In NetworkManager CI, we encounter repeated crashes in `@vlan_create_1000_bridges_over_1000_vlans` scenario Versions: * rawhide: glib2-2.78.0-3.fc40.x86_64 * 39: glib2-2.78.0-3.fc39.x86_64 Reproducible: Sometimes Sample backtraces: rawhide: https://desktopqe-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/beaker-NetworkManager-main-veth-rawhide-upstream/2460/artifact/artifacts/FAIL_report_NetworkManager-ci_Test0553_vlan_create_1000_bridges_over_1000_vlans.html#toggle=711b Program terminated with signal SIGABRT, Aborted. #0 g_bit_unlock (address=0x55570de515e0, lock_bit=0) at ../glib/gbitlock.c:342 342 if (g_atomic_int_get (&g_bit_lock_contended[class])) [Current thread is 1 (Thread 0x7f3aa8c12540 (LWP 318933))] (gdb) #0 g_bit_unlock (address=0x55570de515e0, lock_bit=0) at ../glib/gbitlock.c:342 #1 0x00007f3aa9edf3f4 in g_variant_unlock (value=0x55570de515b0) at ../glib/gvariant-core.c:283 #2 g_variant_n_children (value=value@entry=0x55570de515b0) at ../glib/gvariant-core.c:1112 #3 0x00007f3aa9edf595 in g_variant_get_child_value (value=0x55570de515b0, index_=1) at ../glib/gvariant-core.c:1159 #4 0x00007f3aa9ee1d09 in g_variant_iter_next_value (iter=iter@entry=0x7fffb71591b0) at ../glib/gvariant.c:3152 #5 0x00007f3aaa0f8e5c in append_value_to_blob (value=value@entry=0x55570de515b0, type=<optimized out>, mbuf=mbuf@entry=0x7fffb71592f0, out_padding_added=out_padding_added@entry=0x0, error=error@entry=0x7fffb7159500) at ../gio/gdbusmessage.c:2643 #6 0x00007f3aaa0fb8ca in g_dbus_message_to_blob (message=0x55570de52e00, out_size=0x7fffb7159480, capabilities=<optimized out>, error=0x7fffb7159500) at ../gio/gdbusmessage.c:2895 #7 0x00007f3aaa0edcf5 in g_dbus_connection_send_message_unlocked (connection=connection@entry=0x5556e1a357d0, message=message@entry=0x55570de52e00, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, out_serial=out_serial@entry=0x7fffb7159614, error=error@entry=0x7fffb7159500) at ../gio/gdbusconnection.c:1630 #8 0x00007f3aaa0eec42 in g_dbus_connection_send_message_with_reply_unlocked (connection=connection@entry=0x5556e1a357d0, message=message@entry=0x55570de52e00, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=25000, timeout_msec@entry=-1, out_serial=out_serial@entry=0x7fffb7159614, cancellable=cancellable@entry=0x555715920020, callback=0x7f3aaa0f34b0 <g_dbus_connection_call_done>, user_data=0x555715a28e10) at ../gio/gdbusconnection.c:1939 #9 0x00007f3aaa0eee07 in g_dbus_connection_send_message_with_reply (connection=connection@entry=0x5556e1a357d0, message=message@entry=0x55570de52e00, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=timeout_msec@entry=-1, out_serial=out_serial@entry=0x7fffb7159614, cancellable=cancellable@entry=0x555715920020, callback=0x7f3aaa0f34b0 <g_dbus_connection_call_done>, user_data=0x555715a28e10) at ../gio/gdbusconnection.c:2030 #10 0x00007f3aaa0f390e in g_dbus_connection_call_internal (connection=0x5556e1a357d0, bus_name=0x7f3a9c006820 ":1.1", object_path=object_path@entry=0x5556e1476f09 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x5556e14a4ff0 "org.freedesktop.resolve1.Manager", method_name=0x5556e14723a4 "SetLinkDomains", parameters=<optimized out>, reply_type=0x7f3aaa156c3b, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, fd_list=0x0, cancellable=0x555715920020, callback=0x5556e12e72b0 <call_done>, user_data=0x5557480609a0) at ../gio/gdbusconnection.c:5971 #11 0x00007f3aaa0f3b97 in g_dbus_connection_call (connection=<optimized out>, bus_name=<optimized out>, object_path=object_path@entry=0x5556e1476f09 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x5556e14a4ff0 "org.freedesktop.resolve1.Manager", method_name=<optimized out>, parameters=<optimized out>, reply_type=0x0, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, cancellable=0x555715920020, callback=0x5556e12e72b0 <call_done>, user_data=0x5557480609a0) at ../gio/gdbusconnection.c:6257 #12 0x00005556e12e70c4 in send_updates (self=self@entry=0x5556e1a6ab60) at src/core/dns/nm-dns-systemd-resolved.c:223 #13 0x00005556e12e96ee in update (plugin=0x5556e1a6ab60, global_config=<optimized out>, ip_data_lst_head=0x5556e1a6a6c0, hostdomain=<optimized out>, error=<optimized out>) at src/core/dns/nm-dns-systemd-resolved.c:867 #14 0x00005556e12bb6bc in nm_dns_plugin_update (error=0x7fffb7159bf0, hostdomain=0x5556e1a5a770 "wlan.rhts.eng.bos.redhat.com", ip_config_lst_head=<optimized out>, global_config=<optimized out>, self=<optimized out>) at src/core/dns/nm-dns-plugin.c:76 #15 update_dns (self=self@entry=0x5556e1a6a650, no_caching=no_caching@entry=0, force_emit=force_emit@entry=0, error=error@entry=0x7fffb7159c98) at src/core/dns/nm-dns-manager.c:1835 #16 0x00005556e12bddb0 in nm_dns_manager_end_updates (self=0x5556e1a6a650, func=0x5556e14f67a0 <__func__.29.lto_priv.7> "device_l3cd_changed") at src/core/dns/nm-dns-manager.c:2256 #17 0x00007f3aa932f056 in ffi_call_unix64 () at ../src/x86/unix64.S:104 #18 0x00007f3aa932b5ef in ffi_call_int (cif=cif@entry=0x7fffb7159f90, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=closure@entry=0x0) at ../src/x86/ffi64.c:673 #19 0x00007f3aa932e3fe in ffi_call (cif=cif@entry=0x7fffb7159f90, fn=fn@entry=0x5556e1460c40 <device_l3cd_changed>, rvalue=rvalue@entry=0x7fffb7159ef0, avalue=avalue@entry=0x7fffb7159e90) at ../src/x86/ffi64.c:710 rawhide: https://desktopqe-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/beaker-NetworkManager-main-veth-rawhide-upstream/2458/artifact/artifacts/FAIL_report_NetworkManager-ci_Test0553_vlan_create_1000_bridges_over_1000_vlans.html#toggle=2c1f Program terminated with signal SIGABRT, Aborted. #0 0x00007fd49eba9818 in g_free (mem=0x0) at ../glib/gmem.c:238 238 free (mem); [Current thread is 1 (Thread 0x7fd49d91e540 (LWP 314781))] (gdb) #0 0x00007fd49eba9818 in g_free (mem=0x0) at ../glib/gmem.c:238 #1 0x00007fd49ebeb1b0 in g_variant_builder_clear (builder=0x7fff6f77ae80) at ../glib/gvariant.c:3387 #2 g_variant_builder_clear (builder=0x7fff6f77ae80) at ../glib/gvariant.c:3372 #3 0x00007fd49ebed8d4 in g_variant_builder_end (builder=builder@entry=0x7fff6f77ae80) at ../glib/gvariant.c:3785 #4 0x00007fd49ebeea1b in g_variant_valist_new (str=str@entry=0x7fff6f77af48, app=app@entry=0x7fff6f77af70) at ../glib/gvariant.c:5306 #5 0x00007fd49ebeefc0 in g_variant_new_va (format_string=<optimized out>, endptr=endptr@entry=0x0, app=app@entry=0x7fff6f77af70) at ../glib/gvariant.c:5479 #6 0x00007fd49ebef1e6 in g_variant_builder_add (builder=builder@entry=0x7fff6f77b100, format_string=format_string@entry=0x7fd49ee6eecf "{yv}") at ../glib/gvariant.c:5636 #7 0x00007fd49ee12887 in g_dbus_message_to_blob (message=0x55a22d1b24e0, out_size=0x7fff6f77b260, capabilities=<optimized out>, error=0x7fff6f77b2e0) at ../gio/gdbusmessage.c:2888 #8 0x00007fd49ee04cf5 in g_dbus_connection_send_message_unlocked (connection=connection@entry=0x55a1d044f7d0, message=message@entry=0x55a22d1b24e0, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, out_serial=out_serial@entry=0x7fff6f77b3f4, error=error@entry=0x7fff6f77b2e0) at ../gio/gdbusconnection.c:1630 #9 0x00007fd49ee05c42 in g_dbus_connection_send_message_with_reply_unlocked (connection=connection@entry=0x55a1d044f7d0, message=message@entry=0x55a22d1b24e0, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=25000, timeout_msec@entry=-1, out_serial=out_serial@entry=0x7fff6f77b3f4, cancellable=cancellable@entry=0x55a201eddd00, callback=0x7fd49ee0a4b0 <g_dbus_connection_call_done>, user_data=0x55a22d1b28e0) at ../gio/gdbusconnection.c:1939 #10 0x00007fd49ee05e07 in g_dbus_connection_send_message_with_reply (connection=connection@entry=0x55a1d044f7d0, message=message@entry=0x55a22d1b24e0, flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=timeout_msec@entry=-1, out_serial=out_serial@entry=0x7fff6f77b3f4, cancellable=cancellable@entry=0x55a201eddd00, callback=0x7fd49ee0a4b0 <g_dbus_connection_call_done>, user_data=0x55a22d1b28e0) at ../gio/gdbusconnection.c:2030 #11 0x00007fd49ee0a90e in g_dbus_connection_call_internal (connection=0x55a1d044f7d0, bus_name=0x7fd48c003400 ":1.0", object_path=object_path@entry=0x55a1ce469f09 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x55a1ce497ff0 "org.freedesktop.resolve1.Manager", method_name=0x55a1ce46540a "SetLinkDNSOverTLS", parameters=<optimized out>, reply_type=0x7fd49ee6dc3b, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, fd_list=0x0, cancellable=0x55a201eddd00, callback=0x55a1ce2da2b0 <call_done>, user_data=0x55a20bb33d20) at ../gio/gdbusconnection.c:5971 #12 0x00007fd49ee0ab97 in g_dbus_connection_call (connection=<optimized out>, bus_name=<optimized out>, object_path=object_path@entry=0x55a1ce469f09 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x55a1ce497ff0 "org.freedesktop.resolve1.Manager", method_name=<optimized out>, parameters=<optimized out>, reply_type=0x0, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, cancellable=0x55a201eddd00, callback=0x55a1ce2da2b0 <call_done>, user_data=0x55a20bb33d20) at ../gio/gdbusconnection.c:6257 #13 0x000055a1ce2da0c4 in send_updates (self=self@entry=0x55a1d0484bc0) at src/core/dns/nm-dns-systemd-resolved.c:223 #14 0x000055a1ce2dc6ee in update (plugin=0x55a1d0484bc0, global_config=<optimized out>, ip_data_lst_head=0x55a1d0484790, hostdomain=<optimized out>, error=<optimized out>) at src/core/dns/nm-dns-systemd-resolved.c:867 #15 0x000055a1ce2ae6bc in nm_dns_plugin_update (error=0x7fff6f77b9d0, hostdomain=0x55a1d04825a0 "wlan.rhts.eng.bos.redhat.com", ip_config_lst_head=<optimized out>, global_config=<optimized out>, self=<optimized out>) at src/core/dns/nm-dns-plugin.c:76 #16 update_dns (self=self@entry=0x55a1d0484720, no_caching=no_caching@entry=0, force_emit=force_emit@entry=0, error=error@entry=0x7fff6f77ba78) at src/core/dns/nm-dns-manager.c:1835 #17 0x000055a1ce2b0db0 in nm_dns_manager_end_updates (self=0x55a1d0484720, func=0x55a1ce4e97a0 <__func__.29.lto_priv.7> "device_l3cd_changed") at src/core/dns/nm-dns-manager.c:2256 #18 0x00007fd49e0f1056 in ffi_call_unix64 () at ../src/x86/unix64.S:104 #19 0x00007fd49e0ed5ef in ffi_call_int (cif=cif@entry=0x7fff6f77bd70, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=closure@entry=0x0) at ../src/x86/ffi64.c:673 #20 0x00007fd49e0f03fe in ffi_call (cif=cif@entry=0x7fff6f77bd70, fn=fn@entry=0x55a1ce453c40 <device_l3cd_changed>, rvalue=rvalue@entry=0x7fff6f77bcd0, avalue=avalue@entry=0x7fff6f77bc70) at ../src/x86/ffi64.c:710 Python Exception <class 'gdb.error'>: value has been optimized out 39: https://desktopqe-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/beaker-NetworkManager-1.44-veth-fedora39-upstream/49/artifact/artifacts/FAIL_report_NetworkManager-ci_Test0553_vlan_create_1000_bridges_over_1000_vlans.html#toggle=f0e8 Core was generated by `/usr/sbin/NetworkManager --no-daemon'. Program terminated with signal SIGABRT, Aborted. #0 g_variant_get_type (value=0x55ad7ece5120) at ../glib/gvariant.c:2078 2078 { [Current thread is 1 (Thread 0x7f10c33e8540 (LWP 309190))] (gdb) #0 g_variant_get_type (value=0x55ad7ece5120) at ../glib/gvariant.c:2078 #1 0x00007f10c466db95 in g_variant_is_of_type (value=<optimized out>, type=0x7f10c48f9416) at ../glib/gvariant.c:2127 #2 0x00007f10c488deec in validate_headers (message=message@entry=0x55ad7ece5bd0 [GDBusMessage], error=error@entry=0x7ffd88ce61d0) at ../gio/gdbusmessage.c:1316 #3 0x00007f10c488e818 in g_dbus_message_to_blob (message=0x55ad7ece5bd0 [GDBusMessage], out_size=0x7ffd88ce6150, capabilities=<optimized out>, error=0x7ffd88ce61d0) at ../gio/gdbusmessage.c:2878 #4 0x00007f10c4880cf5 in g_dbus_connection_send_message_unlocked (connection=connection@entry=0x55ad1538c740 [GDBusConnection], message=message@entry=0x55ad7ece5bd0 [GDBusMessage], flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, out_serial=out_serial@entry=0x7ffd88ce62e4, error=error@entry=0x7ffd88ce61d0) at ../gio/gdbusconnection.c:1630 #5 0x00007f10c4881c42 in g_dbus_connection_send_message_with_reply_unlocked (connection=connection@entry=0x55ad1538c740 [GDBusConnection], message=message@entry=0x55ad7ece5bd0 [GDBusMessage], flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=25000, timeout_msec@entry=-1, out_serial=out_serial@entry=0x7ffd88ce62e4, cancellable=cancellable@entry=0x55ad1dc86560 [GCancellable], callback=0x7f10c48864b0 <g_dbus_connection_call_done>, user_data=0x55ad7ece6010) at ../gio/gdbusconnection.c:1939 #6 0x00007f10c4881e07 in g_dbus_connection_send_message_with_reply (connection=connection@entry=0x55ad1538c740 [GDBusConnection], message=message@entry=0x55ad7ece5bd0 [GDBusMessage], flags=flags@entry=G_DBUS_SEND_MESSAGE_FLAGS_NONE, timeout_msec=timeout_msec@entry=-1, out_serial=out_serial@entry=0x7ffd88ce62e4, cancellable=cancellable@entry=0x55ad1dc86560 [GCancellable], callback=0x7f10c48864b0 <g_dbus_connection_call_done>, user_data=0x55ad7ece6010) at ../gio/gdbusconnection.c:2030 #7 0x00007f10c488690e in g_dbus_connection_call_internal (connection=0x55ad1538c740 [GDBusConnection], bus_name=0x7f10b8006ff0 ":1.1", object_path=object_path@entry=0x55ad14942e62 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x55ad14942f50 "org.freedesktop.resolve1.Manager", method_name=0x55ad1492c24e "SetLinkDNS", parameters=<optimized out>, reply_type=0x7f10c48f0019, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, fd_list=0x0, cancellable=0x55ad1dc86560 [GCancellable], callback=0x55ad1478f840 <call_done>, user_data=0x55ad5519a100) at ../gio/gdbusconnection.c:5971 #8 0x00007f10c4886b97 in g_dbus_connection_call (connection=<optimized out>, bus_name=<optimized out>, object_path=object_path@entry=0x55ad14942e62 "/org/freedesktop/resolve1", interface_name=interface_name@entry=0x55ad14942f50 "org.freedesktop.resolve1.Manager", method_name=<optimized out>, parameters=<optimized out>, reply_type=0x0, flags=G_DBUS_CALL_FLAGS_NONE, timeout_msec=-1, cancellable=0x55ad1dc86560 [GCancellable], callback=0x55ad1478f840 <call_done>, user_data=0x55ad5519a100) at ../gio/gdbusconnection.c:6257 #9 0x000055ad1478f654 in send_updates (self=self@entry=0x55ad153c1960 [NMDnsSystemdResolved]) at src/core/dns/nm-dns-systemd-resolved.c:223 #10 0x000055ad14791c7e in update (plugin=0x55ad153c1960 [NMDnsSystemdResolved], global_config=<optimized out>, ip_data_lst_head=0x55ad153c1530, hostdomain=<optimized out>, error=<optimized out>) at src/core/dns/nm-dns-systemd-resolved.c:867 #11 0x000055ad14763c70 in nm_dns_plugin_update (error=0x7ffd88ce68c0, hostdomain=0x55ad153b2700 "wlan.rhts.eng.bos.redhat.com", ip_config_lst_head=<optimized out>, global_config=<optimized out>, self=<optimized out>) at src/core/dns/nm-dns-plugin.c:76 #12 update_dns (self=self@entry=0x55ad153c14c0 [NMDnsManager], no_caching=no_caching@entry=0, force_emit=force_emit@entry=0, error=error@entry=0x7ffd88ce6968) at src/core/dns/nm-dns-manager.c:1835 #13 0x000055ad14766340 in nm_dns_manager_end_updates (self=0x55ad153c14c0 [NMDnsManager], func=0x55ad1499eac0 <__func__.29.lto_priv.7> "device_l3cd_changed") at src/core/dns/nm-dns-manager.c:2246 #14 0x00007f10c3b05056 in ffi_call_unix64 () at ../src/x86/unix64.S:104 #15 0x00007f10c3b015ef in ffi_call_int (cif=cif@entry=0x7ffd88ce6c60, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=closure@entry=0x0) at ../src/x86/ffi64.c:673 #16 0x00007f10c3b043fe in ffi_call (cif=cif@entry=0x7ffd88ce6c60, fn=fn@entry=0x55ad14908c30 <device_l3cd_changed>, rvalue=rvalue@entry=0x7ffd88ce6bc0, avalue=avalue@entry=0x7ffd88ce6b60) at ../src/x86/ffi64.c:710
This one is in libc however it's called from glib2 code: https://desktopqe-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/beaker-NetworkManager-main-veth-rawhide-upstream/2461/artifact/artifacts/FAIL_report_NetworkManager-ci_Test0553_vlan_create_1000_bridges_over_1000_vlans.html#toggle=d3c4 Core was generated by `/usr/sbin/NetworkManager --no-daemon'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f6e505fd8c0 in _int_malloc (av=av@entry=0x7f6e50738ac0 <main_arena>, bytes=bytes@entry=64) at malloc.c:4101 4101 remainder->bk = remainder->fd = unsorted_chunks (av); [Current thread is 1 (Thread 0x7f6e4f540540 (LWP 318769))] (gdb) #0 0x00007f6e505fd8c0 in _int_malloc (av=av@entry=0x7f6e50738ac0 <main_arena>, bytes=bytes@entry=64) at malloc.c:4101 #1 0x00007f6e505ff2ce in __libc_calloc (n=n@entry=1, elem_size=elem_size@entry=64) at malloc.c:3747 #2 0x00007f6e507c82a2 in g_malloc0 (n_bytes=64) at ../glib/gmem.c:163 #3 0x00007f6e50805cc8 in g_variant_builder_init (type=0x558f82453350, builder=0x7ffe6779fba0) at ../glib/gvariant.c:3513 #4 g_variant_builder_init (builder=0x7ffe6779fba0, type=0x558f82453350) at ../glib/gvariant.c:3436 #5 0x00007f6e50805f52 in g_variant_builder_open (type=0x558f82453350, builder=0x7ffe6779fba0) at ../glib/gvariant.c:3645 #6 g_variant_builder_open (builder=0x7ffe6779fba0, type=0x558f82453350) at ../glib/gvariant.c:3630 #7 0x0000558f82206cb3 in prepare_one_interface (self=self@entry=0x558f83c86550, ic=ic@entry=0x558f93d65e60) at src/core/dns/nm-dns-systemd-resolved.c:488 #8 0x0000558f822c9add in update (plugin=0x558f83c86550, global_config=<optimized out>, ip_data_lst_head=0x558f83c86120, hostdomain=<optimized out>, error=<optimized out>) at src/core/dns/nm-dns-systemd-resolved.c:827 #9 0x0000558f8229bc2c in nm_dns_plugin_update (error=0x7ffe677a0230, hostdomain=0x558f83c86fb0 "wlan.rhts.eng.bos.redhat.com", ip_config_lst_head=<optimized out>, global_config=<optimized out>, self=<optimized out>) at src/core/dns/nm-dns-plugin.c:76 #10 update_dns (self=self@entry=0x558f83c860b0, no_caching=no_caching@entry=0, force_emit=force_emit@entry=0, error=error@entry=0x7ffe677a02d8) at src/core/dns/nm-dns-manager.c:1835 #11 0x0000558f8229e320 in nm_dns_manager_end_updates (self=0x558f83c860b0, func=0x558f824d7720 <__func__.29.lto_priv.7> "device_l3cd_changed") at src/core/dns/nm-dns-manager.c:2256 #12 0x00007f6e4f780056 in ffi_call_unix64 () at ../src/x86/unix64.S:104 #13 0x00007f6e4f77c5ef in ffi_call_int (cif=cif@entry=0x7ffe677a05d0, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=closure@entry=0x0) at ../src/x86/ffi64.c:673 #14 0x00007f6e4f77f3fe in ffi_call (cif=cif@entry=0x7ffe677a05d0, fn=fn@entry=0x558f82441580 <device_l3cd_changed>, rvalue=rvalue@entry=0x7ffe677a0530, avalue=avalue@entry=0x7ffe677a04d0) at ../src/x86/ffi64.c:710 Python Exception <class 'gdb.error'>: value has been optimized out (gdb)
reassigning similarly as el8 issue: https://issues.redhat.com/browse/RHEL-13123
An upstream bug report would be good. If you are able to reproduce the issue, then valgrind would be a sure way to debug this since it is memory corruption, but we'd probably need help from NetworkManager developers to figure out how to run it under valgrind.
Upstream issue is here: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1403
This bug appears to have been reported against 'rawhide' during the Fedora Linux 40 development cycle. Changing version to 40.