Re: misc/57491: dhcpd segfaulting

[Tobias Nygren <tnn%NetBSD.org@localhost>]

The following reply was made to PR misc/57491; it has been noted by GNATS.

From: Tobias Nygren <tnn%NetBSD.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: Christos Zoulas <christos%astron.com@localhost>
Subject: Re: misc/57491: dhcpd segfaulting
Date: Wed, 26 Jul 2023 02:22:41 +0200

 On Thu,  6 Jul 2023 14:35:02 +0000 (UTC)
 Martin Husemann <martin%duskware.de@localhost> wrote:
 
 >  I can not reproduce this locally, do you have the core file still
 >  around and can show a gdb backtrace from it?
 
 I can reproduce reliably. The backtrace isn't very useful in itself,
 but it crashes consistently a few seconds after attempting to serve the
 first request. Previously problems like this have happened after libisc
 is updated in base as part of bind update, due to locking protocol
 divergence between bind and dhcpd. Christos has patched such issues in
 the past and might be able to assist.
 
 (gdb) run
 Starting program: /usr/sbin/dhcpd -d -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid -lf /var/db/dhcpd.leases vlan100 vlan103 vlan104 vlan105 vlan106
 
 Program received signal SIGILL, Illegal instruction.
 0x0000f2bf83e3db70 in _armv8_sha512_probe () from /usr/lib/libcrypto.so.15
 (gdb) cont
 Continuing.
 
 Program received signal SIGILL, Illegal instruction.
 0x0000f2bf83e3db70 in _armv8_sha512_probe () from /usr/lib/libcrypto.so.15
 (gdb) cont
 Continuing.
 [New LWP 4403 of process 29232]
 [New LWP 16692 of process 29232]
 [New LWP 24117 of process 29232]
 [New LWP 13878 of process 29232]
 Internet Systems Consortium DHCP Server 4.4.2
 Copyright 2004-2022 Internet Systems Consortium.
 All rights reserved.
 For info, please visit https://www.isc.org/software/dhcp/
 [New LWP 10039 of process 29232]
 [New LWP 10552 of process 29232]
 [New LWP 2361 of process 29232]
 [New LWP 2362 of process 29232]
 Config file: /etc/dhcpd.conf
 Database file: /var/db/dhcpd.leases
 PID file: /var/run/dhcpd.pid
 Wrote 0 deleted host decls to leases file.
 Wrote 0 new dynamic host decls to leases file.
 Wrote 201 leases to leases file.
 Listening on BPF/vlan106/00:1b:41:01:0f:56/10.0.106.0/24
 Sending on   BPF/vlan106/00:1b:41:01:0f:56/10.0.106.0/24
 Listening on BPF/vlan105/00:1b:41:01:0f:56/10.0.105.0/24
 Sending on   BPF/vlan105/00:1b:41:01:0f:56/10.0.105.0/24
 Listening on BPF/vlan104/00:1b:41:01:0f:56/10.104.0.0/16
 Sending on   BPF/vlan104/00:1b:41:01:0f:56/10.104.0.0/16
 Listening on BPF/vlan103/00:1b:41:01:0f:56/10.0.103.0/24
 Sending on   BPF/vlan103/00:1b:41:01:0f:56/10.0.103.0/24
 Listening on BPF/vlan100/00:1b:41:01:0f:56/172.18.129.0/24
 Sending on   BPF/vlan100/00:1b:41:01:0f:56/172.18.129.0/24
 Sending on   Socket/fallback/fallback-net
 Server starting service.
 Can't find option with code 80
 DHCPDISCOVER from 56:1f:2a:6c:fe:42 via vlan105
 unexpected ICMP Echo Reply from 10.0.107.1
 unexpected ICMP Echo Reply from 10.0.107.3
 Can't find option with code 80
 DHCPOFFER on 10.0.105.140 to 56:1f:2a:6c:fe:42 (OnePlus-Nord) via vlan105
 /usr/src/external/mpl/bind/lib/libisc/../../dist/lib/isc/timer.c:223: fatal error: RUNTIME_CHECK(((__libc_mutex_lock(((&timer->lock))) == 0) ? 0 : 34) == 0) failed
 
 Thread 7 "net-1" received signal SIGABRT, Aborted.
 [Switching to LWP 10552 of process 29232]
 0x0000f2bf8345085c in _lwp_kill () from /usr/lib/libc.so.12
 (gdb) bt
 #0  0x0000f2bf8345085c in _lwp_kill () from /usr/lib/libc.so.12
 #1  0x0000f2bf83450b1c in abort () from /usr/lib/libc.so.12
 #2  0x0000f2bf842b70a8 in isc_error_fatal () from /usr/lib/libisc.so.19
 #3  0x0000f2bf842b70c8 in isc_error_runtimecheck () from /usr/lib/libisc.so.19
 #4  0x0000f2bf8428d020 in ?? () from /usr/lib/libisc.so.19
 #5  0x000000000bbad8e8 in ?? ()
 #6  0x0000f2bf842a3990 in isc_task_run () from /usr/lib/libisc.so.19
 #7  0x0000f2bf8429a6bc in ?? () from /usr/lib/libisc.so.19
 #8  0x0000f2bf8429aa60 in ?? () from /usr/lib/libisc.so.19
 #9  0x0000f2bf8429b370 in ?? () from /usr/lib/libisc.so.19
 #10 0x0000f2bf842c7350 in ?? () from /usr/lib/libisc.so.19
 #11 0x0000f2bf842bc348 in uv.io_poll () from /usr/lib/libisc.so.19
 #12 0x0000f2bf842c46e0 in uv_run () from /usr/lib/libisc.so.19
 #13 0x0000f2bf8429ad04 in ?? () from /usr/lib/libisc.so.19
 #14 0x0000f2bf842b6e4c in isc.trampoline_run () from /usr/lib/libisc.so.19