BIRD Crash when reconfiguring with a change to direct protocols

[David Petera]

Hello Maiyun,

thanks for the bug report!

We are came across a similar reconfiguration issue and this helps us a lot.
It is being investigated by dev team right now.

If there will be need for more information (like the corefile etc.) we 
will let you know.

Have a good week,
David

David Petera (he/him) | BIRD Tech Support | CZ.NIC, z.s.p.o.

On 9/30/25 00:00, Maiyun Zhang via Bird-users wrote:
>
> Dear BIRD Developers,
>
>
> I saw two BIRD crashes today. This happened when I was running birdc 
> configure with a change to the list of interfaces in a direct protocol.
>
>
> I have the core dump files if they might be helpful.
>
>
> Sep 29 21:57:59 hostname1 bird[8950]: Restarting protocol direct1
>
> Sep 29 21:57:59 hostname1 bird[8950]: *Trying to lock in a bad order: 
> 0000ffffe7488368 0000ffff8f8da858*
>
> Sep 29 21:57:59 hostname1 systemd[1]: Started Process Core Dump (PID 
> 9765/UID 0).
>
> Sep 29 21:58:07 hostname1 systemd-coredump[9766]: [🡕] *Process 8950 
> (bird) of user 980 dumped core.*
>
> *Stack trace of thread 8950:*
>
> *#0 0x0000ffff8f77f7f8 __pthread_kill_implementation (libc.so.6 + 
> 0x827f8)*
>
> *#1 0x0000ffff8f737b3c raise (libc.so.6 + 0x3ab3c)*
>
> *#2 0x0000ffff8f724074 abort (libc.so.6 + 0x27074)*
>
> *#3 0x00000000004badf8 bug (bird + 0xbadf8)*
>
> *#4 0x00000000004ba5b8 do_lock (bird + 0xba5b8)*
>
> *#5 0x000000000045056c rte_import (bird + 0x5056c)*
>
> *#6 0x0000000000463cc4 babel_retract_route (bird + 0x63cc4)*
>
> *#7 0x0000000000463d30 babel_remove_iface (bird + 0x63d30)*
>
> *#8 0x0000000000468074 babel_reconfigure_ifaces (bird + 0x68074)*
>
> *#9 0x000000000043d254 proto_reconfigure (bird + 0x3d254)*
>
> *#10 0x000000000040f548 protos_commit (bird + 0xf548)*
>
> *#11 0x0000000000410474 config_commit (bird + 0x10474)*
>
> *#12 0x00000000004c0b80 cmd_reconfig (bird + 0xc0b80)*
>
> *#13 0x00000000004db6f4 cf_parse.isra.0 (bird + 0xdb6f4)*
>
> *#14 0x0000000000409b44 cli_parse (bird + 0x9b44)*
>
> *#15 0x0000000000435700 cli_command (bird + 0x35700)*
>
> *#16 0x0000000000435904 cli_event (bird + 0x35904)*
>
> *#17 0x00000000004259bc ev_run_list_limited (bird + 0x259bc)*
>
> *#18 0x0000000000403f20 io_loop (bird + 0x3f20)*
>
> *#19 0x0000ffff8f724340 __libc_start_call_main (libc.so.6 + 0x27340)*
>
> *#20 0x0000ffff8f724418 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 
> 0x27418)*
>
> *#21 0x00000000004047f0 _start (bird + 0x47f0)*
>
> *Stack trace of thread 8951:*
>
> *#0 0x0000ffff8f7ddf60 __poll (libc.so.6 + 0xe0f60)*
>
> *#1 0x00000000004b6a88 bird_thread_main (bird + 0xb6a88)*
>
> *#2 0x0000ffff8f77db50 start_thread (libc.so.6 + 0x80b50)*
>
> *#3 0x0000ffff8f7e81dc thread_start (libc.so.6 + 0xeb1dc)*
>
> *ELF object binary architecture: AARCH64*
>
>
> Sep 29 21:39:15 hostname2 bird[2067]: Reconfiguring
>
> Sep 29 21:39:15 hostname2 bird[2067]: Restarting protocol direct1
>
> Sep 29 21:39:15 hostname2 bird[2067]: *Trying to lock in a bad order: 
> 0000ffffc2cc0df8 0000ffff990c8858*
>
> Sep 29 21:39:15 hostname2 systemd[1]: Created slice Slice 
> /system/systemd-coredump.
>
> Sep 29 21:39:15 hostname2 systemd[1]: Started Process Core Dump (PID 
> 3975/UID 0).
>
> Sep 29 21:39:15 hostname2 systemd-coredump[3976]: [🡕] *Process 2067 
> (bird) of user 981 dumped core.*
>
> *Stack trace of thread 2067:*
>
> *#0 0x0000ffff98f707f8 __pthread_kill_implementation (libc.so.6 + 
> 0x827f8)*
>
> *#1 0x0000ffff98f28b3c raise (libc.so.6 + 0x3ab3c)*
>
> *#2 0x0000ffff98f15074 abort (libc.so.6 + 0x27074)*
>
> *#3 0x00000000004bb488 bug (bird + 0xbb488)*
>
> *#4 0x00000000004bac48 do_lock (bird + 0xbac48)*
>
> *#5 0x000000000042d080 olock_free (bird + 0x2d080)*
>
> *#6 0x000000000042313c pool_free (bird + 0x2313c)*
>
> *#7 0x000000000042a67c rfree (bird + 0x2a67c)*
>
> *#8 0x00000000004680a4 babel_reconfigure_ifaces (bird + 0x680a4)*
>
> *#9 0x000000000043d284 proto_reconfigure (bird + 0x3d284)*
>
> *#10 0x000000000040f548 protos_commit (bird + 0xf548)*
>
> *#11 0x00000000004104a4 config_commit (bird + 0x104a4)*
>
> *#12 0x00000000004c1210 cmd_reconfig (bird + 0xc1210)*
>
> *#13 0x00000000004dbd84 cf_parse.isra.0 (bird + 0xdbd84)*
>
> *#14 0x0000000000409b44 cli_parse (bird + 0x9b44)*
>
> *#15 0x0000000000435730 cli_command (bird + 0x35730)*
>
> *#16 0x0000000000435934 cli_event (bird + 0x35934)*
>
> *#17 0x00000000004259ec ev_run_list_limited (bird + 0x259ec)*
>
> *#18 0x0000000000403f20 io_loop (bird + 0x3f20)*
>
> *#19 0x0000ffff98f15340 __libc_start_call_main (libc.so.6 + 0x27340)*
>
> *#20 0x0000ffff98f15418 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 
> 0x27418)*
>
> *#21 0x00000000004047f0 _start (bird + 0x47f0)*
>
> *Stack trace of thread 2078:*
>
> *#0 0x0000ffff98fcef60 __poll (libc.so.6 + 0xe0f60)*
>
> *#1 0x00000000004b7118 bird_thread_main (bird + 0xb7118)*
>
> *#2 0x0000ffff98f6eb50 start_thread (libc.so.6 + 0x80b50)*
>
> *#3 0x0000ffff98fd91dc thread_start (libc.so.6 + 0xeb1dc)*
>
> *ELF object binary architecture: AARCH64*
>
>
> Thank you!
>
> Best,
> Maiyun Zhang (he/him)
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://trubka.network.cz/pipermail/bird-users/attachments/20251001/b5f6bdef/attachment.htm>