2028404 – [NMCI] [abrt] [faf] NetworkManager: raise(): nmtui_vlan_deactivate_connection_wo_autoconnect killed by 6

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2028404 - [NMCI] [abrt] [faf] NetworkManager: raise(): nmtui_vlan_deactivate_connection_wo_autoconnect killed by 6

Summary: [NMCI] [abrt] [faf] NetworkManager: raise(): nmtui_vlan_deactivate_connection...

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 8
Classification:	Red Hat
Component:	NetworkManager
Sub Component:
Version:	8.6
Hardware:	Unspecified
OS:	Unspecified
Priority:	urgent
Severity:	unspecified
Target Milestone:	rc
Target Release:	---
Assignee:	Lubomir Rintel
QA Contact:	Matej Berezny
Docs Contact:
URL:	https://faf.lab.eng.brq.redhat.com/fa...
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2021-12-02 10:36 UTC by Vladimir Benes
Modified:	2022-05-10 15:32 UTC (History)
CC List:	10 users (show)
Fixed In Version:	NetworkManager-1.36.0-0.4.el8
Doc Type:	No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed:	2022-05-10 14:54:52 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Issue Tracker	RHELPLAN-104533	None	None	None	2021-12-02 10:36:35 UTC
Red Hat Product Errata	RHEA-2022:1985	None	None	None	2022-05-10 14:55:07 UTC
freedesktop.org Gitlab	NetworkManager NetworkManager merge_requests 1059	None	opened	ipv4ll: don't abort on external LL address removals	2022-01-11 10:05:40 UTC

Description Vladimir Benes 2021-12-02 10:36:04 UTC

This bug has been created based on an anonymous crash report requested by the package maintainer.

Report URL: https://faf.lab.eng.brq.redhat.com/faf/reports/bthash/3925866579535457dcb0a9afb8e7c2e520a5a700/

it's visible with 
https://tools.dqe.lab.eng.bos.redhat.com/vbenes/nm_ci_stats/stats.html#search:nmtui_vlan_deactivate_connection_wo_autoconnect

Comment 1 Vladimir Benes 2021-12-02 10:38:45 UTC

backtrace: 
[New LWP 1119421]
[New LWP 1119422]
[New LWP 1119423]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/NetworkManager --no-daemon'.
Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50	  return ret;
[Current thread is 1 (Thread 0x7f9951eb6480 (LWP 1119421))]

Thread 1 (Thread 0x7f9951eb6480 (LWP 1119421)):
#0  0x00007f994f51037f in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
        set = {__val = {0, 94528066603913, 94528066603924, 140296437739415, 0, 140296441138208, 0, 32, 2048, 129, 2048, 140296441138112, 2064, 140296437750187, 94528066868720, 7}}
        pid = <optimized out>
        tid = <optimized out>
#1  0x00007f994f4fadb5 in __GI_abort () at abort.c:79
        save_stage = 1
        act = {__sigaction_handler = {sa_handler = 0x7f994ff7b6d0, sa_sigaction = 0x7f994ff7b6d0}, sa_mask = {__val = {140733193388033, 0, 85, 94528065761136, 17179052256679359488, 94528039616832, 140296448358096, 140296448378538, 94529763934208, 94528065761136, 17179052256679359488, 0, 94528065761136, 86, 140296450940448, 140733856245136}}, sa_flags = 105059376, sa_restorer = 0x0}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007f994fef6123 in g_assertion_message (domain=<optimized out>, file=<optimized out>, line=<optimized out>, func=0x55f906431430 <__func__.38813> "_ipv4ll_state_change", message=<optimized out>) at gtestutils.c:2533
        lstr = "888\000\000\000\000\000\311`\361O\231\177\000\000\033\000\000\000\000\000\000\000\033\000\000\000\000\000\000"
        s = 0x55f907c7ef70 " \265\304\a\371U"
#3  0x00007f994ff4f20e in g_assertion_message_expr (domain=domain@entry=0x55f906435840 "nm", file=file@entry=0x55f906430551 "src/core/nm-l3-ipv4ll.c", line=line@entry=888, func=func@entry=0x55f906431430 <__func__.38813> "_ipv4ll_state_change", expr=expr@entry=0x0) at gtestutils.c:2556
        s = 0x55f907d83d20 "code should not be reached"
#4  0x000055f90632582c in _ipv4ll_state_change (self=0x55f907c5a530, is_on_idle_handler=0) at src/core/nm-l3-ipv4ll.c:888
        self_keep_alive = 0x55f907c5a530
        pladdr = <optimized out>
        acd_info = 0x7f993c025740
        generate_new_addr = <optimized out>
        new_state = <optimized out>
        addr0 = 1632501417
        reg = <optimized out>
        __func__ = "_ipv4ll_state_change"
#8  0x00007f9950424093 in <emit signal ??? on instance 0x55f907d1d8e0 [NML3Cfg]> (instance=instance@entry=0x55f907d1d8e0, signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3448
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff27826d80, reg_save_area = 0x7fff27826cc0}}
    #5  0x00007f99504073bd in g_closure_invoke (closure=0x55f907d79ad0, return_value=0x0, n_param_values=2, param_values=0x7fff27826ac0, invocation_hint=0x7fff27826a40) at gclosure.c:804
                marshal = 0x7f995040a840 <g_cclosure_marshal_VOID__POINTER>
                marshal_data = 0x0
                in_marshal = 0
                real_closure = 0x55f907d79ab0
                __func__ = "g_closure_invoke"
    #6  0x00007f995041a945 in signal_emit_unlocked_R (node=node@entry=0x55f907c432b0, detail=detail@entry=0, instance=instance@entry=0x55f907d1d8e0, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7fff27826ac0) at gsignal.c:3636
                tmp = <optimized out>
                handler = 0x55f907cea380
                accumulator = 0x0
                emission = {next = 0x0, instance = 0x55f907d1d8e0, ihint = {signal_id = 65, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
                class_closure = 0x0
                hlist = <optimized out>
                handler_list = 0x55f907d9a180
                return_accu = 0x0
                accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
                signal_id = 65
                max_sequential_handler_number = 17907
                return_value_altered = 1
    #7  0x00007f9950423a56 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fff27826ca0) at gsignal.c:3392
                instance_and_params = 0x7fff27826ac0
                signal_return_type = <optimized out>
                param_values = 0x7fff27826ad8
                node = <optimized out>
                i = <optimized out>
                n_params = <optimized out>
                __func__ = "g_signal_emit_valist"
#9  0x000055f90611a2d3 in _nm_l3cfg_emit_signal_notify (self=self@entry=0x55f907d1d8e0 [NML3Cfg], notify_data=notify_data@entry=0x7fff27827760) at src/core/nm-l3cfg.c:576
        sbuf = "acd-event, addr=169.254.77.97, state=external-removed\000\377\377\000\000\000\000\000\000\000\000Mq\202'\377\177\000\000\000\000\000\000\000\000\000\000\377\377\377\377", '\000' <repeats 20 times>, "\300P\211O\231\177\000\000\000\000\000\000\000\000\000\000`q\202'\377\177\000\000\000\000\202'\377\177\000\000\000\000\000\000\000\000\000\000`q\202'\377\177\000\000nq\202'\377\177\000\000\377\377\377\377\377\377\377\377\000\000\000\000\000\000\000\000\202q\202'\377\177\000\000\000\000\000\000\000\000\000\000\377\377\377\377\000\000\000\000\000"...
        __func__ = "_nm_l3cfg_emit_signal_notify"
#10 0x000055f90611abfc in _nm_l3cfg_emit_signal_notify_acd_event (self=0x55f907d1d8e0 [NML3Cfg], acd_data=<optimized out>) at src/core/nm-l3cfg.c:2008
        track_infos_clone = <optimized out>
        notify_data = {notify_type = NM_L3_CONFIG_NOTIFY_TYPE_ACD_EVENT, {l3cd_changed = {l3cd_old = 0x2614dfea9, l3cd_new = 0x6, commited = 224}, acd_event = {info = {addr = 1632501417, n_track_infos = 2, state = NM_L3_ACD_ADDR_STATE_EXTERNAL_REMOVED, l3cfg = 0x55f907d1d8e0 [NML3Cfg], track_infos = 0x7fff27827710}}, platform_change = {obj = 0x2614dfea9, change_type = 6}, platform_change_on_idle = {obj_type_flags = 1632501417}, ipv4ll_event = {ipv4ll = 0x2614dfea9}}}
        info = 0x7fff27827768
        i = <optimized out>
        __func__ = "_nm_l3cfg_emit_signal_notify_acd_event"
#11 0x000055f90611ad83 in _nm_l3cfg_emit_signal_notify_acd_event_all (self=0x55f907d1d8e0 [NML3Cfg]) at src/core/nm-l3cfg.c:2041
        self_keep_alive = 0x55f907d1d8e0 [NML3Cfg]
        acd_data = <optimized out>
#12 0x000055f906121b4f in _l3_acd_nacd_event (fd=<optimized out>, condition=<optimized out>, user_data=<optimized out>) at src/core/nm-l3cfg.c:1536
        event = 0x55f907c498e0
        sender_addr_data = {ether_addr_octet = "\000\000\000\000\000"}
        sender_addr = <optimized out>
        acd_data = 0x7f99501f1280 <g_source_callback_funcs>
        self = 0x55f907d1d8e0 [NML3Cfg]
        r = <optimized out>
        __func__ = "_l3_acd_nacd_event"
#13 0x00007f994ff2795d in g_main_dispatch (context=0x55f907ba0a40) at gmain.c:3193
        dispatch = 0x7f994ff6ddc0 <g_unix_fd_source_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x55f907d1d8e0
        callback = 0x55f906121a50 <_l3_acd_nacd_event>
        cb_funcs = 0x7f99501f1280 <g_source_callback_funcs>
        cb_data = 0x55f907d59110
        need_destroy = <optimized out>
        source = 0x55f907c71370
        current = 0x55f907bae150
        i = 4
        __func__ = "g_main_dispatch"
#14 0x00007f994ff2795d in g_main_context_dispatch (context=context@entry=0x55f907ba0a40) at gmain.c:3873
#15 0x00007f994ff27d18 in g_main_context_iterate (context=0x55f907ba0a40, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3946
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 17
        fds = 0x55f907c4def0
#16 0x00007f994ff28042 in g_main_loop_run (loop=0x55f907b7c150) at gmain.c:4142
        __func__ = "g_main_loop_run"
#17 0x000055f906083b94 in main (argc=<optimized out>, argv=<optimized out>) at src/core/main.c:511
        success = 1
        manager = 0x55f907bfb050 [NMManager]
        config = <optimized out>
        error = 0x0
        wrote_pidfile = 0
        bad_domains = 0x0
        config_cli = 0x0
        sd_id = 108
        error_invalid_logging_config = 0x0
        warnings = <optimized out>
        errsv = <optimized out>
        __func__ = "main"

Thread 2 (Thread 0x7f9949321700 (LWP 1119422)):
#0  0x00007f994f5caa41 in __GI___poll (fds=0x55f907bb6c60, nfds=2, timeout=3996) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
#1  0x00007f994ff27c86 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x55f907bb6c60, timeout=<optimized out>, context=0x55f907bb6cf0) at gmain.c:4247
        ret = <optimized out>
        errsv = <optimized out>
        poll_func = 0x7f994ff375e0 <g_poll>
        max_priority = 2147483647
        timeout = 3996
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x55f907bb6c60
#2  0x00007f994ff27c86 in g_main_context_iterate (context=context@entry=0x55f907bb6cf0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3941
        max_priority = 2147483647
        timeout = 3996
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x55f907bb6c60
#3  0x00007f994ff27db0 in g_main_context_iteration (context=0x55f907bb6cf0, may_block=may_block@entry=1) at gmain.c:4007
        retval = <optimized out>
#4  0x00007f994ff27e01 in glib_worker_main (data=<optimized out>) at gmain.c:5817
#5  0x00007f994ff4ffca in g_thread_proxy (data=0x55f907bb8c00) at gthread.c:784
        thread = 0x55f907bb8c00
        __func__ = "g_thread_proxy"
#6  0x00007f994f8a617a in start_thread (arg=<optimized out>) at pthread_create.c:479
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140296334743296, -8918296933733362289, 140733856249326, 140733856249327, 140733856249456, 140296334738048, 8865699068725040527, 8865695562967291279}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
#7  0x00007f994f5d5dc3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7f9948b20700 (LWP 1119423)):
#0  0x00007f994f5caa41 in __GI___poll (fds=0x55f907bce6a0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
#1  0x00007f994ff27c86 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x55f907bce6a0, timeout=<optimized out>, context=0x55f907bcc910) at gmain.c:4247
        ret = <optimized out>
        errsv = <optimized out>
        poll_func = 0x7f994ff375e0 <g_poll>
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 3
        allocated_nfds = 3
        fds = 0x55f907bce6a0
#2  0x00007f994ff27c86 in g_main_context_iterate (context=0x55f907bcc910, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3941
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 3
        allocated_nfds = 3
        fds = 0x55f907bce6a0
#3  0x00007f994ff28042 in g_main_loop_run (loop=0x55f907bcca50) at gmain.c:4142
        __func__ = "g_main_loop_run"
#4  0x00007f99507215da in gdbus_shared_thread_func (user_data=0x55f907bcc8e0) at gdbusprivate.c:275
        data = 0x55f907bcc8e0
#5  0x00007f994ff4ffca in g_thread_proxy (data=0x55f907bb8ca0) at gthread.c:784
        thread = 0x55f907bb8ca0
        __func__ = "g_thread_proxy"
#6  0x00007f994f8a617a in start_thread (arg=<optimized out>) at pthread_create.c:479
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140296326350592, -8918296933733362289, 140733856249630, 140733856249631, 140733856249760, 140296326345344, 8865697964381574543, 8865695562967291279}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>

Comment 3 Lubomir Rintel 2022-01-12 14:00:01 UTC

Merged in https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/3e12c6ff81960fb851234b7396e6318d820b9de

Comment 6 Matej Berezny 2022-01-27 12:39:05 UTC

No more crashes appeared after ~120 tests with newest NM version, so I am setting this to verified.

Comment 9 errata-xmlrpc 2022-05-10 14:54:52 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (NetworkManager bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2022:1985

Note You need to log in before you can comment on or make changes to this bug.