tor crash: conflux_note_cell_sent

Summary

tor exit relay crashes

What is the current bug behavior?

tor crashes

What is the expected behavior?

should not crash

Environment

• version: 0.4.8.10-1~d12.bookworm+1
• Debian 12
• deb.torproject.org

Relevant logs and/or screenshots

 Bug: Tor 0.4.8.10: Assertion leg failed in conflux_note_cell_sent at ../src/core/or/conflux.c:534: . Stack trace: (on Tor 0.4.8.10 )
tor_assertion_failed_(): Bug: ../src/core/or/conflux.c:534: conflux_note_cell_sent: Assertion leg failed; aborting. (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(log_backtrace_impl+0x57) [0x555806726ea7] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(tor_assertion_failed_+0x147) [0x555806731c57] (on Tor 0.4.8.10 )
tor[2919]: ============================================================ T= 1709661994
tor[2919]: Tor 0.4.8.10 died: Caught signal 11
tor[2919]: /usr/bin/tor(+0xead6a)[0x555806726d6a]
Bug:     /usr/bin/tor(conflux_note_cell_sent+0xf4) [0x5558067c3374] (on Tor 0.4.8.10 )
tor[2919]: /lib/x86_64-linux-gnu/libc.so.6(abort+0x170)[0x7fa77056950f]
tor[2919]: /lib/x86_64-linux-gnu/libc.so.6(abort+0x170)[0x7fa77056950f]
tor[2919]: /usr/bin/tor(+0xeb5de)[0x5558067275de]
tor[2919]: /usr/bin/tor(+0xf5eee)[0x555806731eee]
Bug:     /usr/bin/tor(relay_send_command_from_edge_+0x1ad) [0x5558066d358d] (on Tor 0.4.8.10 )
tor[2919]: /usr/bin/tor(conflux_note_cell_sent+0xf9)[0x5558067c3379]
tor[2919]: /usr/bin/tor(relay_send_command_from_edge_+0x1ad)[0x5558066d358d]
tor[2919]: /usr/bin/tor(connection_edge_send_command+0x73)[0x5558066d3a63]
tor[2919]: /usr/bin/tor(connection_edge_finished_connecting+0xa8)[0x5558067e1328]
Bug:     /usr/bin/tor(connection_edge_send_command+0x73) [0x5558066d3a63] (on Tor 0.4.8.10 )
tor[2919]: /usr/bin/tor(+0x19dff8)[0x5558067d9ff8]
tor[2919]: /usr/bin/tor(connection_handle_write+0x38)[0x5558067da458]
tor[2919]: /usr/bin/tor(+0x70123)[0x5558066ac123]
tor[2919]: /lib/x86_64-linux-gnu/libevent-2.1.so.7(+0x21585)[0x7fa770e5c585]
tor[2919]: /lib/x86_64-linux-gnu/libevent-2.1.so.7(event_base_loop+0x49f)[0x7fa770e5cc1f]
tor[2919]: /usr/bin/tor(do_main_loop+0xf1)[0x5558066ad671]
tor[2919]: /usr/bin/tor(tor_run_main+0x1e5)[0x5558066a8fa5]
Bug:     /usr/bin/tor(connection_edge_finished_connecting+0xa8) [0x5558067e1328] (on Tor 0.4.8.10 )
tor[2919]: /usr/bin/tor(tor_main+0x59)[0x5558066a5329]
tor[2919]: /usr/bin/tor(main+0x19)[0x5558066a4ee9]
tor[2919]: /lib/x86_64-linux-gnu/libc.so.6(+0x2724a)[0x7fa77056a24a]
tor[2919]: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x85)[0x7fa77056a305]
tor[2919]: /usr/bin/tor(_start+0x21)[0x5558066a4f31]
Bug:     /usr/bin/tor(+0x19dff8) [0x5558067d9ff8] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(connection_handle_write+0x38) [0x5558067da458] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(+0x70123) [0x5558066ac123] (on Tor 0.4.8.10 )
Bug:     /lib/x86_64-linux-gnu/libevent-2.1.so.7(+0x21585) [0x7fa770e5c585] (on Tor 0.4.8.10 )
Bug:     /lib/x86_64-linux-gnu/libevent-2.1.so.7(event_base_loop+0x49f) [0x7fa770e5cc1f] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(do_main_loop+0xf1) [0x5558066ad671] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(tor_run_main+0x1e5) [0x5558066a8fa5] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(tor_main+0x59) [0x5558066a5329] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(main+0x19) [0x5558066a4ee9] (on Tor 0.4.8.10 )
Bug:     /lib/x86_64-linux-gnu/libc.so.6(+0x2724a) [0x7fa77056a24a] (on Tor 0.4.8.10 )
Bug:     /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x85) [0x7fa77056a305] (on Tor 0.4.8.10 )
Bug:     /usr/bin/tor(_start+0x21) [0x5558066a4f31] (on Tor 0.4.8.10 )
systemd[1]: tor: Main process exited, code=exited, status=127/n/a