Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-92020

Crash on _l3cfg_notify_cb

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • NetworkManager-1.53.90-1.el10
    • No
    • Moderate
    • ZStream
    • rhel-net-mgmt
    • ssg_networking
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Approved Blocker
    • Hide

      Definition of Done:

      Please mark each item below with ( / ) if completed or ( x ) if incomplete:

      The acceptance criteria defined below are met.

      Given a system running the affected NetworkManager build where connection “dummy1” has DNS options in its nmconnection file and identical DNS options are present in the global DNS settings,

      When an administrator runs nmcli device reapply dummy1,

      Then NetworkManager must complete the reapply action without crashing.


      ( ) Code changes are included in a downstream build attached to an errata.


      ( ) All required testing (manual and/or automated) passes successfully.

      Show
      Definition of Done: Please mark each item below with ( / ) if completed or ( x ) if incomplete: The acceptance criteria defined below are met. Given a system running the affected NetworkManager build where connection “dummy1” has DNS options in its nmconnection file and identical DNS options are present in the global DNS settings, When an administrator runs nmcli device reapply dummy1, Then NetworkManager must complete the reapply action without crashing. ( ) Code changes are included in a downstream build attached to an errata. ( ) All required testing (manual and/or automated) passes successfully.
    • Pass
    • Automated
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      NM crashed upon `nmcli device reapply dummy1` when both interface connection and global DNS has DNS options configured.

      What is the impact of this issue to you?

      Nmstate is trying to store the DNS configuration both to interface level and global DNS level for RHEL-91291

      Please provide the package NVR for which the bug is seen:

      NetworkManager-1.53.4-33963.copr.892e816a9d.el9.x86_64

      How reproducible is this bug?:

      100%

      Steps to reproduce

      1. sudo ./bug.sh

      Expected results

      No crash

      Actual results

                 PID: 2449 (NetworkManager)
                 UID: 0 (root)
                 GID: 0 (root)
              Signal: 11 (SEGV)
           Timestamp: Fri 2025-05-16 14:31:39 CST (2min 28s ago)
        Command Line: /usr/sbin/NetworkManager --no-daemon
          Executable: /usr/sbin/NetworkManager
       Control Group: /system.slice/NetworkManager.service
                Unit: NetworkManager.service
               Slice: system.slice
             Boot ID: 465c211b313f4d75b16696ec1aa034fa
          Machine ID: 1906a0f1a77049e39bcd371b46bbbdd6
            Hostname: c9s
             Storage: /var/lib/systemd/coredump/core.NetworkManager.0.465c211b313f4d75b16696ec1aa034fa.2449.1747377099000000.zst (present)
        Size on Disk: 732.0K
             Message: Process 2449 (NetworkManager) of user 0 dumped core.
      
                      Stack trace of thread 2449:
                      #0  0x0000556f839539d1 _nm_strv_cmp_n (NetworkManager + 0x16c9d1)
                      #1  0x0000556f8398ab9d _l3cfg_notify_cb.lto_priv.3 (NetworkManager + 0x1a3b9d)
                      #2  0x00007f09f0bcbc7f g_closure_invoke (libgobject-2.0.so.0 + 0x13c7f)
                      #3  0x00007f09f0be7f96 signal_emit_unlocked_R (libgobject-2.0.so.0 + 0x2ff96)
                      #4  0x00007f09f0be985a g_signal_emit_valist (libgobject-2.0.so.0 + 0x3185a)
                      #5  0x00007f09f0be9a73 g_signal_emit (libgobject-2.0.so.0 + 0x31a73)
                      #6  0x0000556f83ac6b8f _nm_l3cfg_emit_signal_notify (NetworkManager + 0x2dfb8f)
                      #7  0x0000556f83b047a6 _l3_commit (NetworkManager + 0x31d7a6)
                      #8  0x0000556f83b050c8 _l3_commit_on_idle_cb (NetworkManager + 0x31e0c8)
                      #9  0x00007f09f0acf47b g_idle_dispatch (libglib-2.0.so.0 + 0x5147b)
                      #10 0x00007f09f0ad2f4f g_main_context_dispatch (libglib-2.0.so.0 + 0x54f4f)
                      #11 0x00007f09f0b28268 g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa268)
                      #12 0x00007f09f0ad25a3 g_main_loop_run (libglib-2.0.so.0 + 0x545a3)
                      #13 0x0000556f8383e89d main (NetworkManager + 0x5789d)
                      #14 0x00007f09f02295d0 __libc_start_call_main (libc.so.6 + 0x295d0)
                      #15 0x00007f09f0229680 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x29680)
                      #16 0x0000556f8383eda5 _start (NetworkManager + 0x57da5)
      
                      Stack trace of thread 2450:
                      #0  0x00007f09f030205f __poll (libc.so.6 + 0x10205f)
                      #1  0x00007f09f0b281fc g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa1fc)
                      #2  0x00007f09f0ad0713 g_main_context_iteration (libglib-2.0.so.0 + 0x52713)
                      #3  0x00007f09f0ad0761 glib_worker_main (libglib-2.0.so.0 + 0x52761)
                      #4  0x00007f09f0b01762 g_thread_proxy (libglib-2.0.so.0 + 0x83762)
                      #5  0x00007f09f028a21a start_thread (libc.so.6 + 0x8a21a)
                      #6  0x00007f09f030f290 __clone3 (libc.so.6 + 0x10f290)
      
                      Stack trace of thread 2451:
                      #0  0x00007f09f030205f __poll (libc.so.6 + 0x10205f)
                      #1  0x00007f09f0b281fc g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa1fc)
                      #2  0x00007f09f0ad25a3 g_main_loop_run (libglib-2.0.so.0 + 0x545a3)
                      #3  0x00007f09f0d2446a gdbus_shared_thread_func.lto_priv.0 (libgio-2.0.so.0 + 0x11246a)
                      #4  0x00007f09f0b01762 g_thread_proxy (libglib-2.0.so.0 + 0x83762)
                      #5  0x00007f09f028a21a start_thread (libc.so.6 + 0x8a21a)
                      #6  0x00007f09f030f290 __clone3 (libc.so.6 + 0x10f290)
                      ELF object binary architecture: AMD x86-64
      

        1. bug.sh
          1 kB
          Gris Ge
        2. nm.core
          28.19 MB
          Gris Ge

              rhn-engineering-vbenes Vladimir Benes
              fge@redhat.com Gris Ge
              Network Management Team Network Management Team
              Network Management Team Network Management Team
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: