NetworkManager: nm-online(or nmcli) terminates with signal 6, Aborted

Issue

• NetworkManager: nm-online(or nmcli) terminates with signal 6, Aborted

nm-online core sample:

# file coredump 
coredump: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/bin/nm-online -s -q --timeout=30', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/bin/nm-online', platform: 'x86_64'
# rpm -qf /usr/bin/nm-online
NetworkManager-1.8.0-9.el7.x86_64
# rpm -q glibc
glibc-2.17-196.el7.x86_64


(gdb) info threads
  Id   Target Id         Frame 
  4    Thread 0x7f87a22d9880 (LWP 1182) g_hash_table_lookup_node (hash_return=<synthetic pointer>, key=0x7f878c053ad0, hash_table=0x560a5b3a1520 = {...}) at ghash.c:404
  3    Thread 0x7f8795ef0700 (LWP 1190) 0x00007f879f5f3a3d in poll () at ../sysdeps/unix/syscall-template.S:81
  2    Thread 0x7f8796ef2700 (LWP 1185) 0x00007f879f5f3a3d in poll () at ../sysdeps/unix/syscall-template.S:81
* 1    Thread 0x7f87966f1700 (LWP 1187) 0x00007f879f53b1f7 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
(gdb) thread apply all bt

Thread 4 (Thread 0x7f87a22d9880 (LWP 1182)):
#0  0x00007f879fd1c5a0 in g_hash_table_lookup (hash_return=<synthetic pointer>, key=0x7f878c053ad0, hash_table=0x560a5b3a1520 = {...}) at ghash.c:404
#1  0x00007f879fd1c5a0 in g_hash_table_lookup (hash_table=0x560a5b3a1520 = {...}, key=key@entry=0x7f878c053ad0) at ghash.c:1147
#2  0x00007f87a0521074 in signal_cb (connection=<optimized out>, sender_name=0x7f878c050060 ":1.8", object_path=0x7f878c053ad0 "/org/freedesktop", interface_name=0x7f878c04f2e0 "org.freedesktop.DBus.ObjectManager", signal_name=0x7f878c051c70 "InterfacesAdded", parameters=0x7f878c052530, user_data=0x560a5b3b74c0) at gdbusobjectmanagerclient.c:995
#3  0x00007f87a05017b5 in emit_signal_instance_in_idle_cb (data=data@entry=0x7f878c0523b0) at gdbusconnection.c:3705
#4  0x00007f879fd2a0d7 in g_idle_dispatch (source=0x7f878c053e20, callback=0x7f87a0501740 <emit_signal_instance_in_idle_cb>, user_data=0x7f878c0523b0) at gmain.c:5543
#5  0x00007f879fd2d4c9 in g_main_context_dispatch (context=0x560a5b3b33a0) at gmain.c:3201
#6  0x00007f879fd2d4c9 in g_main_context_dispatch (context=context@entry=0x560a5b3b33a0) at gmain.c:3854
#7  0x00007f879fd2d818 in g_main_context_iterate (context=0x560a5b3b33a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3927
#8  0x00007f879fd2daea in g_main_loop_run (loop=0x560a5b3b3300) at gmain.c:4123
#9  0x0000560a59d5581e in main (argc=1, argv=0x7ffc8313acc8) at clients/nm-online.c:290
...skip


Thread 1 (Thread 0x7f87966f1700 (LWP 1187)):
#0  0x00007f879f53b1f7 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007f879f53c8e8 in __GI_abort () at abort.c:90
#2  0x00007f879f57af47 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f879f687608 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:196
#3  0x00007f879f582619 in _int_free (ar_ptr=0x7f879f8c2760 <main_arena>, ptr=<optimized out>, str=0x7f879f687730 "double free or corruption (!prev)", action=3) at malloc.c:5023
#4  0x00007f879f582619 in _int_free (av=0x7f879f8c2760 <main_arena>, p=<optimized out>, have_lock=0) at malloc.c:3845
#5  0x00007f879fd32bce in g_free (mem=0x560a5b3c1ed0) at gmem.c:189
#6  0x00007f879fd1b9cc in g_hash_table_resize (hash_table=hash_table@entry=0x560a5b3a1520 = {...}) at ghash.c:616
#7  0x00007f879fd1bfe4 in g_hash_table_insert_node (hash_table=0x560a5b3a1520 = {...}) at ghash.c:645
#8  0x00007f879fd1bfe4 in g_hash_table_insert_node (hash_table=hash_table@entry=0x560a5b3a1520 = {...}, node_index=node_index@entry=1, key_hash=key_hash@entry=3068066843, new_key=new_key@entry=0x7f8788027590, new_value=new_value@entry=0x7f87880126e0, keep_new_key=keep_new_key@entry=0, reusing_key=reusing_key@entry=0) at ghash.c:978
#9  0x00007f879fd1c0e7 in g_hash_table_insert_internal (hash_table=0x560a5b3a1520 = {...}, key=0x7f8788027590, value=0x7f87880126e0, keep_new_key=0) at ghash.c:1229
#10 0x00007f87a0520f4f in add_interfaces (manager=manager@entry=0x560a5b3b74c0 [GDBusObjectManagerClient], object_path=0x7f878c049a60 "/org/freedesktop/NetworkManager", ifaces_and_properties=<optimized out>, name_owner=name_owner@entry=0x7f8788019860 ":1.8") at gdbusobjectmanagerclient.c:1558
#11 0x00007f87a0521954 in process_get_all_result (manager=0x560a5b3b74c0 [GDBusObjectManagerClient], value=<optimized out>, name_owner=0x7f8788019860 ":1.8") at gdbusobjectmanagerclient.c:1647
#12 0x00007f87a05220c3 in initable_init (initable=0x560a5b3b74c0, cancellable=0x560a5b3b4e10 [GCancellable], error=0x7f87966f0d60) at gdbusobjectmanagerclient.c:1400
#13 0x00007f87a04820de in async_init_thread (task=0x560a5b3be840 [GTask], source_object=<optimized out>, task_data=<optimized out>, cancellable=<optimized out>) at gasyncinitable.c:257
#14 0x00007f87a04d472d in g_task_thread_pool_thread (thread_data=0x560a5b3be840, pool_data=<optimized out>) at gtask.c:1304
#15 0x00007f879fd548bc in g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:307
#16 0x00007f879fd53f20 in g_thread_proxy (data=0x560a5b3bb8a0) at gthread.c:784
#17 0x00007f87a09e9e25 in start_thread (arg=0x7f87966f1700) at pthread_create.c:308
#18 0x00007f879f5fe34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113