Intermittent JVM SIGBUS (BUS_ADRERR) from DogStatsD-over-UDS: java-dogstatsd-client → jnr-unixsocket → jffi stub truncation (jnr/jffi#194)
I maintainer di solito rispondono entro 1 giorno
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 5/5
- Tempo stimato
- Più di una settimana
- Idoneità per principianti
- 35/100
- Tipo di issue
- Bug
- Chiarezza
- Abbastanza chiara
- Stato di attività
- Tranquilla
- Stack tecnologico
- java
- Ambito
- observability-sre
Direzione di ricerca
Inizia da datadog.metrics.impl.statsd.DDAgentStatsDConnection.doConnect e dal percorso bundled di java-dogstatsd-client che crea UnixSocketAddress; poi leggi jnr.jffi.internal.StubLoader.unpackLibrary e jnr/jffi#194. Usa lo stack hs_err riportato e le condizioni di caricamento per la validazione, poiché non viene fornita alcuna riproduzione deterministica. Il lavoro è completato quando il percorso DogStatsD-over-UDS non consente più il JVM SIGBUS descritto.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
Tracer Version(s)
1.62.0
Java Version(s)
21.0.6 (Azul Zulu 21.40+17-CA)
JVM Vendor
Azul Systems (Zulu OpenJDK)
Bug Report
Short-lived JVMs configured to reach the Agent over a UDS intermittently die with a JVM-level SIGBUS (si_code 2 BUS_ADRERR) — a native crash, not an application error — while the tracer's metrics subsystem brings up its DogStatsD connection.
The root cause is upstream in jnr/jffi (filed as jnr/jffi#194): when DogStatsD is sent over a Unix socket, the bundled com.datadoghq:java-dogstatsd-client constructs a jnr.unixsocket.UnixSocketAddress, which initializes jnr-ffi → jffi. jffi's StubLoader.unpackLibrary extracts its native stub with an InputStream.available()-guarded copy loop that silently truncates the .so (it does no length/digest check on a fresh extraction). System.load() of the short stub then faults in ld.so past EOF → SIGBUS/BUS_ADRERR.
hs_err excerpt:
# SIGBUS (0x7) ...
# Problematic frame: # C [ld-linux-x86-64.so.2+0x26b4a] (dlopen)
siginfo: si_signo: 7 (SIGBUS), si_code: 2 (BUS_ADRERR)
Current thread: JavaThread "dd-task-scheduler"
C [ld-linux-x86-64.so.2 ...] (dlopen)
V [libjvm.so ...] JVM_LoadLibrary
j com.kenai.jffi.internal.StubLoader.loadFromJar / <clinit>
j jnr.ffi.Runtime.getSystemRuntime
j jnr.unixsocket.UnixSocketAddress.<init>
j com.timgroup.statsd.NonBlockingStatsDClientBuilder.build
j datadog.metrics.impl.statsd.DDAgentStatsDConnection.doConnect
j datadog.trace.util.AgentTaskScheduler$PeriodicTask.run
The extracted …/jffi<rand>.so was truncated at a 4 KiB boundary; the dynamic linker's relocation write into the missing final page hit EOF → BUS_ADRERR.
Scope / notes:
- Only the DogStatsD path is affected. The Agent's own trace/EVP transport over UDS uses the JDK-native socket (
dd.jdk.socket.enabled, defaulttrue) and does not load jffi — consistent with jffi initializing ~20s in, inside the DogStatsD connect task, never at startup. The bundledjava-dogstatsd-clientis the sole remaining jnr/jffi consumer. - Tracer metrics are on by default, so this can fire in any UDS-configured JVM that lives long enough to run the periodic StatsD connect.
- It is a timing race in jffi's copy loop — rare per-extraction, but frequent across a high-volume / CPU-saturated CI fleet (many thousands of short-lived JVMs). Long-lived production processes (one extraction at controlled startup) effectively never hit it.
- The crash kills the JVM before data is flushed, so it is invisible in APM / CI Visibility and only recoverable from captured
hs_errfiles.
Expected Behavior
Configuring the Agent connection as a UDS (and the tracer emitting its own metrics) must not be able to crash the host JVM. DogStatsD over UDS should not pull in a native FFI stub whose extraction can fail unsafely.
Reproduction Code
No deterministic repro — it is a timing race in jffi's stub extraction (see jnr/jffi#194). It reproduces statistically under load with:
dd-java-agent1.62.0 attached, JDK 21DD_TRACE_AGENT_URL=unix:///var/run/datadog/apm.socket(so DogStatsD also resolves to a UDS)- default tracer metrics (health metrics on)
- many short-lived JVMs on CPU-saturated hosts
Diagnosed from captured -XX:ErrorFile hs_err logs showing the stack above and a truncated jffi*.so.
Suggested fixes
- Upstream: the actual defect is jffi's
unpackLibrary(jnr/jffi#194) — pick up the fix / bump jffi once available. - Decouple DogStatsD-over-UDS from jnr/jffi: have the bundled
java-dogstatsd-clientuse the JDK-nativejava.net.UnixDomainSocketAddress(JDK 16+) for UDS, as the Agent transport already does viadd.jdk.socket.enabled. This removes jffi from the metrics path entirely (cf. DataDog/java-dogstatsd-client#68, #85). - Or pin / pre-extract the jffi stub (
-Djffi.boot.library.path=…) in the agent so the buggyunpackLibrarycopy is never exercised.
Related: jnr/jffi#194, jnr/jffi#46, jnr/jffi#158, DataDog/java-dogstatsd-client#68 / #85 / #258, #7643, #7165.
- Lingua principale
- Java
- Stelle
- 737
- Fork
- 361
- Merge medio
- 3g 13h
- PR unite (30g)
- 181
Preparare l'ambiente
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di DataDog/dd-trace-java
-
type: feature request
Difficoltà 1/5 1-3 ore Idoneità per principianti 70/100
DataDog/dd-trace-java#10245 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
comp: context propagation inst: grpc type: feature request
Difficoltà 3/5 1-2 giorni Idoneità per principianti 78/100
DataDog/dd-trace-java#12654 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 4/5 3-5 giorni Idoneità per principianti 62/100
DataDog/dd-trace-java#12608 ·
I maintainer di solito rispondono entro 1 giorno
-
type: bug report
Difficoltà 4/5 3-5 giorni Idoneità per principianti 35/100
DataDog/dd-trace-java#12597 ·
I maintainer di solito rispondono entro 1 giorno
-
Queueing-time profiler aborts the whole instrumentation install under a JDK 24+ AOT cache (zero spans); disabling that one feature is enoughForse già presa @mcculls l’ha presa 6 giorni fa. Aperta
Difficoltà 4/5 3-5 giorni Idoneità per principianti 35/100
DataDog/dd-trace-java#12540 · 4 commenti · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di DataDog/dd-trace-java
Issue simili
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
OpenAPITools/openapi-generator#25014 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 92/100
AloisSeckar/demos-java#380 ·
-
bug
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
openhab/openhab-core#5847 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 88/100
appsmithorg/appsmith#42297 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 75/100