Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1003492: bind9-host: host crashed with "IOT instruction" error

787 views
Skip to first unread message

Vincent Lefevre

unread,
Jan 10, 2022, 9:00:02 PM1/10/22
to
Package: bind9-host
Version: 1:9.17.21-1
Severity: important

I've just got the following error:

zira:~> host 164.160.126.15
netmgr/netmgr.c:1737: REQUIRE((((handle) != ((void *)0) && ((const isc__magic_t *)(handle))->magic == ((('N') << 24 | ('M') << 16 | ('H') << 8 | ('D')))) && __extension__ ({ __auto_type __atomic_load_ptr = (&(handle)->references); __typeof__ ((void)0, *__atomic_load_ptr) __atomic_load_tmp; __atomic_load (__atomic_load_ptr, &__atomic_load_tmp, (5)); __atomic_load_tmp; }) > 0)) failed, back trace
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(+0x3565f)[0x7f2c9ae9665f]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc_assertion_failed+0xa)[0x7f2c9ae965ba]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc__nmhandle_attach+0x63)[0x7f2c9ae80af3]
host(+0xe39a)[0x55be27fc339a]
host(+0xf2b7)[0x55be27fc42b7]
host(+0x1176b)[0x55be27fc676b]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc__nm_async_readcb+0xad)[0x7f2c9ae83f8d]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc__nm_readcb+0x97)[0x7f2c9ae840b7]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(+0x30e00)[0x7f2c9ae91e00]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc__nm_udp_read_cb+0x46)[0x7f2c9ae935e6]
/usr/lib/x86_64-linux-gnu/libuv.so.1(+0x1ee8d)[0x7f2c9a9cee8d]
/usr/lib/x86_64-linux-gnu/libuv.so.1(+0x22c75)[0x7f2c9a9d2c75]
/usr/lib/x86_64-linux-gnu/libuv.so.1(uv_run+0x114)[0x7f2c9a9bf854]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(+0x248fa)[0x7f2c9ae858fa]
/usr/lib/x86_64-linux-gnu/libisc-9.17.21-1-Debian.so(isc__trampoline_run+0x16)[0x7f2c9aebdca6]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x8d80)[0x7f2c9abb9d80]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x3f)[0x7f2c9aae4b6f]
zsh: IOT instruction (core dumped) host 164.160.126.15

This does not seem to be reproducible. I now get

Host 15.126.160.164.in-addr.arpa not found: 2(SERVFAIL)

But it's immediate, so I suppose that a cache is involved.

-- System Information:
Debian Release: bookworm/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.0-2-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages bind9-host depends on:
ii bind9-libs 1:9.17.21-1
ii libc6 2.33-2
ii libidn2-0 2.3.2-2

bind9-host recommends no packages.

bind9-host suggests no packages.

-- no debconf information

--
Vincent Lefèvre <vin...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Vincent Lefevre

unread,
Jan 10, 2022, 9:00:03 PM1/10/22
to
Control: forcemerge 1000447 -1

I've eventually found that this had already been reported
(I had initially searched for "IOT instruction").

Vincent Lefevre

unread,
Jan 10, 2022, 9:30:03 PM1/10/22
to
On 2022-01-11 02:48:53 +0100, Vincent Lefevre wrote:
> Package: bind9-host
> Version: 1:9.17.21-1
> Severity: important
>
> I've just got the following error:
>
> zira:~> host 164.160.126.15
> netmgr/netmgr.c:1737: REQUIRE((((handle) != ((void *)0) && ((const isc__magic_t *)(handle))->magic == ((('N') << 24 | ('M') << 16 | ('H') << 8 | ('D')))) && __extension__ ({ __auto_type __atomic_load_ptr = (&(handle)->references); __typeof__ ((void)0, *__atomic_load_ptr) __atomic_load_tmp; __atomic_load (__atomic_load_ptr, &__atomic_load_tmp, (5)); __atomic_load_tmp; }) > 0)) failed, back trace
[...]

Here's the backtrace obtained with gdb:

[...]
Core was generated by `host 164.160.126.15'.
Program terminated with signal SIGABRT, Aborted.
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:49
49 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
[Current thread is 1 (Thread 0x7f2c9717f640 (LWP 332931))]
(gdb) bt
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:49
#1 0x00007f2c9aa0e536 in __GI_abort () at abort.c:79
#2 0x00007f2c9ae965bf in isc_assertion_failed (
file=file@entry=0x7f2c9aecb289 "netmgr/netmgr.c", line=line@entry=1737,
type=type@entry=isc_assertiontype_require,
cond=cond@entry=0x7f2c9aec96b0 "(((handle) != ((void *)0) && ((const isc__magic_t *)(handle))->magic == ((('N') << 24 | ('M') << 16 | ('H') << 8 | ('D')))) && __extension__ ({ __auto_type __atomic_load_ptr = (&(handle)->references);"...) at ./lib/isc/assertions.c:48
#3 0x00007f2c9ae80af3 in isc__nmhandle_attach (handle=<optimized out>,
handlep=handlep@entry=0x7f2c9642d0a8) at netmgr/netmgr.c:1737
#4 0x000055be27fc339a in launch_next_query (query=<optimized out>,
query@entry=0x7f2c9642d000) at ./bin/dig/dighost.c:3137
#5 0x000055be27fc42b7 in start_udp (query=<optimized out>)
at ./bin/dig/dighost.c:2941
#6 0x000055be27fc676b in recv_done (handle=<optimized out>,
eresult=<optimized out>, region=<optimized out>, arg=<optimized out>)
at ./bin/dig/dighost.c:3899
#7 0x00007f2c9ae83f8d in isc__nm_async_readcb (worker=worker@entry=0x0,
ev0=ev0@entry=0x7f2c9717a060) at netmgr/netmgr.c:2805
#8 0x00007f2c9ae840b7 in isc__nm_readcb (sock=sock@entry=0x7f2c96413400,
uvreq=<optimized out>, eresult=eresult@entry=ISC_R_SUCCESS)
at netmgr/netmgr.c:2778
#9 0x00007f2c9ae91e00 in udp_recv_cb (handle=handle@entry=0x7f2c964139b0,
nrecv=nrecv@entry=45, buf=buf@entry=0x7f2c9717a1c0,
addr=addr@entry=0x7f2c9717a210, flags=flags@entry=0) at netmgr/udp.c:637
#10 0x00007f2c9ae935e6 in isc__nm_udp_read_cb (handle=0x7f2c964139b0,
nrecv=45, buf=0x7f2c9717a1c0, addr=0x7f2c9717a210, flags=0)
at netmgr/udp.c:1021
#11 0x00007f2c9a9cee8d in uv__udp_recvmsg (handle=0x7f2c964139b0)
at ./src/unix/udp.c:302
#12 uv__udp_io (loop=<optimized out>, w=0x7f2c96413a30, revents=1)
at ./src/unix/udp.c:178
#13 0x00007f2c9a9d2c75 in uv__io_poll (loop=loop@entry=0x7f2c9782c010,
timeout=<optimized out>) at ./src/unix/epoll.c:374
#14 0x00007f2c9a9bf854 in uv_run (loop=loop@entry=0x7f2c9782c010,
mode=mode@entry=UV_RUN_DEFAULT) at ./src/unix/core.c:389
#15 0x00007f2c9ae858fa in nm_thread (worker0=0x7f2c9782c000)
at netmgr/netmgr.c:688
#16 0x00007f2c9aebdca6 in isc__trampoline_run (arg=0x55be29195e80)
at ./lib/isc/trampoline.c:185
#17 0x00007f2c9abb9d80 in start_thread (arg=0x7f2c9717f640)
at pthread_create.c:481
#18 0x00007f2c9aae4b6f in clone ()
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

And attached, a full backtrace with all threads (thread apply all bt full).
gdb.txt
0 new messages