ffc3f42a9a0, rtype = 0x7f5a65398490 <ffi_type_void>, bytes = 16, flags = 0}
        cc = <optimized out>
        enum_tmpval = <optimized out>
        tmpval_used = 0
        args_copy = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7ffc3f42ae28, reg_save_area = 0x7ffc3f42ad50}}
#6  0x00007f5a6a8fc616 in _g_closure_invoke_va (closure=0x5557a4194670, return_value=0x0, instance=0x5557a41534d0, args=0x7ffc3f42ad30, n_params=6, param_types=0x7f5a54010bf0) at gclosure.c:867
        marshal = 0x7f5a6a8fcf40 <g_cclosure_marshal_generic_va>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x5557a4194650
        __func__ = "_g_closure_invoke_va"
#7  0x00007f5a6a918a9c in g_signal_emit_valist (instance=0x5557a41534d0, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7ffc3f42ad30) at gsignal.c:3301
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x5557a41534d0, ihint = {signal_id = 109, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 93834904492432}
        signal_id = 109
        instance_type = 93834904492432
        emission_return = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 4
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = 1
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#8  0x00007f5a6a919093 in g_signal_emit (instance=instance@entry=0x5557a41534d0, signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3448
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffc3f42ae10, reg_save_area = 0x7ffc3f42ad50}}
#9  0x00007f5a602465e7 in nm_modem_emit_signal_new_config (self=self@entry=0x5557a41534d0 [NMModemBroadband], addr_family=addr_family@entry=2, l3cd=0x5557a42be980, do_auto=0, iid=0x0, failure_reason=failure_reason@entry=NM_DEVICE_STATE_REASON_NONE, error=0x0) at src/core/devices/wwan/nm-modem.c:232
        __func__ = "nm_modem_emit_signal_new_config"
#10 0x00007f5a60246862 in nm_modem_emit_signal_new_config_success (self=self@entry=0x5557a41534d0 [NMModemBroadband], addr_family=addr_family@entry=2, l3cd=<optimized out>, do_auto=<optimized out>, iid=<optimized out>) at src/core/devices/wwan/nm-modem.c:250
#11 0x00007f5a60246915 in _ppp_maybe_emit_new_config (self=self@entry=0x5557a41534d0 [NMModemBroadband], addr_family=addr_family@entry=2) at src/core/devices/wwan/nm-modem.c:621
        priv = <optimized out>
        __func__ = "_ppp_maybe_emit_new_config"
        IS_IPv4 = 1
        ip_data = <optimized out>
        do_auto = <optimized out>
#12 0x00007f5a60246cda in _stage3_ip_config_start_on_idle (self=0x5557a41534d0 [NMModemBroadband], addr_family=2) at src/core/devices/wwan/nm-modem.c:740
        IS_IPv4 = 1
        __func__ = "_stage3_ip_config_start_on_idle"
        priv = 0x5557a4153400
        ip_method = <optimized out>
        connection = <optimized out>
        method = <optimized out>
        error = 0x0
        failure_reason = <optimized out>
#13 0x00007f5a6a41927b in g_idle_dispatch (source=0x5557a4268170, callback=0x7f5a60246d40 <_stage3_ip_config_start_on_idle_4>, user_data=0x5557a41534d0) at gmain.c:5579
        again = <optimized out>
#14 0x00007f5a6a41c95d in g_main_dispatch (context=0x5557a40f6a40) at gmain.c:3193
        dispatch = 0x7f5a6a419260 <g_idle_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x5557a41534d0
        callback = 0x7f5a60246d40 <_stage3_ip_config_start_on_idle_4>
        cb_funcs = 0x7f5a6a6e6280 <g_source_callback_funcs>
        cb_data = 0x5557a4201a10
        need_destroy = <optimized out>
        source = 0x5557a4268170
        current = 0x5557a4104150
        i = 1
        __func__ = "g_main_dispatch"
#15 0x00007f5a6a41c95d in g_main_context_dispatch (context=context@entry=0x5557a40f6a40) at gmain.c:3873
#16 0x00007f5a6a41cd18 in g_main_context_iterate (context=0x5557a40f6a40, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3946
        max_priority = 200
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 11
        fds = 0x5557a4220ee0
#17 0x00007f5a6a41d042 in g_main_loop_run (loop=0x5557a40d2150) at gmain.c:4142
        __func__ = "g_main_loop_run"
#18 0x00005557a24bab64 in main (argc=<optimized out>, argv=<optimized out>) at src/core/main.c:511
        success = 1
        manager = 0x5557a414f010 [NMManager]
        config = <optimized out>
        error = 0x0
        wrote_pidfile = 0
        bad_domains = 0x0
        config_cli = 0x0
        sd_id = 108
        error_invalid_logging_config = 0x0
        warnings = <optimized out>
        errsv = <optimized out>
        __func__ = "main"

Thread 2 (Thread 0x7f5a63816700 (LWP 1084277)):
#0  0x00007f5a69abfa41 in __GI___poll (fds=0x5557a410cc60, nfds=2, timeout=3996) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
#1  0x00007f5a6a41cc86 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x5557a410cc60, timeout=<optimized out>, context=0x5557a410ccf0) at gmain.c:4247
        ret = <optimized out>
        errsv = <optimized out>
        poll_func = 0x7f5a6a42c5e0 <g_poll>
        max_priority = 2147483647
        timeout = 3996
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x5557a410cc60
#2  0x00007f5a6a41cc86 in g_main_context_iterate (context=context@entry=0x5557a410ccf0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3941
        max_priority = 2147483647
        timeout = 3996
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x5557a410cc60
#3  0x00007f5a6a41cdb0 in g_main_context_iteration (context=0x5557a410ccf0, may_block=may_block@entry=1) at gmain.c:4007
        retval = <optimized out>
#4  0x00007f5a6a41ce01 in glib_worker_main (data=<optimized out>) at gmain.c:5817
#5  0x00007f5a6a444fca in g_thread_proxy (data=0x5557a410ec00) at gthread.c:784
        thread = 0x5557a410ec00
        __func__ = "g_thread_proxy"
#6  0x00007f5a69d9b17a in start_thread (arg=<optimized out>) at pthread_create.c:479
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140026193209088, -3987387831721174473, 140721369820414, 140721369820415, 140721369820544, 140026193203840, 3899331014938024503, 3899308413740997175}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
#7  0x00007f5a69acadc3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7f5a63015700 (LWP 1084278)):
#0  0x00007f5a69abfa41 in __GI___poll (fds=0x5557a41246a0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 1
        sc_cancel_oldtype = 0
#1  0x00007f5a6a41cc86 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x5557a41246a0, timeout=<optimized out>, context=0x5557a4122910) at gmain.c:4247
        ret = <optimized out>
        errsv = <optimized out>
        poll_func = 0x7f5a6a42c5e0 <g_poll>
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 3
        allocated_nfds = 3
        fds = 0x5557a41246a0
#2  0x00007f5a6a41cc86 in g_main_context_iterate (context=0x5557a4122910, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3941
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 3
        allocated_nfds = 3
        fds = 0x5557a41246a0
#3  0x00007f5a6a41d042 in g_main_loop_run (loop=0x5557a4122a50) at gmain.c:4142
        __func__ = "g_main_loop_run"
#4  0x00007f5a6ac165da in gdbus_shared_thread_func (user_data=0x5557a41228e0) at gdbusprivate.c:275
        data = 0x5557a41228e0
#5  0x00007f5a6a444fca in g_thread_proxy (data=0x5557a410eca0) at gthread.c:784
        thread = 0x5557a410eca0
        __func__ = "g_thread_proxy"
#6  0x00007f5a69d9b17a in start_thread (arg=<optimized out>) at pthread_create.c:479
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140026184816384, -3987387831721174473, 140721369820718, 140721369820719, 140721369820848, 140026184811136, 3899332114986523191, 3899308413740997175}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>

from the log, it looks like the gsm_sim_create_default_connection test. It may be a duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=2028427 ?

this was discovered (as rather seldom crashes) in CI.

Setting "Tested", as the CI test is running, and so far, it didn't crash.

Granted, it might not run enough days to say with certainty. But the patch looks right, and it didn't happen so far.

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (NetworkManager bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2022:1985