Bug 1290133 - [abrt] systemd: epoll_ctl(): systemd-logind killed by SIGABRT
Summary: [abrt] systemd: epoll_ctl(): systemd-logind killed by SIGABRT
Keywords:
Status: CLOSED DUPLICATE of bug 1300212
Alias: None
Product: Fedora
Classification: Fedora
Component: systemd
Version: 23
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: systemd-maint
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:f42a543bb079b67ff6c794380bd...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-12-09 17:31 UTC by madstitz
Modified: 2016-08-07 16:25 UTC (History)
15 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-01-20 10:02:15 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (3.55 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: cgroup (208 bytes, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: core_backtrace (1.06 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: dso_list (991 bytes, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: environ (147 bytes, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: limits (1.29 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: maps (5.23 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: mountinfo (4.64 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: namespaces (85 bytes, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: open_fds (4.45 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: proc_pid_status (980 bytes, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details
File: var_log_messages (1.14 KB, text/plain)
2015-12-09 17:31 UTC, madstitz
no flags Details

Description madstitz 2015-12-09 17:31:10 UTC
Version-Release number of selected component:
systemd-222-8.fc23

Additional info:
reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/lib/systemd/systemd-logind
crash_function: epoll_ctl
executable:     /usr/lib/systemd/systemd-logind
global_pid:     1450
kernel:         4.2.6-301.fc23.x86_64
runlevel:       N 5
type:           CCpp
uid:            0

Truncated backtrace:
[New LWP 1450]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/lib/systemd/systemd-logind'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f26c98b6053 in epoll_ctl () at ../sysdeps/unix/syscall-template.S:86
86	T_PSEUDO_END (SYSCALL_SYMBOL)

Thread 1 (Thread 0x7f26ca7c88c0 (LWP 1450)):
#0  0x00007f26c98b6053 in epoll_ctl () at ../sysdeps/unix/syscall-template.S:86
No locals.
#1  0x000055e503a3ede3 in sd_event_wait (e=0x55e504e8b2c0, timeout=18446744073709551615) at src/libsystemd/sd-event/sd-event.c:2374
        ev_queue = 0x7ffdde2b3df0
        ev_queue_max = <optimized out>
        r = <optimized out>
        m = <optimized out>
        i = <optimized out>
        __PRETTY_FUNCTION__ = "sd_event_wait"
#2  0x000055e5039e7fcc in sd_event_run (timeout=18446744073709551615, e=0x55e504e8b2c0) at src/libsystemd/sd-event/sd-event.c:2497
        r = <optimized out>
#3  manager_run (m=0x55e504e8a0d0) at src/login/logind.c:1118
        r = <optimized out>
#4  main (argc=<optimized out>, argv=<optimized out>) at src/login/logind.c:1180
        m = <optimized out>
        r = <optimized out>
        __func__ = "main"
From                To                  Syms Read   Shared Object Library
                                        No          linux-vdso.so.1
0x00007f26ca3bf2b0  0x00007f26ca3d1bab  Yes         /lib64/libselinux.so.1
0x00007f26ca1b3150  0x00007f26ca1b609f  Yes         /lib64/librt.so.1
0x00007f26c9fa9f80  0x00007f26c9fadec1  Yes         /lib64/libacl.so.1
0x00007f26c9d93af0  0x00007f26c9da3845  Yes         /lib64/libgcc_s.so.1
0x00007f26c9b79a30  0x00007f26c9b86841  Yes         /lib64/libpthread.so.0
0x00007f26c97d2760  0x00007f26c99205b4  Yes         /lib64/libc.so.6
0x00007f26ca5dcad0  0x00007f26ca5f7380  Yes         /lib64/ld-linux-x86-64.so.2
0x00007f26c95446f0  0x00007f26c9593886  Yes         /lib64/libpcre.so.1
0x00007f26c933fe60  0x00007f26c9340a4e  Yes         /lib64/libdl.so.2
0x00007f26c913a3d0  0x00007f26c913c4ca  Yes         /lib64/libattr.so.1
0x00007f26c8f291d0  0x00007f26c8f2f211  Yes         /lib64/libnss_files.so.2
$1 = 0x0
rax            0xfffffffffffffffc	-4
rbx            0x1	1
rcx            0x7f26c98b6053	139804566839379
rdx            0x1c	28
rsi            0x7ffdde2b3df0	140728330829296
rdi            0x4	4
rbp            0x7ffdde2b4030	0x7ffdde2b4030
rsp            0x7ffdde2b3de8	0x7ffdde2b3de8
r8             0x0	0
r9             0x7ffdde2b3df0	140728330829296
r10            0xffffffff	4294967295
r11            0x246	582
r12            0xffffffffffffffff	-1
r13            0x7ffdde2b3df0	140728330829296
r14            0x7ffdde2b4060	140728330829920
r15            0x55e504e8b2c0	94442118230720
rip            0x7f26c98b6053	0x7f26c98b6053 <epoll_ctl+35>
eflags         0x246	[ PF ZF IF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function epoll_ctl:
   0x00007f26c98b6030 <+0>:	mov    %rcx,%r10
   0x00007f26c98b6033 <+3>:	mov    $0xe9,%eax
   0x00007f26c98b6038 <+8>:	syscall 
   0x00007f26c98b603a <+10>:	cmp    $0xfffffffffffff001,%rax
   0x00007f26c98b6040 <+16>:	jae    0x7f26c98b6043 <epoll_ctl+19>
   0x00007f26c98b6042 <+18>:	retq   
   0x00007f26c98b6043 <+19>:	mov    0x2b7e1e(%rip),%rcx        # 0x7f26c9b6de68
   0x00007f26c98b604a <+26>:	neg    %eax
   0x00007f26c98b604c <+28>:	mov    %eax,%fs:(%rcx)
   0x00007f26c98b604f <+31>:	or     $0xffffffffffffffff,%rax
=> 0x00007f26c98b6053 <+35>:	retq   
End of assembler dump.
== EXPLOITABLE ==

Comment 1 madstitz 2015-12-09 17:31:17 UTC
Created attachment 1104041 [details]
File: backtrace

Comment 2 madstitz 2015-12-09 17:31:18 UTC
Created attachment 1104042 [details]
File: cgroup

Comment 3 madstitz 2015-12-09 17:31:20 UTC
Created attachment 1104043 [details]
File: core_backtrace

Comment 4 madstitz 2015-12-09 17:31:21 UTC
Created attachment 1104044 [details]
File: dso_list

Comment 5 madstitz 2015-12-09 17:31:23 UTC
Created attachment 1104045 [details]
File: environ

Comment 6 madstitz 2015-12-09 17:31:24 UTC
Created attachment 1104046 [details]
File: limits

Comment 7 madstitz 2015-12-09 17:31:26 UTC
Created attachment 1104048 [details]
File: maps

Comment 8 madstitz 2015-12-09 17:31:27 UTC
Created attachment 1104050 [details]
File: mountinfo

Comment 9 madstitz 2015-12-09 17:31:28 UTC
Created attachment 1104052 [details]
File: namespaces

Comment 10 madstitz 2015-12-09 17:31:30 UTC
Created attachment 1104054 [details]
File: open_fds

Comment 11 madstitz 2015-12-09 17:31:31 UTC
Created attachment 1104056 [details]
File: proc_pid_status

Comment 12 madstitz 2015-12-09 17:31:33 UTC
Created attachment 1104058 [details]
File: var_log_messages

Comment 13 Matthew Saltzman 2015-12-13 01:44:34 UTC
Another user experienced a similar problem:

Machine froze while I was away from it. Was running dnf updates when I walked away.

reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/lib/systemd/systemd-udevd
crash_function: epoll_ctl
executable:     /usr/lib/systemd/systemd-udevd
global_pid:     902
kernel:         4.2.6-301.fc23.x86_64
package:        systemd-222-8.fc23
reason:         systemd-udevd killed by SIGABRT
runlevel:       N 5
type:           CCpp
uid:            0

Comment 14 Jan Synacek 2016-01-20 10:02:15 UTC

*** This bug has been marked as a duplicate of bug 1300212 ***


Note You need to log in before you can comment on or make changes to this bug.