BIRD Crash when reconfiguring with a change to direct protocols

[Maiyun Zhang]

Dear BIRD Developers,

I saw two BIRD crashes today. This happened when I was running birdc configure with a change to the list of interfaces in a direct protocol.

I have the core dump files if they might be helpful.

Sep 29 21:57:59 hostname1 bird[8950]: Restarting protocol direct1
Sep 29 21:57:59 hostname1 bird[8950]: Trying to lock in a bad order: 0000ffffe7488368 0000ffff8f8da858
Sep 29 21:57:59 hostname1 systemd[1]: Started Process Core Dump (PID 9765/UID 0).
Sep 29 21:58:07 hostname1 systemd-coredump[9766]: [🡕] Process 8950 (bird) of user 980 dumped core.
                                                       
                                                       Stack trace of thread 8950:
                                                       #0  0x0000ffff8f77f7f8 __pthread_kill_implementation (libc.so.6 + 0x827f8)
                                                       #1  0x0000ffff8f737b3c raise (libc.so.6 + 0x3ab3c)
                                                       #2  0x0000ffff8f724074 abort (libc.so.6 + 0x27074)
                                                       #3  0x00000000004badf8 bug (bird + 0xbadf8)
                                                       #4  0x00000000004ba5b8 do_lock (bird + 0xba5b8)
                                                       #5  0x000000000045056c rte_import (bird + 0x5056c)
                                                       #6  0x0000000000463cc4 babel_retract_route (bird + 0x63cc4)
                                                       #7  0x0000000000463d30 babel_remove_iface (bird + 0x63d30)
                                                       #8  0x0000000000468074 babel_reconfigure_ifaces (bird + 0x68074)
                                                       #9  0x000000000043d254 proto_reconfigure (bird + 0x3d254)
                                                       #10 0x000000000040f548 protos_commit (bird + 0xf548)
                                                       #11 0x0000000000410474 config_commit (bird + 0x10474)
                                                       #12 0x00000000004c0b80 cmd_reconfig (bird + 0xc0b80)
                                                       #13 0x00000000004db6f4 cf_parse.isra.0 (bird + 0xdb6f4)
                                                       #14 0x0000000000409b44 cli_parse (bird + 0x9b44)
                                                       #15 0x0000000000435700 cli_command (bird + 0x35700)
                                                       #16 0x0000000000435904 cli_event (bird + 0x35904)
                                                       #17 0x00000000004259bc ev_run_list_limited (bird + 0x259bc)
                                                       #18 0x0000000000403f20 io_loop (bird + 0x3f20)
                                                       #19 0x0000ffff8f724340 __libc_start_call_main (libc.so.6 + 0x27340)
                                                       #20 0x0000ffff8f724418 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x27418)
                                                       #21 0x00000000004047f0 _start (bird + 0x47f0)
                                                       
                                                       Stack trace of thread 8951:
                                                       #0  0x0000ffff8f7ddf60 __poll (libc.so.6 + 0xe0f60)
                                                       #1  0x00000000004b6a88 bird_thread_main (bird + 0xb6a88)
                                                       #2  0x0000ffff8f77db50 start_thread (libc.so.6 + 0x80b50)
                                                       #3  0x0000ffff8f7e81dc thread_start (libc.so.6 + 0xeb1dc)
                                                       ELF object binary architecture: AARCH64

Sep 29 21:39:15 hostname2 bird[2067]: Reconfiguring
Sep 29 21:39:15 hostname2 bird[2067]: Restarting protocol direct1
Sep 29 21:39:15 hostname2 bird[2067]: Trying to lock in a bad order: 0000ffffc2cc0df8 0000ffff990c8858
Sep 29 21:39:15 hostname2 systemd[1]: Created slice Slice /system/systemd-coredump.
Sep 29 21:39:15 hostname2 systemd[1]: Started Process Core Dump (PID 3975/UID 0).
Sep 29 21:39:15 hostname2 systemd-coredump[3976]: [🡕] Process 2067 (bird) of user 981 dumped core.
                                                       
                                                       Stack trace of thread 2067:
                                                       #0  0x0000ffff98f707f8 __pthread_kill_implementation (libc.so.6 + 0x827f8)
                                                       #1  0x0000ffff98f28b3c raise (libc.so.6 + 0x3ab3c)
                                                       #2  0x0000ffff98f15074 abort (libc.so.6 + 0x27074)
                                                       #3  0x00000000004bb488 bug (bird + 0xbb488)
                                                       #4  0x00000000004bac48 do_lock (bird + 0xbac48)
                                                       #5  0x000000000042d080 olock_free (bird + 0x2d080)
                                                       #6  0x000000000042313c pool_free (bird + 0x2313c)
                                                       #7  0x000000000042a67c rfree (bird + 0x2a67c)
                                                       #8  0x00000000004680a4 babel_reconfigure_ifaces (bird + 0x680a4)
                                                       #9  0x000000000043d284 proto_reconfigure (bird + 0x3d284)
                                                       #10 0x000000000040f548 protos_commit (bird + 0xf548)
                                                       #11 0x00000000004104a4 config_commit (bird + 0x104a4)
                                                       #12 0x00000000004c1210 cmd_reconfig (bird + 0xc1210)
                                                       #13 0x00000000004dbd84 cf_parse.isra.0 (bird + 0xdbd84)
                                                       #14 0x0000000000409b44 cli_parse (bird + 0x9b44)
                                                       #15 0x0000000000435730 cli_command (bird + 0x35730)
                                                       #16 0x0000000000435934 cli_event (bird + 0x35934)
                                                       #17 0x00000000004259ec ev_run_list_limited (bird + 0x259ec)
                                                       #18 0x0000000000403f20 io_loop (bird + 0x3f20)
                                                       #19 0x0000ffff98f15340 __libc_start_call_main (libc.so.6 + 0x27340)
                                                       #20 0x0000ffff98f15418 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x27418)
                                                       #21 0x00000000004047f0 _start (bird + 0x47f0)
                                                       
                                                       Stack trace of thread 2078:
                                                       #0  0x0000ffff98fcef60 __poll (libc.so.6 + 0xe0f60)
                                                       #1  0x00000000004b7118 bird_thread_main (bird + 0xb7118)
                                                       #2  0x0000ffff98f6eb50 start_thread (libc.so.6 + 0x80b50)
                                                       #3  0x0000ffff98fd91dc thread_start (libc.so.6 + 0xeb1dc)
                                                       ELF object binary architecture: AARCH64

Thank you!

Best,
Maiyun Zhang (he/him)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://trubka.network.cz/pipermail/bird-users/attachments/20250929/0f3e5488/attachment.htm>