Bug 1290133

Summary:

[abrt] systemd: epoll_ctl(): systemd-logind killed by SIGABRT

Product:

[Fedora] Fedora

Reporter:

madstitz

Component:

systemd

Assignee:

systemd-maint

Status:

CLOSED DUPLICATE

QA Contact:

Fedora Extras Quality Assurance <extras-qa>

Severity:

unspecified

Docs Contact:

Priority:

unspecified

Version:

CC:

achnaton.rabelo, alvin, fedora, jfrieben, johannbg, jsynacek, lnykryn, madstitz, mariolinux, mikhail.rokhin, mjs, msekleta, s, systemd-maint, zbyszek

Target Milestone:

---

Target Release:

---

Hardware:

x86_64

OS:

Unspecified

URL:

https://retrace.fedoraproject.org/faf/reports/bthash/e2963bf7cd0e886234d83a0975ca6ce1aff58982

Whiteboard:

abrt_hash:f42a543bb079b67ff6c794380bd6ce714b4cf95c;VARIANT_ID=workstation;

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2016-01-20 10:02:15 UTC

Type:

---

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Attachments:

Description	Flags
File: backtrace	none
File: cgroup	none
File: core_backtrace	none
File: dso_list	none
File: environ	none
File: limits	none
File: maps	none
File: mountinfo	none
File: namespaces	none
File: open_fds	none
File: proc_pid_status	none
File: var_log_messages	none

Description madstitz 2015-12-09 17:31:10 UTC

Version-Release number of selected component:
systemd-222-8.fc23

Additional info:
reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/lib/systemd/systemd-logind
crash_function: epoll_ctl
executable:     /usr/lib/systemd/systemd-logind
global_pid:     1450
kernel:         4.2.6-301.fc23.x86_64
runlevel:       N 5
type:           CCpp
uid:            0

Truncated backtrace:
[New LWP 1450]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/lib/systemd/systemd-logind'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f26c98b6053 in epoll_ctl () at ../sysdeps/unix/syscall-template.S:86
86	T_PSEUDO_END (SYSCALL_SYMBOL)

Thread 1 (Thread 0x7f26ca7c88c0 (LWP 1450)):
#0  0x00007f26c98b6053 in epoll_ctl () at ../sysdeps/unix/syscall-template.S:86
No locals.
#1  0x000055e503a3ede3 in sd_event_wait (e=0x55e504e8b2c0, timeout=18446744073709551615) at src/libsystemd/sd-event/sd-event.c:2374
        ev_queue = 0x7ffdde2b3df0
        ev_queue_max = <optimized out>
        r = <optimized out>
        m = <optimized out>
        i = <optimized out>
        __PRETTY_FUNCTION__ = "sd_event_wait"
#2  0x000055e5039e7fcc in sd_event_run (timeout=18446744073709551615, e=0x55e504e8b2c0) at src/libsystemd/sd-event/sd-event.c:2497
        r = <optimized out>
#3  manager_run (m=0x55e504e8a0d0) at src/login/logind.c:1118
        r = <optimized out>
#4  main (argc=<optimized out>, argv=<optimized out>) at src/login/logind.c:1180
        m = <optimized out>
        r = <optimized out>
        __func__ = "main"
From                To                  Syms Read   Shared Object Library
                                        No          linux-vdso.so.1
0x00007f26ca3bf2b0  0x00007f26ca3d1bab  Yes         /lib64/libselinux.so.1
0x00007f26ca1b3150  0x00007f26ca1b609f  Yes         /lib64/librt.so.1
0x00007f26c9fa9f80  0x00007f26c9fadec1  Yes         /lib64/libacl.so.1
0x00007f26c9d93af0  0x00007f26c9da3845  Yes         /lib64/libgcc_s.so.1
0x00007f26c9b79a30  0x00007f26c9b86841  Yes         /lib64/libpthread.so.0
0x00007f26c97d2760  0x00007f26c99205b4  Yes         /lib64/libc.so.6
0x00007f26ca5dcad0  0x00007f26ca5f7380  Yes         /lib64/ld-linux-x86-64.so.2
0x00007f26c95446f0  0x00007f26c9593886  Yes         /lib64/libpcre.so.1
0x00007f26c933fe60  0x00007f26c9340a4e  Yes         /lib64/libdl.so.2
0x00007f26c913a3d0  0x00007f26c913c4ca  Yes         /lib64/libattr.so.1
0x00007f26c8f291d0  0x00007f26c8f2f211  Yes         /lib64/libnss_files.so.2
$1 = 0x0
rax            0xfffffffffffffffc	-4
rbx            0x1	1
rcx            0x7f26c98b6053	139804566839379
rdx            0x1c	28
rsi            0x7ffdde2b3df0	140728330829296
rdi            0x4	4
rbp            0x7ffdde2b4030	0x7ffdde2b4030
rsp            0x7ffdde2b3de8	0x7ffdde2b3de8
r8             0x0	0
r9             0x7ffdde2b3df0	140728330829296
r10            0xffffffff	4294967295
r11            0x246	582
r12            0xffffffffffffffff	-1
r13            0x7ffdde2b3df0	140728330829296
r14            0x7ffdde2b4060	140728330829920
r15            0x55e504e8b2c0	94442118230720
rip            0x7f26c98b6053	0x7f26c98b6053 <epoll_ctl+35>
eflags         0x246	[ PF ZF IF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function epoll_ctl:
   0x00007f26c98b6030 <+0>:	mov    %rcx,%r10
   0x00007f26c98b6033 <+3>:	mov    $0xe9,%eax
   0x00007f26c98b6038 <+8>:	syscall 
   0x00007f26c98b603a <+10>:	cmp    $0xfffffffffffff001,%rax
   0x00007f26c98b6040 <+16>:	jae    0x7f26c98b6043 <epoll_ctl+19>
   0x00007f26c98b6042 <+18>:	retq   
   0x00007f26c98b6043 <+19>:	mov    0x2b7e1e(%rip),%rcx        # 0x7f26c9b6de68
   0x00007f26c98b604a <+26>:	neg    %eax
   0x00007f26c98b604c <+28>:	mov    %eax,%fs:(%rcx)
   0x00007f26c98b604f <+31>:	or     $0xffffffffffffffff,%rax
=> 0x00007f26c98b6053 <+35>:	retq   
End of assembler dump.
== EXPLOITABLE ==

Comment 1 madstitz 2015-12-09 17:31:17 UTC

Created attachment 1104041 [details]
File: backtrace

Comment 2 madstitz 2015-12-09 17:31:18 UTC

Created attachment 1104042 [details]
File: cgroup

Comment 3 madstitz 2015-12-09 17:31:20 UTC

Created attachment 1104043 [details]
File: core_backtrace

Comment 4 madstitz 2015-12-09 17:31:21 UTC

Created attachment 1104044 [details]
File: dso_list

Comment 5 madstitz 2015-12-09 17:31:23 UTC

Created attachment 1104045 [details]
File: environ

Comment 6 madstitz 2015-12-09 17:31:24 UTC

Created attachment 1104046 [details]
File: limits

Comment 7 madstitz 2015-12-09 17:31:26 UTC

Created attachment 1104048 [details]
File: maps

Comment 8 madstitz 2015-12-09 17:31:27 UTC

Created attachment 1104050 [details]
File: mountinfo

Comment 9 madstitz 2015-12-09 17:31:28 UTC

Created attachment 1104052 [details]
File: namespaces

Comment 10 madstitz 2015-12-09 17:31:30 UTC

Created attachment 1104054 [details]
File: open_fds

Comment 11 madstitz 2015-12-09 17:31:31 UTC

Created attachment 1104056 [details]
File: proc_pid_status

Comment 12 madstitz 2015-12-09 17:31:33 UTC

Created attachment 1104058 [details]
File: var_log_messages

Comment 13 Matthew Saltzman 2015-12-13 01:44:34 UTC

Another user experienced a similar problem:

Machine froze while I was away from it. Was running dnf updates when I walked away.

reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/lib/systemd/systemd-udevd
crash_function: epoll_ctl
executable:     /usr/lib/systemd/systemd-udevd
global_pid:     902
kernel:         4.2.6-301.fc23.x86_64
package:        systemd-222-8.fc23
reason:         systemd-udevd killed by SIGABRT
runlevel:       N 5
type:           CCpp
uid:            0

Comment 14 Jan Synacek 2016-01-20 10:02:15 UTC


*** This bug has been marked as a duplicate of bug 1300212 ***