Segmentation fault in (node-22) crashed in node::ReportWritesToJSStreamListener::OnStreamAfterReqFinished(node::StreamReq*, int)()

[alexei-serjantov]

Version

v22.11.0

Platform

Linux rpi-computer 6.11.7-300.fc41.aarch64 #1 SMP PREEMPT_DYNAMIC Fri Nov 8 19:35:43 UTC 2024 aarch64 GNU/Linux
also 
Linux sty-computer 6.5.6-300.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Oct 6 19:57:21 UTC 2023 x86_64 GNU/Linux

Subsystem

ReportWritesToJSStreamListener

What steps will reproduce the bug?

Happens in http2 server environment when many streams are written to

How often does it reproduce? Is there a required condition?

I can reproduce it running two web application in parallel each reading 5 streams of data. The longest request takes about 30 sec.

What is the expected behavior? Why is that the expected behavior?

Expected behaviour should be the same as if two applications were running in sequence.

What do you see instead?

On x86-64 computer
[alex@sty-computer:logs]$ coredumpctl info 1085476
PID: 1085476 (node)
UID: 1000 (alex)
GID: 1000 (alex)
Signal: 11 (SEGV)
Timestamp: Thu 2025-01-30 09:27:50 UTC (1h 21min ago)
Command Line: /usr/bin/node --max-old-space-size=500 server
Executable: /usr/bin/node-20
Control Group: /system.slice/nodeserver.service
Unit: nodeserver.service
Slice: system.slice
Boot ID: f058c1a4455a4f3bba4ade693c363fc5
Machine ID: 727c4e89aaf242fbb02e582344a69a5c
Hostname: sty-computer
Storage: /var/lib/systemd/coredump/core.node.1000.f058c1a4455a4f3bba4ade693c363fc5.1085476.1738229270000000.zst (present)
Size on Disk: 81.1M
Package: nodejs20/20.10.0-3.fc39
build-id: 836364cec8cb18e51f715114b904fdeb7490f9c1
Message: Process 1085476 (node) of user 1000 dumped core.

 Module libbrotlicommon.so.1 from rpm brotli-1.1.0-1.fc39.x86_64
 Module libssl.so.3 from rpm openssl-3.1.1-4.fc39.x86_64
 Module libcrypto.so.3 from rpm openssl-3.1.1-4.fc39.x86_64
 Module libbrotlienc.so.1 from rpm brotli-1.1.0-1.fc39.x86_64
 Module libbrotlidec.so.1 from rpm brotli-1.1.0-1.fc39.x86_64
 Module libuv.so.1 from rpm libuv-1.46.0-2.fc39.x86_64
 Module libz.so.1 from rpm zlib-1.2.13-4.fc39.x86_64
 Module libnode.so.115 from rpm nodejs20-20.10.0-3.fc39.x86_64
 Module node-20 from rpm nodejs20-20.10.0-3.fc39.x86_64
 Stack trace of thread 1085476:
 #0 0x00007f528bdf142b _ZN4node30ReportWritesToJSStreamListener24OnStreamAfterReqFinishedEPNS_9StreamReqEi (libn>
 #1 0x00007f528be07036 _ZN4node10StreamPipe11ProcessDataEmSt10unique_ptrIN2v812BackingStoreESt14default_deleteIS>
 #2 0x00007f528be0717f _ZN4node10StreamPipe16ReadableListener12OnStreamReadElRK8uv_buf_t (libnode.so.115 + 0xc07>
 #3 0x00007f528bcf1f4c _ZZN4node2fs10FileHandle9ReadStartEvENUlP7uv_fs_sE_4_FUNES3_.lto_priv.0 (libnode.so.115 +>
 #4 0x00007f528bceded5 _ZN4node24MakeLibuvRequestCallbackI7uv_fs_sPFvPS1_EE7WrapperES2_ (libnode.so.115 + 0xaede>
 #5 0x00007f528ed9918f uv__io_poll (libuv.so.1 + 0x2918f)
 #6 0x00007f528ed80578 uv_run (libuv.so.1 + 0x10578)
 #7 0x00007f528bc25ea2 _ZN4node21SpinEventLoopInternalEPNS_11EnvironmentE (libnode.so.115 + 0xa25ea2)
 #8 0x00007f528bd355e0 _ZN4node16NodeMainInstance3RunEPNS_8ExitCodeEPNS_11EnvironmentE (libnode.so.115 + 0xb355e>
 #9 0x00007f528bd451a6 _ZN4node16NodeMainInstance3RunEv (libnode.so.115 + 0xb451a6)
 #10 0x00007f528bcc55bc _ZN4node5StartEiPPc (libnode.so.115 + 0xac55bc)
 #11 0x00007f528b04614a __libc_start_call_main (libc.so.6 + 0x2814a)
 #12 0x00007f528b04620b __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x2820b)
 #13 0x000055f321756035 _start (node-20 + 0x2035)

 Stack trace of thread 1085479:
 #0 0x0000000000000000 n/a (n/a + 0x0)
 #1 0x00007f528ed80578 uv_run (libuv.so.1 + 0x10578)
 #2 0x00007f528bd5956c _ZZN4node23WorkerThreadsTaskRunner20DelayedTaskScheduler5StartEvENUlPvE_4_FUNES2_ (libnod>
 #3 0x00007f528b0ac897 start_thread (libc.so.6 + 0x8e897)
 #4 0x00007f528b1336bc __clone3 (libc.so.6 + 0x1156bc)

 Stack trace of thread 1085482:
 #0 0x00007f528b0a9169 __futex_abstimed_wait_common (libc.so.6 + 0x8b169)
 #1 0x00007f528b0abb09 pthread_cond_wait@@GLIBC_2.3.2 (libc.so.6 + 0x8db09)
 #2 0x00007f528ed919bd uv_cond_wait (libuv.so.1 + 0x219bd)
 #3 0x00007f528bd59343 _ZN4node12_GLOBAL__N_1L20PlatformWorkerThreadEPv (libnode.so.115 + 0xb59343)
 #4 0x00007f528b0ac897 start_thread (libc.so.6 + 0x8e897)
 #5 0x00007f528b1336bc __clone3 (libc.so.6 + 0x1156bc)

 Stack trace of thread 1085816:
 #0 0x00007f528b0a9169 __futex_abstimed_wait_common (libc.so.6 + 0x8b169)
 #1 0x00007f528b0abb09 pthread_cond_wait@@GLIBC_2.3.2 (libc.so.6 + 0x8db09)
 #2 0x00007f528ed919bd uv_cond_wait (libuv.so.1 + 0x219bd)
 #3 0x00007f528ed83dee worker (libuv.so.1 + 0x13dee)
 #4 0x00007f528b0ac897 start_thread (libc.so.6 + 0x8e897)
 #5 0x00007f528b1336bc __clone3 (libc.so.6 + 0x1156bc)

 Stack trace of thread 1085477:
 #0 0x0000000000000000 n/a (n/a + 0x0)
 #1 0x000055f32315f800 n/a (n/a + 0x0)
 ELF object binary architecture: AMD x86-64

on ARM architecture
alex@rpi-computer:~$ coredumpctl info 394317
PID: 394317 (node)
UID: 1000 (alex)
GID: 1000 (alex)
Signal: 11 (SEGV)
Timestamp: Thu 2025-01-30 09:58:17 UTC (52min ago)
Command Line: /usr/bin/node server
Executable: /usr/bin/node-22
Control Group: /system.slice/nodeserver.service
Unit: nodeserver.service
Slice: system.slice
Boot ID: 8efe470861f54173b72128c739f2ae65
Machine ID: 66aca1ce31954e27a4bb9479117df1f3
Hostname: rpi-computer
Storage: /var/lib/systemd/coredump/core.node.1000.8efe470861f54173b72128c739f2ae65.394317.1738231097000000.zst (present)
Size on Disk: 68.2M
Package: nodejs22/22.11.0-3.fc41
build-id: 15cd4d210e41a74d8a95a88d9de51f1be3095964
Message: Process 394317 (node) of user 1000 dumped core.

 Module libbrotlicommon.so.1 from rpm brotli-1.1.0-5.fc41.aarch64
 Module libssl.so.3 from rpm openssl-3.2.2-9.fc41.aarch64
 Module libcrypto.so.3 from rpm openssl-3.2.2-9.fc41.aarch64
 Module libbrotlienc.so.1 from rpm brotli-1.1.0-5.fc41.aarch64
 Module libbrotlidec.so.1 from rpm brotli-1.1.0-5.fc41.aarch64
 Module libuv.so.1 from rpm libuv-1.49.2-1.fc41.aarch64
 Module libz.so.1 from rpm zlib-ng-2.1.7-3.fc41.aarch64
 Module libnode.so.127 from rpm nodejs22-22.11.0-3.fc41.aarch64
 Module node-22 from rpm nodejs22-22.11.0-3.fc41.aarch64
 Stack trace of thread 394317:
 #0 0x0000ffffa5bf7130 _ZN4node30ReportWritesToJSStreamListener24OnStreamAfterReqFinishedEPNS_9StreamReqEi (libnode.so.127 + 0xcb7130)
 #1 0x0000ffffa5c0abc0 _ZN4node10StreamPipe11ProcessDataEmSt10unique_ptrIN2v812BackingStoreESt14default_deleteIS3_EE (libnode.so.127 + 0xc>
 #2 0x0000ffffa5c0ad2c _ZN4node10StreamPipe16ReadableListener12OnStreamReadElRK8uv_buf_t (libnode.so.127 + 0xccad2c)
 #3 0x0000ffffa5abfc5c n/a (libnode.so.127 + 0xb7fc5c)
 #4 0x0000ffffa5abd198 _ZN4node24MakeLibuvRequestCallbackI7uv_fs_sPFvPS1_EE7WrapperES2_ (libnode.so.127 + 0xb7d198)
 #5 0x0000ffffa4cc4750 uv__work_done (libuv.so.1 + 0x14750)
 #6 0x0000ffffa4cb9d70 uv__async_io.part.0 (libuv.so.1 + 0x9d70)
 #7 0x0000ffffa4cd8994 uv__io_poll (libuv.so.1 + 0x28994)
 #8 0x0000ffffa4cc0a2c uv_run (libuv.so.1 + 0x10a2c)
 #9 0x0000ffffa5a059a0 _ZN4node21SpinEventLoopInternalEPNS_11EnvironmentE (libnode.so.127 + 0xac59a0)
 #10 0x0000ffffa5b0dafc _ZN4node16NodeMainInstance3RunEPNS_8ExitCodeEPNS_11EnvironmentE (libnode.so.127 + 0xbcdafc)
 #11 0x0000ffffa5b1f358 _ZN4node16NodeMainInstance3RunEv (libnode.so.127 + 0xbdf358)
 #12 0x0000ffffa5a8cfbc _ZN4node5StartEiPPc (libnode.so.127 + 0xb4cfbc)
 #13 0x0000ffffa4d9629c __libc_start_call_main (libc.so.6 + 0x2629c)
 #14 0x0000ffffa4d9637c __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x2637c)
 #15 0x0000aaaae8390a30 _start (node-22 + 0xa30)

 Stack trace of thread 394318:
 #0 0x0000ffffa4e68110 epoll_pwait (libc.so.6 + 0xf8110)
 #1 0x0000ffffa4cd87a4 uv__io_poll (libuv.so.1 + 0x287a4)
 #2 0x0000ffffa4cc0a2c uv_run (libuv.so.1 + 0x10a2c)
 #3 0x0000ffffa5b3c3ac _ZZN4node23WorkerThreadsTaskRunner20DelayedTaskScheduler5StartEvENUlPvE_4_FUNES2_ (libnode.so.127 + 0xbfc3ac)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394319:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa5b3c064 n/a (libnode.so.127 + 0xbfc064)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394321:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa5b3c064 n/a (libnode.so.127 + 0xbfc064)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394320:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa5b3c064 n/a (libnode.so.127 + 0xbfc064)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394323:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4e051d4 __new_sem_wait_slow64.constprop.0 (libc.so.6 + 0x951d4)
 #2 0x0000ffffa4cd1368 uv_sem_wait (libuv.so.1 + 0x21368)
 #3 0x0000ffffa5c09134 n/a (libnode.so.127 + 0xcc9134)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394324:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa4cc4bd4 worker (libuv.so.1 + 0x14bd4)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394327:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa4cc4bd4 worker (libuv.so.1 + 0x14bd4)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394326:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa4cc4bd4 worker (libuv.so.1 + 0x14bd4)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394322:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa5b3c064 n/a (libnode.so.127 + 0xbfc064)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)

 Stack trace of thread 394325:
 #0 0x0000ffffa4df820c __GI___futex_abstimed_wait_cancelable64 (libc.so.6 + 0x8820c)
 #1 0x0000ffffa4dfb274 pthread_cond_wait@@GLIBC_2.17 (libc.so.6 + 0x8b274)
 #2 0x0000ffffa4cd12c0 uv_cond_wait (libuv.so.1 + 0x212c0)
 #3 0x0000ffffa4cc4bd4 worker (libuv.so.1 + 0x14bd4)
 #4 0x0000ffffa4dfc0d8 start_thread (libc.so.6 + 0x8c0d8)
 #5 0x0000ffffa4e67dcc thread_start (libc.so.6 + 0xf7dcc)
 ELF object binary architecture: AARCH64

Additional information

No response

[github-actions]

This issue has been marked as stale due to 210 days of inactivity.
It will be automatically closed in 30 days if no further activity occurs. If this is still relevant, please leave a comment or update it to keep it open.

[github-actions]

This issue has been automatically closed after 30 days of inactivity following its stale status (no activity for a total of 240 days).
If this is still relevant, feel free to reopen it or leave a comment with additional details so we can continue the discussion.